Edit tour

Windows Analysis Report
https://helawok.x-sns.cloud/

Overview

General Information

Sample URL:	https://helawok.x-sns.cloud/
Analysis ID:	1531099
Infos:

Detection

HTMLPhisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

AI detected landing page (webpage, office document or email)

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Phishing site or detected (based on various text indicators)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 --field-trial-handle=2388,i,7891156904035973045,4333935852888309243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://helawok.x-sns.cloud/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
2.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-10T21:17:15.493470+0200	2857090	1	Successful Credential Theft Detected	172.233.53.209	443	192.168.2.4	49770	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true

LLM: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'okvanguardofficelogin.x-sns.cloud' does not match the legitimate domain 'microsoft.com'., The domain uses a cloud service provider's domain 'x-sns.cloud', which is not directly associated with Microsoft., The presence of 'officelogin' in the URL suggests an attempt to mimic Microsoft's Office services, which is suspicious., The use of a subdomain 'okvanguardofficelogin' is unusual and not typical for Microsoft's legitimate services., The URL structure and domain do not align with Microsoft's known domain practices, indicating a potential phishing attempt. DOM: 2.6.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML
Source: Yara match	File source: 2.8.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML

Phishing site detected (based on favicon image match)

Source: https://x-sns.cloud	Matcher: Template: microsoft matched with high similarity
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	Matcher: Template: microsoft matched
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	Matcher: Template: microsoft matched
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	Matcher: Template: microsoft matched

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.1

OCR Text: HARTSFIELD & EGBERT, PLLC Honest Advice. Smart Solutions. Proven Results."' Hartsfield & Egbert, PLLC has shared a secure document with you Click on " VIEW SHARE DOCUMENT" to access the shared document CLICK HERE TO VIEW DOCUMENT

Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb	HTTP Parser: Number of links: 0
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://helawok.x-sns.cloud/

HTTP Parser: Base64 decoded: 1728587830.000000

Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb	HTTP Parser: Title: Redirecting does not match URL
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: Iframe src: https://18f930cb-acb15722.x-sns.cloud/Prefetch/Prefetch.aspx
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: Iframe src: https://18f930cb-acb15722.x-sns.cloud/Prefetch/Prefetch.aspx
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: Iframe src: https://18f930cb-acb15722.x-sns.cloud/Prefetch/Prefetch.aspx

Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb	HTTP Parser: No favicon
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No favicon
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No favicon
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No favicon
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No favicon
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No favicon

Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb	HTTP Parser: No <meta name="author".. found
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb	HTTP Parser: No <meta name="copyright".. found
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49848 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2857090 - Severity 1 - ETPRO PHISHING JS/PsyduckPockeball Payload Inbound : 172.233.53.209:443 -> 192.168.2.4:49770

Source: global traffic

TCP traffic: 192.168.2.4:49844 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.24
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.24
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: helawok.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/utils.bcf03997485feb49f2c7.js HTTP/1.1Host: g.fastcdn.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/Cradle.904200e3dbc62d5b0155.js HTTP/1.1Host: g.fastcdn.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/Links.c1a9dcf75cfbd1ae01c0.js HTTP/1.1Host: g.fastcdn.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/33332e5f/65201939-0-H.png HTTP/1.1Host: v.fastcdn.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: helawok.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ
Source: global traffic	HTTP traffic detected: GET /js/Links.c1a9dcf75cfbd1ae01c0.js HTTP/1.1Host: g.fastcdn.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/Cradle.904200e3dbc62d5b0155.js HTTP/1.1Host: g.fastcdn.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/33332e5f/65201939-0-H.png HTTP/1.1Host: v.fastcdn.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/js/3/it.js HTTP/1.1Host: cdn.instapagemetrics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/utils.bcf03997485feb49f2c7.js HTTP/1.1Host: g.fastcdn.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/sptw.051afd940be1c95d0063.js HTTP/1.1Host: g.fastcdn.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/cm.js HTTP/1.1Host: g.fastcdn.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/LazyImage.77b7aec17419c3045fee.js HTTP/1.1Host: g.fastcdn.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js? HTTP/1.1Host: helawok.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ
Source: global traffic	HTTP traffic detected: GET /js/LazyImage.77b7aec17419c3045fee.js HTTP/1.1Host: g.fastcdn.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/sptw.051afd940be1c95d0063.js HTTP/1.1Host: g.fastcdn.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/js/3/it.js HTTP/1.1Host: cdn.instapagemetrics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/cm.js HTTP/1.1Host: g.fastcdn.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js? HTTP/1.1Host: helawok.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ; instap-spses.9ea5=*; instap-spid.9ea5=616adf73-2482-4d1d-90c8-d1322c27fd73.1728587831.1.1728587831.1728587831.b1e638f6-4ec4-4984-a154-beed748f425a
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8d08f2f35a7332c7 HTTP/1.1Host: helawok.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ; instap-spses.9ea5=*; instap-spid.9ea5=616adf73-2482-4d1d-90c8-d1322c27fd73.1728587831.1.1728587831.1728587831.b1e638f6-4ec4-4984-a154-beed748f425a
Source: global traffic	HTTP traffic detected: GET /?0tB=gvEvb HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /t/two HTTP/1.1Host: ec.instapagemetrics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?0tB=gvEvb HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /t/two HTTP/1.1Host: ec.instapagemetrics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/two?3thpc=true HTTP/1.1Host: ec.instapagemetrics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/two?3thpc=true HTTP/1.1Host: ec.instapagemetrics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: 024cc40a-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://okvanguardofficelogin.x-sns.cloudsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://okvanguardofficelogin.x-sns.cloudSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="Sec-WebSocket-Key: I750n6clYYEAeHv2k1QLXQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /?0tB=gvEvb&sso_reload=true HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: 024cc40a-acb15722.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: l1ve.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://okvanguardofficelogin.x-sns.cloudsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://okvanguardofficelogin.x-sns.cloudsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://okvanguardofficelogin.x-sns.cloudsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://okvanguardofficelogin.x-sns.cloudSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1Sec-WebSocket-Key: VraBEGo9osekLuJwHu1tTg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: 18f930cb-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://okvanguardofficelogin.x-sns.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://okvanguardofficelogin.x-sns.cloudSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: AU8ZSJ64LyDW47aaqbSTvg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: 36f920fd-acb15722.x-sns.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
Source: global traffic	HTTP traffic detected: GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://okvanguardofficelogin.x-sns.cloudSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: l1EnESMLhFjI5zd33jj89Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://okvanguardofficelogin.x-sns.cloudSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: cEeVmg61/1tcxRqDr7hVXQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://okvanguardofficelogin.x-sns.cloudSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: tQ3uNCLka4Ew/6sDH3MNmQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://okvanguardofficelogin.x-sns.cloudSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: iLt80i48cO7kvhufvpLe9A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://okvanguardofficelogin.x-sns.cloudSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: 5kJ7aGcsXflFgYsq6KqPIA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://okvanguardofficelogin.x-sns.cloudSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: UcMQG6jo5pqheGKViSFXHQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1Host: okvanguardofficelogin.x-sns.cloudConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://okvanguardofficelogin.x-sns.cloudSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; brcap=0Sec-WebSocket-Key: JXV4C1KVtiHrcBke/SFYpg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: helawok.x-sns.cloud
Source: global traffic	DNS traffic detected: DNS query: g.fastcdn.co
Source: global traffic	DNS traffic detected: DNS query: v.fastcdn.co
Source: global traffic	DNS traffic detected: DNS query: cdn.instapagemetrics.com
Source: global traffic	DNS traffic detected: DNS query: ec.instapagemetrics.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: okvanguardofficelogin.x-sns.cloud
Source: global traffic	DNS traffic detected: DNS query: 024cc40a-acb15722.x-sns.cloud
Source: global traffic	DNS traffic detected: DNS query: 04a63513-acb15722.x-sns.cloud
Source: global traffic	DNS traffic detected: DNS query: 36f920fd-acb15722.x-sns.cloud
Source: global traffic	DNS traffic detected: DNS query: l1ve.x-sns.cloud
Source: global traffic	DNS traffic detected: DNS query: 18f930cb-acb15722.x-sns.cloud

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/jsd/r/8d08f2f35a7332c7 HTTP/1.1Host: helawok.x-sns.cloudConnection: keep-aliveContent-Length: 15775sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://helawok.x-sns.cloudSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:17:21 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 23747697-da84-43aa-aeee-c03e8c48ad00x-ms-ests-server: 2.1.19005.9 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:17:21 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 649f3919-2f15-4bf3-a48d-855b9de35f00x-ms-ests-server: 2.1.19005.9 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:17:26 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 629e8b30-efa2-48b0-8b1d-ec374efd0100x-ms-ests-server: 2.1.19066.8 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:17:26 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ms-correlation-id: e0c43d6b-221a-495c-a2c8-81d72d58a6c3x-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: 727F9A21B19E449DB863842FC8A71075 Ref B: AMS231032602011 Ref C: 2024-10-10T19:17:26Zaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:17:29 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 43cedfd3-7f04-4068-9f19-c7b8b1971800x-ms-ests-server: 2.1.19066.8 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:17:35 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: b273cdbf-491c-4873-9836-8ff488d40c00x-ms-ests-server: 2.1.19066.8 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:17:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: f630d3a2-ce6c-4bf4-8c27-30e670350f00x-ms-ests-server: 2.1.19066.8 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:17:53 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: fb3a499e-053c-4871-88e5-b90a05761500x-ms-ests-server: 2.1.19066.8 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:17:57 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 596cc1cd-68d0-49e4-bfe6-7c2ec1c41700x-ms-ests-server: 2.1.19066.8 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:18:05 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 0e14cede-30e5-4552-a93f-5904e8f61400x-ms-ests-server: 2.1.19066.8 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:18:19 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 520639ce-0db8-4754-83d7-4b28d0971900x-ms-ests-server: 2.1.19066.8 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 10 Oct 2024 19:18:27 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: c5bf3ba2-0d36-4a2a-9532-e530f5b41700x-ms-ests-server: 2.1.19066.8 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: chromecache_159.2.dr, chromecache_165.2.dr	String found in binary or memory: http://bit.ly/sp-js)
Source: chromecache_166.2.dr	String found in binary or memory: https://app.instapage.com/ajax/pageserver/files/serve-file
Source: chromecache_166.2.dr, chromecache_164.2.dr	String found in binary or memory: https://cdn.instapagemetrics.com/t/js/3/it.js
Source: chromecache_162.2.dr, chromecache_166.2.dr, chromecache_164.2.dr	String found in binary or memory: https://ec.instapagemetrics.com
Source: chromecache_166.2.dr	String found in binary or memory: https://g.fastcdn.co/js/cm.js
Source: chromecache_162.2.dr, chromecache_137.2.dr, chromecache_170.2.dr, chromecache_155.2.dr, chromecache_164.2.dr, chromecache_149.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_162.2.dr, chromecache_137.2.dr, chromecache_170.2.dr, chromecache_155.2.dr, chromecache_164.2.dr, chromecache_149.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE
Source: chromecache_166.2.dr	String found in binary or memory: https://helawok.x-sns.cloud
Source: chromecache_166.2.dr	String found in binary or memory: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb
Source: chromecache_166.2.dr	String found in binary or memory: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb
Source: chromecache_166.2.dr	String found in binary or memory: https://storage.googleapis.com/instapage-assets/favicon/favicon-64x64.ico

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49848 version: TLS 1.2

Source: classification engine

Classification label: mal84.phis.win@22/65@40/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 --field-trial-handle=2388,i,7891156904035973045,4333935852888309243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://helawok.x-sns.cloud/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 --field-trial-handle=2388,i,7891156904035973045,4333935852888309243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://helawok.x-sns.cloud/

LLM: Page contains button: 'CLICK HERE TO VIEW DOCUMENT' Source: '0.0.pages.csv'

Source: chromecache_158.2.dr

Binary or memory string: 2~>vmcin

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
secure.pageserve.co	172.64.149.213	true	false	unknown
cdn.instapagemetrics.com	34.36.17.181	true	false	unknown
v.fastcdn.co	172.64.146.38	true	false	unknown
18f930cb-acb15722.x-sns.cloud	172.233.53.209	true	true	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
g.fastcdn.co	104.18.41.218	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
36f920fd-acb15722.x-sns.cloud	172.233.53.209	true	true	unknown
okvanguardofficelogin.x-sns.cloud	172.233.53.209	true	true	unknown
www.google.com	216.58.206.68	true	false	unknown
024cc40a-acb15722.x-sns.cloud	172.233.53.209	true	true	unknown
ec.instapagemetrics.com	172.67.185.227	true	false	unknown
04a63513-acb15722.x-sns.cloud	172.233.53.209	true	true	unknown
l1ve.x-sns.cloud	172.233.53.209	true	true	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
helawok.x-sns.cloud	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	true	unknown
https://g.fastcdn.co/js/cm.js	false	unknown
https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	true	unknown
https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	true	unknown
https://v.fastcdn.co/u/33332e5f/65201939-0-H.png	false	unknown
https://helawok.x-sns.cloud/cdn-cgi/challenge-platform/scripts/jsd/main.js	true	unknown
https://okvanguardofficelogin.x-sns.cloud/acb15722230e4dd094b9ec1a7f7ebb27/	true	unknown
https://g.fastcdn.co/js/Links.c1a9dcf75cfbd1ae01c0.js	false	unknown
https://l1ve.x-sns.cloud/Me.htm?v=3	true	unknown
https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js	true	unknown
https://18f930cb-acb15722.x-sns.cloud/Prefetch/Prefetch.aspx	true	unknown
https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	true	unknown
https://ec.instapagemetrics.com/t/two	false	unknown
https://helawok.x-sns.cloud/	true	unknown
https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true	true	unknown
https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js	true	unknown
https://okvanguardofficelogin.x-sns.cloud/favicon.ico	true	unknown
https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc	true	unknown
https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	true	unknown
https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb	false	unknown
https://36f920fd-acb15722.x-sns.cloud/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js	true	unknown
https://g.fastcdn.co/js/utils.bcf03997485feb49f2c7.js	false	unknown
https://g.fastcdn.co/js/LazyImage.77b7aec17419c3045fee.js	false	unknown
https://helawok.x-sns.cloud/cdn-cgi/challenge-platform/h/b/jsd/r/8d08f2f35a7332c7	true	unknown
https://g.fastcdn.co/js/sptw.051afd940be1c95d0063.js	false	unknown
https://ec.instapagemetrics.com/t/two?3thpc=true	false	unknown
https://g.fastcdn.co/js/Cradle.904200e3dbc62d5b0155.js	false	unknown
https://cdn.instapagemetrics.com/t/js/3/it.js	false	unknown
https://024cc40a-acb15722.x-sns.cloud/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	true	unknown
https://helawok.x-sns.cloud/cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js?	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://bit.ly/sp-js)	chromecache_159.2.dr, chromecache_165.2.dr	false	unknown
https://github.com/zloirock/core-js	chromecache_162.2.dr, chromecache_137.2.dr, chromecache_170.2.dr, chromecache_155.2.dr, chromecache_164.2.dr, chromecache_149.2.dr	false	unknown
https://app.instapage.com/ajax/pageserver/files/serve-file	chromecache_166.2.dr	false	unknown
https://ec.instapagemetrics.com	chromecache_162.2.dr, chromecache_166.2.dr, chromecache_164.2.dr	false	unknown
https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE	chromecache_162.2.dr, chromecache_137.2.dr, chromecache_170.2.dr, chromecache_155.2.dr, chromecache_164.2.dr, chromecache_149.2.dr	false	unknown
https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb	chromecache_166.2.dr	false	unknown
https://helawok.x-sns.cloud	chromecache_166.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.185.227	ec.instapagemetrics.com	United States	13335	CLOUDFLARENETUS	false
34.36.17.181	cdn.instapagemetrics.com	United States	2686	ATGS-MMD-ASUS	false
172.233.53.209	18f930cb-acb15722.x-sns.cloud	United States	20940	AKAMAI-ASN1EU	true
172.64.149.213	secure.pageserve.co	United States	13335	CLOUDFLARENETUS	false
104.18.38.43	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
104.18.41.218	g.fastcdn.co	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.64.146.38	v.fastcdn.co	United States	13335	CLOUDFLARENETUS	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531099
Start date and time:	2024-10-10 21:16:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://helawok.x-sns.cloud/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.phis.win@22/65@40/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 142.250.181.238, 142.251.173.84, 34.104.35.123, 142.250.181.251, 142.250.185.219, 142.250.184.219, 172.217.16.155, 142.250.185.187, 172.217.16.219, 142.250.186.123, 142.250.185.251, 142.250.186.91, 142.250.186.59, 142.250.186.155, 142.250.185.91, 142.250.184.251, 172.217.18.27, 142.250.185.155, 216.58.206.91, 216.58.212.155, 142.250.74.219, 216.58.206.59, 142.250.186.187, 142.250.185.123, 52.149.20.212, 199.232.210.172, 192.229.221.95, 13.95.31.18, 142.250.184.234, 142.250.186.138, 142.250.186.106, 142.250.74.202, 172.217.18.10, 142.250.186.74, 142.250.185.234, 172.217.23.106, 142.250.185.202, 142.250.185.170, 142.250.184.202, 216.58.206.74, 142.250.181.234, 142.250.186.170, 172.217.16.202, 142.250.186.42, 13.85.23.206, 142.250.186.163
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, storage.googleapis.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://helawok.x-sns.cloud/

Input	Output
URL: https://helawok.x-sns.cloud/ Model: jbxai	{ "brands":["Hartsfield & Egbert, PLLC"], "text":"HARTSFIELD & EGBERT, PLLC Honest Advice. Smart Solutions. Proven Results. Hartsfield & Egbert, PLLC has shared a secure document with you Click on \" VIEW SHARE DOCUMENT\" to access the shared document CLICK HERE TO VIEW DOCUMENT", "contains_trigger_text":true, "trigger_text":"CLICK HERE TO VIEW DOCUMENT", "prominent_button_name":"CLICK HERE TO VIEW DOCUMENT", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true Model: jbxai	{ "brands":["Microsoft"], "text":"Microsoft Sign in Email, phone, or Skype No account? Create one!", "contains_trigger_text":true, "trigger_text":"Sign in", "prominent_button_name":"Next", "text_input_field_labels":["Email", "phone", "Skype"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true Model: jbxai	{ "phishing_score":9, "brands":"Microsoft", "legit_domain":"microsoft.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'okvanguardofficelogin.x-sns.cloud' does not match the legitimate domain 'microsoft.com'.", "The domain uses a cloud service provider's domain 'x-sns.cloud', which is not directly associated with Microsoft.", "The presence of 'officelogin' in the URL suggests an attempt to mimic Microsoft's Office services, which is suspicious.", "The use of a subdomain 'okvanguardofficelogin' is unusual and not typical for Microsoft's legitimate services.", "The URL structure and domain do not align with Microsoft's known domain practices, indicating a potential phishing attempt."], "brand_matches":[false], "url_match":false, "brand_input":"Microsoft", "input_fields":"Email"}

URL: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true Model: jbxai	{ "brands":["Microsoft"], "text":"Microsoft Sign in Email, phone, or Skype No account? Create one!", "contains_trigger_text":true, "trigger_text":"Sign in", "prominent_button_name":"Next", "text_input_field_labels":["Email", "phone", "Skype"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb&sso_reload=true Model: jbxai	{ "brands":["Microsoft"], "text":"Sign in", "contains_trigger_text":true, "trigger_text":"Enter a valid email address, phone number, or Skype name.", "prominent_button_name":"Next", "text_input_field_labels":["Email", "phone", "Skype"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 449799
Category:	dropped
Size (bytes):	122191
Entropy (8bit):	7.9977352408132365
Encrypted:	true
SSDEEP:	3072:d0hqwNitGaIU0pXevqdbriT0sFdROx6m+wDOxkqkzYUM:dkqwIBh0pOKs0+dROxZ51q4M
MD5:	ABBAEDABAA57A61E57DFFAB7BA8C6AB2
SHA1:	E8E8F93E2F01325DA5A7757C12274AF7FAC58E38
SHA-256:	E3F1B81D0D644A51DB424F4A8974EA1A7AA03015B9348AE467B94B4072F9CC8F
SHA-512:	8C8C4D5EF19F12E4AFA9AD532552C1AEF19E318CDCD9F6EE56064DDE59484E8F46EBA08514134D9DE267882FAFC77F0B2B758DA7B2C64EEFCCB366A931B46A49
Malicious:	false
Reputation:	low
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.AY..................Oix..).NK7...KW...........`....G/..=.....3....0y..F.0......7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...0@/....0h,...[U.DZ..7.R.....}6./...o.....:.;w.jn.1....._..<..b.{.... ..J.....9.8{.16eA...........:B#.K,N...8.T.....$.R..8...?.R.^3...n...$......K....n..U......'.....'.......r...<.83KW....t.Nm/.m^..p...+9.......k.......t..2......;Vf...]...\|.Q..I.==......?..[5....._..I.x...T<+......WO.. .....>...%.....U...(.W.....m.:..e..V:..j...H..U...HO..2.K...T..w{...8.....?z.\)W.b..b....4k...!.........d..%.].z....Pi....g..on...4...(...1.e.D.~....Z..<..P.=......X.(.........N1.F....@..Y%y.....t..'Q...6.Y..h'.W..xA..4.a.b*.j..=.V!D.V".>..q=.Q...bb`...@ki.+0-..).).X....T....+.zZ7P.H...{..=..i...dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.m...=.....!.V....<%J.D

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3512
Category:	downloaded
Size (bytes):	1431
Entropy (8bit):	7.870402069272985
Encrypted:	false
SSDEEP:	24:XJPq0wyRcnpdOllvmjhtDj0xaVlxvaPNCdMe94hlqF/bgXr53A7Vya/wncgzWupE:XJPqPyE4lYjhtDj0xs5F4lqFMkVya6hE
MD5:	36B21812FB109B7C97392D5F0D3BF224
SHA1:	904A955E72069846D4C5AED6395B74C79D701C9D
SHA-256:	008E933C13A26CD4BCA3E2986BE33FBBB61610C3E26D7BE2D887A414AB7810B9
SHA-512:	2C9ED5E6D9DA8435858479BBD46D07020351E877628820F21B01ADDA5DA0C863D3B86B938B934A105AFE9380F4C30324ED9444FD4C2A41AA8B3A046FB1A47FE2
Malicious:	false
Reputation:	low
URL:	https://l1ve.x-sns.cloud/Me.htm?v=3
Preview:	...........W.n.8.}.W.D...V.%...&(...i...}p..-Q6.2).......f.j...}H,.g......+.j....r.,......+...I..oeh...%..c.........]..r..9v-.i...z.pG.......n......K..f......y....$Q,...g...!K.G..D..c.R..n.Y...t....(7....!...EKs-.....p./....#.r7.re.3s%g.....<-.R[I...}A...H..vk...&...#.`.H........".k.DX.....A$55.y%f....s.Vd..<MX...?.?.._.1\|R.. .i.".x8...S.v.g@....+d...$\.d.....B..Z<.44.E.Eb.....$....D.....Z4...v.!......>....O.h..9..L.>...]...u0&]Q..J-.~...&._n.R.../zA..M...".p...r.g!....s..m..B.......0>,.h..n/.J.!...Xhc....`...;1....!.%....a@"..:.Ag....53k.=O.3....lTF......H..g.GC..![+...I}.p..._~.......C.J.M...T..j\|.h.K..9..#+..&%...k\b..,.7..y......;.A.X....j.Av&y...}.5k'..,..p:..>."dU..3.bWi.....Y7b.a....{.....j-..d,....#............}.......\|...GlT9X.v..S.{...n".....q.BmR%.....ex9.......X....U>.4.[....S..L..k#.=6.....y..(..A....U~._..*..]...7 [..[.....".....h..\...3I....@....,Q.D..[.....PL~d..u{P.Pu.\..70..Rn[&.....\Qs....e.C.. 8?..;.1....#..

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18428), with no line terminators
Category:	downloaded
Size (bytes):	18428
Entropy (8bit):	5.258325161837104
Encrypted:	false
SSDEEP:	384:Y6zBN5FsS2vqBPgv+uNxWNU6tLEJ01MPMxf5kU7:5fNU6tLcc
MD5:	ED7CEE4EBF556210A9B41A1539851DC1
SHA1:	9DEF199C02A1A9D565DFECA8DBA5725F7AEEA975
SHA-256:	9D6B59F630DD3DF5DCFF0F6AF131D1D94EBC050F3D38F61F40EF56E793093CD5
SHA-512:	AFAB35EE4845D8D2446BBD9C724EA6D7542CAB8F3A9AE45BE1738FDBF229F9B2BFC29F500E91206DA55180202E2891C1F7152204053DAE67A7685C6DBD2108E3
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/Cradle.904200e3dbc62d5b0155.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[846],{7829:(e,t,r)=>{var n=r(4594);function i(e){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},i(e)}function o(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,a(n.key),n)}}function a(e){var t=function(e,t){if("object"!=i(e)\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,"string");if("object"!=i(n))return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==i(t)?t:t+""}var u=function(){return e=function e(){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e)},t=[{key:"setupVisitTracking",value:function(e,t){t.setVisited()}},{key:"setupSubmissi

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 449799
Category:	downloaded
Size (bytes):	122191
Entropy (8bit):	7.9977352408132365
Encrypted:	true
SSDEEP:	3072:d0hqwNitGaIU0pXevqdbriT0sFdROx6m+wDOxkqkzYUM:dkqwIBh0pOKs0+dROxZ51q4M
MD5:	ABBAEDABAA57A61E57DFFAB7BA8C6AB2
SHA1:	E8E8F93E2F01325DA5A7757C12274AF7FAC58E38
SHA-256:	E3F1B81D0D644A51DB424F4A8974EA1A7AA03015B9348AE467B94B4072F9CC8F
SHA-512:	8C8C4D5EF19F12E4AFA9AD532552C1AEF19E318CDCD9F6EE56064DDE59484E8F46EBA08514134D9DE267882FAFC77F0B2B758DA7B2C64EEFCCB366A931B46A49
Malicious:	false
Reputation:	low
URL:	https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.AY..................Oix..).NK7...KW...........`....G/..=.....3....0y..F.0......7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...0@/....0h,...[U.DZ..7.R.....}6./...o.....:.;w.jn.1....._..<..b.{.... ..J.....9.8{.16eA...........:B#.K,N...8.T.....$.R..8...?.R.^3...n...$......K....n..U......'.....'.......r...<.83KW....t.Nm/.m^..p...+9.......k.......t..2......;Vf...]...\|.Q..I.==......?..[5....._..I.x...T<+......WO.. .....>...%.....U...(.W.....m.:..e..V:..j...H..U...HO..2.K...T..w{...8.....?z.\)W.b..b....4k...!.........d..%.].z....Pi....g..on...4...(...1.e.D.~....Z..<..P.=......X.(.........N1.F....@..Y%y.....t..'Q...6.Y..h'.W..xA..4.a.b*.j..=.V!D.V".>..q=.Q...bb`...@ki.+0-..).).X....T....+.zZ7P.H...{..=..i...dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.m...=.....!.V....<%J.D

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407064
Category:	downloaded
Size (bytes):	116416
Entropy (8bit):	7.997576812134949
Encrypted:	true
SSDEEP:	3072:cWnNXO9JeuKEUCRkon7jHZiL3NyAKaKc8gkW:c4zExRtnfHA8AjKcb
MD5:	0ADFDB04106A058334913A637E28C1E8
SHA1:	1CC056BFF8CF1E96F928615FA388C681ACD47327
SHA-256:	AEC2356DB902219EEAE10BD90706E470D5BEE40EA4F2DC680268C92F2C453E62
SHA-512:	F6E5058DB348E07932D9579AFFC021D3D980C413F19D936DE2EDCCEE34C741D6F62E35660B60B4836B76E3439687161661F56D1FA04B619114169B5295A87DD2
Malicious:	false
Reputation:	low
URL:	https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..q....0.m...z..0..7..h..'.7.....b..iz.=...o<?Pm..p\X.S..'...........o..).c.._...`W..7..W...[.l>..X.Y.O....;.".....Z.0..0/.i0.1...,..o......X.?...o.b1..X,...m.s...&...].u.D.....7.o4u..5?......8....'.......I.6[..K<6...T}P..'.O.(.-..f..V<....$z...=.l..K~.."...z.I..j.ifuE,....c.E.<..M...T%../.f..[o..N2...S...:l..w..y.....i.l.m....\|.....,...=.....=..F............a./.F.<2S.....M.rb(.X........k....i.g...,C.s..by..K+..[~.>.F.D..z...!m.71..}IY.....+\q.j..G..\....Ox.d.^.).*.\|U.W...`..7.j._..)\|...#...8<.....9..\|.......

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60034), with no line terminators
Category:	dropped
Size (bytes):	60068
Entropy (8bit):	5.402708489630137
Encrypted:	false
SSDEEP:	768:3ETwOMBCKL5HUX2OXatPhId6GQvIsycjnDknaB:3O0xQTqe02naB
MD5:	C18E3DB1D927FC754BE228F0A4B41530
SHA1:	BE53E9D1A3EE05544256D11C351B6AD7B4AF8466
SHA-256:	DEC8CC724B3F5B0BCA627BD9A42E7EFAD08983EBE6562A6A51F2FDB3D59DE547
SHA-512:	3646981D83CB56807C68BA2BBE3465F0F37C172CA9CCF29BD89CDCEE5D4E03603D69EC5751DB22DCF904B940893D98C29CB42AEF2BF886318C55728EACAF5A8C
Malicious:	false
Reputation:	low
Preview:	(()=>{var t,r={5627:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t.length,o=[];if(/^[\x00-\x7f]*$/.test(t))for(;++e<n;)o.push(t.charCodeAt(e));else for(;++e<n;)(r=t.charCodeAt(e))<128?o.push(r):r<2048?o.push(r>>6\|192,63&r\|128):o.push(r>>12\|224,r>>6&63\|128,63&r\|128);return o},fromUtf8:function(t){var e,n=-1,o=[],i=[null,null,null,null];if(!r.lookup){for(e=r.alphabet.length,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[2])<<6\|i[3]);return o},encode:function(t){var e,n,o,i=r.toUtf8(t),a=i.length,u=[null,null,null,null],s=-1;if(r.ie){for(var c=[];++s<a;)e=i[s],n=i[++s],u[0]=e>

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2952), with no line terminators
Category:	dropped
Size (bytes):	2952
Entropy (8bit):	5.1112840819051755
Encrypted:	false
SSDEEP:	48:icZct9sKqe/GvDoGu8E5JVywXiWjOKS4f68LD/ui5+GboRhUBKI5/ui5onuivSO:a9HqQkDCpTVcD468L7h5LEIZh5ohvSO
MD5:	1E79364FA65919F0556846DC37F23724
SHA1:	B78C1A98438E382E4C0DADC9192E88BAF229D443
SHA-256:	2DF39553FBF66C6FCCDD2E81C522E0CB68799373B722BB3EAF044B94486858B9
SHA-512:	CAFEF3628EA0AB1283DB772910249EB9F9CFEB7D77A4DA1418EAC2EC1760EAA080D43A0CE6C5F3259D6955B691DEADA2A1392543D5E92AD74682B2B076B6BB25
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[180],{8239:(t,r,e)=>{var n=e(4594);function o(t){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},o(t)}function i(t){return function(t){if(Array.isArray(t))return a(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|function(t,r){if(t){if("string"==typeof t)return a(t,r);var e={}.toString.call(t).slice(8,-1);return"Object"===e&&t.constructor&&(e=t.constructor.name),"Map"===e\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e)?a(t,r):void 0}}(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function a(t,r){(null==r\|\|r>t.length)&&(r

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57443
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	7.987366580233851
Encrypted:	false
SSDEEP:	384:jTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:jTtTJjHlgneqTz658ht/eAQw
MD5:	210F3C4E623D333CB94746CEC563DE09
SHA1:	887911B0BCA564AFEC25787B44A98F16EBF7ACA3
SHA-256:	4792643ECEBF0EEAA641474C9A1BA39D16D2F924C6B5A6FCB8FC443A5FE59F44
SHA-512:	A5E1705DFFE4359F5920F540207C06B658CC12B80A9FEBA14503430CDE090947E5EB231C99922A76DB46664F2D448A23DF7C05C26CA89A264F30073F2812611B
Malicious:	false
Reputation:	low
URL:	https://36f920fd-acb15722.x-sns.cloud/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407064
Category:	dropped
Size (bytes):	116416
Entropy (8bit):	7.997576812134949
Encrypted:	true
SSDEEP:	3072:cWnNXO9JeuKEUCRkon7jHZiL3NyAKaKc8gkW:c4zExRtnfHA8AjKcb
MD5:	0ADFDB04106A058334913A637E28C1E8
SHA1:	1CC056BFF8CF1E96F928615FA388C681ACD47327
SHA-256:	AEC2356DB902219EEAE10BD90706E470D5BEE40EA4F2DC680268C92F2C453E62
SHA-512:	F6E5058DB348E07932D9579AFFC021D3D980C413F19D936DE2EDCCEE34C741D6F62E35660B60B4836B76E3439687161661F56D1FA04B619114169B5295A87DD2
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..q....0.m...z..0..7..h..'.7.....b..iz.=...o<?Pm..p\X.S..'...........o..).c.._...`W..7..W...[.l>..X.Y.O....;.".....Z.0..0/.i0.1...,..o......X.?...o.b1..X,...m.s...&...].u.D.....7.o4u..5?......8....'.......I.6[..K<6...T}P..'.O.(.-..f..V<....$z...=.l..K~.."...z.I..j.ifuE,....c.E.<..M...T%../.f..[o..N2...S...:l..w..y.....i.l.m....\|.....,...=.....=..F............a./.F.<2S.....M.rb(.X........k....i.g...,C.s..by..K+..[~.>.F.D..z...!m.71..}IY.....+\q.j..G..\....Ox.d.^.).*.\|U.W...`..7.j._..)\|...#...8<.....9..\|.......

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 934 x 286, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	44012
Entropy (8bit):	7.9855789406398205
Encrypted:	false
SSDEEP:	768:cQxqPT45RlgnRurgva6hDSVIKUOBe2+coE+K/GX7Nh89KD+VOYB6FfkR:HCEGRVva64VmcxSGGkoqVO+6R0
MD5:	2DD8F242A3A847E5D544475D29C99407
SHA1:	BD239B13B94B352CEE50048AD8C2D3A44BAED9F9
SHA-256:	ABB0417278C62C0AB02809BCE5B235D3349EC22A2608F455A0AFCA0F244E19B3
SHA-512:	26BBD9E3A301DF3860C88C3058E23A1B854B8948BE1A93EC690EAE115ED5CC3F809F920984707AFC0E73B75D2588007B2BFB6D4D7F02259D6DB55874F6A4A502
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................iCCPicc..x..wPS..........).7A:.....(H..!...bHP.#.+..TDPQtUD....VD.-... ........ow..o.}g..=s~...7s.3....H2Q5.,.L.....O`.z.."...(\|A.......F.?..6 .....oR.&....p...9.,..b.\ ...p;..x.L2.-.3...1.;.....F...=Q.\...d./M......+H.a..X(.c,..+++[..!.-....#......g...OU..]...'.d....[Y..=...I."........Q.8iZ.....c.&...cA.7a..\|.....i.c."..)\|d..1N...civD.._..1_:..<#ZQOK.)...b.8W.3m.s2"C.{...T...8.8.w\|....r.r_.O.V.....;.?r.3...8.0....'Z./..F(83<T......F*...r\|mx...........XH......,y..0q.%....4.....d.O,...r.sp..y.0..L@..0/...U..\|...>1^.5.8Z.@y:^...PY.p.X ........P..h.>..........?.C.DA<....A.Ha.,..P...6A9T......04..8....\.[..:..^....!.AH...#..b.X#....B..P$..G..TD..E....)A..H5..r.9.\B.{H...A>.8..2P=.....Q...F...Tt.....k.2..=..g.+.-..}......c..q686....%.RpR..\...W...5.Zq7p..~.'<.O..6x.\|.>./.../........-.........F.%X...<B.!.0.PH(%.!.#.'.".....D&..J."........u.3.vb7q.D"i..I..0..$#......N.:H=..de....@N ....R.~.)r...yHIM.T.])LI..@i.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113799
Category:	dropped
Size (bytes):	35193
Entropy (8bit):	7.992190721282913
Encrypted:	true
SSDEEP:	768:uRDXATP2KpOH5d0L7lumndasuVyeLtCR4sqvrdApVeD3dCqCjU0Ygjrh:ECDpOH5d0TFbeLtUGvrdApVq3dmw0YAF
MD5:	294BCDB5BA73D8ADCAB98B980EF50B0B
SHA1:	67FF5F0F1B79C57C073A0254ED85D3E2E87F8BBB
SHA-256:	D56AD31A6F4594060CD9C59B7FD9E327A006B37273B698174755B2F9FC40C14E
SHA-512:	C3DC15C27C6F16A59D11AFA1409DD824372020D2F398A2A0F13CC183A0CEFADCDBB5EFC7D9E39AC58905268EDA6B018C62C8C7B266EC5B5B3A3F0869C86A4433
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p.v3..[a..G.t9I....^. G..{.....r...i...v9.L.N.Y..u.o.,.rf..70....X#.N..\|.?]%.L..O.&....n.."./...Z.V........2....:....Vg..?^.C.W=..?....y..aQ;..`b.s.AV..]...?OW....9T..iz>..k{~.z...]...W...C..m.=.I..P#._{{.._0.......(........~.....x..f.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Tu. ..e6_.o..*.w...>...:.....k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..W<.`.F.xm.y..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2952), with no line terminators
Category:	downloaded
Size (bytes):	2952
Entropy (8bit):	5.1112840819051755
Encrypted:	false
SSDEEP:	48:icZct9sKqe/GvDoGu8E5JVywXiWjOKS4f68LD/ui5+GboRhUBKI5/ui5onuivSO:a9HqQkDCpTVcD468L7h5LEIZh5ohvSO
MD5:	1E79364FA65919F0556846DC37F23724
SHA1:	B78C1A98438E382E4C0DADC9192E88BAF229D443
SHA-256:	2DF39553FBF66C6FCCDD2E81C522E0CB68799373B722BB3EAF044B94486858B9
SHA-512:	CAFEF3628EA0AB1283DB772910249EB9F9CFEB7D77A4DA1418EAC2EC1760EAA080D43A0CE6C5F3259D6955B691DEADA2A1392543D5E92AD74682B2B076B6BB25
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/LazyImage.77b7aec17419c3045fee.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[180],{8239:(t,r,e)=>{var n=e(4594);function o(t){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},o(t)}function i(t){return function(t){if(Array.isArray(t))return a(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|function(t,r){if(t){if("string"==typeof t)return a(t,r);var e={}.toString.call(t).slice(8,-1);return"Object"===e&&t.constructor&&(e=t.constructor.name),"Map"===e\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e)?a(t,r):void 0}}(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function a(t,r){(null==r\|\|r>t.length)&&(r

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113401
Category:	downloaded
Size (bytes):	20414
Entropy (8bit):	7.979510858152841
Encrypted:	false
SSDEEP:	384:VkqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZo9v8:gCGEiL/w7R8DW9Z5BU7UMZHqok
MD5:	7E18E71D589531855CF589482EAB8174
SHA1:	05F69583C81A69910337CFC736EDC8CE67544DBF
SHA-256:	7C0DF71DA7BB0F2C55BE83B8BA31FCA820E7F856CDA39A0BD009584B6FB36B3B
SHA-512:	C758593F92BBC29804E45ACE4A4F3FC6EB7B76C032F43A0DDCDD2D220842F6542BDA22BFCBFD01D458FAED546C798F5B195A1E67ADAF1580E4DE95CC38D2443A
Malicious:	false
Reputation:	low
URL:	https://36f920fd-acb15722.x-sns.cloud/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57443
Category:	dropped
Size (bytes):	16326
Entropy (8bit):	7.987366580233851
Encrypted:	false
SSDEEP:	384:jTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:jTtTJjHlgneqTz658ht/eAQw
MD5:	210F3C4E623D333CB94746CEC563DE09
SHA1:	887911B0BCA564AFEC25787B44A98F16EBF7ACA3
SHA-256:	4792643ECEBF0EEAA641474C9A1BA39D16D2F924C6B5A6FCB8FC443A5FE59F44
SHA-512:	A5E1705DFFE4359F5920F540207C06B658CC12B80A9FEBA14503430CDE090947E5EB231C99922A76DB46664F2D448A23DF7C05C26CA89A264F30073F2812611B
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60034), with no line terminators
Category:	downloaded
Size (bytes):	60068
Entropy (8bit):	5.402708489630137
Encrypted:	false
SSDEEP:	768:3ETwOMBCKL5HUX2OXatPhId6GQvIsycjnDknaB:3O0xQTqe02naB
MD5:	C18E3DB1D927FC754BE228F0A4B41530
SHA1:	BE53E9D1A3EE05544256D11C351B6AD7B4AF8466
SHA-256:	DEC8CC724B3F5B0BCA627BD9A42E7EFAD08983EBE6562A6A51F2FDB3D59DE547
SHA-512:	3646981D83CB56807C68BA2BBE3465F0F37C172CA9CCF29BD89CDCEE5D4E03603D69EC5751DB22DCF904B940893D98C29CB42AEF2BF886318C55728EACAF5A8C
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/utils.bcf03997485feb49f2c7.js
Preview:	(()=>{var t,r={5627:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t.length,o=[];if(/^[\x00-\x7f]*$/.test(t))for(;++e<n;)o.push(t.charCodeAt(e));else for(;++e<n;)(r=t.charCodeAt(e))<128?o.push(r):r<2048?o.push(r>>6\|192,63&r\|128):o.push(r>>12\|224,r>>6&63\|128,63&r\|128);return o},fromUtf8:function(t){var e,n=-1,o=[],i=[null,null,null,null];if(!r.lookup){for(e=r.alphabet.length,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[2])<<6\|i[3]);return o},encode:function(t){var e,n,o,i=r.toUtf8(t),a=i.length,u=[null,null,null,null],s=-1;if(r.ie){for(var c=[];++s<a;)e=i[s],n=i[++s],u[0]=e>

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 64x64, 8 bits/pixel
Category:	dropped
Size (bytes):	5694
Entropy (8bit):	2.490440089535343
Encrypted:	false
SSDEEP:	48:XArZMIbYQvlgI/kBdANE+Le5NeXKe+Epu:eZMCWIKgeeaJ
MD5:	645F04909379B62EDDA16F5F5206672B
SHA1:	545D1DB0ABEB80BB750D62D575E70A29DEC37C68
SHA-256:	45081FDA9C0A99C2C4D82ED4914F53F265517AE082352E334035635AE8B46D4D
SHA-512:	A22550AD009F8F10172E70ED5473609E22DBD4684D3EA851D93BA0A6E4D9054924E2830ABA1C568B10A1ADD63410D87F7B1F4AD3DEEF691512A5DA615C8BF1B1
Malicious:	false
Reputation:	low
Preview:	......@@......(.......(...@...................................................................!... ..."...%...#...%...$...'...* ..*!..+#...&!..'#.0($.3-).;41.>84.@:7.F@<.LGD.PJG.SNK.TOK.WQN.YTP.c]Z.ea^.gc`.ieb.tpl.upl.vqn.wso.yur.{vs.}yv.~zw..{x..\|x...}..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
URL:	https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwl6SxdZRrQZLxIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	26532
Entropy (8bit):	7.9852411279086235
Encrypted:	false
SSDEEP:	768:PNINJDITVBq3oXh3rg+KrVo1wTRS2auLRbeyAf2KdT3puqga:PSJDIS3ox3dKBTRtrN82KB3pya
MD5:	8AAE02CF32673F9088C9C038F559292D
SHA1:	A64988F85241E04239FBA03511F1EB8F5F4FFF24
SHA-256:	B261C6292BE5BD4E95D5E3A8EC2B69F85255A574FFFC0C6B459044D3EF7A6019
SHA-512:	2FDAB8921EFF4659FAC8EADA95A1504778F5FDE0B5CE3E0FF3AC8C6E7D9624BD9B4C28D176525D6E3204D652A49737B4C9D2CBF7371DA440CE881747B63DECC9
Malicious:	false
Reputation:	low
URL:	https://v.fastcdn.co/u/33332e5f/65201939-0-H.png
Preview:	RIFF.g..WEBPVP8L.g../.CG.U...L.e/../"&..k.f.......f......$.H'$>$.....i$.M..%;{."...B6...l........$..........H....%..%....Ka.A...Q.~......~.\|.b.......Y.R...,.:)$.............}.Z..(G.]...A....J...Q..gC...g..\|.9.pA/...,....{..O...,.I-..AS. ...Cf.,8.....iN'7V.>...<.r.#.?..Z.j.(...z9.....JgV\|...+...\|!7.P.....Y....H.....5..........WE${..Y-$f9...q.%B.E"2:...!Mjc.".EICK..W.T....52B.K..P.,?j.f!......sU.+.@rk,d.:M.BI..n..r.3[.V)N$+G._....\.....fYc.}.j....Q>.G....).`.7.x..W......@I.-G..../...w..o.}.L3../..m++5.%[RG...............0..2v....q......h...(0..b...........9.o.}..+.;.g.p....a...3t.a.r......}....8....a.C.pr.0TL....+.M....C.n....@5...u..g.`....B.EH.].^@`.ZiO...W.@...%..H.......0.a.W.......B.un.o!d..T;.....Z...0...o!L7@r@u*....].z...kA.l[...o..\|+g2..^\$J..R.....J.a..L..)..q.A3...l.ms..QA(3.@.Q..2V~M......t.....:._........C.i@K$HD@..G.C>x...,z......}.;.......K.t...#"2. ...r..#...~...C....k{_.>..!m...6.I..{..3...C..-....6...G..W...j....(.n'.H.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52118), with no line terminators
Category:	dropped
Size (bytes):	52150
Entropy (8bit):	5.401084712667143
Encrypted:	false
SSDEEP:	768:xk4LftsbiuuaWhZI/kUkZaoaLDTjnh4GcVknH4HUbCJCx:LftNI/kyrkHS
MD5:	69201B044F9E912CC72B07E4FFBF9555
SHA1:	4A31F53B5A91F52B28F10A84BE73D6CFFCE01706
SHA-256:	DD8625BFA35604F050E4DCC7FF10C2C31D7CDF1CE7BDF4CDE0D0415DCC74E2FB
SHA-512:	3B95C143C19165B8A37283AE927AE8C7105C76AE26473E1008EB12880C1019891E4335CA4B26C9A8AED70AE539BBC4DBADB026EE876BB5046A8147B47C009081
Malicious:	false
Reputation:	low
Preview:	(()=>{var t={6213:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),ieo:/MSIE [67]/.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t.length,o=[];if(/^[\x00-\x7f]*$/.test(t))for(;++e<n;)o.push(t.charCodeAt(e));else for(;++e<n;)(r=t.charCodeAt(e))<128?o.push(r):r<2048?o.push(r>>6\|192,63&r\|128):o.push(r>>12\|224,r>>6&63\|128,63&r\|128);return o},fromUtf8:function(t){var e,n=-1,o=[],i=[null,null,null,null];if(!r.lookup){for(e=r.alphabet.length,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[2])<<6\|i[3]);return o},encode:function(t){var e,n,o,i=r.toUtf8(t),a=i.length,s=[null,null,null,null],u=-1;if(r.ie){for

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141816
Category:	dropped
Size (bytes):	49814
Entropy (8bit):	7.9959180318207626
Encrypted:	true
SSDEEP:	1536:AyEUWKnzP1UqPo7yGIuu9+PyzkYe9LjQlz:A5Udn71tQexRzDO2
MD5:	04476564E6388C43BCB2477D4B2870B6
SHA1:	C7C29F0B541F0B47D7E441A39284E2619719070B
SHA-256:	5D8925B7B18E9E60DD68A5BC828A7FF13399FABCF0A73715AC2898B84F7C6CA2
SHA-512:	2CEC1FE604F18F1CA68147AC4A8EAAA6FF5848B9F5F4E686AF167ADC877BF8CB4920D06EC33BE4012BD86059CD51AD037578CFCB12C176EE92432B541F6C21E0
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL.......... .........t.....@.o?."...=..:_.y!.T..RU..T...Z...O.....28.W..._...+.....I..p.........w~\...Q........0...(..a.&".....w'.q..W.;Q.F..b....'Ph(&.c...E^......Y............gx.KA..#Qq..j..K...,.DTy..Gw.c...q8N.....>.. =....F....2....Q...R...g..1.C..\|..SG./t......t....5"...oC%.+..L.>...V.o.1}.....l..s.E.M.L!.G.BV.m...)....m...r.9.8.6..^.....Tt.\.....U.q.N.b.cK.?...+2.T...U.#.T[...Zcs..49..I....~.'w.a.i-...h..u/..N...0........O............~x.....>...Q8U..QP...G.O.N..[.A6Y_...6....\I....Q.....Y..\6.-.~..V.4..sy.w..D...]'...../.k.?D...$a.<..;7.?.................et..:.Og.]._.+...N......+..CU.V.UV.ep....F..#.Ng.Zj...?N.f...:/s+t^.vc.I..#..q5.L..H$.(..s....1.Pa.....N....d..2.wd!.....k.V...2qV.Y...l....x.....E...e.....>...C..+...cb33..@...r...Q..3..YY.Vt...I.L. ..T......L..v..a......0E.3d..j...D........6.Qq.W.OU...H..N...jb.u...D_k.......J..._[X.....d....*.\|.i.Z."..iy..Q......^_..[..LH.........^T..2Ld7..)Q.$J

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 64x64, 8 bits/pixel
Category:	downloaded
Size (bytes):	5694
Entropy (8bit):	2.490440089535343
Encrypted:	false
SSDEEP:	48:XArZMIbYQvlgI/kBdANE+Le5NeXKe+Epu:eZMCWIKgeeaJ
MD5:	645F04909379B62EDDA16F5F5206672B
SHA1:	545D1DB0ABEB80BB750D62D575E70A29DEC37C68
SHA-256:	45081FDA9C0A99C2C4D82ED4914F53F265517AE082352E334035635AE8B46D4D
SHA-512:	A22550AD009F8F10172E70ED5473609E22DBD4684D3EA851D93BA0A6E4D9054924E2830ABA1C568B10A1ADD63410D87F7B1F4AD3DEEF691512A5DA615C8BF1B1
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/instapage-assets/favicon/favicon-64x64.ico
Preview:	......@@......(.......(...@...................................................................!... ..."...%...#...%...$...'...* ..*!..+#...&!..'#.0($.3-).;41.>84.@:7.F@<.LGD.PJG.SNK.TOK.WQN.YTP.c]Z.ea^.gc`.ieb.tpl.upl.vqn.wso.yur.{vs.}yv.~zw..{x..\|x...}..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141816
Category:	downloaded
Size (bytes):	49814
Entropy (8bit):	7.9959180318207626
Encrypted:	true
SSDEEP:	1536:AyEUWKnzP1UqPo7yGIuu9+PyzkYe9LjQlz:A5Udn71tQexRzDO2
MD5:	04476564E6388C43BCB2477D4B2870B6
SHA1:	C7C29F0B541F0B47D7E441A39284E2619719070B
SHA-256:	5D8925B7B18E9E60DD68A5BC828A7FF13399FABCF0A73715AC2898B84F7C6CA2
SHA-512:	2CEC1FE604F18F1CA68147AC4A8EAAA6FF5848B9F5F4E686AF167ADC877BF8CB4920D06EC33BE4012BD86059CD51AD037578CFCB12C176EE92432B541F6C21E0
Malicious:	false
Reputation:	low
URL:	https://024cc40a-acb15722.x-sns.cloud/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL.......... .........t.....@.o?."...=..:_.y!.T..RU..T...Z...O.....28.W..._...+.....I..p.........w~\...Q........0...(..a.&".....w'.q..W.;Q.F..b....'Ph(&.c...E^......Y............gx.KA..#Qq..j..K...,.DTy..Gw.c...q8N.....>.. =....F....2....Q...R...g..1.C..\|..SG./t......t....5"...oC%.+..L.>...V.o.1}.....l..s.E.M.L!.G.BV.m...)....m...r.9.8.6..^.....Tt.\.....U.q.N.b.cK.?...+2.T...U.#.T[...Zcs..49..I....~.'w.a.i-...h..u/..N...0........O............~x.....>...Q8U..QP...G.O.N..[.A6Y_...6....\I....Q.....Y..\6.-.~..V.4..sy.w..D...]'...../.k.?D...$a.<..;7.?.................et..:.Og.]._.+...N......+..CU.V.UV.ep....F..#.Ng.Zj...?N.f...:/s+t^.vc.I..#..q5.L..H$.(..s....1.Pa.....N....d..2.wd!.....k.V...2qV.Y...l....x.....E...e.....>...C..+...cb33..@...r...Q..3..YY.Vt...I.L. ..T......L..v..a......0E.3d..j...D........6.Qq.W.OU...H..N...jb.u...D_k.......J..._[X.....d....*.\|.i.Z."..iy..Q......^_..[..LH.........^T..2Ld7..)Q.$J

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55107)
Category:	downloaded
Size (bytes):	55266
Entropy (8bit):	5.529539703940049
Encrypted:	false
SSDEEP:	768:Mwc94dTC6MdUY59Go1gYwQ2GKUBLAX0IPRV4fkRDMFIj:s+RML9EdUFu+fSMFW
MD5:	EEE931187060719AB17A352DE2424E0C
SHA1:	0AA427FA2D22D22E3E08C21F598CC9F2D09EFA61
SHA-256:	853D7EF6B54D838C009D01E4857B499D7EC4F71F6FCED1E2E3C463FD393CCB29
SHA-512:	0884238EB3A1AB61AA9AE343D84B0BE835D90F0643FAAEC237A66DB37346ACE5CB926D5697E1309ED1A6695F23DCE0EE05B1A3E5898FB23C15B4CACD4CFA7E90
Malicious:	false
Reputation:	low
URL:	https://cdn.instapagemetrics.com/t/js/3/it.js
Preview:	/!. Web analytics for Snowplow v3.1.0 (http://bit.ly/sp-js). * Copyright 2021 Snowplow Analytics Ltd, 2010 Anthon Pang. * Licensed under BSD-3-Clause. */.."use strict";!function(){function e(e,n){var t,r={};for(t in e)Object.prototype.hasOwnProperty.call(e,t)&&0>n.indexOf(t)&&(r[t]=e[t]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var o=0;for(t=Object.getOwnPropertySymbols(e);o<t.length;o++)0>n.indexOf(t[o])&&Object.prototype.propertyIsEnumerable.call(e,t[o])&&(r[t[o]]=e[t[o]])}return r}function n(e,n){for(var t=0,r=n.length,o=e.length;t<r;t++,o++)e[o]=n[t];return e}function t(e){var n={exports:{}};return e(n,n.exports),n.exports}function r(e){if(!e)return e;var n=0,t=0,r=[];if(e){e=unescape(encodeURIComponent(e));do{var o=e.charCodeAt(n++),i=e.charCodeAt(n++),a=e.charCodeAt(n++),s=o<<16\|i<<8\|a;o=s>>18&63,i=s>>12&63,a=s>>6&63,s&=63,r[t++]=de.charAt(o)+de.charAt(i)+de.charAt(a)+de.charAt(s)}while(n<e.length);n=r.join(""),e=((e=e.length%3)?n.slice(0,e-3):n)+"===".slic

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (379), with no line terminators
Category:	dropped
Size (bytes):	379
Entropy (8bit):	5.182032506557214
Encrypted:	false
SSDEEP:	6:+hjgjYhrQNMbALm7FX4hHOv2hCrsmGmJ9LEinawXtsGteqjpXrLYVsjfn:+dcYJQMkLet4hHOuhCAmGXbAsBenYV2n
MD5:	29C24FF1E7D09EB3B67FCF90DE082749
SHA1:	84263358A2D879FF4773F657BAE4A438EF7AC89C
SHA-256:	2E065B142374BE24BCDFFF600DECCC28F6AF18F5401CC224342FBE8FCA3DE357
SHA-512:	F7E8C6374898C337F86D55FF959ADABE63E2E03497997104902D58BE5D2A6E931C0121CDCD956DB53ED9E3B8A4D22CFA4A92E8BA3EE7BBAAD33AE05502E8DB69
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[250],{2594:(n,a,e)=>{var r=e(4594),c=["url-link","landing-page-link"].map((function(n){return"a.".concat(n,"[data-pass-params]")})).join(", ");(0,r.v)((function(){var n,a=(0,r.wm)();a.size&&(n=a,document.querySelectorAll(c).forEach((function(a){a.href=(0,r.MM)(a.href,n)}))),(0,r.jS)("Links")}))}},n=>{n(n.s=2594)}]);

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (379), with no line terminators
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	5.182032506557214
Encrypted:	false
SSDEEP:	6:+hjgjYhrQNMbALm7FX4hHOv2hCrsmGmJ9LEinawXtsGteqjpXrLYVsjfn:+dcYJQMkLet4hHOuhCAmGXbAsBenYV2n
MD5:	29C24FF1E7D09EB3B67FCF90DE082749
SHA1:	84263358A2D879FF4773F657BAE4A438EF7AC89C
SHA-256:	2E065B142374BE24BCDFFF600DECCC28F6AF18F5401CC224342FBE8FCA3DE357
SHA-512:	F7E8C6374898C337F86D55FF959ADABE63E2E03497997104902D58BE5D2A6E931C0121CDCD956DB53ED9E3B8A4D22CFA4A92E8BA3EE7BBAAD33AE05502E8DB69
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/Links.c1a9dcf75cfbd1ae01c0.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[250],{2594:(n,a,e)=>{var r=e(4594),c=["url-link","landing-page-link"].map((function(n){return"a.".concat(n,"[data-pass-params]")})).join(", ");(0,r.v)((function(){var n,a=(0,r.wm)();a.size&&(n=a,document.querySelectorAll(c).forEach((function(a){a.href=(0,r.MM)(a.href,n)}))),(0,r.jS)("Links")}))}},n=>{n(n.s=2594)}]);

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63171)
Category:	downloaded
Size (bytes):	64365
Entropy (8bit):	5.403911530315902
Encrypted:	false
SSDEEP:	768:0CAEh06um2UQxy6y4QQyHMng8RgxChwOxW/Z06TvCcCvdgF:0pUQM4XPULIdY
MD5:	37A396805428BA004D7B537EA30B6D2A
SHA1:	B697C8B29857FAB2C3A7F5960CF1F0BE36C4ED50
SHA-256:	C9C19D88D9366BFA36FFD12F6237C58322E91C1F2E57A896172A05F41318134A
SHA-512:	57A3B4A9175185009E0C009716B78B91286E5151EFCDE802F8CD90BEEB85174AAF4F4217826EE266641C5F935F615FEE2630F08215666131635FACA0DEED19AA
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/sptw.051afd940be1c95d0063.js
Preview:	(()=>{var t={8412:t=>{function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},e(t)}function r(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function n(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?r(Object(n),!0).forEach((function(e){o(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,r,n){return(r=function(t){var r=function(t,r){if("object"!=e(t)\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0!==n){var o=n.call(t,"string");if("object"!=e(

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113799
Category:	downloaded
Size (bytes):	35193
Entropy (8bit):	7.992190721282913
Encrypted:	true
SSDEEP:	768:uRDXATP2KpOH5d0L7lumndasuVyeLtCR4sqvrdApVeD3dCqCjU0Ygjrh:ECDpOH5d0TFbeLtUGvrdApVq3dmw0YAF
MD5:	294BCDB5BA73D8ADCAB98B980EF50B0B
SHA1:	67FF5F0F1B79C57C073A0254ED85D3E2E87F8BBB
SHA-256:	D56AD31A6F4594060CD9C59B7FD9E327A006B37273B698174755B2F9FC40C14E
SHA-512:	C3DC15C27C6F16A59D11AFA1409DD824372020D2F398A2A0F13CC183A0CEFADCDBB5EFC7D9E39AC58905268EDA6B018C62C8C7B266EC5B5B3A3F0869C86A4433
Malicious:	false
Reputation:	low
URL:	https://36f920fd-acb15722.x-sns.cloud/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p.v3..[a..G.t9I....^. G..{.....r...i...v9.L.N.Y..u.o.,.rf..70....X#.N..\|.?]%.L..O.&....n.."./...Z.V........2....:....Vg..?^.C.W=..?....y..aQ;..`b.s.AV..]...?OW....9T..iz>..k{~.z...]...W...C..m.=.I..P#._{{.._0.......(........~.....x..f.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Tu. ..e6_.o..*.w...>...:.....k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..W<.`.F.xm.y..

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63171)
Category:	dropped
Size (bytes):	64365
Entropy (8bit):	5.403911530315902
Encrypted:	false
SSDEEP:	768:0CAEh06um2UQxy6y4QQyHMng8RgxChwOxW/Z06TvCcCvdgF:0pUQM4XPULIdY
MD5:	37A396805428BA004D7B537EA30B6D2A
SHA1:	B697C8B29857FAB2C3A7F5960CF1F0BE36C4ED50
SHA-256:	C9C19D88D9366BFA36FFD12F6237C58322E91C1F2E57A896172A05F41318134A
SHA-512:	57A3B4A9175185009E0C009716B78B91286E5151EFCDE802F8CD90BEEB85174AAF4F4217826EE266641C5F935F615FEE2630F08215666131635FACA0DEED19AA
Malicious:	false
Reputation:	low
Preview:	(()=>{var t={8412:t=>{function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},e(t)}function r(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function n(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?r(Object(n),!0).forEach((function(e){o(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,r,n){return(r=function(t){var r=function(t,r){if("object"!=e(t)\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0!==n){var o=n.call(t,"string");if("object"!=e(

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55107)
Category:	dropped
Size (bytes):	55266
Entropy (8bit):	5.529539703940049
Encrypted:	false
SSDEEP:	768:Mwc94dTC6MdUY59Go1gYwQ2GKUBLAX0IPRV4fkRDMFIj:s+RML9EdUFu+fSMFW
MD5:	EEE931187060719AB17A352DE2424E0C
SHA1:	0AA427FA2D22D22E3E08C21F598CC9F2D09EFA61
SHA-256:	853D7EF6B54D838C009D01E4857B499D7EC4F71F6FCED1E2E3C463FD393CCB29
SHA-512:	0884238EB3A1AB61AA9AE343D84B0BE835D90F0643FAAEC237A66DB37346ACE5CB926D5697E1309ED1A6695F23DCE0EE05B1A3E5898FB23C15B4CACD4CFA7E90
Malicious:	false
Reputation:	low
Preview:	/!. Web analytics for Snowplow v3.1.0 (http://bit.ly/sp-js). * Copyright 2021 Snowplow Analytics Ltd, 2010 Anthon Pang. * Licensed under BSD-3-Clause. */.."use strict";!function(){function e(e,n){var t,r={};for(t in e)Object.prototype.hasOwnProperty.call(e,t)&&0>n.indexOf(t)&&(r[t]=e[t]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var o=0;for(t=Object.getOwnPropertySymbols(e);o<t.length;o++)0>n.indexOf(t[o])&&Object.prototype.propertyIsEnumerable.call(e,t[o])&&(r[t[o]]=e[t[o]])}return r}function n(e,n){for(var t=0,r=n.length,o=e.length;t<r;t++,o++)e[o]=n[t];return e}function t(e){var n={exports:{}};return e(n,n.exports),n.exports}function r(e){if(!e)return e;var n=0,t=0,r=[];if(e){e=unescape(encodeURIComponent(e));do{var o=e.charCodeAt(n++),i=e.charCodeAt(n++),a=e.charCodeAt(n++),s=o<<16\|i<<8\|a;o=s>>18&63,i=s>>12&63,a=s>>6&63,s&=63,r[t++]=de.charAt(o)+de.charAt(i)+de.charAt(a)+de.charAt(s)}while(n<e.length);n=r.join(""),e=((e=e.length%3)?n.slice(0,e-3):n)+"===".slic

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4531)
Category:	downloaded
Size (bytes):	13711
Entropy (8bit):	5.386292782453405
Encrypted:	false
SSDEEP:	192:/GaebDx12bI+tIJrEqYRvSX5chFD7ib7qGRFFaO07+rP9WXAuVqNanx/ju:/GaqN4BqYRvKu+b7q/n7AlWXAY1nx/ju
MD5:	141B05C0CFA090B169CD8754C71B2649
SHA1:	244E666D6C4D5E640956A17273850A39F8CED254
SHA-256:	A54C0D4BA2CC605500D0AF257FE9FF3F4FCE7407AAE989A67F72B19EA3531168
SHA-512:	054BC1C06B0464FC46E0FECB6DDD928DD1B34604BA35B9EE8334CFA86C31982DE217A47E22002D253AFB18DCADCC224B7CBBA85D2995C0DA31D7F2233BCFAC1D
Malicious:	false
Reputation:	low
URL:	https://helawok.x-sns.cloud/
Preview:	<!DOCTYPE html>.<html >..<head>. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta name="format-detection" content="telephone=no">.. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />.<meta http-equiv="content-type" content="text/html; charset=utf-8" />.<meta name="description" content="" />.<meta name="keywords" content="" />.<meta name="robots" content="noindex,nofollow">..<link rel="canonical" href="https://helawok.x-sns.cloud">..<link rel="shortcut icon" href="https://storage.googleapis.com/instapage-assets/favicon/favicon-64x64.ico" type="image/x-ico">.<title>Hartsfield & Egbert, PLLC</title>.. <meta property="og:locale" content="en_US">.<meta property="og:type" content="article">.<meta property="og:title" content="">.<meta property="og:description" content="">.<meta property="og:site_name" content="">.<meta property="og:url" content="https://helawok.x-sns.cloud">... <link rel="preload" as="script" href="//g.fastcdn.co/js/ut

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8059), with no line terminators
Category:	dropped
Size (bytes):	8059
Entropy (8bit):	5.7542927001552515
Encrypted:	false
SSDEEP:	192:uTN8nEVGAkRcck2k14mBx5yR9cIayxntc:ux8nPVRcck2k14ESRix8tc
MD5:	4EE7140343A28FA49D4C2E43CADD27F9
SHA1:	1272391909E999AE32C94E295B6EE7DA08E98E43
SHA-256:	86579869C5A3069E98E461E75225A2457F67B226CD2904AC5DB211DAB412362E
SHA-512:	7FAF98A147C434AD51AC38A00BA1642B5775F80D0A53BDC73C76A26A0E5FD843C8AB93141F537ADC0733B7B9C763C2C0B5BC2FA807D234DF7B910C0AEAD069BF
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=parseInt(U(224))/1+parseInt(U(157))/2(parseInt(U(170))/3)+parseInt(U(195))/4+-parseInt(U(130))/5(parseInt(U(232))/6)+-parseInt(U(158))/7+parseInt(U(173))/8+parseInt(U(214))/9,C===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,843299),g=this\|\|self,h=g[V(167)],i={},i[V(203)]='o',i[V(168)]='s',i[V(149)]='u',i[V(193)]='z',i[V(191)]='n',i[V(212)]='I',j=i,g[V(179)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,D===null\|\|D===void 0)return F;for(H=m(D),C[a0(210)][a0(153)]&&(H=H[a0(155)](C[a0(210)][a0(153)](D))),H=C[a0(209)][a0(178)]&&C[a0(128)]?C[a0(209)][a0(178)](new C[(a0(128))](H)):function(N,a1,O){for(a1=a0,N[a1(200)](),O=0;O<N[a1(139)];N[O]===N[O+1]?N[a1(131)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(230)][a0(213)](I),J=0;J<H[a0(139)];K=H[J],L=l(C,D,K),I(L)?(M=L==='s'&&!C[a0(159)](D[K]),a0(152)===E+K?G(E+K,L):M\|\|G(E+K,D[K])):G(E+K,L),J++);return F;funct

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18428), with no line terminators
Category:	dropped
Size (bytes):	18428
Entropy (8bit):	5.258325161837104
Encrypted:	false
SSDEEP:	384:Y6zBN5FsS2vqBPgv+uNxWNU6tLEJ01MPMxf5kU7:5fNU6tLcc
MD5:	ED7CEE4EBF556210A9B41A1539851DC1
SHA1:	9DEF199C02A1A9D565DFECA8DBA5725F7AEEA975
SHA-256:	9D6B59F630DD3DF5DCFF0F6AF131D1D94EBC050F3D38F61F40EF56E793093CD5
SHA-512:	AFAB35EE4845D8D2446BBD9C724EA6D7542CAB8F3A9AE45BE1738FDBF229F9B2BFC29F500E91206DA55180202E2891C1F7152204053DAE67A7685C6DBD2108E3
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[846],{7829:(e,t,r)=>{var n=r(4594);function i(e){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},i(e)}function o(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,a(n.key),n)}}function a(e){var t=function(e,t){if("object"!=i(e)\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,"string");if("object"!=i(n))return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==i(t)?t:t+""}var u=function(){return e=function e(){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e)},t=[{key:"setupVisitTracking",value:function(e,t){t.setVisited()}},{key:"setupSubmissi

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52118), with no line terminators
Category:	downloaded
Size (bytes):	52150
Entropy (8bit):	5.401084712667143
Encrypted:	false
SSDEEP:	768:xk4LftsbiuuaWhZI/kUkZaoaLDTjnh4GcVknH4HUbCJCx:LftNI/kyrkHS
MD5:	69201B044F9E912CC72B07E4FFBF9555
SHA1:	4A31F53B5A91F52B28F10A84BE73D6CFFCE01706
SHA-256:	DD8625BFA35604F050E4DCC7FF10C2C31D7CDF1CE7BDF4CDE0D0415DCC74E2FB
SHA-512:	3B95C143C19165B8A37283AE927AE8C7105C76AE26473E1008EB12880C1019891E4335CA4B26C9A8AED70AE539BBC4DBADB026EE876BB5046A8147B47C009081
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/cm.js
Preview:	(()=>{var t={6213:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),ieo:/MSIE [67]/.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t.length,o=[];if(/^[\x00-\x7f]*$/.test(t))for(;++e<n;)o.push(t.charCodeAt(e));else for(;++e<n;)(r=t.charCodeAt(e))<128?o.push(r):r<2048?o.push(r>>6\|192,63&r\|128):o.push(r>>12\|224,r>>6&63\|128,63&r\|128);return o},fromUtf8:function(t){var e,n=-1,o=[],i=[null,null,null,null];if(!r.lookup){for(e=r.alphabet.length,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[2])<<6\|i[3]);return o},encode:function(t){var e,n,o,i=r.toUtf8(t),a=i.length,s=[null,null,null,null],u=-1;if(r.ie){for

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8149), with no line terminators
Category:	downloaded
Size (bytes):	8149
Entropy (8bit):	5.761648622302906
Encrypted:	false
SSDEEP:	192:agxBnYCVBuA3YS+SUbgjpbyYKDw2zwnZC4G5hPv:agxDXuA3YS+SUbJ7Dw0Scf
MD5:	314F390992A8CAD5B3B2ADF921042D3A
SHA1:	E31F7A6D2055328C2781C993F42BA005542806F6
SHA-256:	0261C5B646E8E58803DFF95C858275B75F6DA519E7D4BE9DE8CA5A137FD330F7
SHA-512:	D9C73DCB57EAAF491A6E53E9A0A5DDA5E3B50858EE9145E22579EBDAD2C7D3A22EA12FDAF9E3CE28C14E1B088076EFE607A5E0C2AB43AD962A776EF4A8C0E1C7
Malicious:	false
Reputation:	low
URL:	https://helawok.x-sns.cloud/cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=-parseInt(U(307))/1(-parseInt(U(401))/2)+parseInt(U(375))/3(parseInt(U(342))/4)+parseInt(U(359))/5+-parseInt(U(370))/6(-parseInt(U(312))/7)+-parseInt(U(310))/8(-parseInt(U(379))/9)+-parseInt(U(362))/10+parseInt(U(354))/11*(-parseInt(U(368))/12),e===C)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,975696),g=this\|\|self,h=g[V(328)],i={},i[V(340)]='o',i[V(399)]='s',i[V(347)]='u',i[V(406)]='z',i[V(311)]='n',i[V(319)]='I',j=i,g[V(404)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,D===null\|\|D===void 0)return F;for(H=m(D),C[a0(324)][a0(397)]&&(H=H[a0(296)](C[a0(324)][a0(397)](D))),H=C[a0(384)][a0(357)]&&C[a0(345)]?C[a0(384)][a0(357)](new C[(a0(345))](H)):function(N,a1,O){for(a1=a0,N[a1(314)](),O=0;O<N[a1(383)];N[O+1]===N[O]?N[a1(369)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(337)][a0(366)](I),J=0;J<H[a0(383)];K=H[J],L=l(C,D,K),I(L)?(M=L==='s'&&!C[a0(338)](D

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-10T21:17:15.493470+0200	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	172.233.53.209	443	192.168.2.4	49770	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 21:17:08.863230944 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 10, 2024 21:17:09.637677908 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:09.637748003 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:09.637829065 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:09.637993097 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:09.638014078 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:09.638086081 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:09.638919115 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:09.638930082 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:09.639235973 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:09.639259100 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.207844973 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.210932970 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.213367939 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.213435888 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.213526964 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.213546991 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.214987040 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.215075016 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.215183973 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.215246916 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.218656063 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.218816996 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.218888044 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.218993902 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.219012976 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.219062090 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.260715008 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.283407927 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.283426046 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.374654055 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.374861002 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.374950886 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.374948978 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.374995947 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.375060081 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.375780106 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.376682997 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.376768112 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.376780987 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.376799107 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.376862049 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.377588034 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.378500938 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.378571033 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.378582001 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.378608942 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.378678083 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.378701925 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.378832102 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.378897905 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.390647888 CEST	49735	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.390677929 CEST	443	49735	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:10.407844067 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.407896996 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.407969952 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.408540010 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.408557892 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.408632994 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.409326077 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.409358978 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.409609079 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.409634113 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.426146984 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.426181078 CEST	443	49739	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.426249027 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.426520109 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.426532030 CEST	443	49739	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.437287092 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:10.437374115 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:10.437474966 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:10.437693119 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:10.437732935 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:10.488169909 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:10.880295992 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.880848885 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.880912066 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.882108927 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.882395029 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.882411957 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.882575035 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.882668972 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.884196997 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.884289026 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.884310961 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.884411097 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.885222912 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.885241032 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.885358095 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.885524988 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.885535955 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.885667086 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.886399031 CEST	443	49739	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.886684895 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.886702061 CEST	443	49739	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.890229940 CEST	443	49739	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.890311003 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.890638113 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.890743017 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.890804052 CEST	443	49739	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.900111914 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:10.900511026 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:10.900579929 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:10.904047012 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:10.904146910 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:10.905143023 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:10.905235052 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:10.905287027 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:10.942734957 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:10.942749977 CEST	443	49739	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:10.947494030 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:10.958466053 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:10.958507061 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.003532887 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.003578901 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.003583908 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.003597975 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.003695011 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.019565105 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.019670010 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.019694090 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.020178080 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.020248890 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.020262957 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.021908998 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.021992922 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.022011042 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.022028923 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.022089005 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.022845984 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.023731947 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.023803949 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.023813009 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.023840904 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.023901939 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.028661013 CEST	443	49739	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.028883934 CEST	443	49739	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.028955936 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.029253006 CEST	49739	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.029267073 CEST	443	49739	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.031366110 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.031688929 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.031775951 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.031780958 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.031810999 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.031874895 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.032459974 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.033006907 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.033080101 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.033093929 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.033838987 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.033922911 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.033936024 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.036092997 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.036180019 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.036192894 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.048007965 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.048038006 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.048211098 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.048429966 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.048438072 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.074184895 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.074306011 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.074394941 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.074481010 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.074660063 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.074736118 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.074779987 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.075701952 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.075815916 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.075860023 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.075877905 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.075941086 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.076383114 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.077078104 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.077148914 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.077162981 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.107592106 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.107680082 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.107805014 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.107877970 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.107877970 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.108508110 CEST	49737	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.108551979 CEST	443	49737	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.113065004 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.113106012 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.113198042 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.113365889 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.113383055 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.118729115 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.118846893 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.119232893 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.119324923 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.119889975 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.119972944 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.120366096 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.120397091 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.120461941 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.120634079 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.121336937 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.121407986 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.121419907 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.121448994 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.121505976 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.122067928 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.122769117 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.122843981 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.122859955 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.122946978 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.123004913 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.123018980 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.123635054 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.123718023 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.123749971 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.123766899 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.123842955 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.124511003 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.125297070 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.125375032 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.125384092 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.125407934 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.125471115 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.125494003 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.126117945 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.126185894 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.126199961 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.130333900 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.130395889 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.144408941 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.144617081 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.144680023 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.161019087 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.161108017 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.161127090 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.161524057 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.161607027 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.161705017 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.161781073 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.161854982 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.162496090 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.162770033 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.162841082 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.162856102 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.162920952 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.162993908 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.163171053 CEST	49740	443	192.168.2.4	172.64.146.38
Oct 10, 2024 21:17:11.163207054 CEST	443	49740	172.64.146.38	192.168.2.4
Oct 10, 2024 21:17:11.176526070 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.178178072 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.178193092 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.178256989 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.178550005 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.178561926 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.180195093 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.180244923 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.180321932 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.180573940 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.180604935 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.206293106 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.206696987 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.206768036 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.206787109 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.206819057 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.206888914 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.207600117 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.208303928 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.208379030 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.208384037 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.208404064 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.208441973 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.208655119 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.208719969 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.209114075 CEST	49738	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.209131002 CEST	443	49738	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.213164091 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.213182926 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.213265896 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.213414907 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.213428020 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.215516090 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.215540886 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.215609074 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.215846062 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.215857029 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.221771002 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.221854925 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.221945047 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.222747087 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.222769022 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.222846031 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.227330923 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.227370024 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.229087114 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.229114056 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.297827959 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:11.343400002 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.401815891 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.401897907 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.401966095 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:11.402223110 CEST	49736	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:11.402239084 CEST	443	49736	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.403681993 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:11.403719902 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.403825045 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:11.404057980 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:11.404072046 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.552124977 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.552654028 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.552668095 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.554440022 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.554517031 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.554847002 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.554923058 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.554954052 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.595421076 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.595463037 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.595767021 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.595783949 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.597521067 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.597587109 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.597867012 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.597975016 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.598032951 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.598670006 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.598680973 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.644279957 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.644289017 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.644325972 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.679033995 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.680300951 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.684885979 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.687316895 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.687378883 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.687483072 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.687494993 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.689140081 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.689209938 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.689363003 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.689423084 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.689886093 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.689979076 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.690579891 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.690596104 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.691164017 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.691272974 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.691281080 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.701602936 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.701626062 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.701813936 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.701829910 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.702405930 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.702419996 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.702718973 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.702781916 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.702852964 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.703064919 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.703116894 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.703282118 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.703361988 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.703396082 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.703399897 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.703438044 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.713063955 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.714842081 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.715029001 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.715059996 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.715172052 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.715231895 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.715603113 CEST	49743	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.715615988 CEST	443	49743	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.716517925 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.716603041 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.717125893 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.717226982 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.717547894 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.717580080 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.718110085 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.718434095 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.718449116 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.718730927 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.719007969 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.719070911 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.719090939 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.731090069 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.735415936 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.746260881 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.746265888 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.746268034 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.748913050 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.749068975 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.749116898 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.749124050 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.749264002 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.749313116 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.749317884 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.750185013 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.750256062 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.750261068 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.750787973 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.750850916 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.750855923 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.751411915 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.751645088 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.751710892 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.751717091 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.761699915 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.761760950 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.761785984 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.790479898 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.790544987 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.790555954 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.790834904 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.790896893 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.790901899 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.791444063 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.791512966 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.791517019 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.791613102 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.791676998 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.791682005 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.792309046 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.792362928 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.792367935 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.792931080 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.792934895 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.793190002 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.793267012 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.793272018 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.835108042 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.835186958 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.835203886 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.835683107 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.835741043 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.835751057 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.835836887 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.835896015 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.836798906 CEST	49744	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.836812973 CEST	443	49744	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.837176085 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.837182999 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.859510899 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.859762907 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.859802008 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.859819889 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.859850883 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.859910965 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.859924078 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.860563993 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.860618114 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.860630989 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.861433029 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.861488104 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.861500025 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.863303900 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.863349915 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.863410950 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.863420963 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.863842964 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.863888979 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.863895893 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.864756107 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.864793062 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.864806890 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.864813089 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.864865065 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.865268946 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.865309000 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.865329981 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.865341902 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.865396976 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.865602970 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.865667105 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.865714073 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.865720987 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.871095896 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.871226072 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.871289015 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.871320009 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.871351004 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.871407032 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.871481895 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.871654034 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.871727943 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.871767044 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.872159958 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.872221947 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.872236967 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.875523090 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.875585079 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.875597000 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.876697063 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.888504028 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.888647079 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.888711929 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.888745070 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.888838053 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.888895035 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.888910055 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.889542103 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.889610052 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.889622927 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.890409946 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.890474081 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.890485048 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.891026974 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.891849041 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.891904116 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.891910076 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.891999006 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.892047882 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.892052889 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.892725945 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.892776966 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.892782927 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.893487930 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.893537998 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.893543959 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.893646955 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.893697977 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.893703938 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.894408941 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.894464970 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.894470930 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.895193100 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.895246983 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.895252943 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.895973921 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.895978928 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.896044016 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.896049976 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.896086931 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.896167994 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.896176100 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.896203041 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.896258116 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.896296024 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.896389008 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.896440983 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.896857977 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.896907091 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.896913052 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.897672892 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.897706032 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.897727966 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.897737980 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.897747993 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.897789001 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.897794962 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.897831917 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.898664951 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.898724079 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.898730040 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.898838997 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.898890972 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.898897886 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.899493933 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.899899960 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:11.899914026 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.900249958 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.900753021 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:11.900810957 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.900861979 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:11.901623964 CEST	49749	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.901654959 CEST	443	49749	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.910166979 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.910172939 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.916109085 CEST	49752	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.916141987 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.916208982 CEST	49752	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.916450024 CEST	49752	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.916465044 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.928551912 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.928612947 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.943623066 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.943629026 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.946657896 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.946983099 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.947019100 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.947046995 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.947067022 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.947119951 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.947405100 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:11.947436094 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.947922945 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.947978973 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.947990894 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.948033094 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.948110104 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.948121071 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.948657036 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.948698044 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.948710918 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.948723078 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.948790073 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.949436903 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.949506044 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.949546099 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.949557066 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.949568033 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.949628115 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.950386047 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.950458050 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.950510979 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.950521946 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.951347113 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.951374054 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.951406956 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.951426983 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.951437950 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.951441050 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.951448917 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.951489925 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.952303886 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.953283072 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.953283072 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.953310013 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.953336000 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.953362942 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.953366041 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.953372955 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.953373909 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.953421116 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.953447104 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.953491926 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.953497887 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.954262018 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.954288960 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.954308033 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.954313040 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.954363108 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.954369068 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.955239058 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.955272913 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.955284119 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.955290079 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.955321074 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.955336094 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.955343008 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.955404997 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.956114054 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.956176043 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.956217051 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.956223011 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.963232994 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.963388920 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.963450909 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.963573933 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.963654041 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.963670015 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.963700056 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.963769913 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.963793993 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.964134932 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.964196920 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.964211941 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.964708090 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.964771986 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.964785099 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.965006113 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.965065956 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.965079069 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.965178013 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.965233088 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.965245008 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.965928078 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.965993881 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.966006994 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.966118097 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.966181040 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.966193914 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.966288090 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.966344118 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.966356993 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.975692034 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.976113081 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.976147890 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.976187944 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.976206064 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.976260900 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.976511955 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.976593971 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.976639032 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.976651907 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.977123976 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.977169991 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.977183104 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.977201939 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.977253914 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.977264881 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.978077888 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.978121996 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.978136063 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.978154898 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.978204966 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.978449106 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.979223013 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.979258060 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.979285002 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.979298115 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.979338884 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.979350090 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.979351044 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.979365110 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:11.979413986 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.979420900 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.979439020 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:11.979578018 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:11.979635000 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:11.979706049 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.004659891 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.005003929 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.005060911 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.005070925 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.005178928 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.005193949 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.005271912 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.016704082 CEST	49746	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.016745090 CEST	443	49746	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.017777920 CEST	49745	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.017792940 CEST	443	49745	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.019649029 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.019717932 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.019731998 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.033113003 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.033502102 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.033539057 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.033555984 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.033575058 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.033626080 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.033629894 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.033642054 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.033703089 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.034025908 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.034465075 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.034502029 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.034531116 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.034542084 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.034573078 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.034621000 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.035403967 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.035403967 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.036983967 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.037053108 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.037060976 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.037170887 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.037225962 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.037233114 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.037575960 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.037606955 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.037633896 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.037641048 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.037684917 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.038264990 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.038273096 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.038320065 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.038324118 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.038333893 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.038366079 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.038388968 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.038835049 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.038913012 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.038958073 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.039184093 CEST	49747	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.039191008 CEST	443	49747	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.040327072 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.040373087 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.040437937 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.040452003 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.040532112 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.040581942 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.040586948 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.040596962 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.040632963 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.040640116 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.040699005 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.040741920 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.048749924 CEST	49751	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.048763990 CEST	443	49751	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.061373949 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.070664883 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.070753098 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.070806026 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.070821047 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.072400093 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.072459936 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.072472095 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.072654963 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.072721004 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.075248957 CEST	49750	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.075264931 CEST	443	49750	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.161046028 CEST	49753	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.161112070 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.161185980 CEST	49753	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.161876917 CEST	49753	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.161905050 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.201571941 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.201602936 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.201692104 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.202483892 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.202497005 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.210692883 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.210705996 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.210763931 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.210998058 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.211009026 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.214970112 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.215019941 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.215101957 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.215264082 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.215285063 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.225514889 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.225550890 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.225627899 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.226026058 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.226042032 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.234402895 CEST	49759	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.234486103 CEST	443	49759	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:12.234589100 CEST	49759	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.235184908 CEST	49759	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.235223055 CEST	443	49759	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:12.340132952 CEST	49748	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.340193987 CEST	443	49748	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.374809027 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.391089916 CEST	49752	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.391114950 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.392275095 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.443039894 CEST	49752	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.451951981 CEST	49752	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.452193022 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.452480078 CEST	49752	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.495496035 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.582952023 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.583020926 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.583062887 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.583129883 CEST	49752	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.583151102 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.583201885 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.583257914 CEST	49752	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.627347946 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.663939953 CEST	49753	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.663959026 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.664314985 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.689002991 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.690089941 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.694391012 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.697722912 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.698702097 CEST	49753	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.698705912 CEST	443	49759	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:12.698766947 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.698896885 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.698930025 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.699059963 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.699081898 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.699285984 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.699299097 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.699376106 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.699393034 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.699574947 CEST	49753	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.699606895 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.699614048 CEST	49759	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.699647903 CEST	49753	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.699664116 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.699676037 CEST	443	49759	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:12.699740887 CEST	49753	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.700860023 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.700922966 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.701262951 CEST	443	49759	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:12.701344013 CEST	49759	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.702522039 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.702601910 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.702616930 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.702682972 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.747401953 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.752757072 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.752921104 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.753736973 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.753931999 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.754983902 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.755187988 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.755278111 CEST	49759	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.755279064 CEST	49759	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.755362988 CEST	49759	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.755492926 CEST	443	49759	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:12.755559921 CEST	49759	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.755635023 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.755675077 CEST	443	49762	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:12.755770922 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.755917072 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.756236076 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.756468058 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:12.756485939 CEST	443	49762	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:12.756612062 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.756700993 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.756721020 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.756797075 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.756817102 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.756839991 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.756858110 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.758507967 CEST	49752	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.758522034 CEST	443	49752	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.799407959 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.803637028 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.803913116 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.806396961 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.841095924 CEST	49765	443	192.168.2.4	216.58.206.68
Oct 10, 2024 21:17:12.841134071 CEST	443	49765	216.58.206.68	192.168.2.4
Oct 10, 2024 21:17:12.841206074 CEST	49765	443	192.168.2.4	216.58.206.68
Oct 10, 2024 21:17:12.841344118 CEST	49765	443	192.168.2.4	216.58.206.68
Oct 10, 2024 21:17:12.841356993 CEST	443	49765	216.58.206.68	192.168.2.4
Oct 10, 2024 21:17:12.859302998 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.859359026 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.859432936 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.859446049 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.859838009 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.859884977 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.859929085 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.859935999 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.859945059 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.859976053 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.860428095 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.860474110 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.860518932 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.860519886 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.860533953 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.860563993 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.861279011 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.861342907 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.861350060 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.874813080 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.874865055 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.874931097 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.874939919 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.875175953 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.875217915 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.875219107 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.875226974 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.875264883 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.875271082 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.875977039 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.876013041 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.876046896 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.876065969 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.876072884 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.876104116 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.879512072 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.879556894 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.879626989 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.879652977 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.879966021 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.880019903 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.880028009 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.880162001 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.880203009 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.880248070 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.880254030 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.880264997 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.880306959 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.881086111 CEST	49758	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.881098032 CEST	443	49758	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.884476900 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.884603977 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.884694099 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.884695053 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.884726048 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.884884119 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.884947062 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.884983063 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.885041952 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.885057926 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.885359049 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.885426044 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.885440111 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.885538101 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.886312962 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.886331081 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.888720989 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.888833046 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.888957024 CEST	49753	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.889328957 CEST	49753	443	192.168.2.4	172.64.149.213
Oct 10, 2024 21:17:12.889339924 CEST	443	49753	172.64.149.213	192.168.2.4
Oct 10, 2024 21:17:12.892319918 CEST	49766	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.892390013 CEST	443	49766	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.892855883 CEST	49766	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.893039942 CEST	49766	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:12.893074036 CEST	443	49766	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:12.899203062 CEST	49767	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:12.899233103 CEST	443	49767	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:12.899302006 CEST	49767	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:12.900646925 CEST	49767	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:12.900661945 CEST	443	49767	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:12.909514904 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.909528017 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.926309109 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.926316977 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.940784931 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.940840960 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.957206964 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.957237959 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.957355976 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.957402945 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.957403898 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.957417011 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.957458973 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.957465887 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.958064079 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.958110094 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.958120108 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.958127022 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.958179951 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.958234072 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.958241940 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.958285093 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.958923101 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.959187031 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.959243059 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.959249973 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.959603071 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.959645987 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.959693909 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.959701061 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.959743023 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.960131884 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.960251093 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.960308075 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.960355997 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.960364103 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.960406065 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.961075068 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.961173058 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.961241007 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.961286068 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.961293936 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:12.961332083 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:12.966074944 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.966140985 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.966147900 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.967293978 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.967401028 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.967407942 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.967797041 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.967848063 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.967854023 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.968260050 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.968287945 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.968334913 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.968343019 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.968380928 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.968873978 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.969192028 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.969245911 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.969252110 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.969432116 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.969775915 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.969816923 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.969821930 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.969827890 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.969860077 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.970324993 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.970391989 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.970397949 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.970669031 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.970989943 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.971041918 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.971049070 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.971088886 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.971153975 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.971601009 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.971648932 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.971654892 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.972872972 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.972942114 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.972975016 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.973406076 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.973505974 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.973529100 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.973548889 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.973614931 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.973803043 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.974050045 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.974191904 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.974200964 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.974219084 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.974283934 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.974354982 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.974509954 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.974569082 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.974581957 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.975061893 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.975164890 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.975227118 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.975240946 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.975294113 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.975306034 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.975764036 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.975846052 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.975914001 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.975928068 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.975986004 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.976052046 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.976483107 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.976675034 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.976748943 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.976763010 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:12.976819038 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:12.997483969 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:13.019184113 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.019192934 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.050440073 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:13.050450087 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:13.066054106 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.074935913 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:13.075001955 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:13.075011015 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:13.075181007 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:13.075238943 CEST	443	49755	34.36.17.181	192.168.2.4
Oct 10, 2024 21:17:13.075298071 CEST	49755	443	192.168.2.4	34.36.17.181
Oct 10, 2024 21:17:13.075320959 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.075694084 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.075725079 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.075761080 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.075767994 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.075777054 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.075799942 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.076796055 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.076845884 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.076853037 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.076891899 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.077197075 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.077203035 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.077248096 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.077253103 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.077287912 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.077291965 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.077342033 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.077354908 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.077411890 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.077462912 CEST	49754	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.077477932 CEST	443	49754	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.077502966 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.077560902 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.077579021 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.078110933 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.078315020 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.078376055 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.079677105 CEST	49756	443	192.168.2.4	104.18.41.218
Oct 10, 2024 21:17:13.079708099 CEST	443	49756	104.18.41.218	192.168.2.4
Oct 10, 2024 21:17:13.222017050 CEST	443	49762	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:13.222505093 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.222522974 CEST	443	49762	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:13.224241018 CEST	443	49762	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:13.224301100 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.225050926 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.225135088 CEST	443	49762	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:13.225258112 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.225264072 CEST	443	49762	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:13.268897057 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.370846987 CEST	443	49766	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:13.372292995 CEST	49766	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:13.372359991 CEST	443	49766	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:13.373344898 CEST	443	49766	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:13.374119043 CEST	49766	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:13.374192953 CEST	443	49766	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:13.374258041 CEST	49766	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:13.403146029 CEST	443	49762	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:13.403592110 CEST	443	49762	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:13.403844118 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.403867006 CEST	443	49762	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:13.403882027 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.403924942 CEST	49762	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.405080080 CEST	49769	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.405127048 CEST	443	49769	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:13.405201912 CEST	49769	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.405637026 CEST	49769	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:13.405661106 CEST	443	49769	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:13.415441036 CEST	443	49766	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:13.528597116 CEST	443	49766	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:13.528657913 CEST	443	49766	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:13.528740883 CEST	49766	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:13.529361963 CEST	49766	443	192.168.2.4	104.18.38.43
Oct 10, 2024 21:17:13.529376030 CEST	443	49766	104.18.38.43	192.168.2.4
Oct 10, 2024 21:17:13.575032949 CEST	443	49767	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:13.575158119 CEST	49767	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:13.577549934 CEST	49767	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:13.577559948 CEST	443	49767	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:13.577912092 CEST	443	49767	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:13.606889963 CEST	443	49765	216.58.206.68	192.168.2.4
Oct 10, 2024 21:17:13.607089043 CEST	49765	443	192.168.2.4	216.58.206.68
Oct 10, 2024 21:17:13.607100010 CEST	443	49765	216.58.206.68	192.168.2.4
Oct 10, 2024 21:17:13.608592033 CEST	443	49765	216.58.206.68	192.168.2.4
Oct 10, 2024 21:17:13.608659029 CEST	49765	443	192.168.2.4	216.58.206.68
Oct 10, 2024 21:17:13.613118887 CEST	49765	443	192.168.2.4	216.58.206.68
Oct 10, 2024 21:17:13.613197088 CEST	443	49765	216.58.206.68	192.168.2.4
Oct 10, 2024 21:17:13.615113020 CEST	49767	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:13.659414053 CEST	443	49767	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:13.660271883 CEST	49765	443	192.168.2.4	216.58.206.68
Oct 10, 2024 21:17:13.660280943 CEST	443	49765	216.58.206.68	192.168.2.4
Oct 10, 2024 21:17:13.706571102 CEST	49765	443	192.168.2.4	216.58.206.68
Oct 10, 2024 21:17:13.984107018 CEST	443	49767	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:13.984164953 CEST	443	49767	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:13.984217882 CEST	49767	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:13.993947983 CEST	443	49769	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.000900984 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.000960112 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.001029968 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.001095057 CEST	49769	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.001107931 CEST	443	49769	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.001910925 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.001936913 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.001988888 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.002130985 CEST	443	49769	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.002156019 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.002178907 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.002186060 CEST	49769	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.003252029 CEST	49769	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.003252029 CEST	49769	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.003299952 CEST	49769	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.003465891 CEST	443	49769	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.003519058 CEST	49769	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.003638029 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.003644943 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.003691912 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.003835917 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.003846884 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.004245043 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.004252911 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.014111996 CEST	49767	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:14.014127970 CEST	443	49767	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:14.014137030 CEST	49767	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:14.014141083 CEST	443	49767	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:14.100925922 CEST	49773	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:14.101011992 CEST	443	49773	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:14.101111889 CEST	49773	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:14.101749897 CEST	49773	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:14.101788044 CEST	443	49773	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:14.472199917 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.473371983 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.473386049 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.475147009 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.475208044 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.475895882 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.475943089 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.475945950 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.475970030 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.475980997 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.476036072 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.530559063 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.530565977 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.577095032 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.623646975 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.623784065 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.623841047 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.624480963 CEST	49772	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.624494076 CEST	443	49772	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.627778053 CEST	49774	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.627809048 CEST	443	49774	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.627886057 CEST	49774	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.628154993 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.628709078 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.628735065 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.628987074 CEST	49774	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.629014969 CEST	443	49774	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.630192041 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.630258083 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.631087065 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.631175995 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.631269932 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.631283998 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.639647007 CEST	49775	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.639662981 CEST	443	49775	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.639745951 CEST	49775	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.640088081 CEST	49775	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:14.640096903 CEST	443	49775	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:14.640126944 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.640289068 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.640295029 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.643661022 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.643718004 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.644016981 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.644095898 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.685167074 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.685187101 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.685193062 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:14.729221106 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:14.782382011 CEST	443	49773	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:14.782582045 CEST	49773	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:14.788096905 CEST	49773	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:14.788125992 CEST	443	49773	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:14.788470030 CEST	443	49773	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:14.789539099 CEST	49773	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:14.831480026 CEST	443	49773	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:15.081871986 CEST	443	49773	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:15.082035065 CEST	443	49773	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:15.083606958 CEST	49773	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:15.087138891 CEST	443	49774	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.120733976 CEST	443	49775	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.135632038 CEST	49774	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.140803099 CEST	49775	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.140813112 CEST	443	49775	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.141501904 CEST	49774	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.141531944 CEST	443	49774	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.142282963 CEST	443	49775	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.142354012 CEST	49775	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.142478943 CEST	49773	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:15.142478943 CEST	49773	443	192.168.2.4	95.100.63.156
Oct 10, 2024 21:17:15.142548084 CEST	443	49773	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:15.142581940 CEST	443	49773	95.100.63.156	192.168.2.4
Oct 10, 2024 21:17:15.142792940 CEST	49775	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.142803907 CEST	49775	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.142838001 CEST	49775	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.142868996 CEST	443	49775	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.142919064 CEST	49775	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.143095970 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.143126011 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.143126011 CEST	443	49774	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.143189907 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.143234015 CEST	49774	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.143366098 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.143377066 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.143608093 CEST	49774	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.143609047 CEST	49774	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.143659115 CEST	49774	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.143722057 CEST	443	49774	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.143778086 CEST	49774	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.143831968 CEST	49777	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.143913984 CEST	443	49777	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.144399881 CEST	49777	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.152730942 CEST	49777	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.152766943 CEST	443	49777	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.223812103 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.223849058 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.223862886 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.224019051 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.224042892 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.224096060 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.311574936 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.311590910 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.311711073 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.311738968 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.311825037 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.318152905 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.318181992 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.318250895 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.318274975 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.318317890 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.318645954 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.397907972 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.397933960 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.398044109 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.398067951 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.398119926 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.400079966 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.400099993 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.400171041 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.400187016 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.400253057 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.405225039 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.405251980 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.405323029 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.405335903 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.405397892 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.406505108 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.406591892 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.406603098 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.456923008 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.484523058 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.484556913 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.484679937 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.484704971 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.484764099 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.486282110 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.486301899 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.486387968 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.486402988 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.486460924 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.491111994 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.491132975 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.491208076 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.491220951 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.491280079 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.492384911 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.492405891 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.492470980 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.492484093 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.492542028 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.493468046 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.493541002 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.493551970 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.493602037 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.493613005 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.493652105 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.493901014 CEST	49770	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.493932009 CEST	443	49770	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.604949951 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.605215073 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.605227947 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.606085062 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.606237888 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.606427908 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.606514931 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.606542110 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.611706018 CEST	443	49777	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.611929893 CEST	49777	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.611991882 CEST	443	49777	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.613092899 CEST	443	49777	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.614707947 CEST	49777	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.614797115 CEST	443	49777	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.614805937 CEST	49777	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.614850998 CEST	49777	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.614891052 CEST	443	49777	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.651442051 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.661077976 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.661098957 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.661093950 CEST	49777	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.707890034 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.759435892 CEST	443	49777	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.759624958 CEST	443	49777	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.759721041 CEST	49777	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.761248112 CEST	49777	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.761287928 CEST	443	49777	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.782195091 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.782367945 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.783411980 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.789076090 CEST	49778	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.789160013 CEST	443	49778	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.789239883 CEST	49778	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.790107012 CEST	49778	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.790148020 CEST	443	49778	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.805785894 CEST	49776	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.805808067 CEST	443	49776	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.806292057 CEST	49779	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.806324005 CEST	443	49779	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.806544065 CEST	49779	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.806751013 CEST	49779	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:15.806766987 CEST	443	49779	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:15.975613117 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.975646019 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.975739002 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.975739002 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.975760937 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.975928068 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:15.976035118 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:15.976052046 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:16.509422064 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:16.509593964 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:16.509645939 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:16.511461973 CEST	443	49779	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.511571884 CEST	49771	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:16.511584997 CEST	443	49771	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:16.512659073 CEST	49779	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.512674093 CEST	443	49779	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.514115095 CEST	443	49779	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.514177084 CEST	49779	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.514692068 CEST	443	49778	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.514934063 CEST	49779	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.515012980 CEST	443	49779	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.515043974 CEST	49779	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.515168905 CEST	49779	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.515182018 CEST	443	49779	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.515197039 CEST	49779	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.515237093 CEST	49779	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.515722036 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.515810013 CEST	443	49781	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.515886068 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.515918970 CEST	49778	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.515980959 CEST	443	49778	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.516328096 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.516366959 CEST	443	49781	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.516865015 CEST	443	49778	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.516932011 CEST	49778	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.517287970 CEST	49778	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.517330885 CEST	49778	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.517366886 CEST	443	49778	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.517415047 CEST	49778	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.517415047 CEST	49778	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.517610073 CEST	49782	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.517632008 CEST	443	49782	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.517697096 CEST	49782	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.518003941 CEST	49782	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.518029928 CEST	443	49782	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.594393969 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:16.594970942 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:16.594985962 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:16.595474005 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:16.596050978 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:16.596133947 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:16.596412897 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:16.643408060 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:16.981921911 CEST	443	49781	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.982295036 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.982357979 CEST	443	49781	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.983824015 CEST	443	49781	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.983966112 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.984230042 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.984270096 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.984332085 CEST	443	49781	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.984867096 CEST	443	49782	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.985013962 CEST	49782	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.985033035 CEST	443	49782	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.985898972 CEST	443	49782	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.985955954 CEST	49782	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.986272097 CEST	49782	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.986330986 CEST	443	49782	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:16.986424923 CEST	49782	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:16.986435890 CEST	443	49782	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:17.038506985 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:17.038506985 CEST	49782	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:17.038537979 CEST	443	49781	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:17.086625099 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:17.185065031 CEST	443	49781	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:17.185148001 CEST	443	49781	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:17.185338020 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:17.202075958 CEST	443	49782	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:17.202239037 CEST	443	49782	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:17.202403069 CEST	49782	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:17.203171968 CEST	49782	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:17.203217030 CEST	443	49782	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:17.704808950 CEST	49781	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:17.704893112 CEST	443	49781	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:17.707237005 CEST	49783	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:17.707263947 CEST	443	49783	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:17.707372904 CEST	49783	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:17.710604906 CEST	49783	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:17.710616112 CEST	443	49783	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:17.875432968 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.875627041 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.875673056 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.875730991 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.875730991 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.875747919 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.875870943 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.877207994 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.877291918 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.877338886 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.877346992 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.877378941 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.922476053 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.946100950 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.946209908 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.947036028 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.951239109 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.951277018 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.959022999 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.959074974 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.959116936 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.959126949 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.959151983 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.959234953 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.961515903 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.961570024 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.961606026 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.961616039 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.961735010 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:17.961977005 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.962312937 CEST	49780	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:17.962322950 CEST	443	49780	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:18.182692051 CEST	443	49783	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.183190107 CEST	49783	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.183203936 CEST	443	49783	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.187796116 CEST	443	49783	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.187949896 CEST	49783	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.188426971 CEST	49783	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.188538074 CEST	49783	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.188654900 CEST	443	49783	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.188771009 CEST	49783	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.189131021 CEST	443	49783	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.189166069 CEST	49783	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.189304113 CEST	49785	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.189327002 CEST	443	49785	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.189356089 CEST	49783	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.190862894 CEST	49785	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.191196918 CEST	49785	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.191215992 CEST	443	49785	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.621573925 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:18.622020006 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:18.622092962 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:18.623706102 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:18.623783112 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:18.667637110 CEST	443	49785	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.667905092 CEST	49785	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.667917967 CEST	443	49785	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.669020891 CEST	443	49785	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.669353008 CEST	49785	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.669513941 CEST	443	49785	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.669552088 CEST	49785	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.712974072 CEST	49785	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.712981939 CEST	443	49785	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.804692030 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:18.804783106 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:18.804811954 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:18.804862022 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:18.849983931 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:18.850050926 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:18.897910118 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:18.935275078 CEST	443	49785	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.935463905 CEST	443	49785	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:18.935528040 CEST	49785	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.941096067 CEST	49785	443	192.168.2.4	172.67.185.227
Oct 10, 2024 21:17:18.941109896 CEST	443	49785	172.67.185.227	192.168.2.4
Oct 10, 2024 21:17:19.765268087 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.765292883 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.765302896 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.765496016 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:19.765569925 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.765641928 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:19.890921116 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.890934944 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.890994072 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.891036987 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.891072989 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.891249895 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:19.891251087 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:19.891251087 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:19.891330957 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.891400099 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:19.892801046 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.892823935 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.892893076 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:19.892910957 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.892940998 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:19.892971992 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:19.982028008 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.982095957 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.982117891 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:19.982306004 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:19.982306004 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.032991886 CEST	49784	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.033072948 CEST	443	49784	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:20.438517094 CEST	49786	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.438570023 CEST	443	49786	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:20.438637972 CEST	49786	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.439392090 CEST	49786	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.439409018 CEST	443	49786	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:20.462902069 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.463000059 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:20.463089943 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.463284969 CEST	49788	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.463380098 CEST	443	49788	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:20.463531971 CEST	49788	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.463726997 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.463759899 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:20.463814974 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.464356899 CEST	49788	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.464395046 CEST	443	49788	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:20.464767933 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.464808941 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:20.465399027 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.465415001 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:20.523860931 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.523876905 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:20.523941040 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.524094105 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:20.524106026 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.083689928 CEST	443	49786	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.084189892 CEST	49786	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.084218979 CEST	443	49786	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.084814072 CEST	443	49786	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.084985971 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.085232973 CEST	49786	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.085306883 CEST	443	49786	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.085535049 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.085607052 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.085870981 CEST	443	49788	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.086303949 CEST	49786	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.087076902 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.087205887 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.087363958 CEST	49788	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.087424994 CEST	443	49788	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.087826014 CEST	443	49788	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.087999105 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.088089943 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.088397026 CEST	49788	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.088485003 CEST	443	49788	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.088515043 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.088532925 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.088910103 CEST	49788	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.108648062 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.108943939 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.108959913 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.112728119 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.112799883 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.115336895 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.115431070 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.127408981 CEST	443	49786	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.129750967 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.131398916 CEST	443	49788	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.147093058 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.147345066 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.147363901 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.149138927 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.149236917 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.149733067 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.149883986 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.149899960 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.160685062 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.160691977 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.190905094 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.190910101 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.206474066 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.238967896 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.917041063 CEST	443	49788	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.917228937 CEST	443	49788	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.917354107 CEST	49788	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.919358015 CEST	49788	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.919424057 CEST	443	49788	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.933296919 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.933382988 CEST	443	49792	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:21.933473110 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.933659077 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:21.933696032 CEST	443	49792	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.007165909 CEST	443	49786	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.007342100 CEST	443	49786	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.007360935 CEST	49786	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.007396936 CEST	443	49786	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.007432938 CEST	49786	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.009973049 CEST	49786	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.385984898 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.386027098 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.386038065 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.386063099 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.386074066 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.386085033 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.386219978 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.386219978 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.386240005 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.387064934 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.387159109 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.387170076 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.387203932 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.387290001 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.387299061 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.387403965 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.388019085 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.403207064 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.403232098 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.403239965 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.403407097 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.403501034 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.403618097 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.403618097 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.403687954 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.403755903 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.449214935 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.473645926 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.473683119 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.473731041 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.473783970 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.473809004 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.473823071 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.473860025 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.473860025 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.473990917 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.490355015 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.490367889 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.490473986 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.490479946 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.490562916 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.490593910 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.490622044 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.491018057 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.572874069 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.572901964 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.573071957 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.573071957 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.573136091 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.573218107 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.576548100 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.576580048 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.576688051 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.576749086 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.576749086 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.576749086 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.585011959 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.585069895 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.585153103 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.585304022 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.585323095 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.585385084 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.585675001 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.585767984 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.585927010 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.586010933 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.586028099 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.586138964 CEST	49787	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.586204052 CEST	443	49787	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.586261034 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.586529016 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.586561918 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.586710930 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.586733103 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.586970091 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.587052107 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.587110996 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.587193012 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.589536905 CEST	49790	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.589557886 CEST	443	49790	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.612850904 CEST	443	49792	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.613279104 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.613339901 CEST	443	49792	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.617248058 CEST	443	49792	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.617537975 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.618311882 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.618431091 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.618731976 CEST	443	49792	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.662997961 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:22.663027048 CEST	443	49792	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:22.712546110 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.289094925 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.289308071 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.289443016 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.289469957 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.289589882 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.289653063 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.290895939 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.290971994 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.291145086 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.291208029 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.292180061 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.292285919 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.292403936 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.292517900 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.292525053 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.292550087 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.292771101 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.292789936 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.301146030 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.301340103 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.301373005 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.304862976 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.304944992 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.305398941 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.305464029 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.305555105 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.326128960 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.326313019 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.326338053 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.327779055 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.327841043 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.328114986 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.328193903 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.328214884 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.336659908 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.336672068 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.347409010 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.351783037 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.351804972 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.367696047 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.367717028 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.388396978 CEST	443	49765	216.58.206.68	192.168.2.4
Oct 10, 2024 21:17:23.388458967 CEST	443	49765	216.58.206.68	192.168.2.4
Oct 10, 2024 21:17:23.388510942 CEST	49765	443	192.168.2.4	216.58.206.68
Oct 10, 2024 21:17:23.399358988 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.415440083 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.599251986 CEST	443	49792	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.599514961 CEST	443	49792	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.599581003 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.604938984 CEST	49792	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.604979992 CEST	443	49792	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.605518103 CEST	49765	443	192.168.2.4	216.58.206.68
Oct 10, 2024 21:17:23.605540991 CEST	443	49765	216.58.206.68	192.168.2.4
Oct 10, 2024 21:17:23.605998993 CEST	49800	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.606021881 CEST	443	49800	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:23.606079102 CEST	49800	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.606403112 CEST	49800	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:23.606415033 CEST	443	49800	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.153455019 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.153486967 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.153501034 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.153537989 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.153564930 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.153578997 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.153606892 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.214472055 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.214493990 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.214504004 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.214530945 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.214557886 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.214607000 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.214689970 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.214721918 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.214729071 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.214756966 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.214775085 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.214787960 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.214819908 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.214875937 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.216424942 CEST	49795	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.216453075 CEST	443	49795	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.244905949 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.244925976 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.244950056 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.244961977 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.244970083 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.244996071 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.245001078 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.245037079 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.245057106 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.245253086 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.247157097 CEST	49794	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.247172117 CEST	443	49794	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.270730019 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.270766973 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.270826101 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.270905972 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.270905972 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.272106886 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.272106886 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.272149086 CEST	443	49796	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.272208929 CEST	49796	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.275993109 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.276078939 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.276166916 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.276367903 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.276402950 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.367014885 CEST	443	49800	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.367413044 CEST	49800	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.367422104 CEST	443	49800	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.368496895 CEST	443	49800	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.368927002 CEST	49800	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.369090080 CEST	49800	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.369095087 CEST	443	49800	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.369110107 CEST	443	49800	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.414696932 CEST	49800	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.706463099 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.706533909 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.706557035 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.706595898 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.706613064 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.706630945 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.706634998 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.706648111 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.706667900 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.706671953 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.706702948 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.758635998 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.793968916 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.793999910 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.794047117 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.794064999 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.794090033 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.794090033 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.794106007 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.794137001 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.800364017 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.878490925 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.878525972 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.878576040 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.878587008 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.878587008 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.878611088 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.878638983 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.878714085 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.881726980 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.881776094 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.881823063 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.881839991 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.881869078 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.882972956 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.883579969 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.883621931 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.883663893 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.883671045 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.883698940 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.885415077 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.885463953 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.885464907 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.885497093 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.885515928 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.885535002 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.888364077 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.906815052 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.952527046 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.968475103 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.968585968 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.968631983 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.968641996 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.968671083 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.969599009 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.969679117 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.969686031 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.969721079 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.969765902 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.969801903 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.972577095 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.976650000 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.980385065 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.980439901 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.982156038 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.982327938 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.982716084 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.982820988 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:24.982863903 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.996364117 CEST	49793	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:24.996377945 CEST	443	49793	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.009062052 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.009090900 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.009305000 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.009495974 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.009514093 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.024574041 CEST	49804	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.024606943 CEST	443	49804	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.024873018 CEST	49804	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.027443886 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.027556896 CEST	49804	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.027564049 CEST	443	49804	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.038039923 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.038078070 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.038158894 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.038244963 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.038439989 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.038660049 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.038697004 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.084254980 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.221611977 CEST	443	49800	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.221822977 CEST	443	49800	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.222115993 CEST	49800	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.222129107 CEST	443	49800	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.222215891 CEST	49800	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.222215891 CEST	49800	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.227219105 CEST	49806	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.227329969 CEST	443	49806	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.227497101 CEST	49806	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.227729082 CEST	49806	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.227766991 CEST	443	49806	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.703944921 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.704006910 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.704029083 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.704071999 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.704077959 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.704091072 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.704108953 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.704127073 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.704128027 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.704168081 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.704211950 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.704211950 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.746107101 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.789295912 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.789385080 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.789405107 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.789498091 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.789556026 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.789940119 CEST	49801	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.789972067 CEST	443	49801	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.833172083 CEST	443	49804	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.839731932 CEST	49804	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.839751959 CEST	443	49804	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.840110064 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.840202093 CEST	443	49804	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.840907097 CEST	49804	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.840976954 CEST	443	49804	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.841044903 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.841058969 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.841655016 CEST	49804	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.842215061 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.843249083 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.843324900 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.843431950 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.846097946 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.847071886 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.847119093 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.850724936 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.850809097 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.851131916 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.851253986 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.851269960 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.851346970 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.861022949 CEST	443	49806	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.861268044 CEST	49806	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.861294031 CEST	443	49806	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.864716053 CEST	443	49806	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.864792109 CEST	49806	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.865938902 CEST	49806	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.866035938 CEST	443	49806	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.866162062 CEST	49806	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.866179943 CEST	443	49806	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.883405924 CEST	443	49804	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.887482882 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.894474983 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.894500971 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:25.910223007 CEST	49806	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:25.943048000 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:26.648684025 CEST	443	49804	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:26.648770094 CEST	443	49804	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:26.648853064 CEST	49804	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:26.649424076 CEST	49804	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:26.649435997 CEST	443	49804	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:26.745937109 CEST	443	49806	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:26.746207952 CEST	443	49806	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:26.746265888 CEST	49806	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:26.747066021 CEST	49806	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:26.747109890 CEST	443	49806	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.243624926 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.243643999 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.243648052 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.243725061 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.243778944 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.243803978 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.243856907 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.243856907 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.243856907 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.243856907 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.243952990 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.244024992 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.244795084 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.244848013 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.244904041 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.244924068 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.244952917 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.286835909 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.331773996 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.331785917 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.331840038 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.331897974 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.332031012 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.332031965 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.332112074 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.332175970 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.333220959 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.333240032 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.333309889 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.333327055 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.333380938 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.334685087 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.334698915 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.334770918 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.334784031 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.334839106 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.335298061 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.335349083 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.336245060 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.336296082 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.336313009 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.336324930 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.336359978 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.336390972 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.395137072 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.395199060 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.395242929 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.395359039 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.395380974 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.395581007 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.395581007 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.396742105 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.396806002 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.396883965 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.396883965 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.396904945 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.421555042 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.421577930 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.421734095 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.421797037 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.421878099 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.421878099 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.421878099 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.442548990 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.443829060 CEST	49805	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.443900108 CEST	443	49805	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.449871063 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.449919939 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.450141907 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.450388908 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.450406075 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.481589079 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.481653929 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.481704950 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.481715918 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.481745958 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.481801033 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.483020067 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.483062983 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.483099937 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.483110905 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.483146906 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.483160019 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.483160019 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.483177900 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.483403921 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.484246016 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.484289885 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.484349966 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.484354973 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.484402895 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.484402895 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.486011028 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.486071110 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.486080885 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.486088037 CEST	49809	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.486093998 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.486129999 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.486129999 CEST	443	49809	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.486210108 CEST	49809	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.486424923 CEST	49809	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.486440897 CEST	443	49809	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.486466885 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.486944914 CEST	49810	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.486953020 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.487046957 CEST	49810	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.487807989 CEST	49810	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.487819910 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.519675970 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.519690037 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.520422935 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.520872116 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.520884037 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.568093061 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.568110943 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.568223000 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.568223000 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.568232059 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.568350077 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.568871021 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.568919897 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.568943024 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.568947077 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.568994999 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.568994999 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.631062031 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.631145000 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.631688118 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.632287979 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.632324934 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.633003950 CEST	49803	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.633022070 CEST	443	49803	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.831125021 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.831238985 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:27.831337929 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.831619978 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:27.831649065 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.099989891 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.102206945 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.102236032 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.102710009 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.103224993 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.103310108 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.103466988 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.128990889 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.131753922 CEST	49810	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.131798983 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.132285118 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.132754087 CEST	49810	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.132869005 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.133038998 CEST	49810	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.145458937 CEST	443	49809	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.145709038 CEST	49809	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.145728111 CEST	443	49809	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.146815062 CEST	443	49809	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.147325039 CEST	49809	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.147420883 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.147501945 CEST	49809	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.147512913 CEST	443	49809	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.147535086 CEST	443	49809	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.164414883 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.164781094 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.164798975 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.168344021 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.168421984 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.179399014 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.189538956 CEST	49809	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.198381901 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.198843956 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.198929071 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.239424944 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.243201971 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.243243933 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.256704092 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.256949902 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.257010937 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.260166883 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.260246038 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.260854959 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.260971069 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.260983944 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.261013031 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.288886070 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.304399014 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.304433107 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.362587929 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.469635963 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.470021009 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.470078945 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.471523046 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.471590996 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.472560883 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.472656012 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.472899914 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.472917080 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.523539066 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.656178951 CEST	49815	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.656267881 CEST	443	49815	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.656343937 CEST	49815	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.656692028 CEST	49815	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.656725883 CEST	443	49815	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.816078901 CEST	80	49723	217.20.57.24	192.168.2.4
Oct 10, 2024 21:17:28.816231966 CEST	49723	80	192.168.2.4	217.20.57.24
Oct 10, 2024 21:17:28.816378117 CEST	49723	80	192.168.2.4	217.20.57.24
Oct 10, 2024 21:17:28.821278095 CEST	80	49723	217.20.57.24	192.168.2.4
Oct 10, 2024 21:17:28.908283949 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.912058115 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.912120104 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.913223982 CEST	49811	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.913240910 CEST	443	49811	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.915600061 CEST	443	49809	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.920510054 CEST	443	49809	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.920588017 CEST	49809	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.934608936 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.934626102 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.934717894 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.934771061 CEST	49810	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.934771061 CEST	49810	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.934822083 CEST	49809	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.934850931 CEST	443	49809	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.939879894 CEST	49810	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.939897060 CEST	443	49810	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.968367100 CEST	49816	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.968485117 CEST	443	49816	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.968581915 CEST	49816	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.970885038 CEST	49816	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.970923901 CEST	443	49816	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.971662998 CEST	49817	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.971683025 CEST	443	49817	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.971750021 CEST	49817	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.971905947 CEST	49817	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.971911907 CEST	443	49817	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.974175930 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.974188089 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:28.974242926 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.974585056 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:28.974595070 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.188260078 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.188350916 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.188412905 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.188477039 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.188633919 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.188690901 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.226334095 CEST	49812	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.226365089 CEST	443	49812	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.254180908 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.254280090 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.254384995 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.255068064 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.255105019 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.276045084 CEST	443	49815	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.276351929 CEST	49815	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.276418924 CEST	443	49815	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.276726961 CEST	443	49815	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.277066946 CEST	49815	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.277137995 CEST	443	49815	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.277266026 CEST	49815	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.323401928 CEST	443	49815	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.376091003 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.376122952 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.376132965 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.376163006 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.376194000 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.376195908 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.376271009 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.376313925 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.376313925 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.423629045 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.440366030 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.440428019 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.440493107 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.440509081 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.440570116 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.441505909 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.441554070 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.441569090 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.441584110 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.441613913 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.441632986 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.442329884 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.442390919 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.442414999 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.442460060 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.442501068 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.465570927 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.465586901 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.465609074 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.465645075 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.465645075 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.465682983 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.465702057 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.465747118 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.466228962 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.466317892 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.466336012 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.466408968 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.466847897 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.466870070 CEST	443	49814	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.466901064 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.466948986 CEST	49814	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.476489067 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.476582050 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.480426073 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.481707096 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.481754065 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.532238960 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.532296896 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.532340050 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.532351971 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.532382011 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.533370018 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.533421993 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.533468008 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.533473969 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.533508062 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.535115004 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.535156965 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.535202026 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.535208941 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.535238981 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.540354967 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.626573086 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.626632929 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.626737118 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.626737118 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.626769066 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.628475904 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.631333113 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.631525993 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.631565094 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.631659985 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.632358074 CEST	49808	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.632371902 CEST	443	49808	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.828635931 CEST	443	49817	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.833475113 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.836921930 CEST	443	49816	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.886547089 CEST	49817	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.886547089 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.887639046 CEST	49816	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.890425920 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.890431881 CEST	49816	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.890436888 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.890460014 CEST	443	49816	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.890646935 CEST	49817	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.890651941 CEST	443	49817	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.891175032 CEST	443	49817	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.891881943 CEST	443	49816	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.892263889 CEST	49817	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.892263889 CEST	49817	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.892327070 CEST	443	49817	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.892802000 CEST	49816	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.893003941 CEST	443	49816	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.893049955 CEST	49816	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.894373894 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.894412041 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.894565105 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.895680904 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.895680904 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.895864010 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.934640884 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.935538054 CEST	49817	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.935538054 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.935549021 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.939444065 CEST	443	49816	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.944382906 CEST	49816	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.972491026 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.972553015 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.976130009 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.976371050 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.988372087 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:29.988569021 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:29.989990950 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.000376940 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.000396013 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.052387953 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.080712080 CEST	443	49815	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.080775976 CEST	443	49815	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.081510067 CEST	49815	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.091175079 CEST	49815	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.091192007 CEST	443	49815	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.123330116 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.126504898 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.126578093 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.127475977 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.127599001 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.128129959 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.128201962 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.128432989 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.128451109 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.176486969 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.569593906 CEST	443	49816	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.586357117 CEST	443	49816	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.586730003 CEST	49816	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.586822987 CEST	49816	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.586865902 CEST	443	49816	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.616014957 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.616075039 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.616120100 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.616132975 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.616312981 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.616358995 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.619501114 CEST	49818	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.619514942 CEST	443	49818	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.622221947 CEST	443	49817	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.623600960 CEST	443	49817	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.623645067 CEST	49817	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.624254942 CEST	49817	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.624260902 CEST	443	49817	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.679110050 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.682656050 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.682718992 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.682746887 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:30.682797909 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.683248997 CEST	49819	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:30.683269978 CEST	443	49819	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.345293999 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.345331907 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.345347881 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.345516920 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.345516920 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.345592976 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.345674038 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.351304054 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.351317883 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.351350069 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.351368904 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.351385117 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.351413012 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.351459026 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.351459026 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.351473093 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.351536989 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.353198051 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.353246927 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.353296995 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.353311062 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.353338957 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.353405952 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:31.353460073 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.353729010 CEST	49820	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:31.353761911 CEST	443	49820	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:34.098871946 CEST	49821	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:34.098917007 CEST	443	49821	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:34.099049091 CEST	49821	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:34.099327087 CEST	49821	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:34.099344015 CEST	443	49821	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:34.727204084 CEST	443	49821	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:34.728349924 CEST	49821	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:34.728384972 CEST	443	49821	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:34.728852034 CEST	443	49821	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:34.729257107 CEST	49821	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:34.729345083 CEST	443	49821	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:34.729546070 CEST	49821	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:34.775418997 CEST	443	49821	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:36.282955885 CEST	443	49821	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:36.283056974 CEST	443	49821	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:36.283118963 CEST	49821	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:36.283309937 CEST	49821	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:36.283322096 CEST	443	49821	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:42.505686045 CEST	49822	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:42.505719900 CEST	443	49822	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:42.505801916 CEST	49822	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:42.506753922 CEST	49822	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:42.506766081 CEST	443	49822	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:43.183454990 CEST	443	49822	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:43.183799982 CEST	49822	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:43.183815956 CEST	443	49822	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:43.184106112 CEST	443	49822	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:43.184576035 CEST	49822	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:43.184638023 CEST	443	49822	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:43.184799910 CEST	49822	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:43.231403112 CEST	443	49822	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:43.970129013 CEST	443	49822	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:43.970339060 CEST	443	49822	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:43.970380068 CEST	49822	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:43.970395088 CEST	443	49822	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:43.970423937 CEST	49822	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:43.970534086 CEST	49822	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:51.988944054 CEST	49823	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:51.989007950 CEST	443	49823	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:51.989433050 CEST	49823	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:51.989433050 CEST	49823	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:51.989505053 CEST	443	49823	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:53.191858053 CEST	443	49823	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:53.205854893 CEST	49823	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:53.205919981 CEST	443	49823	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:53.207112074 CEST	443	49823	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:53.208252907 CEST	49823	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:53.208442926 CEST	443	49823	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:53.208925009 CEST	49823	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:53.251426935 CEST	443	49823	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:54.006287098 CEST	443	49823	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:54.006459951 CEST	443	49823	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:54.006793976 CEST	49823	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:54.006856918 CEST	443	49823	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:54.006896973 CEST	49823	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:54.006946087 CEST	49823	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:56.067838907 CEST	49824	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:56.067930937 CEST	443	49824	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:56.068027020 CEST	49824	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:56.068335056 CEST	49824	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:56.068376064 CEST	443	49824	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:56.922806025 CEST	443	49824	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:56.924186945 CEST	49824	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:56.924252987 CEST	443	49824	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:56.924732924 CEST	443	49824	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:56.926126957 CEST	49824	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:56.926126957 CEST	49824	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:56.926175117 CEST	443	49824	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:56.926301003 CEST	443	49824	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:56.972048044 CEST	49824	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:57.706907034 CEST	443	49824	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:57.707072020 CEST	443	49824	172.233.53.209	192.168.2.4
Oct 10, 2024 21:17:57.707262039 CEST	49824	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:57.707262039 CEST	49824	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:58.018827915 CEST	49824	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:17:58.018908024 CEST	443	49824	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:04.160669088 CEST	49826	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:04.160703897 CEST	443	49826	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:04.160897017 CEST	49826	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:04.161035061 CEST	49826	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:04.161051989 CEST	443	49826	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:04.821640015 CEST	443	49826	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:04.822175026 CEST	49826	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:04.822180986 CEST	443	49826	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:04.822468042 CEST	443	49826	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:04.822853088 CEST	49826	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:04.822892904 CEST	443	49826	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:04.823295116 CEST	49826	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:04.867396116 CEST	443	49826	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:05.586590052 CEST	443	49826	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:05.586684942 CEST	443	49826	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:05.586850882 CEST	49826	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:05.800209045 CEST	49826	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:05.800235033 CEST	443	49826	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:06.132766008 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:06.132843971 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:06.132924080 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:06.133296967 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:06.133330107 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:06.175265074 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:06.175273895 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:06.920087099 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:06.920172930 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:06.921843052 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:06.921870947 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:06.922144890 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:06.929996967 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:06.971416950 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.051115990 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.051132917 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.051177025 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.051206112 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.051223040 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.051254034 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.051273108 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.138115883 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.138133049 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.138192892 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.138216972 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.138257027 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.149573088 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.149586916 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.149652004 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.149661064 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.149699926 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.219657898 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.219672918 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.219743013 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.219762087 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.219819069 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.230977058 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.230989933 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.231049061 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.231055021 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.231092930 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.240993977 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.241007090 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.241059065 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.241064072 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.241095066 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.241111994 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.249322891 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.249341011 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.249387026 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.249391079 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.249428034 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.249444962 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.308163881 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.308196068 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.308238029 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.308307886 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.308345079 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.308371067 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.316767931 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.316783905 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.316833973 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.316857100 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.316885948 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.316920042 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.322093964 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.322108984 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.322173119 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.322191954 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.322241068 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.328741074 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.328756094 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.328824997 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.328843117 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.328890085 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.333923101 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.333936930 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.333995104 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.334012032 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.334043026 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.334167957 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.338504076 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.338519096 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.338577032 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.338598967 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.338635921 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.339962959 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.340024948 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.340025902 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.340078115 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.354319096 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.354320049 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.354374886 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.354398012 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.514230013 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.514265060 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.514323950 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.517231941 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.517321110 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.517398119 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.519783974 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.519804955 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.519870996 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.521759987 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.521778107 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.521825075 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.524763107 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.524775028 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.524780035 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.524871111 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.524981022 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.525152922 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.525161982 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.525162935 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.525197983 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.525346994 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.525369883 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:07.525659084 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:07.525696993 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.174433947 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.175260067 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.175302982 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.175920010 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.175928116 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.182168961 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.183092117 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.183092117 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.183111906 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.183120012 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.201873064 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.202641010 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.202728987 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.202769995 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.202785015 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.203331947 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.203921080 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.203921080 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.203932047 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.203949928 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.205440998 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.206595898 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.206595898 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.206608057 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.206623077 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.273884058 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.273931980 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.274045944 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.274056911 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.274183989 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.274183989 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.274190903 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.274231911 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.274513960 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.274605036 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.274755001 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.276619911 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.276660919 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.277036905 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.277036905 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.277074099 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.282814980 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.282836914 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.282892942 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.282927990 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.283056974 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.283056974 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.283596992 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.283607960 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.285083055 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.285100937 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.285224915 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.285299063 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.285306931 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.312113047 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.312256098 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.314930916 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.314930916 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.315841913 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.315855026 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.316941977 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.316988945 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.317152023 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.317152977 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.317198038 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.321991920 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.322029114 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.322098017 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.322124004 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.322228909 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.322259903 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.322280884 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.322351933 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.322351933 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.322357893 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.322364092 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.322388887 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.322916031 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.322937012 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.322978973 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.322992086 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.325007915 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.325021982 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.325030088 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.325109005 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.325182915 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.325192928 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.325366020 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.325388908 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.325434923 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.325472116 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.934704065 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.935250998 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.935271025 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.935851097 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.935857058 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.939623117 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.939934015 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.939954996 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.940408945 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.940416098 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.972774029 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.972954988 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.973174095 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.973206043 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.973558903 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.973568916 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.973706007 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.973715067 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.974104881 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.974112034 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.990631104 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.990988016 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.991046906 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:08.991503954 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:08.991518021 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.076766014 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.076834917 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.077003956 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.077049971 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.077069044 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.077083111 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.077090025 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.077435970 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.077508926 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.078043938 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.078193903 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.078202963 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.078213930 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.078218937 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.079030037 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.079093933 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.079199076 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.079340935 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.079340935 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.079354048 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.079364061 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.080343962 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.080437899 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.080518007 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.080672026 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.080698013 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.080765963 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.080812931 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.080993891 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.081089020 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.081089020 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.081111908 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.081135035 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.081655979 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.081696033 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.081760883 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.081981897 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.082000017 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.083319902 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.083343983 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.083410978 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.084275961 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.084285021 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.084397078 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.084496975 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.084511042 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.084544897 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.084554911 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.094511986 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.094578981 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.094667912 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.095024109 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.095067024 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.095094919 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.095110893 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.098454952 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.098465919 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.098531008 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.098768950 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.098783016 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.430150986 CEST	49844	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:18:09.435055971 CEST	53	49844	1.1.1.1	192.168.2.4
Oct 10, 2024 21:18:09.435127974 CEST	49844	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:18:09.435190916 CEST	49844	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:18:09.435221910 CEST	49844	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:18:09.440076113 CEST	53	49844	1.1.1.1	192.168.2.4
Oct 10, 2024 21:18:09.440099001 CEST	53	49844	1.1.1.1	192.168.2.4
Oct 10, 2024 21:18:09.732949972 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.733839035 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.733839035 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.733863115 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.733870983 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.737700939 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.738404036 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.738404036 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.738493919 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.738524914 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.752881050 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.753294945 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.753314972 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.753722906 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.753726959 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.764637947 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.765337944 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.765337944 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.765350103 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.765357971 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.767273903 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.767539978 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.767559052 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.768105030 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.768109083 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.832736015 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.832891941 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.833072901 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.833072901 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.833199024 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.833213091 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.836154938 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.836204052 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.836442947 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.836558104 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.836584091 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.840754032 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.840898991 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.841015100 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.841015100 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.842377901 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.842417955 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.843178034 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.843202114 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.843652010 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.843652010 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.843697071 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.852483034 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.852611065 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.852730989 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.852730989 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.852799892 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.852808952 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.854691982 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.854728937 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.854909897 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.854909897 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.854944944 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.869884014 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.869926929 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.870110989 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.870110989 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.870203018 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.870208979 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.870884895 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.870949984 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.872302055 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.872332096 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.872373104 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.872374058 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.872374058 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.872385025 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.872543097 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.872559071 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.874464989 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.874550104 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.874713898 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.874783993 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:09.874803066 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:09.899918079 CEST	53	49844	1.1.1.1	192.168.2.4
Oct 10, 2024 21:18:09.900954962 CEST	49844	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:18:09.906524897 CEST	53	49844	1.1.1.1	192.168.2.4
Oct 10, 2024 21:18:09.906605959 CEST	49844	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:18:10.175103903 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.175160885 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.523917913 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.524559021 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.524626970 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.524856091 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.524871111 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.532613993 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.532867908 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.532955885 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.532973051 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.533204079 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.533265114 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.533533096 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.533548117 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.533615112 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.533621073 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.534610987 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.534894943 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.534909010 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.535423040 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.535433054 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.557897091 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.558209896 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.558221102 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.558746099 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.558749914 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.626671076 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.626704931 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.626883030 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.627015114 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.627015114 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.627062082 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.627091885 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.630047083 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.630069017 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.630374908 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.630374908 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.630394936 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.635329008 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.635524035 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.635587931 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.635641098 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.635641098 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.635660887 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.635665894 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.638756990 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.638845921 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.638930082 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.639081955 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.639121056 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.644046068 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.644172907 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.644407034 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.644407034 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.644407988 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.645981073 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.646119118 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.646184921 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.646421909 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.646421909 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.646454096 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.646475077 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.647722006 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.647743940 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.647799969 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.648482084 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.648508072 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.650266886 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.650275946 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.650427103 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.650428057 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.650439978 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.664875031 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.664999008 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.665143967 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.665143967 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.665143967 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.667407990 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.667434931 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.667566061 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.667612076 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.667619944 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.951267004 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.951328039 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:10.972011089 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:10.972049952 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.008569956 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.009088993 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.009107113 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.009536982 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.009541035 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.097423077 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.098737001 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.098820925 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.099241972 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.099255085 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.103028059 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.103246927 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.103477001 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.103486061 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.103975058 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.103980064 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.104362011 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.104393005 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.104645967 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.104656935 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.189825058 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.189898014 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.189949989 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.190272093 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.190280914 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.190289021 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.190293074 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.195499897 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.195605040 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.195811033 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.196000099 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.196041107 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.216396093 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.216559887 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.216634989 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.216681957 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.216701984 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.216739893 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.216747999 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.218504906 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.218594074 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.218667984 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.218775034 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.218797922 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.222054958 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.222193956 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.222287893 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.222373962 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.222387075 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.222413063 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.222424030 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.223675966 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.223814964 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.223895073 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.223895073 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.223910093 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.223913908 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.224147081 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.224170923 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.224222898 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.225373983 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.225389957 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.225410938 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.225421906 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.225605965 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.225723982 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.225734949 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.243316889 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.243670940 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.243680000 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.244035959 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.244039059 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.361404896 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.361485004 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.361577034 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.361577034 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.361609936 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.361618996 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.363303900 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.363389015 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.363540888 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.364424944 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.364460945 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.844099045 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.844656944 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.844700098 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.845037937 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.845045090 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.907869101 CEST	49862	443	192.168.2.4	142.250.181.228
Oct 10, 2024 21:18:12.907896042 CEST	443	49862	142.250.181.228	192.168.2.4
Oct 10, 2024 21:18:12.907977104 CEST	49862	443	192.168.2.4	142.250.181.228
Oct 10, 2024 21:18:12.908173084 CEST	49862	443	192.168.2.4	142.250.181.228
Oct 10, 2024 21:18:12.908190012 CEST	443	49862	142.250.181.228	192.168.2.4
Oct 10, 2024 21:18:12.915452957 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.915951014 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.916018009 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.916207075 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.916224003 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.925082922 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.925389051 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.925424099 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.925714970 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.925726891 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.932598114 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.932878971 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.932893991 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.933228970 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.933232069 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.958921909 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.959104061 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.959191084 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.959191084 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.959275961 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.959287882 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.961648941 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.961671114 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:12.961783886 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.961879015 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:12.961886883 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.035049915 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.035100937 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.035175085 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.035315037 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.035358906 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.035410881 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.035427094 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.037305117 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.037353992 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.037419081 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.037528992 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.037545919 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.045586109 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.045727968 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.045819998 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.045819998 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.045835018 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.045844078 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.047404051 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.047430038 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.047522068 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.047615051 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.047630072 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.052772999 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.053185940 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.053232908 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.053483963 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.053493023 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.101490974 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.101648092 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.101855040 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.101855993 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.101936102 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.101972103 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.104840994 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.104857922 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.104939938 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.105106115 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.105118036 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.195682049 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.195849895 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.196096897 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.196096897 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.196096897 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.198714972 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.198735952 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.198806047 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.199017048 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.199033022 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.503691912 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.503721952 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.629112005 CEST	443	49862	142.250.181.228	192.168.2.4
Oct 10, 2024 21:18:13.629398108 CEST	49862	443	192.168.2.4	142.250.181.228
Oct 10, 2024 21:18:13.629420042 CEST	443	49862	142.250.181.228	192.168.2.4
Oct 10, 2024 21:18:13.630507946 CEST	443	49862	142.250.181.228	192.168.2.4
Oct 10, 2024 21:18:13.631050110 CEST	49862	443	192.168.2.4	142.250.181.228
Oct 10, 2024 21:18:13.631223917 CEST	443	49862	142.250.181.228	192.168.2.4
Oct 10, 2024 21:18:13.675606012 CEST	49862	443	192.168.2.4	142.250.181.228
Oct 10, 2024 21:18:13.906965971 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.907569885 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.907594919 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.908277988 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.908282042 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.966541052 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.967032909 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.967080116 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:13.967367887 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:13.967403889 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.039275885 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.040385008 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.040417910 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.040860891 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.040865898 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.094166040 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.094568968 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.094607115 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.094896078 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.094902992 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.132410049 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.132558107 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.132635117 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.132766008 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.132776976 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.132819891 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.132823944 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.135628939 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.135713100 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.135811090 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.135935068 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.135972977 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.156527996 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.156898022 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.156918049 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.157238960 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.157244921 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.211781025 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.211944103 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.212016106 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.212080002 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.212102890 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.212116003 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.212122917 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.220108986 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.220159054 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.220242023 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.220426083 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.220443010 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.239552021 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.239712954 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.239773989 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.239814997 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.239821911 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.242229939 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.242242098 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.242309093 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.242513895 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.242526054 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.294758081 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.294847012 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.294919014 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.295017958 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.295031071 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.295047998 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.295053959 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.296816111 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.296900988 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.296999931 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.297173023 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.297211885 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.352247000 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.352411985 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.352484941 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.352574110 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.352580070 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.352611065 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.352616072 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.354911089 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.354952097 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:14.355040073 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.355221987 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:14.355242014 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.043603897 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.044151068 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.044234991 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.044856071 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.044871092 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.133349895 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.133742094 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.133780003 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.134356022 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.134361982 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.138814926 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.138914108 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.139197111 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.139211893 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.139549017 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.139554024 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.139882088 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.139967918 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.140111923 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.140126944 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.206299067 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.206365108 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.206541061 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.209440947 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.209440947 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.209484100 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.209512949 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.212997913 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.213052988 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.213110924 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.213236094 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.213247061 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.241858959 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.245665073 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.245753050 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.246377945 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.246397972 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.681153059 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.681330919 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.681422949 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.681454897 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.681454897 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.681472063 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.681479931 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.684072971 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.684104919 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.684269905 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.684312105 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.684318066 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.684551954 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.684622049 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.684703112 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.684820890 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.684820890 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.684845924 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.684890032 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.684902906 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.684963942 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.685014963 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.685014963 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.685034990 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.685046911 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.687609911 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.687614918 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.687699080 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.687700987 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.687875986 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.687876940 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.688034058 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.688071966 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.688123941 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.688164949 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.812460899 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.812632084 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.812814951 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.812814951 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.812814951 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.815054893 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.815088987 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:15.815239906 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.815329075 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:15.815336943 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.112966061 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.112997055 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.711309910 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.711822987 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.711847067 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.712229013 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.712234020 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.723562002 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.723566055 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.723684072 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.723875999 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.723881006 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.724116087 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.724174976 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.724385023 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.724387884 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.724433899 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.724450111 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.724632978 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.724690914 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.724961996 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.724976063 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.889987946 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.890120983 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.890185118 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.890254021 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.890266895 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.890275955 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.890280962 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.892294884 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.892355919 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.892508984 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.892644882 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.892648935 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.892657042 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.892661095 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.892990112 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.893018007 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.893083096 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.893425941 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.893436909 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.895148993 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.895286083 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.895605087 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.895710945 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.895771027 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.895781040 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.895838022 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.895888090 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.895906925 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.895917892 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.895936012 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.895947933 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.895982027 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.896908045 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.896939993 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.897187948 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.897187948 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.897234917 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.897267103 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.898597956 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.898634911 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.898741961 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.898857117 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.898865938 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.899837971 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.899921894 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.899996996 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.900141001 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.900180101 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.942159891 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.942449093 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.942456007 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:16.942831993 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:16.942835093 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.332597971 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 10, 2024 21:18:17.372668028 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.372849941 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.372981071 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.373394966 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.373409033 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.379070997 CEST	80	49724	199.232.214.172	192.168.2.4
Oct 10, 2024 21:18:17.379179001 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.379179001 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 10, 2024 21:18:17.379287004 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.379421949 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.380450964 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.380487919 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.809603930 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.810497046 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.810549974 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.810596943 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.811476946 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.811494112 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.812014103 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.812031984 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.812608004 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.812618971 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.851178885 CEST	49883	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:17.851241112 CEST	443	49883	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:17.854639053 CEST	49883	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:17.858622074 CEST	49883	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:17.858673096 CEST	443	49883	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:17.939007044 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.939321995 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.939600945 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.939600945 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.939600945 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.942868948 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.942920923 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.945889950 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.946053982 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.946070910 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.946166992 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.946356058 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.946382999 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.946569920 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.946569920 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.946582079 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.946595907 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.949263096 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.949342012 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:17.950568914 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.950814009 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:17.950850964 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.114840984 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.116885900 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.116887093 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.116956949 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.117068052 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.229868889 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.230052948 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.230294943 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.230385065 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.230385065 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.230431080 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.230463028 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.233429909 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.233484030 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.234355927 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.234414101 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.234427929 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.255146980 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.255178928 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.313045979 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.313545942 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.313632965 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.313899040 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.313915014 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.432952881 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.433114052 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.433343887 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.433345079 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.433345079 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.435762882 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.435820103 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.436150074 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.436150074 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.436216116 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.542083025 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.542612076 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.542634010 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.543415070 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.543421030 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.581984997 CEST	443	49883	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:18.587079048 CEST	49883	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:18.587130070 CEST	443	49883	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:18.587600946 CEST	443	49883	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:18.589344025 CEST	49883	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:18.589440107 CEST	443	49883	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:18.589983940 CEST	49883	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:18.631427050 CEST	443	49883	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:18.689192057 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.689268112 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.689321995 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.733284950 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.737819910 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.737910986 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.756683111 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.784559011 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.800287962 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.963943005 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.963974953 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:18.963993073 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:18.963999987 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.029664993 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.047698975 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.047749043 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.048863888 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.048871040 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.050684929 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.050703049 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.050745964 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.050762892 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.051809072 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.051815033 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.052588940 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.052596092 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.087985039 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.088010073 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.088073969 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.089701891 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.089718103 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.258646965 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.258789062 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.258855104 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.258966923 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.258989096 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.259001970 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.259007931 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.260772943 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.260783911 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.260818958 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.260824919 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.260869026 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.260983944 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.261883020 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.261894941 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.261904955 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.261909008 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.263124943 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.263133049 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.263175964 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.263183117 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.266963005 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.266989946 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.267045021 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.270366907 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.270375967 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.270426035 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.271265030 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.271281004 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.271409035 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.271423101 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.272980928 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.273001909 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.273057938 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.273144007 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.273154020 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.355968952 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.356461048 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.356475115 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.357050896 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.357054949 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.387347937 CEST	443	49883	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:19.387561083 CEST	443	49883	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:19.387725115 CEST	49883	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:19.387725115 CEST	49883	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:19.387795925 CEST	49883	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:19.486267090 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.486495018 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.486557961 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.487237930 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.487247944 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.487257957 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.487262964 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.495251894 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.495286942 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.495352030 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.495840073 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.495855093 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.922509909 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.923105955 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.923120022 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:19.923568964 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:19.923573017 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.038290024 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.038428068 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.038517952 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.038547993 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.038557053 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.038563967 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.038568020 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.040939093 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.041038990 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.041207075 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.041347027 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.041385889 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.042622089 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.042897940 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.042902946 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.043246984 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.043250084 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.045099974 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.045355082 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.045387983 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.045751095 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.045758963 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.107223988 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.107672930 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.107690096 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.108057022 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.108062983 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.153788090 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.153821945 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.153908014 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.154046059 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.154050112 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.154057980 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.154061079 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.156672955 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.156766891 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.156923056 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.157042027 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.157079935 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.476701975 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.476735115 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.476800919 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.477322102 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.477340937 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.477355957 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.477364063 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.481766939 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.481802940 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.481873989 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.482208014 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.482223988 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.482279062 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.482412100 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.482603073 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.482724905 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.482731104 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.482765913 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.482770920 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.484673977 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.486260891 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.486357927 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.486378908 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.486391068 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.486433983 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.487435102 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.487442017 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.487715960 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.487756968 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.591176033 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.591342926 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.591414928 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.591495991 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.591509104 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.591540098 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.591547012 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.595567942 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.595587969 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.595693111 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.595861912 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.595870972 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.910654068 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.911966085 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.912040949 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:20.912475109 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:20.912487984 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.014436007 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:21.014523029 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:21.014626026 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:21.027041912 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.027175903 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.027396917 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.027396917 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.027398109 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.029803991 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.029824972 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.029891014 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.029995918 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.030000925 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.123980045 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.124701023 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.124767065 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.125041008 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.125056982 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.203337908 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.203772068 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.203790903 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.204344034 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.204349995 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.213279009 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.213701963 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.213788986 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.214217901 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.214232922 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.231848955 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.231916904 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.232022047 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.232206106 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.232206106 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.232253075 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.232280016 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.235075951 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.235126019 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.235217094 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.235333920 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.235359907 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.303288937 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.303968906 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.303985119 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.304238081 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.304243088 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.306101084 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.306251049 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.306305885 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.306328058 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.306343079 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.306355000 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.306360006 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.308691978 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.308777094 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.308907986 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.309011936 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.309042931 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.320348024 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.320751905 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.320825100 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.320904016 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.320904016 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.320945978 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.320982933 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.323052883 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.323086977 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.323159933 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.323278904 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.323292017 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.331018925 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.331079006 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.414983034 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.415153980 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.415381908 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.415422916 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.415422916 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.415437937 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.415446043 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.417789936 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.417810917 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.417918921 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.418139935 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.418149948 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.763463974 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.764170885 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.764183998 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:21.764456987 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:21.764461994 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.097027063 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.097168922 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.097234964 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.097326040 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.097326040 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.097346067 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.097357035 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.100439072 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.100528955 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.100631952 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.100713015 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.100796938 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.100831985 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.101244926 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.101305008 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.101522923 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.101538897 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.253233910 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.253388882 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.253458023 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.253813028 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.253834009 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.253849030 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.253855944 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.256846905 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.256931067 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.257010937 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.257179976 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.257216930 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.341645956 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.342083931 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.342102051 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.342680931 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.342685938 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.343909979 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.344326973 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.344335079 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.344880104 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.344883919 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.466012955 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.466167927 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.466228008 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.466386080 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.466403008 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.466453075 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.466460943 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.468452930 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.468591928 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.468664885 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.469068050 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.469074011 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.469084978 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.469089985 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.473218918 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.473256111 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.473345041 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.473570108 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.473582029 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.474149942 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.474159956 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.474900961 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.475007057 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.475017071 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.646150112 CEST	49789	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:22.646178961 CEST	443	49789	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:22.914282084 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.914783955 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.914832115 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:22.915186882 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:22.915194035 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.092780113 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.092919111 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.093101025 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.093139887 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.093139887 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.093162060 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.093173027 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.096030951 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.096123934 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.096219063 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.096380949 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.096402884 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.149327993 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.149832010 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.149919987 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.150185108 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.150201082 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.249480009 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.249619007 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.249845028 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.249845028 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.249845982 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.252157927 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.252191067 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.252351999 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.252512932 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.252528906 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.288144112 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.288543940 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.288559914 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.288985968 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.288990021 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.310117960 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.310432911 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.310451031 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.310749054 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.310753107 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.393229008 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.393341064 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.393485069 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.393513918 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.393527031 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.393537998 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.393543005 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.396572113 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.396620989 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.396776915 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.396938086 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.396950960 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.413180113 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.413332939 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.413520098 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.413579941 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.413588047 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.413598061 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.413602114 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.416130066 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.416168928 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.416254997 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.416425943 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.416446924 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.481899977 CEST	443	49862	142.250.181.228	192.168.2.4
Oct 10, 2024 21:18:23.482027054 CEST	443	49862	142.250.181.228	192.168.2.4
Oct 10, 2024 21:18:23.482131004 CEST	49862	443	192.168.2.4	142.250.181.228
Oct 10, 2024 21:18:23.546860933 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.546931028 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.799604893 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.800287008 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.800352097 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.800761938 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.800777912 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.896157980 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.896738052 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.896800041 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.897340059 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.897394896 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.906836033 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.907037020 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.907138109 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.907138109 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.907138109 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.909831047 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.909895897 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.909986019 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.910099030 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.910119057 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.942104101 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.942612886 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.942662001 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:23.942965984 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:23.942996025 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.012619972 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.012662888 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.012850046 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.012932062 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.012979984 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.013014078 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.013029099 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.015810013 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.015860081 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.016058922 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.016058922 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.016103983 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.054960012 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.055347919 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.055365086 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.055897951 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.055905104 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.094538927 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.094604969 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.094841957 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.094842911 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.094842911 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.097187996 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.097275972 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.097407103 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.097522974 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.097554922 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.101434946 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.101758957 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.101773024 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.102129936 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.102134943 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.128216028 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.128249884 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.188507080 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.188527107 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.188589096 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.188597918 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.188759089 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.188759089 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.188770056 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.188934088 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.188962936 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.189004898 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.191159010 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.191203117 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.191267014 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.191375971 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.191395044 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.214030027 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.214179039 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.214231014 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.214286089 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.214301109 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.214312077 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.214318991 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.216169119 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.216198921 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.216296911 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.216423035 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.216435909 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.409641981 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.409677029 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.585697889 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.586117983 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.586215019 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.586458921 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.586473942 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.645690918 CEST	49862	443	192.168.2.4	142.250.181.228
Oct 10, 2024 21:18:24.645714998 CEST	443	49862	142.250.181.228	192.168.2.4
Oct 10, 2024 21:18:24.870790958 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.871268988 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.871287107 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.871650934 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.871659994 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.874748945 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.874900103 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.874984026 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.875065088 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.875065088 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.875112057 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.875135899 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.878065109 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.878088951 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.878159046 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.878318071 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.878331900 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.878456116 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.878995895 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.879090071 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:24.879321098 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:24.879336119 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.209175110 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.209193945 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.209268093 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.209290981 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.209628105 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.209649086 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.209661007 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.209820986 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.209857941 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.210005045 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.213272095 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.213336945 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.213409901 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.213563919 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.213586092 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.215651035 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.215672970 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.215728045 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.215801954 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.215802908 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.215970993 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.216020107 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.216036081 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.216052055 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.218426943 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.218436956 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.218616009 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.218756914 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.218771935 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.286480904 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.287564039 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.287628889 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.288137913 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.288155079 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.300873995 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.301331997 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.301342010 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.301933050 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.301937103 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.387511015 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.387537956 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.387615919 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.387696981 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.387696981 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.388020039 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.388067007 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.388098955 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.388114929 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.393325090 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.393356085 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.393469095 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.394402981 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.394408941 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.402312040 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.402510881 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.402590036 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.402631998 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.402631998 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.402647018 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.402657032 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.404800892 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.404851913 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.404937983 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.405097008 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.405118942 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.884989023 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.885745049 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.885807991 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.886588097 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.886600971 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.890757084 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.891185999 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.891212940 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.894412041 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.894474030 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.894481897 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.894731998 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.894746065 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:25.895709038 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:25.895719051 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.083072901 CEST	49921	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:26.083167076 CEST	443	49921	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:26.083359003 CEST	49921	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:26.086781979 CEST	49921	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:26.086821079 CEST	443	49921	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:26.168622017 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.170103073 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.171483040 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.171633959 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.171744108 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.171747923 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.171747923 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.171747923 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.172627926 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.172709942 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.172867060 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.173311949 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.173340082 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.173420906 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.173429966 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.174258947 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.174259901 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.174303055 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.174335003 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.176955938 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.177203894 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.177229881 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.177237988 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.177320957 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.177367926 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.177454948 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.177458048 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.177474976 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.177932024 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.177937984 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.178057909 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.178073883 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.178114891 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.178153038 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.178445101 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.178492069 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.179193020 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.179289103 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.179527998 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.179562092 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.179606915 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.179641962 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.182357073 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.182368994 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.278337955 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.278525114 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.278690100 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.278827906 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.278827906 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.278848886 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.278862000 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.280282974 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.280733109 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.282565117 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.282565117 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.282565117 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.282565117 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.282587051 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.284872055 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.284884930 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.284920931 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.284939051 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.285140991 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.285152912 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.285183907 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.285188913 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.470917940 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.470968962 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.581665039 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.581687927 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.934839010 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.935033083 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.935262918 CEST	443	49921	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:26.935795069 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.935807943 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.935858965 CEST	49921	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:26.935923100 CEST	443	49921	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:26.936052084 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.936115980 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.936228037 CEST	443	49921	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:26.936583996 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.936589003 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.936635017 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.936649084 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.937086105 CEST	49921	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:26.937156916 CEST	443	49921	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:26.937365055 CEST	49921	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:26.939336061 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.939713955 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.939773083 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.940126896 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:26.940140009 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:26.979410887 CEST	443	49921	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:27.039995909 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.040462971 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.040556908 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.040671110 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.040671110 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.040718079 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.040744066 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.041630983 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.041682005 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.041740894 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.041937113 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.041951895 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.041981936 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.041991949 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.044456959 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.044507027 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.044579983 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.044610023 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.044617891 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.044629097 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.044692039 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.044800043 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.044823885 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.044842005 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.044863939 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.045006037 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.045022964 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.045028925 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.045054913 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.045069933 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.045077085 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.047285080 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.047358036 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.047446966 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.047754049 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.047790051 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.111813068 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.112682104 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.112692118 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.112709999 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.112714052 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.118563890 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.119002104 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.119014025 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.119446993 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.119453907 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.212707043 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.212794065 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.212843895 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.213323116 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.213335037 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.213361979 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.213366985 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.216918945 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.216995955 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.217118025 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.217308998 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.217329025 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.223185062 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.223365068 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.223419905 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.223429918 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.223485947 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.223577023 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.223577023 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.223583937 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.223591089 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.225687027 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.225733042 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.225807905 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.225939035 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.225954056 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.713052034 CEST	443	49921	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:27.713633060 CEST	443	49921	172.233.53.209	192.168.2.4
Oct 10, 2024 21:18:27.713721991 CEST	49921	443	192.168.2.4	172.233.53.209
Oct 10, 2024 21:18:27.754533052 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.755453110 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.755481958 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.755780935 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.756263971 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.756297112 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.756810904 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.756824017 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.756946087 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.756952047 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.766236067 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.766906977 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.766927004 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.767705917 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.767709970 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.855719090 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.855762959 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.855846882 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.856148958 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.856177092 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.856190920 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.856199026 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.856389999 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.856755018 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.856821060 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.856846094 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.856889009 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.857110023 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.857110023 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.857125044 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.857135057 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.860785007 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.860821009 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.860940933 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.860995054 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.861001015 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.861077070 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.861155987 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.861164093 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.861383915 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.861404896 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.869596958 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.869749069 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.869894981 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.870062113 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.870079041 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.870089054 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.870094061 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.873250961 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.873262882 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.873332024 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.873589993 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.873604059 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.886023045 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.886643887 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.886666059 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.887254000 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.887264967 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.895613909 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.896022081 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.896032095 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.896820068 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.896823883 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.991465092 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.992022038 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.992134094 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.992219925 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.992280960 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.992296934 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.992305040 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.996072054 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.996104956 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:27.996186018 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.996548891 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:27.996560097 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.001353025 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.002002954 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.002070904 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.002131939 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.002146006 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.002159119 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.002165079 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.005919933 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.005948067 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.007155895 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.007155895 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.007199049 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.510292053 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.511044979 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.511109114 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.511631966 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.511640072 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.515779018 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.516269922 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.516298056 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.516851902 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.516858101 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.560566902 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.561456919 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.561507940 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.562832117 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.562839985 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.611181021 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.611520052 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.611560106 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.611607075 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.611659050 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.611701012 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.611726046 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.611762047 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.611768961 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.615416050 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.615473032 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.615557909 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.615696907 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.615719080 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.620826960 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.621067047 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.621140003 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.621306896 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.621323109 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.621336937 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.621342897 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.623749018 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.623774052 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.623905897 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.624092102 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.624124050 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.655543089 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.656094074 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.656112909 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.656653881 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.656660080 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.659810066 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.659976006 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.660051107 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.660079002 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.660089970 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.660101891 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.660108089 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.663412094 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.663444042 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.663722038 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.663722038 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.663749933 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.695353031 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.695904970 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.695919037 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.697244883 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.697252035 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.755512953 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.755584002 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.755858898 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.755893946 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.755911112 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.755924940 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.755932093 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.759506941 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.759538889 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.759772062 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.760354996 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.760370016 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.808013916 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.808089018 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.808195114 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.808253050 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.808253050 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.808398962 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.808398962 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.808410883 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.808418036 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.811392069 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.811492920 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 10, 2024 21:18:28.811620951 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.811764956 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 10, 2024 21:18:28.811789036 CEST	443	49941	13.107.246.60	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 21:17:08.404342890 CEST	53	52647	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:08.429244995 CEST	53	51072	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:09.475994110 CEST	53	58859	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:09.616738081 CEST	52104	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:09.617199898 CEST	56688	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:09.633692980 CEST	53	52104	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:09.636588097 CEST	53	56688	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:10.392715931 CEST	52540	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:10.393099070 CEST	64282	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:10.404392958 CEST	53	52540	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:10.404428959 CEST	53	64282	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:10.420516968 CEST	63575	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:10.425509930 CEST	53806	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:10.432360888 CEST	53	63575	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:10.436531067 CEST	53	53806	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:11.037976027 CEST	55036	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:11.038394928 CEST	51239	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:11.045501947 CEST	53	55036	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:11.047369957 CEST	53	51239	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:11.167067051 CEST	60714	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:11.167176962 CEST	49740	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:11.167853117 CEST	63660	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:11.167985916 CEST	52091	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:11.174645901 CEST	53	49740	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:11.177408934 CEST	53	63660	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:11.177710056 CEST	53	60714	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:11.179784060 CEST	53	52091	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:12.200357914 CEST	64788	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:12.200540066 CEST	52644	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:12.203011990 CEST	65336	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:12.203202963 CEST	50983	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:12.208674908 CEST	53	52644	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:12.210128069 CEST	53	64788	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:12.221932888 CEST	53	65336	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:12.222712994 CEST	53	50983	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:12.224976063 CEST	55527	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:12.225157976 CEST	51436	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:12.232979059 CEST	53	55527	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:12.233741045 CEST	53	51436	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:12.238985062 CEST	53	61510	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:12.832108021 CEST	50854	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:12.832211971 CEST	56707	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:12.840214968 CEST	53	56707	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:12.840483904 CEST	53	50854	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:13.157226086 CEST	53	60651	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:13.986234903 CEST	61194	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:13.986618996 CEST	63468	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:13.998850107 CEST	53	61194	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:13.999543905 CEST	53	63468	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:14.628323078 CEST	59667	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:14.628448009 CEST	58567	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:14.635318041 CEST	53	59667	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:14.639113903 CEST	53	58567	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:17.930402040 CEST	65328	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:17.930402040 CEST	56114	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:17.940598965 CEST	53	56114	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:17.945285082 CEST	53	65328	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:20.513488054 CEST	62861	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:20.513578892 CEST	62176	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:20.522897005 CEST	53	62176	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:20.523514032 CEST	53	62861	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:21.918575048 CEST	60185	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:21.919015884 CEST	51172	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:21.928452015 CEST	53	51172	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:21.932864904 CEST	53	60185	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:22.560261965 CEST	52899	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:22.562266111 CEST	61199	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:22.563642979 CEST	52450	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:22.563838005 CEST	65513	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:22.573101997 CEST	53	65513	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:22.573427916 CEST	53	52899	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:22.576450109 CEST	53	61199	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:22.577939987 CEST	53	52450	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:24.262136936 CEST	60347	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:24.262528896 CEST	61773	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:24.271450043 CEST	53	60347	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:24.275419950 CEST	53	61773	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:25.059797049 CEST	58358	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:25.059797049 CEST	59591	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:17:25.225481987 CEST	53	58358	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:25.226563931 CEST	53	59591	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:26.606405020 CEST	53	57253	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:27.639098883 CEST	53	49303	1.1.1.1	192.168.2.4
Oct 10, 2024 21:17:28.956162930 CEST	138	138	192.168.2.4	192.168.2.255
Oct 10, 2024 21:17:45.659873962 CEST	53	60859	1.1.1.1	192.168.2.4
Oct 10, 2024 21:18:08.380521059 CEST	53	57937	1.1.1.1	192.168.2.4
Oct 10, 2024 21:18:08.384078026 CEST	53	55927	1.1.1.1	192.168.2.4
Oct 10, 2024 21:18:09.429666996 CEST	53	57203	1.1.1.1	192.168.2.4
Oct 10, 2024 21:18:12.894889116 CEST	54157	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:18:12.895044088 CEST	56364	53	192.168.2.4	1.1.1.1
Oct 10, 2024 21:18:12.907150984 CEST	53	54157	1.1.1.1	192.168.2.4
Oct 10, 2024 21:18:12.907285929 CEST	53	56364	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 10, 2024 21:17:09.616738081 CEST	192.168.2.4	1.1.1.1	0x65ee	Standard query (0)	helawok.x-sns.cloud	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:09.617199898 CEST	192.168.2.4	1.1.1.1	0x5fca	Standard query (0)	helawok.x-sns.cloud	65	IN (0x0001)	false
Oct 10, 2024 21:17:10.392715931 CEST	192.168.2.4	1.1.1.1	0x9857	Standard query (0)	g.fastcdn.co	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:10.393099070 CEST	192.168.2.4	1.1.1.1	0xd8e0	Standard query (0)	g.fastcdn.co	65	IN (0x0001)	false
Oct 10, 2024 21:17:10.420516968 CEST	192.168.2.4	1.1.1.1	0x8a57	Standard query (0)	v.fastcdn.co	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:10.425509930 CEST	192.168.2.4	1.1.1.1	0x8bf7	Standard query (0)	v.fastcdn.co	65	IN (0x0001)	false
Oct 10, 2024 21:17:11.037976027 CEST	192.168.2.4	1.1.1.1	0xa0b9	Standard query (0)	g.fastcdn.co	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:11.038394928 CEST	192.168.2.4	1.1.1.1	0x2f8d	Standard query (0)	g.fastcdn.co	65	IN (0x0001)	false
Oct 10, 2024 21:17:11.167067051 CEST	192.168.2.4	1.1.1.1	0xade9	Standard query (0)	cdn.instapagemetrics.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:11.167176962 CEST	192.168.2.4	1.1.1.1	0x95f6	Standard query (0)	cdn.instapagemetrics.com	65	IN (0x0001)	false
Oct 10, 2024 21:17:11.167853117 CEST	192.168.2.4	1.1.1.1	0x897e	Standard query (0)	v.fastcdn.co	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:11.167985916 CEST	192.168.2.4	1.1.1.1	0x925d	Standard query (0)	v.fastcdn.co	65	IN (0x0001)	false
Oct 10, 2024 21:17:12.200357914 CEST	192.168.2.4	1.1.1.1	0x4b81	Standard query (0)	cdn.instapagemetrics.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:12.200540066 CEST	192.168.2.4	1.1.1.1	0x86b1	Standard query (0)	cdn.instapagemetrics.com	65	IN (0x0001)	false
Oct 10, 2024 21:17:12.203011990 CEST	192.168.2.4	1.1.1.1	0x4481	Standard query (0)	helawok.x-sns.cloud	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:12.203202963 CEST	192.168.2.4	1.1.1.1	0x2105	Standard query (0)	helawok.x-sns.cloud	65	IN (0x0001)	false
Oct 10, 2024 21:17:12.224976063 CEST	192.168.2.4	1.1.1.1	0x8527	Standard query (0)	ec.instapagemetrics.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:12.225157976 CEST	192.168.2.4	1.1.1.1	0x3554	Standard query (0)	ec.instapagemetrics.com	65	IN (0x0001)	false
Oct 10, 2024 21:17:12.832108021 CEST	192.168.2.4	1.1.1.1	0xb89e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:12.832211971 CEST	192.168.2.4	1.1.1.1	0xe3de	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 10, 2024 21:17:13.986234903 CEST	192.168.2.4	1.1.1.1	0xb0cb	Standard query (0)	okvanguardofficelogin.x-sns.cloud	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:13.986618996 CEST	192.168.2.4	1.1.1.1	0x1696	Standard query (0)	okvanguardofficelogin.x-sns.cloud	65	IN (0x0001)	false
Oct 10, 2024 21:17:14.628323078 CEST	192.168.2.4	1.1.1.1	0xaf3a	Standard query (0)	ec.instapagemetrics.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:14.628448009 CEST	192.168.2.4	1.1.1.1	0xcd4f	Standard query (0)	ec.instapagemetrics.com	65	IN (0x0001)	false
Oct 10, 2024 21:17:17.930402040 CEST	192.168.2.4	1.1.1.1	0x9143	Standard query (0)	024cc40a-acb15722.x-sns.cloud	65	IN (0x0001)	false
Oct 10, 2024 21:17:17.930402040 CEST	192.168.2.4	1.1.1.1	0xd021	Standard query (0)	024cc40a-acb15722.x-sns.cloud	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:20.513488054 CEST	192.168.2.4	1.1.1.1	0x4875	Standard query (0)	024cc40a-acb15722.x-sns.cloud	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:20.513578892 CEST	192.168.2.4	1.1.1.1	0xda7f	Standard query (0)	024cc40a-acb15722.x-sns.cloud	65	IN (0x0001)	false
Oct 10, 2024 21:17:21.918575048 CEST	192.168.2.4	1.1.1.1	0xc69d	Standard query (0)	04a63513-acb15722.x-sns.cloud	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:21.919015884 CEST	192.168.2.4	1.1.1.1	0x2e5c	Standard query (0)	04a63513-acb15722.x-sns.cloud	65	IN (0x0001)	false
Oct 10, 2024 21:17:22.560261965 CEST	192.168.2.4	1.1.1.1	0x3216	Standard query (0)	36f920fd-acb15722.x-sns.cloud	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:22.562266111 CEST	192.168.2.4	1.1.1.1	0xd049	Standard query (0)	36f920fd-acb15722.x-sns.cloud	65	IN (0x0001)	false
Oct 10, 2024 21:17:22.563642979 CEST	192.168.2.4	1.1.1.1	0x8884	Standard query (0)	l1ve.x-sns.cloud	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:22.563838005 CEST	192.168.2.4	1.1.1.1	0x804f	Standard query (0)	l1ve.x-sns.cloud	65	IN (0x0001)	false
Oct 10, 2024 21:17:24.262136936 CEST	192.168.2.4	1.1.1.1	0x3f9f	Standard query (0)	36f920fd-acb15722.x-sns.cloud	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:24.262528896 CEST	192.168.2.4	1.1.1.1	0xf87c	Standard query (0)	36f920fd-acb15722.x-sns.cloud	65	IN (0x0001)	false
Oct 10, 2024 21:17:25.059797049 CEST	192.168.2.4	1.1.1.1	0x88df	Standard query (0)	18f930cb-acb15722.x-sns.cloud	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:25.059797049 CEST	192.168.2.4	1.1.1.1	0x110b	Standard query (0)	18f930cb-acb15722.x-sns.cloud	65	IN (0x0001)	false
Oct 10, 2024 21:18:12.894889116 CEST	192.168.2.4	1.1.1.1	0x2138	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:18:12.895044088 CEST	192.168.2.4	1.1.1.1	0x1036	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 10, 2024 21:17:09.633692980 CEST	1.1.1.1	192.168.2.4	0x65ee	No error (0)	helawok.x-sns.cloud	secure.pageserve.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 21:17:09.633692980 CEST	1.1.1.1	192.168.2.4	0x65ee	No error (0)	secure.pageserve.co		172.64.149.213	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:09.633692980 CEST	1.1.1.1	192.168.2.4	0x65ee	No error (0)	secure.pageserve.co		104.18.38.43	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:09.636588097 CEST	1.1.1.1	192.168.2.4	0x5fca	No error (0)	helawok.x-sns.cloud	secure.pageserve.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 21:17:09.636588097 CEST	1.1.1.1	192.168.2.4	0x5fca	No error (0)	secure.pageserve.co			65	IN (0x0001)	false
Oct 10, 2024 21:17:10.404392958 CEST	1.1.1.1	192.168.2.4	0x9857	No error (0)	g.fastcdn.co		104.18.41.218	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:10.404392958 CEST	1.1.1.1	192.168.2.4	0x9857	No error (0)	g.fastcdn.co		172.64.146.38	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:10.404428959 CEST	1.1.1.1	192.168.2.4	0xd8e0	No error (0)	g.fastcdn.co			65	IN (0x0001)	false
Oct 10, 2024 21:17:10.432360888 CEST	1.1.1.1	192.168.2.4	0x8a57	No error (0)	v.fastcdn.co		172.64.146.38	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:10.432360888 CEST	1.1.1.1	192.168.2.4	0x8a57	No error (0)	v.fastcdn.co		104.18.41.218	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:10.436531067 CEST	1.1.1.1	192.168.2.4	0x8bf7	No error (0)	v.fastcdn.co			65	IN (0x0001)	false
Oct 10, 2024 21:17:11.045501947 CEST	1.1.1.1	192.168.2.4	0xa0b9	No error (0)	g.fastcdn.co		104.18.41.218	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:11.045501947 CEST	1.1.1.1	192.168.2.4	0xa0b9	No error (0)	g.fastcdn.co		172.64.146.38	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:11.047369957 CEST	1.1.1.1	192.168.2.4	0x2f8d	No error (0)	g.fastcdn.co			65	IN (0x0001)	false
Oct 10, 2024 21:17:11.177408934 CEST	1.1.1.1	192.168.2.4	0x897e	No error (0)	v.fastcdn.co		104.18.41.218	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:11.177408934 CEST	1.1.1.1	192.168.2.4	0x897e	No error (0)	v.fastcdn.co		172.64.146.38	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:11.177710056 CEST	1.1.1.1	192.168.2.4	0xade9	No error (0)	cdn.instapagemetrics.com		34.36.17.181	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:11.179784060 CEST	1.1.1.1	192.168.2.4	0x925d	No error (0)	v.fastcdn.co			65	IN (0x0001)	false
Oct 10, 2024 21:17:12.210128069 CEST	1.1.1.1	192.168.2.4	0x4b81	No error (0)	cdn.instapagemetrics.com		34.36.17.181	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:12.221932888 CEST	1.1.1.1	192.168.2.4	0x4481	No error (0)	helawok.x-sns.cloud	secure.pageserve.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 21:17:12.221932888 CEST	1.1.1.1	192.168.2.4	0x4481	No error (0)	secure.pageserve.co		104.18.38.43	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:12.221932888 CEST	1.1.1.1	192.168.2.4	0x4481	No error (0)	secure.pageserve.co		172.64.149.213	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:12.222712994 CEST	1.1.1.1	192.168.2.4	0x2105	No error (0)	helawok.x-sns.cloud	secure.pageserve.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 21:17:12.222712994 CEST	1.1.1.1	192.168.2.4	0x2105	No error (0)	secure.pageserve.co			65	IN (0x0001)	false
Oct 10, 2024 21:17:12.232979059 CEST	1.1.1.1	192.168.2.4	0x8527	No error (0)	ec.instapagemetrics.com		172.67.185.227	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:12.232979059 CEST	1.1.1.1	192.168.2.4	0x8527	No error (0)	ec.instapagemetrics.com		104.21.51.207	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:12.233741045 CEST	1.1.1.1	192.168.2.4	0x3554	No error (0)	ec.instapagemetrics.com			65	IN (0x0001)	false
Oct 10, 2024 21:17:12.840214968 CEST	1.1.1.1	192.168.2.4	0xe3de	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 10, 2024 21:17:12.840483904 CEST	1.1.1.1	192.168.2.4	0xb89e	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:13.998850107 CEST	1.1.1.1	192.168.2.4	0xb0cb	No error (0)	okvanguardofficelogin.x-sns.cloud		172.233.53.209	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:14.635318041 CEST	1.1.1.1	192.168.2.4	0xaf3a	No error (0)	ec.instapagemetrics.com		172.67.185.227	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:14.635318041 CEST	1.1.1.1	192.168.2.4	0xaf3a	No error (0)	ec.instapagemetrics.com		104.21.51.207	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:14.639113903 CEST	1.1.1.1	192.168.2.4	0xcd4f	No error (0)	ec.instapagemetrics.com			65	IN (0x0001)	false
Oct 10, 2024 21:17:17.940598965 CEST	1.1.1.1	192.168.2.4	0xd021	No error (0)	024cc40a-acb15722.x-sns.cloud		172.233.53.209	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:20.523514032 CEST	1.1.1.1	192.168.2.4	0x4875	No error (0)	024cc40a-acb15722.x-sns.cloud		172.233.53.209	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:21.932864904 CEST	1.1.1.1	192.168.2.4	0xc69d	No error (0)	04a63513-acb15722.x-sns.cloud		172.233.53.209	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:22.573427916 CEST	1.1.1.1	192.168.2.4	0x3216	No error (0)	36f920fd-acb15722.x-sns.cloud		172.233.53.209	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:22.577939987 CEST	1.1.1.1	192.168.2.4	0x8884	No error (0)	l1ve.x-sns.cloud		172.233.53.209	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:22.651241064 CEST	1.1.1.1	192.168.2.4	0xb60b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:22.651241064 CEST	1.1.1.1	192.168.2.4	0xb60b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:23.236618042 CEST	1.1.1.1	192.168.2.4	0x40d2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 21:17:23.236618042 CEST	1.1.1.1	192.168.2.4	0x40d2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:24.271450043 CEST	1.1.1.1	192.168.2.4	0x3f9f	No error (0)	36f920fd-acb15722.x-sns.cloud		172.233.53.209	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:25.225481987 CEST	1.1.1.1	192.168.2.4	0x88df	No error (0)	18f930cb-acb15722.x-sns.cloud		172.233.53.209	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:17:36.388356924 CEST	1.1.1.1	192.168.2.4	0xfc22	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 21:17:36.388356924 CEST	1.1.1.1	192.168.2.4	0xfc22	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:18:00.748665094 CEST	1.1.1.1	192.168.2.4	0x2f99	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 21:18:00.748665094 CEST	1.1.1.1	192.168.2.4	0x2f99	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:18:06.131875038 CEST	1.1.1.1	192.168.2.4	0x4c94	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 21:18:06.131875038 CEST	1.1.1.1	192.168.2.4	0x4c94	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:18:12.907150984 CEST	1.1.1.1	192.168.2.4	0x2138	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 10, 2024 21:18:12.907285929 CEST	1.1.1.1	192.168.2.4	0x1036	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 10, 2024 21:18:21.566636086 CEST	1.1.1.1	192.168.2.4	0xab79	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 21:18:21.566636086 CEST	1.1.1.1	192.168.2.4	0xab79	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

helawok.x-sns.cloud

g.fastcdn.co

v.fastcdn.co

cdn.instapagemetrics.com

ec.instapagemetrics.com

okvanguardofficelogin.x-sns.cloud

fs.microsoft.com

https:

024cc40a-acb15722.x-sns.cloud

l1ve.x-sns.cloud

36f920fd-acb15722.x-sns.cloud

18f930cb-acb15722.x-sns.cloud

04a63513-acb15722.x-sns.cloud

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	172.64.149.213	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:10 UTC	662	OUT	GET / HTTP/1.1 Host: helawok.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:10 UTC	706	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1 Referrer-Policy: same-origin Strict-Transport-Security: max-age=15552000 Via: 1.1 google, 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ; path=/; expires=Thu, 10-Oct-24 19:47:10 GMT; domain=.helawok.x-sns.cloud; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8d08f2f35a7332c7-EWR
2024-10-10 19:17:10 UTC	663	IN	Data Raw: 33 35 38 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 Data Ascii: 358f<!DOCTYPE html><html ><head> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="format-detection" content="telephone=no"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /><meta http-equiv="
2024-10-10 19:17:10 UTC	1369	IN	Data Raw: 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 72 74 69 63 6c 65 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a Data Ascii: <meta property="og:locale" content="en_US"><meta property="og:type" content="article"><meta property="og:title" content=""><meta property="og:description" content=""><meta property="og:site_name" content=""><meta property="og:url" content="https:
2024-10-10 19:17:10 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 62 6f 78 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 7d 2e 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 68 69 64 64 65 6e 2d 73 74 65 70 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 7d 2e 63 6c 65 61 72 66 69 78 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 7d 73 75 70 2c 73 75 62 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 2e 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 7d 62 6f 64 79 23 6c 61 6e 64 69 6e 67 2d 70 61 67 65 20 2e 76 69 73 75 61 6c 6c 79 2d 68 69 64 64 65 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 Data Ascii: content-box{box-sizing:content-box;}.hidden{display:none;}.hidden-step{visibility:hidden;}.clearfix{clear:both;}sup,sub{margin-left:0.1rem;line-height:0;}body#landing-page .visually-hidden{position:absolute;width:1px;height:1px;margin:-1px;padding:0;overf
2024-10-10 19:17:10 UTC	1369	IN	Data Raw: 6c 64 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 7d 3a 72 6f 6f 74 7b 2d 2d 73 65 63 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 2d 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 7d 2e 73 65 63 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 7d 2e 6a 73 2d 74 65 78 74 2d 73 63 61 6c 69 6e 67 20 2e 73 65 63 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 7b 6d 61 72 67 69 6e 3a 76 61 72 28 2d 2d 73 65 63 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 2d 6d 61 72 67 69 6e 29 3b 7d 2e 73 65 63 74 69 6f 6e 2d 69 6e 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 23 70 61 67 65 5f 62 6c 6f 63 6b 5f 68 65 61 64 65 72 7b 68 65 69 67 68 74 3a 34 30 2e 38 37 35 72 65 6d 3b 6d 61 78 2d 77 69 Data Ascii: ld{position:sticky;}:root{--section-relative-margin:0 auto;}.section-relative{position:relative;margin:0 auto;}.js-text-scaling .section-relative{margin:var(--section-relative-margin);}.section-inner{height:100%;}#page_block_header{height:40.875rem;max-wi
2024-10-10 19:17:10 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 2d 68 6f 6c 64 65 72 2d 6f 76 65 72 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 23 70 61 67 65 5f 62 6c 6f 63 6b 5f 66 6f 6f 74 65 72 7b 68 65 69 67 68 74 3a 31 38 2e 39 33 37 35 72 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 23 70 61 67 65 5f 62 6c 6f 63 6b 5f 66 6f 6f 74 65 72 20 2e 73 65 63 74 69 6f 6e 2d 68 6f 6c 64 65 72 2d 62 6f 72 64 65 72 7b 62 6f 72 64 65 72 3a 30 3b 7d 23 70 61 67 65 5f 62 6c 6f 63 6b 5f 66 6f 6f 74 65 72 20 2e 73 65 63 74 69 6f 6e 2d 62 6c 6f 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 38 2e 39 33 37 35 72 65 6d 3b 7d 23 70 61 67 65 5f 62 6c 6f 63 6b 5f 66 6f 6f 74 65 72 20 2e 73 65 63 74 69 6f 6e 2d 68 6f 6c 64 65 72 2d 6f 76 65 72 6c 61 79 7b 64 69 73 Data Ascii: ction-holder-overlay{display:none;}#page_block_footer{height:18.9375rem;max-width:100%;}#page_block_footer .section-holder-border{border:0;}#page_block_footer .section-block{background:none;height:18.9375rem;}#page_block_footer .section-holder-overlay{dis
2024-10-10 19:17:10 UTC	1369	IN	Data Raw: 30 62 30 37 30 62 62 38 35 36 65 30 30 37 36 37 63 38 61 36 37 61 35 65 66 63 36 22 3b 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 70 61 67 65 5f 64 6f 6d 61 69 6e 20 3d 20 22 68 65 6c 61 77 6f 6b 2e 78 2d 73 6e 73 2e 63 6c 6f 75 64 22 3b 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 70 61 67 65 5f 67 65 6e 65 72 61 74 6f 72 20 3d 20 74 72 75 65 3b 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 20 3d 20 6e 75 6c 6c 3b 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 6e 65 77 5f 74 72 61 63 6b 65 72 20 3d 20 74 72 75 65 3b 0a 20 20 77 69 6e 64 6f 77 2e 5f 54 72 61 6e 73 6c 61 74 65 20 3d 20 7b 20 0a 20 20 20 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 3a 20 7b 7d 2c 0a 20 20 20 20 73 65 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 65 78 74 2c 20 74 72 61 6e 73 6c 61 Data Ascii: 0b070bb856e00767c8a67a5efc6"; window.__page_domain = "helawok.x-sns.cloud"; window.__page_generator = true; window.__experiment_id = null; window.__new_tracker = true; window._Translate = { translations: {}, set: function (text, transla
2024-10-10 19:17:10 UTC	1369	IN	Data Raw: 20 3b 28 66 75 6e 63 74 69 6f 6e 28 70 2c 6c 2c 6f 2c 77 2c 69 2c 6e 2c 67 29 7b 69 66 28 21 70 5b 69 5d 29 7b 70 2e 47 6c 6f 62 61 6c 53 6e 6f 77 70 6c 6f 77 4e 61 6d 65 73 70 61 63 65 3d 70 2e 47 6c 6f 62 61 6c 53 6e 6f 77 70 6c 6f 77 4e 61 6d 65 73 70 61 63 65 7c 7c 5b 5d 3b 0a 20 20 20 20 70 2e 47 6c 6f 62 61 6c 53 6e 6f 77 70 6c 6f 77 4e 61 6d 65 73 70 61 63 65 2e 70 75 73 68 28 69 29 3b 70 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 70 5b 69 5d 2e 71 3d 70 5b 69 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 0a 20 20 20 20 7d 3b 70 5b 69 5d 2e 71 3d 70 5b 69 5d 2e 71 7c 7c 5b 5d 3b 6e 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 29 3b 67 3d 6c 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6f Data Ascii: ;(function(p,l,o,w,i,n,g){if(!p[i]){p.GlobalSnowplowNamespace=p.GlobalSnowplowNamespace\|\|[]; p.GlobalSnowplowNamespace.push(i);p[i]=function(){(p[i].q=p[i].q\|\|[]).push(arguments) };p[i].q=p[i].q\|\|[];n=l.createElement(o);g=l.getElementsByTagName(o
2024-10-10 19:17:10 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 53 6e 6f 77 70 6c 6f 77 20 74 72 61 63 6b 65 72 20 65 72 72 6f 72 27 2c 20 65 29 3b 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 69 64 3d 22 69 70 2d 63 6d 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 31 3e 0a 20 20 20 20 3b 28 66 75 6e 63 74 69 6f 6e 28 63 2c 6f 2c 6e 2c 73 2c 65 2c 6d 2c 61 29 7b 63 5b 65 5d 7c 7c 28 63 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 63 5b 65 5d 2e 71 3d 63 5b 65 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 2c 0a 20 20 20 20 20 63 5b 65 5d 2e 71 3d 63 5b 65 5d 2e 71 7c 7c 5b 5d 2c 6d 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6e 29 Data Ascii: console.warn('Snowplow tracker error', e); } </script> <script id="ip-cm" type="text/javascript" async=1> ;(function(c,o,n,s,e,m,a){c[e]\|\|(c[e]=function(){(c[e].q=c[e].q\|\|[]).push(arguments)}, c[e].q=c[e].q\|\|[],m=o.createElement(n)
2024-10-10 19:17:10 UTC	1369	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 73 20 63 72 6f 70 70 65 64 20 69 74 65 6d 2d 62 6c 6f 63 6b 22 20 64 61 74 61 2d 61 74 3d 22 69 6d 61 67 65 2d 63 72 6f 70 70 22 3e 0a 20 20 20 20 3c 61 0a 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 63 6c 61 73 73 3d 22 75 72 6c 2d 6c 69 6e 6b 20 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 2d 62 6f 78 20 69 74 65 6d 2d 62 6c 6f 63 6b 22 20 0a 20 20 20 20 20 20 69 64 3d 22 6c 69 6e 6b 2d 22 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 64 61 74 61 2d 61 74 3d 22 69 6d 61 67 65 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 64 61 74 61 2d 6c 69 6e 6b 2d 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 3e 0a 20 20 20 20 20 20 3c 69 6d 67 0a 20 20 20 20 20 20 20 20 63 6c 61 Data Ascii: <div class="contents cropped item-block" data-at="image-cropp"> <a class="url-link item-content-box item-block" id="link-" data-at="image-link" data-link- > <img cla
2024-10-10 19:17:10 UTC	1369	IN	Data Raw: 20 69 74 65 6d 2d 62 6c 6f 63 6b 20 69 74 65 6d 2d 61 62 73 6f 6c 75 74 65 22 20 64 61 74 61 2d 61 74 3d 22 73 65 63 74 69 6f 6e 2d 62 6f 72 64 65 72 22 3e 3c 2f 64 69 76 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 2d 68 6f 6c 64 65 72 2d 6f 76 65 72 6c 61 79 20 69 74 65 6d 2d 62 6c 6f 63 6b 20 69 74 65 6d 2d 61 62 73 6f 6c 75 74 65 22 20 64 61 74 61 2d 61 74 3d 22 73 65 63 74 69 6f 6e 2d 6f 76 65 72 6c 61 79 22 3e 3c 2f 64 69 76 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 2d 62 6c 6f 63 6b 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 2d 69 6e 6e 65 72 20 73 65 63 74 69 6f 6e 2d 66 69 74 20 73 65 63 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 22 3e 0a 20 20 20 20 3c 2f 64 69 76 Data Ascii: item-block item-absolute" data-at="section-border"></div> <div class="section-holder-overlay item-block item-absolute" data-at="section-overlay"></div> <div class="section-block"> <div class="section-inner section-fit section-relative"> </div

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:10 UTC	508	OUT	GET /js/utils.bcf03997485feb49f2c7.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 10 Oct 2025 19:17:11 GMT last-modified: Tue, 01 Oct 2024 08:33:42 GMT etag: W/"52d20b91b912a77e27855528a7e7d54c" vary: Accept-Encoding x-goog-generation: 1727771622179202 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 20154 x-goog-hash: crc32c=k6Mv5g== x-goog-hash: md5=UtILkbkSp34nhVUop+fVTA== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: AD-8ljv0autreZ-QJ7-WIOe7r9G-tNMahmaKlYhZDkSHoqz-i6IDshjJTCQgRXrVfua2pURVVF-98TN9Rw CF-Cache-Status: HIT Age: 805883 Server: cloudflare CF-RAY: 8d08f2f7ab500c92-EWR
2024-10-10 19:17:11 UTC	594	IN	Data Raw: 37 63 35 66 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 2c 72 3d 7b 35 36 32 37 3a 74 3d 3e 7b 76 61 72 20 72 3d 7b 61 6c 70 68 61 62 65 74 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 6c 6f 6f 6b 75 70 3a 6e 75 6c 6c 2c 69 65 3a 2f 4d 53 49 45 20 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 63 68 65 63 6b 49 73 4e 61 4e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 4e 75 6d 62 65 72 2e 69 73 4e 61 4e 28 74 29 7d 2c 74 6f 55 74 66 38 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 65 3d 2d 31 2c 6e 3d 74 Data Ascii: 7c5f(()=>{var t,r={5627:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 6e 29 5d 3d 6e 3b 6e 3d 2d 31 7d 66 6f 72 28 65 3d 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 3c 65 26 26 28 69 5b 30 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 6e 29 5d 2c 69 5b 31 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 6f 2e 70 75 73 68 28 69 5b 30 5d 3c 3c 32 7c 69 5b 31 5d 3e 3e 34 29 2c 69 5b 32 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 32 5d 29 26 26 28 6f 2e 70 75 73 68 28 28 31 35 26 69 5b 31 5d 29 3c 3c 34 7c 69 5b 32 5d 3e 3e 32 29 2c 69 5b 33 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 33 5d 29 3b 29 6f 2e 70 75 73 68 28 28 33 26 69 5b 32 Data Ascii: alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[2
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 31 39 31 26 26 65 5b 6f 5d 3c 32 32 34 3f 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 33 31 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3a 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 31 35 26 65 5b 6f 2b 2b 5d 29 3c 3c 31 32 7c 28 36 33 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 62 61 73 65 36 34 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 65 6e 63 6f 64 65 28 74 29 7d 2c 62 61 73 65 36 34 44 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 63 6f 64 65 28 74 29 7d 7d 7d 2c 33 39 33 30 3a 28 74 2c 72 2c 65 29 3d Data Ascii: 191&&e[o]<224?a+=String.fromCharCode((31&e[o++])<<6\|63&e[o++]):a+=String.fromCharCode((15&e[o++])<<12\|(63&e[o++])<<6\|63&e[o++]);return a}};t.exports={base64Encode:function(t){return r.encode(t)},base64Decode:function(t){return r.decode(t)}}},3930:(t,r,e)=
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 53 3a 28 29 3d 3e 73 2c 52 69 3a 28 29 3d 3e 67 2c 55 4e 3a 28 29 3d 3e 45 2e 55 4e 2c 4a 4c 3a 28 29 3d 3e 79 2c 77 6d 3a 28 29 3d 3e 76 2c 6a 42 3a 28 29 3d 3e 62 2c 46 72 3a 28 29 3d 3e 70 2c 72 77 3a 28 29 3d 3e 68 2c 63 4b 3a 28 29 3d 3e 45 2e 63 4b 2c 4f 52 3a 28 29 3d 3e 63 2c 76 3a 28 29 3d 3e 45 2e 76 2c 69 54 3a 28 29 3d 3e 45 2e 69 54 2c 4a 79 3a 28 29 3d 3e 77 2c 54 56 3a 28 29 3d 3e 6d 2c 6e 46 3a 28 29 3d 3e 6c 2c 4d 4d 3a 28 29 3d 3e 64 7d 29 2c 65 28 32 35 31 34 29 2c 65 28 38 32 38 33 29 2c 65 28 35 33 34 29 2c 65 28 36 36 31 32 29 2c 65 28 36 34 39 35 29 2c 65 28 36 39 35 37 29 2c 65 28 31 30 32 38 29 2c 65 28 33 32 31 29 2c 65 28 39 35 37 30 29 2c 65 28 36 32 35 33 29 2c 65 28 34 34 34 31 29 2c 65 28 38 39 32 39 29 2c 65 28 31 35 35 34 Data Ascii: S:()=>s,Ri:()=>g,UN:()=>E.UN,JL:()=>y,wm:()=>v,jB:()=>b,Fr:()=>p,rw:()=>h,cK:()=>E.cK,OR:()=>c,v:()=>E.v,iT:()=>E.iT,Jy:()=>w,TV:()=>m,nF:()=>l,MM:()=>d}),e(2514),e(8283),e(534),e(6612),e(6495),e(6957),e(1028),e(321),e(9570),e(6253),e(4441),e(8929),e(1554
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 72 65 74 75 72 6e 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 72 29 7b 74 72 79 7b 76 61 72 20 65 3d 6e 65 77 20 55 52 4c 28 74 29 3b 72 65 74 75 72 6e 20 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 72 2c 74 29 7d 29 29 2c 65 2e 68 72 65 66 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 20 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 74 29 7b 76 61 72 20 72 2c 65 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 Data Ascii: !==arguments[0]?arguments[0]:window.location.search;return new URLSearchParams(t)}function d(t,r){try{var e=new URL(t);return r.forEach((function(t,r){return e.searchParams.set(r,t)})),e.href}catch(r){return t}}function y(t){var r,e,n=arguments.length>1&&
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 29 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 76 61 72 20 72 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 20 29 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 28 5b 5e 3b 5d 2b 29 22 29 29 2c 65 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 2e 6d 61 74 63 68 28 72 29 3b 72 65 74 75 72 6e 20 65 3f 65 5b 32 5d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 72 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 3b 22 29 7d 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 Data Ascii: )):null}function g(t){var r=new RegExp("(^\| )".concat(t,"=([^;]+)")),e=decodeURIComponent(document.cookie).match(r);return e?e[2]:null}function m(t,r){document.cookie="".concat(t,"=").concat(r,";")}var b=function(){return null!==document.documentElement.g
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 28 72 29 7c 7c 21 72 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 6e 3d 72 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 7b 76 61 72 20 6f 3d 6e 2e 63 61 6c 6c 28 72 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 72 29 7d 28 72 29 3b 72 Data Ascii: ,o)}}function e(r){var e=function(r,e){if("object"!=t(r)\|\|!r)return r;var n=r[Symbol.toPrimitive];if(void 0!==n){var o=n.call(r,"string");if("object"!=t(o))return o;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(r)}(r);r
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 74 3b 76 61 72 20 74 2c 65 7d 28 29 2c 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6c 61 73 73 4c 69 73 74 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 28 74 68 69 73 29 7d 7d 29 2c 77 69 6e 64 6f 77 2e 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 26 26 21 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 26 26 28 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 Data Ascii: neProperty(t,"prototype",{writable:!1}),t;var t,e}(),"classList"in Element.prototype\|\|Object.defineProperty(Element.prototype,"classList",{get:function(){return new a(this)}}),window.DOMTokenList&&!DOMTokenList.prototype.replace&&(DOMTokenList.prototype.r
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 6f 5b 69 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 6e 28 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 29 26 26 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 72 2c 6f 29 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6d 6f 76 65 41 6c 6c 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 3d 5b 5d 7d 7d 5d 2c 72 26 26 6f 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 74 3b 76 61 72 20 74 2c Data Ascii: o[i-1]=arguments[i];"object"===n(this.events[t])&&this.events[t].forEach((function(t){return t.apply(r,o)}))}},{key:"removeAllListeners",value:function(t){this.events[t]=[]}}],r&&o(t.prototype,r),Object.defineProperty(t,"prototype",{writable:!1}),t;var t,
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 6e 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 6e 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b Data Ascii: n n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},n(t)}function o(t,r){for(var e=0;e<r.length;e++){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:10 UTC	509	OUT	GET /js/Cradle.904200e3dbc62d5b0155.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	766	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 10 Oct 2025 19:17:10 GMT last-modified: Mon, 23 Sep 2024 10:27:12 GMT etag: W/"77c2f571effc542dd4a8d31d0b63ab5d" vary: Accept-Encoding x-goog-generation: 1727087232830329 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 4266 x-goog-hash: crc32c=3+1u7Q== x-goog-hash: md5=d8L1ce/8VC3UqNMdC2OrXQ== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: AD-8ljvOU5Yn4xc7eYAYSjsUqFH8tI4Ys8i1YAMmyocug81eNZWqb0qzxDoWv9iiYsz0QkztkA CF-Cache-Status: HIT Age: 128153 Server: cloudflare CF-RAY: 8d08f2f78b63428e-EWR
2024-10-10 19:17:11 UTC	603	IN	Data Raw: 34 37 66 63 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 36 5d 2c 7b 37 38 32 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 34 35 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: 47fc"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[846],{7829:(e,t,r)=>{var n=r(4594);function i(e){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 69 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 7d 28 65 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 69 28 74 29 3f 74 3a 74 2b 22 22 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f Data Ascii: 0!==r){var n=r.call(e,"string");if("object"!=i(n))return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==i(t)?t:t+""}var u=function(){return e=function e(){!function(e,t){if(!(e instanceof t))thro
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6c 28 6e 2e 6b 65 79 29 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 63 28 65 29 7c 7c 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 63 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 Data Ascii: able\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,l(n.key),n)}}function l(e){var t=function(e,t){if("object"!=c(e)\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,"string");if("object"!=c(n))return n;th
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 74 6f 72 61 67 65 4b 65 79 2c 74 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 74 6f 72 61 67 65 4b 65 79 2c 22 2d 65 78 70 69 72 65 73 22 29 3b 74 68 69 73 2e 5f 73 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 65 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 2e 73 74 6f 72 61 67 65 4f 62 6a 65 63 74 29 29 2c 74 68 69 73 2e 5f 73 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 74 2c 74 68 69 73 2e 5f 67 65 74 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 68 65 63 6b 52 65 73 65 74 44 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 73 74 6f 72 61 67 65 4f 62 6a 65 63 74 5b 74 68 69 Data Ascii: =this.config.storageKey,t="".concat(this.config.storageKey,"-expires");this._setStoreContents(e,JSON.stringify(this.storageObject)),this._setStoreContents(t,this._getExpirationTime())}},{key:"_checkResetDate",value:function(e){var t=this.storageObject[thi
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6b 65 79 28 72 29 3b 69 66 28 6e 2e 6d 61 74 63 68 28 2f 2e 2d 65 78 70 69 72 65 73 2f 67 29 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 6e 29 2c 6f 3d 6e 65 77 20 44 61 74 65 28 69 29 3b 74 2e 67 65 74 54 69 6d 65 28 29 3e 3d 6f 2e 67 65 74 54 69 6d 65 28 29 26 26 65 2e 70 75 73 68 28 6e 2c 6e 2e 72 65 70 6c 61 63 65 28 22 2d 65 78 70 69 72 65 73 22 2c 22 22 29 29 7d 7d 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 7d 29 29 7d 63 61 74 63 Data Ascii: ocalStorage.length;r++){var n=window.localStorage.key(r);if(n.match(/.-expires/g)){var i=this._getStoreContents(n),o=new Date(i);t.getTime()>=o.getTime()&&e.push(n,n.replace("-expires",""))}}e.forEach((function(e){window.localStorage.removeItem(e)}))}catc
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 6c 65 61 64 43 6f 6e 76 65 72 74 65 64 3d 74 68 69 73 2e 69 73 4c 65 61 64 43 6f 6e 76 65 72 74 65 64 28 29 2c 74 68 69 73 2e 63 61 6d 70 61 69 67 6e 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 43 61 6d 70 61 69 67 6e 28 29 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 52 65 66 65 72 72 65 72 28 29 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 73 65 74 56 61 6c 75 65 28 79 2e 46 4c 41 47 5f 52 45 53 50 4f 4e 53 49 56 45 5f 4d 4f 44 45 2c 74 68 69 73 2e 69 73 4d 6f 62 69 6c 65 29 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 73 61 76 65 28 29 7d 2c 28 74 3d 5b 7b 6b 65 79 3a 22 73 65 74 56 69 73 69 74 65 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 76 69 73 69 74 65 64 3d 21 30 2c 74 68 Data Ascii: ,this.leadConverted=this.isLeadConverted(),this.campaign=this._detectCampaign(),this.referrer=this._detectReferrer(),this.storage.setValue(y.FLAG_RESPONSIVE_MODE,this.isMobile),this.storage.save()},(t=[{key:"setVisited",value:function(){this.visited=!0,th
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 68 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 Data Ascii: iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},h(e)}function m(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 74 69 6e 67 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 63 61 6c 6c 62 61 63 6b 3a 20 22 2c 65 29 7d 7d 29 29 7d 29 29 7d 7d 7d 5d 2c 6e 75 6c 6c 26 26 6d 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 75 6c 6c 29 2c 74 26 26 6d 28 65 2c 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 3b 76 61 72 20 65 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 72 65 74 75 72 6e 20 53 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d Data Ascii: ting user-defined callback: ",e)}}))}))}}}],null&&m(e.prototype,null),t&&m(e,t),Object.defineProperty(e,"prototype",{writable:!1}),e;var e,t}();function S(e){return S="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 31 79 2d 77 69 64 67 65 74 2d 74 65 78 74 2d 64 65 63 72 65 61 73 65 22 29 5b 30 5d 2c 74 68 69 73 2e 69 6e 63 72 65 61 73 65 54 65 78 74 54 72 69 67 67 65 72 3d 28 30 2c 6e 2e 69 54 29 28 22 23 61 31 31 79 2d 77 69 64 67 65 74 2d 74 65 78 74 2d 69 6e 63 72 65 61 73 65 22 29 5b 30 5d 2c 28 30 2c 6e 2e 71 32 29 28 74 68 69 73 2e 61 31 31 79 54 72 69 67 67 65 72 2c 22 63 6c 69 63 6b 22 2c 65 2e 5f 73 68 6f 77 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 29 2c 28 30 2c 6e 2e 71 32 29 28 74 68 69 73 2e 6d 61 69 6e 2c 22 63 6c 69 63 6b 22 2c 65 2e 5f 68 69 64 65 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 29 2c 28 30 2c 6e 2e 71 32 29 28 74 68 69 73 2e 64 65 63 72 65 61 73 65 54 65 78 74 54 72 69 67 67 65 72 2c 22 63 6c 69 63 6b 22 2c 65 2e 5f 68 61 6e 64 6c 65 4c Data Ascii: 1y-widget-text-decrease")[0],this.increaseTextTrigger=(0,n.iT)("#a11y-widget-text-increase")[0],(0,n.q2)(this.a11yTrigger,"click",e._showWidgetControls),(0,n.q2)(this.main,"click",e._hideWidgetControls),(0,n.q2)(this.decreaseTextTrigger,"click",e._handleL
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 7d 7d 2c 7b 6b 65 79 3a 22 5f 68 61 6e 64 6c 65 4c 65 76 65 6c 43 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 65 2e 61 31 31 79 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 75 72 72 65 6e 74 2d 6c 65 76 65 6c 22 29 3b 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 3d 3d 65 2e 69 6e 63 72 65 61 73 65 54 65 78 74 54 72 69 67 67 65 72 3f 72 2b 2b 3a 72 2d 2d 2c 72 3e 3d 30 26 26 72 3c 35 26 26 28 65 2e 61 31 31 79 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 75 72 72 65 6e 74 2d 6c 65 76 65 6c 22 2c 72 29 2c 65 2e 5f 61 63 74 69 76 61 74 65 49 6e 64 69 63 61 74 6f 72 73 28 72 29 2c 65 2e 5f Data Ascii: }},{key:"_handleLevelChange",value:function(t){var r=e.a11yWidgetControls.getAttribute("data-current-level");t.currentTarget===e.increaseTextTrigger?r++:r--,r>=0&&r<5&&(e.a11yWidgetControls.setAttribute("data-current-level",r),e._activateIndicators(r),e._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49739	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:10 UTC	508	OUT	GET /js/Links.c1a9dcf75cfbd1ae01c0.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	767	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 10 Oct 2025 19:17:11 GMT last-modified: Mon, 23 Sep 2024 10:27:13 GMT etag: W/"813cfa21f919254e225528873cd4250c" vary: Accept-Encoding x-goog-generation: 1727087233759392 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 285 x-goog-hash: crc32c=WSORaQ== x-goog-hash: md5=gTz6IfkZJU4iVSiHPNQlDA== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: AD-8ljt_J5zwbO5n0lPugs-LhFf-WhETMxW2_JIFTF6AROctLXA7WIQPOY2u6ZR1Vvy2J-f-NLY CF-Cache-Status: HIT Age: 1496585 Server: cloudflare CF-RAY: 8d08f2f7a8ec420b-EWR
2024-10-10 19:17:11 UTC	386	IN	Data Raw: 31 37 62 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 30 5d 2c 7b 32 35 39 34 3a 28 6e 2c 61 2c 65 29 3d 3e 7b 76 61 72 20 72 3d 65 28 34 35 39 34 29 2c 63 3d 5b 22 75 72 6c 2d 6c 69 6e 6b 22 2c 22 6c 61 6e 64 69 6e 67 2d 70 61 67 65 2d 6c 69 6e 6b 22 5d 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 61 2e 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 5b 64 61 74 61 2d 70 61 73 73 2d 70 61 72 61 6d 73 5d 22 29 7d 29 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 28 30 2c 72 2e 76 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 61 3d 28 30 2c 72 2e 77 6d 29 28 29 3b 61 2e 73 69 7a 65 Data Ascii: 17b"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[250],{2594:(n,a,e)=>{var r=e(4594),c=["url-link","landing-page-link"].map((function(n){return"a.".concat(n,"[data-pass-params]")})).join(", ");(0,r.v)((function(){var n,a=(0,r.wm)();a.size
2024-10-10 19:17:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49740	172.64.146.38	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:10 UTC	563	OUT	GET /u/33332e5f/65201939-0-H.png HTTP/1.1 Host: v.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	966	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Type: image/webp Content-Length: 26532 Connection: close Cache-Control: public, max-age=315360000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=65697 Content-Disposition: inline; filename="65201939-0-H.webp" Vary: Accept etag: "b5803a72603509146d5556c7fc0eab6d" expires: Sun, 08 Oct 2034 19:17:11 GMT last-modified: Thu, 10 Oct 2024 18:36:58 GMT x-goog-generation: 1728585418008319 x-goog-hash: crc32c=B1zGpg== x-goog-hash: md5=tYA6cmA1CRRtVVbH/A6rbQ== x-goog-meta-content-length: 0 x-goog-meta-expires: Mon, 01 Dec 2025 10:36:57 GMT x-goog-metageneration: 2 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 65697 x-guploader-uploadid: AHmUCY0PjE8iFqplC9RCdh4mfMaYenU7fAKNaHw5sL94bCoXoBuWV40aAb6IAAX4xuX7LU-9J9c CF-Cache-Status: HIT Age: 1453 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8d08f2f7cef24343-EWR
2024-10-10 19:17:11 UTC	403	IN	Data Raw: 52 49 46 46 9c 67 00 00 57 45 42 50 56 50 38 4c 90 67 00 00 2f a5 43 47 00 55 8b e2 b6 91 94 4c ff 65 2f 1d c3 2f 22 26 80 9d 6b c4 66 9a d7 00 b3 84 13 e0 2a 66 c6 b9 c0 d1 14 c3 b6 01 24 06 48 27 24 3e 24 ef f7 ff e7 df 69 24 fd 4d 9d 8d 25 3b 7b 85 22 1b e5 04 42 36 17 84 84 6c 0e 84 ca c2 12 08 84 ec 24 84 14 01 b2 ef 09 a9 90 1d 12 48 08 14 84 84 25 10 f6 25 8b 0b 88 09 4b 61 b2 41 b0 0d c7 51 ff 7e 9f cf f7 fb fd fd 7e e7 9c 96 7c d4 83 2a 62 16 0b 2e 90 a0 9d ab 59 a9 52 85 0b 8f 2c d1 96 3a 29 24 ba 16 e6 08 d1 cb cf 15 2e 90 85 a8 9a 7d 86 5a d1 b8 b7 28 47 0a 5d fb 92 bc 41 dc 1c a5 16 4a 16 b8 ef 51 94 f2 85 67 43 be e0 8c 67 9f d8 83 7c a4 39 aa 70 41 2f e0 d9 e8 91 2c d2 05 11 b3 7b 16 da b3 4f 9c 03 c3 2c bf 49 2d 8e ca 41 53 b7 20 14 b9 a5 Data Ascii: RIFFgWEBPVP8Lg/CGULe//"&kff$H'$>$i$M%;{"B6l$H%%KaAQ~~\|b.YR,:)$.}Z(G]AJQgCg\|9pA/,{O,I-AS
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 50 f6 2c 3f 6a 16 66 21 a0 e9 c5 aa 15 85 91 73 55 9b 2b 8a 40 72 6b 2c 64 a4 3a 4d a9 42 49 c1 13 6e ea cc 9e 72 a1 33 5b ef 56 29 4e 24 2b 47 01 5f a4 a6 b6 de 5c 8a c4 c5 d1 d4 66 59 63 98 7d b1 6a b3 d4 d6 1c 51 3e 17 47 cc 12 a4 89 29 06 60 1b 37 92 78 ff 7f 57 c1 f5 df a1 08 80 06 40 49 b6 2d 47 92 e2 df ff 2f d7 ca b4 fb 77 8f fd 6f 86 7d c0 4c 33 c4 e8 bf 2f c8 b6 ed b6 b5 6d 2b 2b 35 07 25 5b 52 47 c7 1b e8 00 01 c9 f3 07 af f5 ff cb dd ca b9 a6 30 b5 d8 32 76 d3 e7 02 d2 71 c9 0c b6 85 96 c5 68 8b c1 cc 28 30 93 cc 62 b4 b6 f6 de da d2 f2 fb 7f f7 d6 39 da 6f e8 7d af c1 2b e4 3b d8 67 ed 70 2e 80 99 ba 61 f2 1d 84 33 74 01 61 d2 72 1b d8 0e c3 ae bc 86 7d aa f4 ec 0b 38 ad 0f f9 b4 61 0f 43 a7 70 72 de 30 54 4c be 81 80 1a 2b d0 4d 15 18 ee c3 Data Ascii: P,?jf!sU+@rk,d:MBInr3[V)N$+G_\fYc}jQ>G)`7xW@I-G/wo}L3/m++5%[RG02vqh(0b9o}+;gp.a3tar}8aCpr0TL+M
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 03 c4 2d 98 cf 5f 1a 8b 2c 6e 17 42 10 32 b1 2f 0a 36 4d 08 f2 97 c2 d9 da 5b 8d 8b bf da 7c 1a 35 9f 9a 84 f4 67 ed e1 6a 0d 63 52 7a 42 aa 28 c8 62 b7 63 7b d7 7a a5 6f 50 49 b8 f2 5a 0d db 33 47 53 02 e5 b8 ef 18 ca f8 28 38 dc 3c 56 08 f2 55 ab 06 0a 3a 75 c6 b2 46 31 79 74 b7 ec d7 2b ae 43 c3 76 dd 39 fa 4e aa c5 b5 93 b3 d8 76 bc 79 dd ea b9 e5 e0 6e 87 2f f3 77 75 e9 20 31 57 6d 53 88 c0 e2 bd 18 f9 28 e6 87 b1 25 50 0e ed 5d f9 69 67 29 94 10 cd 37 1c e6 5a 53 4f c8 51 40 70 eb 9d bc d9 95 3a 55 37 27 4f cc 82 a3 1b e7 9a fd 16 c7 bf 15 45 b3 04 20 2a 71 49 7a 99 48 ba df 4b 37 d3 75 70 65 f3 2b 5b fd 3d 1d 2b b1 1e 76 f5 ef 4d 2e d4 a9 f0 99 68 09 d9 71 8d 2e 75 f2 30 f3 69 d9 74 db b1 b9 ef 59 3f 86 13 3a f8 6a 7b f7 52 f5 39 69 5a 00 60 47 45 Data Ascii: -_,nB2/6M[\|5gjcRzB(bc{zoPIZ3GS(8<VU:uF1yt+Cv9Nvyn/wu 1WmS(%P]ig)7ZSOQ@p:U7'OE *qIzHK7upe+[=+vM.hq.u0itY?:j{R9iZ`GE
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 71 88 6d bb 9d 2a 1e 8d a6 f6 34 3c f2 f9 11 62 f1 60 00 d8 e2 dc 1f 2e d3 e0 2f ed 67 69 ed f3 69 0c 25 12 7f a3 31 d5 a9 ed 6e cf 4e f6 03 49 00 b3 cd b7 1c 7e 18 f1 7a 38 ca 32 b7 1c ac bb 9b 87 ce e6 14 52 6c 2e 38 3b 8a 6e f7 35 d2 b5 06 67 cb 12 9f 98 df 30 26 bd d5 c8 db 05 0b 4c 65 55 27 db d4 2b de 64 1a 6f 6c 6a 1c 92 5c 8e fa 88 ff c2 95 8f ad 82 ed 29 f7 ec f8 3d 60 c2 14 ef 79 fd 83 af a3 c2 2f 5f 91 f1 9b 7e f6 3a e9 88 95 c9 5e 63 25 f0 a5 8f d8 4f 4e 33 bc 72 64 39 ec 0a b1 fb cc 05 ef db f6 2c 73 f9 c0 15 20 02 54 52 7a ae 9d 28 71 29 19 77 ee 40 35 6d 93 a1 38 16 7b c6 c1 33 c5 1d 88 a3 e4 bd 3b 7a 0f 98 30 27 2c 6d 90 62 8b 61 ea f0 f9 e2 54 eb 6e 3f fa f8 a2 7f 21 c6 f5 35 2d 0e f9 00 41 3b b8 4a 42 8d 1c 95 65 37 17 74 d7 7d 7a 26 00 Data Ascii: qm*4<b`./gii%1nNI~z82Rl.8;n5g0&LeU'+dolj\)=`y/_~:^c%ON3rd9,s TRz(q)w@5m8{3;z0',mbaTn?!5-A;JBe7t}z&
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 95 0a bc e0 c8 33 d9 b9 41 1f 5d 5e 9d aa 1a 06 b2 92 b5 1d 2b c1 b9 3f a5 5e b4 a7 1e 04 00 a0 9d bf 8a 6d 77 d4 e8 5c 71 ca 4e b6 ae d4 92 fd 31 76 79 60 8e 9d bf 0b 00 f2 a7 5c 3e b2 ca 79 42 3c 7a 18 38 5b 6c 95 ea bb da 0b a0 a6 01 53 e2 6f 6b a7 ea e2 9a 78 31 9d fa ea 9b c9 80 0d 65 4b f3 90 95 e1 3c 16 2f 3a 29 01 80 e4 6f b9 e5 12 bf f0 53 2c 83 c0 78 95 ab 37 1c e3 82 2a 23 ce 59 75 f8 af 96 81 0b 6a 1d c0 09 7d dd d5 ae 13 9c 8f ff b8 e1 9b 88 40 02 57 f4 47 c8 65 51 5f d0 f4 ba ac 46 ea b7 0e cc b7 33 70 0a fb fe 6d 00 c0 6c 9f 58 67 b0 6f b7 80 8a 0b 54 1e dd 69 8f 38 72 75 00 a4 b7 f3 85 f9 30 51 f6 5a bd 93 29 71 c8 59 88 47 d1 53 0d f9 e8 76 b3 a6 ac 9b 69 7f 89 cc c7 63 e1 9c 51 e5 73 ee f4 5d e1 89 5b 4a da 7b 43 3f 9e 07 b0 bd 42 9d f6 Data Ascii: 3A]^+?^mw\qN1vy`\>yB<z8[lSokx1eK</:)oS,x7*#Yuj}@WGeQ_F3pmlXgoTi8ru0QZ)qYGSvicQs][J{C?B
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 00 30 bf e5 95 8f a3 31 d9 76 1c 60 9b 97 49 22 08 06 0a ba 17 e4 52 ac bb d6 22 32 9d 76 07 4e eb e0 8a 07 00 06 9e bb e6 4b ed 55 78 1e c1 37 1b 7d 28 55 6b 01 fd fd 73 9e 25 56 65 84 87 11 ea 0f 11 c8 93 bb 16 3f 0b 63 72 83 98 84 d3 6d 08 3c e4 6d 7c 51 46 63 72 68 a4 8b e9 38 12 9d 56 42 35 aa 38 03 40 8e fd 71 9c 35 06 d1 43 a1 f6 f3 33 82 40 88 a7 bd ec 7e 90 37 54 7f 24 11 14 b3 1d 8b 0b 50 29 f8 94 0b 45 04 01 d3 4b 4f ce 35 d8 25 6a 87 69 c2 bf 90 e8 fe 4e 1b 1c 90 13 04 f2 f6 94 10 b1 d5 60 a8 5d ec 03 00 79 45 9c 67 b6 95 a9 4b b8 40 39 d4 2b 84 c6 f4 c8 ff 7d 28 05 a4 b7 3c d2 5a 4f 0d e3 a5 ef b5 bf a4 e4 39 17 29 1c ff d2 1e 70 84 6e 7d 4a 07 8f 03 c8 d7 13 37 9d ae c0 ae 1e d7 a4 fc 2b a3 ea 63 f8 50 4f e9 9e 03 f7 7c 92 aa a6 77 d1 2d 24 Data Ascii: 01v`I"R"2vNKUx7}(Uks%Ve?crm<m\|QFcrh8VB58@q5C3@~7T$P)EKO5%jiN`]yEgK@9+}(<ZO9)pn}J7+cPO\|w-$
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 2e 29 63 39 b3 64 78 aa 18 d3 35 57 12 00 79 bc e8 6d 0e a2 69 e4 fb e7 00 90 17 3d b6 93 25 af 8e 81 e2 39 38 d7 0c e7 ea f5 95 a3 08 90 56 00 fc af cc a6 89 ac b6 ce c5 5f 24 02 49 50 6c 1d 80 21 01 c4 02 76 f9 ae 89 58 fc 64 e0 98 9a 2e ab 59 20 1f 80 ab c8 72 60 cb 3e b0 24 44 b1 77 2c e0 96 bd 62 29 45 04 27 ba 28 39 b0 bc 2a 03 d7 90 a8 4d 80 5b c6 b1 95 88 76 0a 67 8d 2d 9a 03 20 c7 ca 43 58 a0 d5 c6 25 e1 0a de df f1 7e 85 1a 8a 55 a2 6a a7 57 2b a5 a0 b3 35 bf 52 3c cc ab fd 8d 1a c3 62 5a 9d 6c c3 47 01 5c 2f 3d e6 a3 1b cd d5 81 72 18 45 50 36 66 1e 48 c4 03 2e 2f 0e d2 b9 19 2c f1 6a 6f 39 89 26 c3 ba dc 05 46 aa 59 b0 c3 fd 06 e3 e8 90 ac d4 96 a4 d0 61 d2 50 cb bf e6 92 31 1f e3 e2 c2 53 63 2d a1 0f 74 0e c3 22 2a 07 4b c9 d1 0f a0 ca c0 95 Data Ascii: .)c9dx5Wymi=%98V_$IPl!vXd.Y r`>$Dw,b)E'(9M[vg- CX%~UjW+5R<bZlG\/=rEP6fH./,jo9&FYaP1Sc-t"K
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 9a c7 b4 ab 64 1d 2e ce 61 4d 6f 5b d5 05 c2 e4 28 09 2a 03 ba 94 3a ed c5 37 52 e6 b6 a6 7a 4a 6e 09 68 28 86 a2 85 aa c5 e6 94 5c 92 42 6f 13 5c 5e 75 1c 2d d7 48 ed fb 08 b9 c2 de 10 d1 d3 c0 15 f7 40 16 ba 6b c3 b5 a8 ee 61 fa c9 db 05 11 f9 fe b6 01 e0 66 58 0d 8b c6 e4 99 c3 01 92 4a 03 ad c9 99 72 7b 2e 66 02 52 78 3c 57 15 3d 06 89 62 70 63 4a 23 36 62 80 75 9c 03 a6 ec 01 e7 d8 97 0c 24 ae 9c dd 93 33 26 a4 04 2c 4a af 9d 8b 61 f7 eb 40 76 dc 88 5c 07 be 80 e2 5f 4c 8c 0c 96 2b 6d 99 6e aa 89 2c 56 65 ec a2 c7 71 46 7f d1 4e 54 0b 3e 38 65 6c 49 49 43 49 ac 3a 5e 77 bc 9e b8 1e 84 ee 79 a6 38 c4 0b 55 1e ed b2 4f 81 1c dd e6 54 ff c0 d0 ff 47 98 0f 73 2e 07 4c 37 dd 3b 56 17 77 39 2f 65 52 14 4e e1 22 34 c9 da 43 01 71 65 d2 53 ed 16 81 db 90 ab Data Ascii: d.aMo[(*:7RzJnh(\Bo\^u-H@kafXJr{.fRx<W=bpcJ#6bu$3&,Ja@v\_L+mn,VeqFNT>8elIICI:^wy8UOTGs.L7;Vw9/eRN"4CqeS
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: d6 67 59 81 3a c0 68 14 13 3e 70 60 7b ab d1 a1 11 9c a1 f6 52 04 a3 5a 56 e0 9a b4 9c 06 88 fd 72 d2 33 e1 d4 e2 e1 a8 47 c6 14 a9 64 a6 07 cb 5c 6a 52 30 86 e3 01 59 51 73 52 b9 57 cc b4 25 90 29 6d 99 6a 65 58 7f ac 98 5b 26 72 6a b1 69 2d 22 2c 4a 39 b3 ad d8 58 22 62 02 a0 b2 b9 2a b0 6a 62 41 b6 7d bd fb 10 03 86 64 85 a6 3b 84 d1 72 61 c8 34 1d 25 6e fc e9 e2 f7 ce 2d f4 a8 74 a8 32 d0 76 b1 32 b6 78 00 f2 b8 27 71 4c cd 9d 18 a3 fa ce e4 92 f1 08 90 fc f3 1e f8 ba 6b 21 f2 f3 bf 5b 1e 32 26 89 c8 7e 72 72 2e 3e ae fa 5c 29 b1 30 0d 08 9c 93 9b 15 f3 90 19 4a 3c 2a 65 e7 d0 c8 e8 54 e7 e9 73 1b f0 6a d1 40 94 a2 3c eb ca 9c 2e 55 1e 44 b4 58 8d 6d 88 b2 92 cc b9 4c 4a 5b 96 8a d1 17 50 b6 10 1f e6 49 b4 be 81 e4 cd 84 54 24 6f 00 7a a5 89 67 e2 83 Data Ascii: gY:h>p`{RZVr3Gd\jR0YQsRW%)mjeX[&rji-",J9X"bjbA}d;ra4%n-t2v2x'qLk![2&~rr.>\)0J<eTsj@<.UDXmLJ[PIT$ozg
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: a1 da a4 1f b8 c9 68 14 21 13 0d cf 4c 77 fb 3a ce d1 4d 4c 5e 4d a5 42 dc 10 03 e5 62 55 ce ee 25 8d 50 14 c1 eb b1 e5 51 22 12 d0 a6 13 87 a5 d5 0a e4 bb 0e c1 b6 6c 72 19 44 c9 71 3a 3c cb 98 28 3d 57 d4 b5 f5 45 f9 34 b7 a1 03 70 e4 2a 6b 8f 78 d3 cb 13 2f ce f1 d3 78 78 34 8c 71 be 34 fa bc 78 df 9e 7a e0 56 ea 22 57 09 63 1b 07 e7 6c 1a 52 c2 b1 20 2d 33 0b 69 0a fa fc b5 dc 24 60 98 44 8b ab fd b0 bb 60 f4 4e 8c 29 4e e3 1c 43 49 0f 51 ed 29 6e bf 2d 27 ec b6 77 13 14 31 ef c6 f0 ea 39 5a 9d e7 41 6c 24 86 2e 45 28 f1 43 c5 1a a1 7d 30 bc ca e1 17 5c 25 2c 22 72 94 6d ac 8e 7b 9a af 30 22 8a 17 97 49 f4 60 22 d1 25 4c ac 66 20 7a 28 ac 3e a1 4f 7a 41 6d 99 e4 da 28 49 66 55 ab 35 5b 8d 3a e7 2d c5 2f f1 5d 92 3a ba 9f d6 e0 a1 fe 4d ba 0c 42 f8 d2 Data Ascii: h!Lw:ML^MBbU%PQ"lrDq:<(=WE4p*kx/xx4q4xzV"WclR -3i$`D`N)NCIQ)n-'w19ZAl$.E(C}0\%,"rm{0"I`"%Lf z(>OzAm(IfU5[:-/]:MB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49736	172.64.149.213	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:11 UTC	697	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: helawok.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ
2024-10-10 19:17:11 UTC	389	IN	HTTP/1.1 302 Found Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Strict-Transport-Security: max-age=15552000 Server: cloudflare CF-RAY: 8d08f2fa0db00f87-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49743	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:11 UTC	368	OUT	GET /js/Links.c1a9dcf75cfbd1ae01c0.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	767	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 10 Oct 2025 19:17:11 GMT last-modified: Mon, 23 Sep 2024 10:27:13 GMT etag: W/"813cfa21f919254e225528873cd4250c" vary: Accept-Encoding x-goog-generation: 1727087233759392 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 285 x-goog-hash: crc32c=WSORaQ== x-goog-hash: md5=gTz6IfkZJU4iVSiHPNQlDA== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: AD-8ljt_J5zwbO5n0lPugs-LhFf-WhETMxW2_JIFTF6AROctLXA7WIQPOY2u6ZR1Vvy2J-f-NLY CF-Cache-Status: HIT Age: 1496585 Server: cloudflare CF-RAY: 8d08f2fbeb618c81-EWR
2024-10-10 19:17:11 UTC	386	IN	Data Raw: 31 37 62 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 30 5d 2c 7b 32 35 39 34 3a 28 6e 2c 61 2c 65 29 3d 3e 7b 76 61 72 20 72 3d 65 28 34 35 39 34 29 2c 63 3d 5b 22 75 72 6c 2d 6c 69 6e 6b 22 2c 22 6c 61 6e 64 69 6e 67 2d 70 61 67 65 2d 6c 69 6e 6b 22 5d 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 61 2e 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 5b 64 61 74 61 2d 70 61 73 73 2d 70 61 72 61 6d 73 5d 22 29 7d 29 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 28 30 2c 72 2e 76 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 61 3d 28 30 2c 72 2e 77 6d 29 28 29 3b 61 2e 73 69 7a 65 Data Ascii: 17b"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[250],{2594:(n,a,e)=>{var r=e(4594),c=["url-link","landing-page-link"].map((function(n){return"a.".concat(n,"[data-pass-params]")})).join(", ");(0,r.v)((function(){var n,a=(0,r.wm)();a.size
2024-10-10 19:17:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:11 UTC	369	OUT	GET /js/Cradle.904200e3dbc62d5b0155.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	766	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 10 Oct 2025 19:17:11 GMT last-modified: Mon, 23 Sep 2024 10:27:12 GMT etag: W/"77c2f571effc542dd4a8d31d0b63ab5d" vary: Accept-Encoding x-goog-generation: 1727087232830329 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 4266 x-goog-hash: crc32c=3+1u7Q== x-goog-hash: md5=d8L1ce/8VC3UqNMdC2OrXQ== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: AD-8ljvOU5Yn4xc7eYAYSjsUqFH8tI4Ys8i1YAMmyocug81eNZWqb0qzxDoWv9iiYsz0QkztkA CF-Cache-Status: HIT Age: 128154 Server: cloudflare CF-RAY: 8d08f2fc2f0a19c3-EWR
2024-10-10 19:17:11 UTC	603	IN	Data Raw: 34 37 66 63 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 36 5d 2c 7b 37 38 32 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 34 35 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: 47fc"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[846],{7829:(e,t,r)=>{var n=r(4594);function i(e){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 69 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 7d 28 65 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 69 28 74 29 3f 74 3a 74 2b 22 22 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f Data Ascii: 0!==r){var n=r.call(e,"string");if("object"!=i(n))return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==i(t)?t:t+""}var u=function(){return e=function e(){!function(e,t){if(!(e instanceof t))thro
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6c 28 6e 2e 6b 65 79 29 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 63 28 65 29 7c 7c 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 63 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 Data Ascii: able\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,l(n.key),n)}}function l(e){var t=function(e,t){if("object"!=c(e)\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,"string");if("object"!=c(n))return n;th
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 74 6f 72 61 67 65 4b 65 79 2c 74 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 74 6f 72 61 67 65 4b 65 79 2c 22 2d 65 78 70 69 72 65 73 22 29 3b 74 68 69 73 2e 5f 73 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 65 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 2e 73 74 6f 72 61 67 65 4f 62 6a 65 63 74 29 29 2c 74 68 69 73 2e 5f 73 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 74 2c 74 68 69 73 2e 5f 67 65 74 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 68 65 63 6b 52 65 73 65 74 44 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 73 74 6f 72 61 67 65 4f 62 6a 65 63 74 5b 74 68 69 Data Ascii: =this.config.storageKey,t="".concat(this.config.storageKey,"-expires");this._setStoreContents(e,JSON.stringify(this.storageObject)),this._setStoreContents(t,this._getExpirationTime())}},{key:"_checkResetDate",value:function(e){var t=this.storageObject[thi
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6b 65 79 28 72 29 3b 69 66 28 6e 2e 6d 61 74 63 68 28 2f 2e 2d 65 78 70 69 72 65 73 2f 67 29 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 6e 29 2c 6f 3d 6e 65 77 20 44 61 74 65 28 69 29 3b 74 2e 67 65 74 54 69 6d 65 28 29 3e 3d 6f 2e 67 65 74 54 69 6d 65 28 29 26 26 65 2e 70 75 73 68 28 6e 2c 6e 2e 72 65 70 6c 61 63 65 28 22 2d 65 78 70 69 72 65 73 22 2c 22 22 29 29 7d 7d 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 7d 29 29 7d 63 61 74 63 Data Ascii: ocalStorage.length;r++){var n=window.localStorage.key(r);if(n.match(/.-expires/g)){var i=this._getStoreContents(n),o=new Date(i);t.getTime()>=o.getTime()&&e.push(n,n.replace("-expires",""))}}e.forEach((function(e){window.localStorage.removeItem(e)}))}catc
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 6c 65 61 64 43 6f 6e 76 65 72 74 65 64 3d 74 68 69 73 2e 69 73 4c 65 61 64 43 6f 6e 76 65 72 74 65 64 28 29 2c 74 68 69 73 2e 63 61 6d 70 61 69 67 6e 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 43 61 6d 70 61 69 67 6e 28 29 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 52 65 66 65 72 72 65 72 28 29 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 73 65 74 56 61 6c 75 65 28 79 2e 46 4c 41 47 5f 52 45 53 50 4f 4e 53 49 56 45 5f 4d 4f 44 45 2c 74 68 69 73 2e 69 73 4d 6f 62 69 6c 65 29 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 73 61 76 65 28 29 7d 2c 28 74 3d 5b 7b 6b 65 79 3a 22 73 65 74 56 69 73 69 74 65 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 76 69 73 69 74 65 64 3d 21 30 2c 74 68 Data Ascii: ,this.leadConverted=this.isLeadConverted(),this.campaign=this._detectCampaign(),this.referrer=this._detectReferrer(),this.storage.setValue(y.FLAG_RESPONSIVE_MODE,this.isMobile),this.storage.save()},(t=[{key:"setVisited",value:function(){this.visited=!0,th
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 68 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 Data Ascii: iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},h(e)}function m(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 74 69 6e 67 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 63 61 6c 6c 62 61 63 6b 3a 20 22 2c 65 29 7d 7d 29 29 7d 29 29 7d 7d 7d 5d 2c 6e 75 6c 6c 26 26 6d 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 75 6c 6c 29 2c 74 26 26 6d 28 65 2c 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 3b 76 61 72 20 65 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 72 65 74 75 72 6e 20 53 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d Data Ascii: ting user-defined callback: ",e)}}))}))}}}],null&&m(e.prototype,null),t&&m(e,t),Object.defineProperty(e,"prototype",{writable:!1}),e;var e,t}();function S(e){return S="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 31 79 2d 77 69 64 67 65 74 2d 74 65 78 74 2d 64 65 63 72 65 61 73 65 22 29 5b 30 5d 2c 74 68 69 73 2e 69 6e 63 72 65 61 73 65 54 65 78 74 54 72 69 67 67 65 72 3d 28 30 2c 6e 2e 69 54 29 28 22 23 61 31 31 79 2d 77 69 64 67 65 74 2d 74 65 78 74 2d 69 6e 63 72 65 61 73 65 22 29 5b 30 5d 2c 28 30 2c 6e 2e 71 32 29 28 74 68 69 73 2e 61 31 31 79 54 72 69 67 67 65 72 2c 22 63 6c 69 63 6b 22 2c 65 2e 5f 73 68 6f 77 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 29 2c 28 30 2c 6e 2e 71 32 29 28 74 68 69 73 2e 6d 61 69 6e 2c 22 63 6c 69 63 6b 22 2c 65 2e 5f 68 69 64 65 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 29 2c 28 30 2c 6e 2e 71 32 29 28 74 68 69 73 2e 64 65 63 72 65 61 73 65 54 65 78 74 54 72 69 67 67 65 72 2c 22 63 6c 69 63 6b 22 2c 65 2e 5f 68 61 6e 64 6c 65 4c Data Ascii: 1y-widget-text-decrease")[0],this.increaseTextTrigger=(0,n.iT)("#a11y-widget-text-increase")[0],(0,n.q2)(this.a11yTrigger,"click",e._showWidgetControls),(0,n.q2)(this.main,"click",e._hideWidgetControls),(0,n.q2)(this.decreaseTextTrigger,"click",e._handleL
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 7d 7d 2c 7b 6b 65 79 3a 22 5f 68 61 6e 64 6c 65 4c 65 76 65 6c 43 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 65 2e 61 31 31 79 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 75 72 72 65 6e 74 2d 6c 65 76 65 6c 22 29 3b 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 3d 3d 65 2e 69 6e 63 72 65 61 73 65 54 65 78 74 54 72 69 67 67 65 72 3f 72 2b 2b 3a 72 2d 2d 2c 72 3e 3d 30 26 26 72 3c 35 26 26 28 65 2e 61 31 31 79 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 75 72 72 65 6e 74 2d 6c 65 76 65 6c 22 2c 72 29 2c 65 2e 5f 61 63 74 69 76 61 74 65 49 6e 64 69 63 61 74 6f 72 73 28 72 29 2c 65 2e 5f Data Ascii: }},{key:"_handleLevelChange",value:function(t){var r=e.a11yWidgetControls.getAttribute("data-current-level");t.currentTarget===e.increaseTextTrigger?r++:r--,r>=0&&r<5&&(e.a11yWidgetControls.setAttribute("data-current-level",r),e._activateIndicators(r),e._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:11 UTC	363	OUT	GET /u/33332e5f/65201939-0-H.png HTTP/1.1 Host: v.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	882	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Type: image/png Content-Length: 44012 Connection: close Cache-Control: public, max-age=315360000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=65697 Vary: Accept etag: "b5803a72603509146d5556c7fc0eab6d" expires: Sun, 08 Oct 2034 19:17:11 GMT last-modified: Thu, 10 Oct 2024 18:36:58 GMT x-goog-generation: 1728585418008319 x-goog-hash: crc32c=B1zGpg== x-goog-hash: md5=tYA6cmA1CRRtVVbH/A6rbQ== x-goog-meta-content-length: 0 x-goog-meta-expires: Mon, 01 Dec 2025 10:36:57 GMT x-goog-metageneration: 2 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 65697 x-guploader-uploadid: AHmUCY0PjE8iFqplC9RCdh4mfMaYenU7fAKNaHw5sL94bCoXoBuWV40aAb6IAAX4xuX7LU-9J9c CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8d08f2fca86d8c51-EWR
2024-10-10 19:17:11 UTC	487	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 a6 00 00 01 1e 08 02 00 00 00 16 e6 9f 8d 00 00 0a 94 69 43 43 50 69 63 63 00 00 78 da ad 96 77 50 53 f9 16 c7 cf bd a9 84 84 96 10 01 29 a1 37 41 3a 01 a4 84 d0 02 28 48 07 1b 21 a1 84 12 62 48 50 b1 23 8b 2b b8 16 54 44 50 51 74 55 44 c1 b5 00 b2 56 44 b1 2d 0a f6 ba 20 8b 82 b2 8a 05 1b 2a ef 82 8f b0 6f 77 de 1f 6f e6 7d 67 ce 9c cf 3d 73 7e df df ef 37 73 7f 33 07 80 a6 c6 97 48 32 51 35 80 2c b1 4c 1a 11 e8 cb 8a 8b 4f 60 91 7a 01 01 22 e0 c0 1a 28 7c 41 8e 84 13 1e 1e 0a 98 46 f3 3f f4 fe 36 20 80 e9 86 cd 88 17 fc 6f 52 17 26 e7 08 00 90 70 8c 93 84 39 82 2c 8c 8f 62 f1 5c 20 91 ca 00 70 3b 00 c0 78 9e 4c 32 c2 2d 18 33 a4 d8 01 31 be 3b c2 a9 df b9 7f 84 93 46 19 0f a3 3d 51 11 5c 8c 19 00 Data Ascii: PNGIHDRiCCPiccxwPS)7A:(H!bHP#+TDPQtUDVD- *owo}g=s~7s3H2Q5,LO`z"(\|AF?6 oR&p9,b\ p;xL2-31;F=Q\
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: f9 46 28 38 33 3c 54 d1 93 19 a8 a8 e7 e4 46 2a d6 ca b0 1f 72 7c 6d 78 d4 18 a7 f3 83 c3 c7 18 b8 90 0d 99 58 48 81 05 a1 d8 97 1f 80 2c 79 be 0c 30 71 b3 25 0b a4 a2 d4 34 19 8b 83 bd b0 64 16 4f 2c b0 9d c4 72 b0 73 70 02 18 79 af 30 aa b7 4c 40 b0 84 30 2f 8f d7 f2 55 01 a6 7c 1a 1e 1e 3e 31 5e 0b 35 05 38 5a 08 40 79 3a 5e b3 a8 02 50 59 0e 70 b1 58 20 97 e6 c2 a8 f0 80 89 00 14 50 05 06 68 83 3e 18 83 05 d8 80 03 b8 80 07 f8 80 3f 04 43 18 44 41 3c cc 06 01 a4 41 16 48 61 1e 2c 82 e5 50 08 c5 b0 0e 36 41 39 54 c2 2e d8 07 07 e1 30 34 c0 09 38 0b 17 e0 0a 5c 87 5b f0 00 3a a1 07 5e c0 00 bc 87 21 04 41 48 08 0d a1 23 da 88 01 62 8a 58 23 0e 08 1b f1 42 fc 91 50 24 02 89 47 12 91 54 44 8c c8 91 45 c8 0a a4 18 29 41 ca 91 9d 48 35 f2 0b 72 1c 39 8b 5c Data Ascii: F(83<TF*r\|mxXH,y0q%4dO,rspy0L@0/U\|>1^58Z@y:^PYpX Ph>?CDA<AHa,P6A9T.048\[:^!AH#bX#BP$GTDE)AH5r9\
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 0c ce f0 9f b1 69 46 cf 4c e7 99 85 33 6f cf 32 9f 35 7f d6 a5 d9 3a b3 33 67 9f 9c a3 3a 87 3f e7 48 22 21 31 36 71 7f e2 17 7e 18 bf 8a 3f 98 c4 4b da 9a 34 20 e0 0a 36 0b 5e 08 7d 84 1b 85 7d c9 9e c9 25 c9 cf 52 3c 53 4a 52 7a 53 3d 53 37 a4 f6 a5 79 a7 95 a6 f5 8b b8 a2 72 d1 eb f4 a0 f4 ca f4 0f 19 61 19 7b 33 86 33 63 33 eb b2 c8 59 89 59 c7 c5 1a e2 0c 71 4b b6 7e f6 fc ec 76 89 b5 a4 50 d2 39 d7 7d ee a6 b9 03 d2 10 e9 9e 1c 24 67 56 4e a3 8c 81 0d 46 57 e5 16 f2 1f e4 5d b9 5e b9 15 b9 1f e7 c5 cc 3b 32 5f 7d be 78 fe d5 05 56 0b 56 2d 78 96 17 90 f7 f3 42 fc 42 c1 c2 e6 45 86 8b 96 2f ea 5a cc 59 bc 73 09 b2 24 69 49 f3 52 e3 a5 05 4b 7b 96 05 2e db b7 9c b2 3c 63 f9 6f f9 76 f9 25 f9 ef 56 c4 ae 68 2a d0 2b 58 56 d0 fd 43 e0 0f 35 85 2a 85 d2 Data Ascii: iFL3o25:3g:?H"!16q~?K4 6^}}%R<SJRzS=S7yra{33c3YYqK~vP9}$gVNFW]^;2_}xVV-xBBE/ZYs$iIRK{.<cov%Vh+XVC5
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: dd db 5c 8c f3 0c f5 34 e0 9c e3 a3 03 38 bf e8 b4 c9 92 40 15 26 84 10 42 08 a1 f2 fe b2 b8 64 28 ae d3 69 1b b3 9a 07 21 a3 c6 ae fa fe d6 52 7d 7d 4e 6b 45 32 84 b5 56 13 5a 99 fe 63 f1 cd 1f 0a e3 0e e6 df d8 9d 1b b5 35 27 72 53 66 e8 ea db c7 e5 55 e9 21 2b d3 82 97 a7 5d 5c 76 fb 08 5e 91 7e 69 65 c6 e5 55 77 d6 ac c9 89 dc 98 7b 75 5b fe 8d 5d 45 f1 87 8a 13 7f a8 48 3b 87 73 ea 0a af b7 56 24 e9 eb 35 fd ad 25 c6 ee 7a 5c 17 57 c7 3d e0 4e a0 dc 13 84 10 42 08 21 84 ca fb df 5b ae 24 38 ee 68 ae 7e b0 ab b6 5b 97 df 52 9e 58 ab 09 2b 4d 3a a6 bd b1 27 27 72 73 e6 e5 d5 69 17 97 a7 5e 08 4a f9 69 e9 cf 7b a4 5e f8 1a 66 0c 5d 86 3d e3 5a a5 c9 c7 21 c1 b8 7a 77 63 fe 60 57 dd a8 f1 8e fe 0a 0e 14 9c 27 08 21 84 10 42 08 95 f7 91 22 0b b2 24 08 8e Data Ascii: \48@&Bd(i!R}}NkE2VZc5'rSfU!+]\v^~ieUw{u[]EH;sV$5%z\W=NB![$8h~[RX+M:''rsi^Ji{^f]=Z!zwc`W'!B"$
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: a1 82 f1 51 03 6a b7 7d 2d c5 ed d5 a9 ba a2 68 34 67 80 e0 16 25 1c d6 de d8 0d 7f 45 d3 31 cc aa 80 6e e2 9c 70 eb c9 49 83 69 72 14 a9 9e 29 c4 d0 6e 9c 01 3b cf 72 a3 b6 69 a3 f7 14 27 7c 8f f3 d7 e4 5c c2 b5 3a aa d3 e0 ee b8 3a 0c 18 e1 0a 59 16 21 bd 6a 0b c7 3d 63 8f 1a ee bf 47 57 80 00 03 22 bf 78 2e 84 7d a7 bc 07 bc 0d bc 13 bc 19 9c 19 6f c9 36 66 92 19 f0 25 84 10 42 48 20 12 b0 ca 8b f2 27 82 0c 48 df 96 a7 9c 82 86 a6 4e 55 d9 c5 0f 51 ec 44 79 b5 3a f3 02 82 01 d0 3e 7c 05 15 53 b8 a3 3a aa 20 38 ad d6 31 23 4a ad 03 9e 52 ae ae e8 06 ca a8 48 d0 42 70 d1 ba 01 19 09 65 f7 d8 2f 73 a8 db 44 ac c7 ec b7 e2 c4 ef 51 03 46 16 b9 a3 36 73 a0 bd 7c c4 d0 06 c7 15 9d 56 14 7b d5 ee 8b a7 c0 b3 78 02 0f c9 a8 3a 63 af 1b 36 ba e1 79 a7 3c 39 c4 Data Ascii: Qj}-h4g%E1npIir)n;ri'\|\::Y!j=cGW"x.}o6f%BH 'HNUQDy:>\|S: 81#JRHBpe/sDQF6s\|V{x:c6y<9
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 37 f4 20 cb 71 b7 92 b8 6f 18 03 c5 69 18 2d 9e b7 a3 26 1d 5f 44 15 59 96 04 9c 4c 39 21 7c 1a 03 2f 30 fc 02 55 61 38 ee e4 f7 80 fe 68 35 39 97 d1 01 03 f9 60 f6 ee 25 84 10 42 88 df e1 97 ca 0b df ed e9 1d 88 89 4b ff e0 d3 75 7f 78 f6 6d c8 2e 0e 5f e5 75 b9 90 13 40 6e d5 27 c6 6a 31 f5 76 35 e4 96 dc fc 21 33 74 cd d4 82 78 21 08 82 08 d9 45 01 15 cb 74 45 31 d0 41 77 df 2e c1 3e d3 fa 76 e1 7e 20 df 68 d1 80 06 bd 4d 45 37 30 54 42 13 b9 09 ce 8a fb c7 53 4c 29 f1 48 65 94 26 1f d7 d7 6b 10 20 86 3a ab 5f 0e 22 19 48 21 63 df 1e fa 39 4c 7e 33 28 00 e3 fc 5d 8d 79 78 83 ec e4 40 08 21 84 10 ff c2 ff 94 57 92 e4 a6 96 8e 13 67 c2 5f 9b bb e4 77 4f cd 85 e9 4e a9 bc 5e 2d f4 da 21 2a a3 3d cd 05 c8 03 a8 7a d3 4e 3d 73 18 09 e0 ba dc 08 78 a4 65 a4 Data Ascii: 7 qoi-&_DYL9!\|/0Ua8h59`%BKuxm._u@n'j1v5!3tx!EtE1Aw.>v~ hME70TBSL)He&k :_"H!c9L~3(]yx@!Wg_wON^-!*=zN=sxe
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 9c 2b 9b d1 7d cc ab b0 aa ba 78 70 7f 7b b9 b7 19 99 2c 09 18 e8 81 3d 7f e8 e9 8b f5 3e 3b 02 61 cf c8 f5 62 e4 07 3b 97 11 42 08 21 e4 a1 99 95 ca 2b cb ee 7e 64 c9 a9 b9 0b 17 ad 57 e7 77 d1 a8 01 6a 8b 9a 6e 48 78 5c a7 be 57 92 64 87 d3 39 bd f2 0e ea 6b f0 bb fb 7a ed 15 34 20 43 a9 92 1e 76 bf 9c 03 5a 5b 34 68 a3 50 11 9f dc c5 0c 5b d6 ca 6e 9d 40 ff 32 44 7b f1 4a dd 5f 91 25 f4 32 6b af 4a 45 f8 01 e5 61 9f 0d 70 98 57 dc db 5c 8c 52 3a 73 bd 84 10 42 08 79 38 66 a5 f2 c2 56 d3 33 0b 96 ae d8 85 61 c2 2a df 9d f3 c7 3f bf f3 da 5b 4b c2 22 13 fa fa 07 a1 c5 58 f9 20 e5 95 d0 60 0b a3 c5 ec e3 6c a1 f5 e0 9c 03 46 57 a0 39 71 51 c2 21 58 ac 4f ba 17 3f 29 88 d9 df ad d3 da dc a1 05 49 59 ef b4 99 d1 f5 0c d6 8b ed 6b 3e bb d9 d0 b9 cc d0 59 25 Data Ascii: +}xp{,=>;ab;B!+~dWwjnHx\Wd9kz4 CvZ[4hP[n@2D{J_%2kJEapW\R:sBy8fV3a*?[K"X `lFW9qQ!XO?)IYk>Y%
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: b6 2e 29 25 77 dc 6a f3 f8 ae 6b 64 74 ec ec f9 2b ff 79 27 08 d5 5f 2a ef 4c c0 6a 1e 6c ab 4c d6 44 6d 4d bd b7 2d 03 1a 38 a0 59 af c3 36 a6 34 70 10 1c d6 fe f6 0a 6c 7a 43 ab 07 f5 8e 37 7c b1 af a5 c8 bd e3 8d 10 42 08 21 e4 36 01 aa bc 0e a7 a0 6b ee f8 f8 8b 0d 4f bc f0 ae ca 77 df 78 fe ef 0b c3 22 13 fa fa 07 91 68 00 36 bb 23 31 39 67 de 07 2b 95 e6 65 54 de 99 00 8c d6 32 dc db 5c 9a 90 e1 1e 51 71 4f 5a 17 0d 1c 0c 9d 55 82 d3 ea 59 e6 42 49 b8 b3 2e 2b 3b 7c 03 3a f5 aa 97 95 dd 3a 31 62 68 e3 48 36 42 08 21 84 dc 21 10 95 57 96 e5 ae ae be a3 27 2f 3f f7 f2 87 30 54 6f 84 f7 c9 17 e6 ef dc 77 a6 51 d7 e6 74 0a 58 66 b3 d9 ab 6a 74 8b 83 b6 3d f3 d2 7b f8 94 ca 3b 73 90 44 e7 e8 60 7b 9d 26 f4 5e eb 0d 42 c6 b7 3c f5 34 d2 ba 58 a0 c4 1b c6 Data Ascii: .)%wjkdt+y'_*LjlLDmM-8Y64plzC7\|B!6kOwx"h6#19g+eT2\QqOZUYBI.+;\|::1bhH6B!!W'/?0TowQtXfjt={;sD`{&^B<4X
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: de d0 df 56 a6 8d d9 8b 36 bd 6a eb 45 c3 32 b3 b1 53 79 27 a2 e0 e8 6a cc cb bb b6 e3 9e 49 c5 21 2b 3b 6b d2 dd 85 5e 42 08 21 84 10 7f 54 5e 41 10 2b ab 1b 3f ff 6a cb 1f 9e b9 1b 4e 78 fa 2f ef 05 7d b3 bb bd b3 07 9f 62 8d c9 34 1a 9b 90 f9 f2 6b 9f 41 58 bd 6b 60 ae bb 0f 9c d5 eb fb 76 ec 39 f5 97 57 3f 99 81 ca 0b 87 c3 55 c2 22 e2 f7 1c 38 bb 65 c7 31 e5 d8 b9 f7 54 fc cd 2c 3c 11 16 c0 70 51 c6 3e 78 e4 e2 d6 5d 27 94 4f 8f 9f 0e cb d3 96 7b 7d 77 b0 ab ae a9 24 b6 36 37 34 00 0e 6c 5f eb 6b 29 41 a1 b7 3e 3f 32 27 62 a3 ba 7b 43 de f5 9d 5d 0d b9 18 c3 e6 d9 eb 26 8f 8f 0c 20 d1 ab 9e 54 8c 78 43 65 fa 39 53 af 8e c3 d8 08 21 84 10 e2 97 ca 8b 26 0c d7 a2 53 a0 a1 18 a5 e6 b5 d2 d7 df fa 2a 22 2a d1 32 6e 85 35 ca b2 8c d8 c3 96 1d c7 51 d6 f5 Data Ascii: V6jE2Sy'jI!+;k^B!T^A+?jNx/}b4kAXk`v9W?U"8e1T,<pQ>x]'O{}w$674l_k)A>?2'b{C]& TxCe9S!&S"2n5Q
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 40 08 c1 bd 79 fb d5 a5 c3 c0 eb b9 f7 da 93 34 ea e1 f7 61 8c e7 fc b6 73 9f 73 9e f3 9c b3 9d e7 49 69 18 21 8b d0 54 84 88 6b 7c 9a 05 75 fb 14 49 90 d9 5a 3b 09 52 fe a1 89 2a e6 22 71 5c 2a d5 c8 29 08 02 9a 90 03 ce 41 75 47 8d 22 2f 03 83 63 9e 1b fd b8 ea 7a ee 42 5b eb d5 9b c8 75 88 89 8f 6e 6a 37 eb 6f 02 24 8c 10 25 d3 15 75 f0 be ba 21 f4 23 1a 4b 32 42 bc 56 d2 d1 61 47 88 2a 1b 43 16 3d 5a 75 81 c5 c3 b3 b1 31 ff 8b 0e b7 b7 d1 7e a5 d3 e3 45 d6 76 f6 10 a8 85 de 46 7c 99 09 ce fa 27 26 6f dd 1d 74 5e 76 a3 77 e8 a3 6f 78 1c 23 1c 69 e9 09 0d 07 c4 13 a9 5c cf b3 ca d3 1c 89 ea f5 12 22 f3 3d 4c af eb 09 d0 22 c3 1d ed b4 5f 2c 12 4d c0 f5 51 8d 55 36 78 c8 d8 e8 24 14 8e 8c 3f 7d 09 8f 8d 01 8f 70 ce d1 e2 6a 77 f5 3c 7c e4 c7 2d af bc 0c Data Ascii: @y4assIi!Tk\|uIZ;R"q\)AuG"/czB[unj7o$%u!#K2BVaG*C=Zu1~EvF\|'&ot^vwox#i\"=L"_,MQU6x$?}pjw<\|-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49745	34.36.17.181	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:11 UTC	500	OUT	GET /t/js/3/it.js HTTP/1.1 Host: cdn.instapagemetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	724	IN	HTTP/1.1 200 OK x-goog-generation: 1686655294888925 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 55266 x-goog-hash: crc32c=JVvUKA== x-goog-hash: md5=7ukxGHBgcZqxejUt4kJODA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes X-GUploader-UploadID: AHmUCY3irvrXRrEL_Txwbty-e2TldUpjn_ps6CHDxrHgXSU9IfVlNfAoX6s8Y2iilasHpPT1i70TB1ZPBw Server: UploadServer Date: Thu, 10 Oct 2024 18:54:43 GMT Age: 1348 Last-Modified: Tue, 13 Jun 2023 11:21:34 GMT ETag: "eee931187060719ab17a352de2424e0c" Content-Type: text/javascript Content-Length: 55266 Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 19:17:11 UTC	666	IN	Data Raw: 2f 2a 21 0a 20 2a 20 57 65 62 20 61 6e 61 6c 79 74 69 63 73 20 66 6f 72 20 53 6e 6f 77 70 6c 6f 77 20 76 33 2e 31 2e 30 20 28 68 74 74 70 3a 2f 2f 62 69 74 2e 6c 79 2f 73 70 2d 6a 73 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 53 6e 6f 77 70 6c 6f 77 20 41 6e 61 6c 79 74 69 63 73 20 4c 74 64 2c 20 32 30 31 30 20 41 6e 74 68 6f 6e 20 50 61 6e 67 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 20 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 3b 66 6f 72 28 74 20 69 6e 20 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 Data Ascii: /! Web analytics for Snowplow v3.1.0 (http://bit.ly/sp-js) * Copyright 2021 Snowplow Analytics Ltd, 2010 Anthon Pang * Licensed under BSD-3-Clause */"use strict";!function(){function e(e,n){var t,r={};for(t in e)Object.prototype.hasOwnProperty.ca
2024-10-10 19:17:11 UTC	1390	IN	Data Raw: 20 72 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 30 2c 74 3d 30 2c 72 3d 5b 5d 3b 69 66 28 65 29 7b 65 3d 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 29 3b 64 6f 7b 76 61 72 20 6f 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 69 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 61 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 73 3d 6f 3c 3c 31 36 7c 69 3c 3c 38 7c 61 3b 6f 3d 73 3e 3e 31 38 26 36 33 2c 69 3d 73 3e 3e 31 32 26 36 33 2c 61 3d 73 3e 3e 36 26 36 33 2c 73 26 3d 36 33 2c 72 5b 74 2b 2b 5d 3d 64 65 2e 63 68 61 72 41 74 28 6f 29 2b 64 65 2e 63 68 61 72 41 74 28 69 29 2b 64 65 2e 63 68 61 72 41 74 28 61 29 2b 64 65 2e 63 68 61 72 41 74 28 73 Data Ascii: r(e){if(!e)return e;var n=0,t=0,r=[];if(e){e=unescape(encodeURIComponent(e));do{var o=e.charCodeAt(n++),i=e.charCodeAt(n++),a=e.charCodeAt(n++),s=o<<16\|i<<8\|a;o=s>>18&63,i=s>>12&63,a=s>>6&63,s&=63,r[t++]=de.charAt(o)+de.charAt(i)+de.charAt(a)+de.charAt(s
2024-10-10 19:17:11 UTC	1390	IN	Data Raw: 28 74 29 3f 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 29 29 3a 67 28 74 29 26 26 28 65 3d 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 29 29 29 7d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 28 74 5b 6f 5d 29 7d 2c 67 65 74 41 70 70 6c 69 63 61 62 6c 65 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3a 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 74 2e 67 65 74 4a 73 6f 6e 28 29 3b 72 3c 6f 2e 6c 65 6e Data Ascii: (t)?n=n.filter((function(e){return JSON.stringify(e)===JSON.stringify(t)})):g(t)&&(e=e.filter((function(e){return JSON.stringify(e)===JSON.stringify(t)})))},o=0;o<t.length;o++)r(t[o])},getApplicableContexts:function(t){e:{for(var r=0,o=t.getJson();r<o.len
2024-10-10 19:17:11 UTC	1390	IN	Data Raw: 69 66 28 6e 75 6c 6c 21 3d 3d 28 65 3d 2f 5e 69 67 6c 75 3a 28 28 3f 3a 28 3f 3a 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 5d 2b 7c 5c 2a 29 2e 29 2b 28 3f 3a 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 5d 2b 7c 5c 2a 29 29 5c 2f 28 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 2e 5d 2b 7c 5c 2a 29 5c 2f 6a 73 6f 6e 73 63 68 65 6d 61 5c 2f 28 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 2d 28 30 7c 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 2d 28 30 7c 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 24 2f 2e 65 78 65 63 28 65 29 29 26 26 63 28 65 5b 31 5d 29 29 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 31 2c 36 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 69 66 28 65 3d 75 28 65 29 29 7b 76 61 72 20 6e 3d 65 5b 30 5d 3b 72 65 74 75 72 6e 20 35 3d 3d 3d 65 2e 6c 65 6e 67 74 Data Ascii: if(null!==(e=/^iglu:((?:(?:[a-zA-Z0-9-_]+\|\).)+(?:[a-zA-Z0-9-_]+\|\))\/([a-zA-Z0-9-_.]+\|\)\/jsonschema\/([1-9][0-9]\|\)-(0\|[1-9][0-9]\|\)-(0\|[1-9][0-9]\|\*)$/.exec(e))&&c(e[1]))return e.slice(1,6)}function l(e){if(e=u(e)){var n=e[0];return 5===e.lengt
2024-10-10 19:17:11 UTC	1390	IN	Data Raw: 69 74 28 22 2e 22 29 2c 65 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6e 26 26 65 29 7b 69 66 28 6e 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 21 77 28 6e 5b 74 5d 2c 65 5b 74 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 28 65 5b 30 5d 2c 6e 5b 30 5d 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 31 3b 35 3e 74 3b 74 2b 2b 29 69 66 28 21 77 28 65 5b 74 5d 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 26 6e 26 26 22 2a 22 3d 3d 3d 65 7c 7c Data Ascii: it("."),e=e.split("."),n&&e){if(n.length!==e.length)return!1;for(var t=0;t<e.length;t++)if(!w(n[t],e[t]))return!1;return!0}return!1}(e[0],n[0]))return!1;for(var t=1;5>t;t++)if(!w(e[t],n[t]))return!1;return!0}return!1}function w(e,n){return e&&n&&"*"===e\|\|
2024-10-10 19:17:11 UTC	1390	IN	Data Raw: 6c 65 6e 67 74 68 3d 30 7d 7d 28 75 29 29 2c 65 2e 61 64 64 28 22 65 69 64 22 2c 66 65 2e 76 34 28 29 29 2c 65 2e 61 64 64 44 69 63 74 28 6c 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 3f 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 65 7d 3a 22 74 74 6d 22 3d 3d 3d 65 2e 74 79 70 65 3f 7b 74 79 70 65 3a 22 74 74 6d 22 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 7d 3a 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 28 73 29 2c 65 2e Data Ascii: length=0}}(u)),e.add("eid",fe.v4()),e.addDict(l),s=function(e){return null==e?{type:"dtm",value:(new Date).getTime()}:"number"==typeof e?{type:"dtm",value:e}:"ttm"===e.type?{type:"ttm",value:e.value}:{type:"dtm",value:e.value\|\|(new Date).getTime()}}(s),e.
2024-10-10 19:17:11 UTC	1390	IN	Data Raw: 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 61 64 64 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 65 29 7d 2c 63 6c 65 61 72 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 6c 65 61 72 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 29 7d 2c 72 65 6d 6f 76 65 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 72 65 6d 6f 76 65 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 65 29 7d 7d 7d 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 2c 6f 2c 65 2e 63 61 6c 6c 62 61 63 6b 29 3b 76 61 72 20 69 3d 24 28 24 28 7b 7d 2c 65 29 2c 7b 61 64 64 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3b 65 3d 65 2e 70 6c 75 67 69 6e 2c 6f 2e 70 75 Data Ascii: lobalContexts:function(e){c.addGlobalContexts(e)},clearGlobalContexts:function(){c.clearGlobalContexts()},removeGlobalContexts:function(e){c.removeGlobalContexts(e)}}}(null==n\|\|n,o,e.callback);var i=$($({},e),{addPlugin:function(e){var n,t;e=e.plugin,o.pu
2024-10-10 19:17:11 UTC	1390	IN	Data Raw: 65 74 2c 65 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 3a 65 2e 65 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 7d 3b 76 61 72 20 6e 3d 76 6f 69 64 20 30 3b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 7b 7d 29 3b 76 61 72 20 74 2c 72 3d 7b 7d 3b 66 6f 72 28 74 20 69 6e 20 65 29 28 6e 5b 74 5d 7c 7c 6e 75 6c 6c 21 3d 3d 65 5b 74 5d 26 26 76 6f 69 64 20 30 21 3d 3d 65 5b 74 5d 29 26 26 28 72 5b 74 5d 3d 65 5b 74 5d 29 3b 72 65 74 75 72 6e 20 53 28 7b 65 76 65 6e 74 3a 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 6c 69 6e 6b 5f 63 6c 69 63 6b 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 31 22 2c 64 61 74 61 3a 72 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 Data Ascii: et,elementContent:e.elementContent};var n=void 0;void 0===n&&(n={});var t,r={};for(t in e)(n[t]\|\|null!==e[t]&&void 0!==e[t])&&(r[t]=e[t]);return S({event:{schema:"iglu:com.snowplowanalytics.snowplow/link_click/jsonschema/1-0-1",data:r}})}function x(e){ret
2024-10-10 19:17:11 UTC	1390	IN	Data Raw: 6e 20 4e 28 65 29 7b 74 72 79 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3b 72 65 74 75 72 6e 20 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 2c 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 2b 22 2e 65 78 70 69 72 65 73 22 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 6e 2c 74 2c 72 2c 6f 2c 69 2c 61 29 7b 72 65 74 75 72 6e 20 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 75 6c 6c 21 3d 6e 3f 6e 3a 22 22 29 2b 28 74 3f 22 3b 20 45 78 70 69 72 65 73 3d 22 2b 6e 65 77 20 44 61 74 65 28 2b 6e 65 77 20 44 61 74 65 2b 31 65 33 2a Data Ascii: n N(e){try{var n=window.localStorage;return n.removeItem(e),n.removeItem(e+".expires"),!0}catch(e){return!1}}function U(e,n,t,r,o,i,a){return 1<arguments.length?document.cookie=e+"="+encodeURIComponent(null!=n?n:"")+(t?"; Expires="+new Date(+new Date+1e3*
2024-10-10 19:17:11 UTC	1390	IN	Data Raw: 6e 7d 2c 72 3d 76 6f 69 64 20 30 3b 69 66 28 45 28 41 29 29 76 61 72 20 6f 3d 6d 28 72 3d 68 2c 21 30 2c 65 29 2c 69 3d 6e 28 41 29 3b 65 6c 73 65 20 72 3d 76 28 41 5b 30 5d 29 2c 6f 3d 6d 28 72 2c 21 31 2c 65 29 2c 69 3d 31 3b 76 61 72 20 73 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 61 62 6f 72 74 28 29 2c 79 3d 21 31 7d 29 2c 75 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 41 2e 73 68 69 66 74 28 29 3b 74 26 26 42 28 4f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 41 2e 73 6c 69 63 65 28 30 2c 63 29 29 29 2c 64 28 29 7d 3b 69 66 28 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 6f 2e 72 65 61 Data Ascii: n},r=void 0;if(E(A))var o=m(r=h,!0,e),i=n(A);else r=v(A[0]),o=m(r,!1,e),i=1;var s=setTimeout((function(){o.abort(),y=!1}),u),f=function(e){for(var n=0;n<e;n++)A.shift();t&&B(O,JSON.stringify(A.slice(0,c))),d()};if(o.onreadystatechange=function(){4===o.rea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:11 UTC	368	OUT	GET /js/utils.bcf03997485feb49f2c7.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 10 Oct 2025 19:17:11 GMT last-modified: Tue, 01 Oct 2024 08:33:42 GMT etag: W/"52d20b91b912a77e27855528a7e7d54c" vary: Accept-Encoding x-goog-generation: 1727771622179202 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 20154 x-goog-hash: crc32c=k6Mv5g== x-goog-hash: md5=UtILkbkSp34nhVUop+fVTA== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: AD-8ljv0autreZ-QJ7-WIOe7r9G-tNMahmaKlYhZDkSHoqz-i6IDshjJTCQgRXrVfua2pURVVF-98TN9Rw CF-Cache-Status: HIT Age: 805883 Server: cloudflare CF-RAY: 8d08f2fcdf168cca-EWR
2024-10-10 19:17:11 UTC	594	IN	Data Raw: 37 63 35 66 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 2c 72 3d 7b 35 36 32 37 3a 74 3d 3e 7b 76 61 72 20 72 3d 7b 61 6c 70 68 61 62 65 74 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 6c 6f 6f 6b 75 70 3a 6e 75 6c 6c 2c 69 65 3a 2f 4d 53 49 45 20 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 63 68 65 63 6b 49 73 4e 61 4e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 4e 75 6d 62 65 72 2e 69 73 4e 61 4e 28 74 29 7d 2c 74 6f 55 74 66 38 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 65 3d 2d 31 2c 6e 3d 74 Data Ascii: 7c5f(()=>{var t,r={5627:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 6e 29 5d 3d 6e 3b 6e 3d 2d 31 7d 66 6f 72 28 65 3d 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 3c 65 26 26 28 69 5b 30 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 6e 29 5d 2c 69 5b 31 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 6f 2e 70 75 73 68 28 69 5b 30 5d 3c 3c 32 7c 69 5b 31 5d 3e 3e 34 29 2c 69 5b 32 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 32 5d 29 26 26 28 6f 2e 70 75 73 68 28 28 31 35 26 69 5b 31 5d 29 3c 3c 34 7c 69 5b 32 5d 3e 3e 32 29 2c 69 5b 33 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 33 5d 29 3b 29 6f 2e 70 75 73 68 28 28 33 26 69 5b 32 Data Ascii: alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[2
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 31 39 31 26 26 65 5b 6f 5d 3c 32 32 34 3f 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 33 31 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3a 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 31 35 26 65 5b 6f 2b 2b 5d 29 3c 3c 31 32 7c 28 36 33 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 62 61 73 65 36 34 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 65 6e 63 6f 64 65 28 74 29 7d 2c 62 61 73 65 36 34 44 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 63 6f 64 65 28 74 29 7d 7d 7d 2c 33 39 33 30 3a 28 74 2c 72 2c 65 29 3d Data Ascii: 191&&e[o]<224?a+=String.fromCharCode((31&e[o++])<<6\|63&e[o++]):a+=String.fromCharCode((15&e[o++])<<12\|(63&e[o++])<<6\|63&e[o++]);return a}};t.exports={base64Encode:function(t){return r.encode(t)},base64Decode:function(t){return r.decode(t)}}},3930:(t,r,e)=
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 53 3a 28 29 3d 3e 73 2c 52 69 3a 28 29 3d 3e 67 2c 55 4e 3a 28 29 3d 3e 45 2e 55 4e 2c 4a 4c 3a 28 29 3d 3e 79 2c 77 6d 3a 28 29 3d 3e 76 2c 6a 42 3a 28 29 3d 3e 62 2c 46 72 3a 28 29 3d 3e 70 2c 72 77 3a 28 29 3d 3e 68 2c 63 4b 3a 28 29 3d 3e 45 2e 63 4b 2c 4f 52 3a 28 29 3d 3e 63 2c 76 3a 28 29 3d 3e 45 2e 76 2c 69 54 3a 28 29 3d 3e 45 2e 69 54 2c 4a 79 3a 28 29 3d 3e 77 2c 54 56 3a 28 29 3d 3e 6d 2c 6e 46 3a 28 29 3d 3e 6c 2c 4d 4d 3a 28 29 3d 3e 64 7d 29 2c 65 28 32 35 31 34 29 2c 65 28 38 32 38 33 29 2c 65 28 35 33 34 29 2c 65 28 36 36 31 32 29 2c 65 28 36 34 39 35 29 2c 65 28 36 39 35 37 29 2c 65 28 31 30 32 38 29 2c 65 28 33 32 31 29 2c 65 28 39 35 37 30 29 2c 65 28 36 32 35 33 29 2c 65 28 34 34 34 31 29 2c 65 28 38 39 32 39 29 2c 65 28 31 35 35 34 Data Ascii: S:()=>s,Ri:()=>g,UN:()=>E.UN,JL:()=>y,wm:()=>v,jB:()=>b,Fr:()=>p,rw:()=>h,cK:()=>E.cK,OR:()=>c,v:()=>E.v,iT:()=>E.iT,Jy:()=>w,TV:()=>m,nF:()=>l,MM:()=>d}),e(2514),e(8283),e(534),e(6612),e(6495),e(6957),e(1028),e(321),e(9570),e(6253),e(4441),e(8929),e(1554
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 72 65 74 75 72 6e 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 72 29 7b 74 72 79 7b 76 61 72 20 65 3d 6e 65 77 20 55 52 4c 28 74 29 3b 72 65 74 75 72 6e 20 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 72 2c 74 29 7d 29 29 2c 65 2e 68 72 65 66 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 20 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 74 29 7b 76 61 72 20 72 2c 65 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 Data Ascii: !==arguments[0]?arguments[0]:window.location.search;return new URLSearchParams(t)}function d(t,r){try{var e=new URL(t);return r.forEach((function(t,r){return e.searchParams.set(r,t)})),e.href}catch(r){return t}}function y(t){var r,e,n=arguments.length>1&&
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 29 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 76 61 72 20 72 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 20 29 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 28 5b 5e 3b 5d 2b 29 22 29 29 2c 65 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 2e 6d 61 74 63 68 28 72 29 3b 72 65 74 75 72 6e 20 65 3f 65 5b 32 5d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 72 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 3b 22 29 7d 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 Data Ascii: )):null}function g(t){var r=new RegExp("(^\| )".concat(t,"=([^;]+)")),e=decodeURIComponent(document.cookie).match(r);return e?e[2]:null}function m(t,r){document.cookie="".concat(t,"=").concat(r,";")}var b=function(){return null!==document.documentElement.g
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 28 72 29 7c 7c 21 72 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 6e 3d 72 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 7b 76 61 72 20 6f 3d 6e 2e 63 61 6c 6c 28 72 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 72 29 7d 28 72 29 3b 72 Data Ascii: ,o)}}function e(r){var e=function(r,e){if("object"!=t(r)\|\|!r)return r;var n=r[Symbol.toPrimitive];if(void 0!==n){var o=n.call(r,"string");if("object"!=t(o))return o;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(r)}(r);r
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 74 3b 76 61 72 20 74 2c 65 7d 28 29 2c 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6c 61 73 73 4c 69 73 74 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 28 74 68 69 73 29 7d 7d 29 2c 77 69 6e 64 6f 77 2e 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 26 26 21 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 26 26 28 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 Data Ascii: neProperty(t,"prototype",{writable:!1}),t;var t,e}(),"classList"in Element.prototype\|\|Object.defineProperty(Element.prototype,"classList",{get:function(){return new a(this)}}),window.DOMTokenList&&!DOMTokenList.prototype.replace&&(DOMTokenList.prototype.r
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 6f 5b 69 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 6e 28 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 29 26 26 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 72 2c 6f 29 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6d 6f 76 65 41 6c 6c 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 3d 5b 5d 7d 7d 5d 2c 72 26 26 6f 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 74 3b 76 61 72 20 74 2c Data Ascii: o[i-1]=arguments[i];"object"===n(this.events[t])&&this.events[t].forEach((function(t){return t.apply(r,o)}))}},{key:"removeAllListeners",value:function(t){this.events[t]=[]}}],r&&o(t.prototype,r),Object.defineProperty(t,"prototype",{writable:!1}),t;var t,
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 6e 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 6e 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b Data Ascii: n n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},n(t)}function o(t,r){for(var e=0;e<r.length;e++){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49747	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:11 UTC	507	OUT	GET /js/sptw.051afd940be1c95d0063.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	769	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 10 Oct 2025 19:17:11 GMT last-modified: Mon, 02 Sep 2024 11:33:43 GMT etag: W/"6ef7f49017e8190f22a389f4a0462fae" vary: Accept-Encoding x-goog-generation: 1725276823205082 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 20505 x-goog-hash: crc32c=ddebnQ== x-goog-hash: md5=bvf0kBfoGQ8io4n0oEYvrg== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: AD-8ljulr61-BZPP6h9mqmtxi5AU8yLvK8fEGSjVdEvFSDRM0C2zp44eh4sBVFjp4JShnauttLQ CF-Cache-Status: HIT Age: 3301727 Server: cloudflare CF-RAY: 8d08f2fcdd9f440d-EWR
2024-10-10 19:17:11 UTC	600	IN	Data Raw: 37 63 36 35 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 38 34 31 32 3a 74 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 65 28 Data Ascii: 7c65(()=>{var t={8412:t=>{function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},e(
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 74 2c 65 2c 6e 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 72 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 65 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 72 2c 6e 29 7b 72 65 74 75 Data Ascii: function(e){o(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,r,n){retu
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 20 24 7b 6e 61 76 54 69 6d 69 6e 67 28 22 2b 65 2b 22 29 7d 2c 20 30 29 22 29 29 7d 29 2c 7b 7d 29 7d 29 2e 72 65 70 6c 61 63 65 28 2f 5c 22 28 5c 24 5b 5c 24 5c 73 2c 5c 77 7b 7d 28 29 5d 2b 29 5c 22 2f 67 2c 22 24 31 22 29 7d 2c 67 65 74 53 6e 6f 77 70 6c 6f 77 50 65 72 66 6f 72 6d 61 6e 63 65 54 69 6d 69 6e 67 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 6d 6f 7a 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 6d 73 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 77 65 62 6b 69 74 50 65 72 66 6f 72 6d 61 6e 63 65 3b 69 66 28 65 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 2e 74 69 6d 69 6e 67 29 61 28 6e 2c 69 29 26 26 6e 75 6c 6c 21 3d 3d 65 2e Data Ascii: ${navTiming("+e+")}, 0)"))}),{})}).replace(/\"(\$[\$\s,\w{}()]+)\"/g,"$1")},getSnowplowPerformanceTimingContext:function(t){var e=t.performance\|\|t.mozPerformance\|\|t.msPerformance\|\|t.webkitPerformance;if(e){var r={};for(var n in e.timing)a(n,i)&&null!==e.
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 5d 2c 75 3d 2d 31 3b 69 66 28 65 2e 69 65 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 3b 2b 2b 75 3c 61 3b 29 72 3d 69 5b 75 5d 2c 6e 3d 69 5b 2b 2b 75 5d 2c 73 5b 30 5d 3d 72 3e 3e 32 2c 73 5b 31 5d 3d 28 33 26 72 29 3c 3c 34 7c 6e 3e 3e 34 2c 65 2e 63 68 65 63 6b 49 73 4e 61 4e 28 6e 29 3f 28 73 5b 32 5d 3d 36 34 2c 73 5b 33 5d 3d 36 34 29 3a 28 6f 3d 69 5b 2b 2b 75 5d 2c 73 5b 32 5d 3d 28 31 35 26 6e 29 3c 3c 32 7c 6f 3e 3e 36 2c 73 5b 33 5d 3d 65 2e 63 68 65 63 6b 49 73 4e 61 4e 28 6f 29 3f 36 34 3a 36 33 26 6f 29 2c 63 2e 70 75 73 68 28 65 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 73 5b 30 5d 29 2c 65 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 73 5b 31 5d 29 2c 65 2e 61 6c 70 68 61 62 65 74 2e 63 Data Ascii: ull,null,null],u=-1;if(e.ie){for(var c=[];++u<a;)r=i[u],n=i[++u],s[0]=r>>2,s[1]=(3&r)<<4\|n>>4,e.checkIsNaN(n)?(s[2]=64,s[3]=64):(o=i[++u],s[2]=(15&n)<<2\|o>>6,s[3]=e.checkIsNaN(o)?64:63&o),c.push(e.alphabet.charAt(s[0]),e.alphabet.charAt(s[1]),e.alphabet.c
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 30 32 38 29 2c 72 28 33 32 31 29 2c 72 28 39 35 37 30 29 2c 72 28 36 32 35 33 29 2c 72 28 34 34 34 31 29 2c 72 28 38 39 32 39 29 2c 72 28 31 35 35 34 29 2c 72 28 37 36 32 31 29 2c 72 28 35 36 32 37 29 3b 76 61 72 20 6e 3d 72 28 37 34 37 39 29 7d 2c 37 36 32 31 3a 28 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 Data Ascii: 028),r(321),r(9570),r(6253),r(4441),r(8929),r(1554),r(7621),r(5627);var n=r(7479)},7621:()=>{function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 68 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 61 3d 30 3b 61 3c 65 3b 61 2b 2b 29 72 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 69 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 6e 28 74 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 72 65 70 6c 61 63 65 28 6f 28 65 29 2c 22 20 22 29 29 7d 29 2c 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 67 67 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 3f 28 74 68 69 73 2e 72 65 6d 6f 76 65 28 74 29 2c 21 31 29 3a 28 74 68 69 73 2e 61 64 64 28 74 29 2c 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 74 61 69 6e 73 22 2c 76 61 6c 75 65 3a 66 75 6e Data Ascii: h,r=new Array(e),a=0;a<e;a++)r[a]=arguments[a];i(r,(function(e){t.element.className=n(t.element.className.replace(o(e)," "))}),this)}},{key:"toggle",value:function(t){return this.contains(t)?(this.remove(t),!1):(this.add(t),!0)}},{key:"contains",value:fun
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6e 28 65 29 3f 65 3a 65 2b 22 22 7d 72 2e 64 28 65 2c 7b 6c 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d Data Ascii: ypeError("@@toPrimitive must return a primitive value.")}return String(t)}(t);return"symbol"==n(e)?e:e+""}r.d(e,{l:()=>f});var a=function(){return t=function t(){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 73 28 65 29 3f 65 3a 65 2b 22 22 7d 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 65 3d 74 2c 72 3d 5b 7b 6b 65 79 3a 22 69 6e 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 5f 65 76 65 6e 74 42 75 73 3d 6e 65 77 20 61 7d 7d 2c Data Ascii: e.")}return String(t)}(t);return"symbol"==s(e)?e:e+""}var f=function(){function t(){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}(this,t)}return e=t,r=[{key:"init",value:function(){window.__eventBus=new a}},
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 37 38 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4e 75 6d 62 65 72 7d 2c 31 33 31 37 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 31 38 35 37 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7d 2c 39 38 35 36 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 31 32 36 38 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 6b 65 79 73 7d 2c 33 38 38 39 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 36 37 31 30 29 3b 76 61 72 20 6e 3d 72 28 36 39 33 31 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 53 74 72 69 6e 67 22 2c 22 70 61 64 45 6e 64 22 29 7d 2c 36 35 31 32 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 34 32 31 36 29 Data Ascii: 78);var n=r(8355);t.exports=n.Number},1317:(t,e,r)=>{r(1857);var n=r(8355);t.exports=n.Object.assign},9856:(t,e,r)=>{r(1268);var n=r(8355);t.exports=n.Object.keys},3889:(t,e,r)=>{r(6710);var n=r(6931);t.exports=n("String","padEnd")},6512:(t,e,r)=>{r(4216)
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 79 70 65 3b 6e 75 6c 6c 3d 3d 73 5b 61 5d 26 26 69 2e 66 28 73 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6f 28 6e 75 6c 6c 29 7d 29 2c 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 61 5d 5b 74 5d 3d 21 30 7d 7d 2c 34 33 37 31 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 36 39 30 33 29 2c 6f 3d 72 28 35 34 34 36 29 2c 69 3d 6e 2e 53 74 72 69 6e 67 2c 61 3d 6e 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 38 33 36 30 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 Data Ascii: ype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},4371:(t,e,r)=>{var n=r(6903),o=r(5446),i=n.String,a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},8360:(t,e,r)=>{"use stri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:11 UTC	484	OUT	GET /js/cm.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	769	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-goog-generation: 1656555137097208 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 17906 x-goog-hash: crc32c=ZpZBfw== x-goog-hash: md5=jkZtmPofdGx0sbQJ0goM8w== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ABPtcPpQ_LHM-K8bazeZGCR0h28B-h-Typ8hD3VAz0-cQkVr-V1-3PfT6OQtuuXRZOwBtdj0X_A expires: Fri, 10 Oct 2025 19:17:11 GMT Cache-Control: public, max-age=31536000 last-modified: Thu, 30 Jun 2022 02:12:17 GMT etag: W/"8e466d98fa1f746c74b1b409d20a0cf3" vary: Accept-Encoding CF-Cache-Status: HIT Age: 3700780 Server: cloudflare CF-RAY: 8d08f2fcedc942b0-EWR
2024-10-10 19:17:11 UTC	600	IN	Data Raw: 37 63 36 35 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 36 32 31 33 3a 74 3d 3e 7b 76 61 72 20 72 3d 7b 61 6c 70 68 61 62 65 74 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 6c 6f 6f 6b 75 70 3a 6e 75 6c 6c 2c 69 65 3a 2f 4d 53 49 45 20 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 69 65 6f 3a 2f 4d 53 49 45 20 5b 36 37 5d 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 63 68 65 63 6b 49 73 4e 61 4e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 4e 75 6d 62 65 72 2e 69 73 4e Data Ascii: 7c65(()=>{var t={6213:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),ieo:/MSIE [67]/.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isN
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 67 74 68 2c 72 2e 6c 6f 6f 6b 75 70 3d 7b 7d 3b 2b 2b 6e 3c 65 3b 29 72 2e 6c 6f 6f 6b 75 70 5b 72 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 6e 29 5d 3d 6e 3b 6e 3d 2d 31 7d 66 6f 72 28 65 3d 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 3c 65 26 26 28 69 5b 30 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 6e 29 5d 2c 69 5b 31 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 6f 2e 70 75 73 68 28 69 5b 30 5d 3c 3c 32 7c 69 5b 31 5d 3e 3e 34 29 2c 69 5b 32 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 32 5d 29 26 26 28 6f 2e 70 75 73 68 28 28 31 35 26 69 5b 31 5d 29 3c 3c 34 7c 69 5b 32 5d 3e 3e 32 29 2c 69 5b 33 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 Data Ascii: gth,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.char
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 5b 6f 2b 2b 5d 29 3a 65 5b 6f 5d 3e 31 39 31 26 26 65 5b 6f 5d 3c 32 32 34 3f 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 33 31 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3a 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 31 35 26 65 5b 6f 2b 2b 5d 29 3c 3c 31 32 7c 28 36 33 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 62 61 73 65 36 34 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 65 6e 63 6f 64 65 28 74 29 7d 2c 62 61 73 65 36 34 44 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 Data Ascii: =String.fromCharCode(e[o++]):e[o]>191&&e[o]<224?a+=String.fromCharCode((31&e[o++])<<6\|63&e[o++]):a+=String.fromCharCode((15&e[o++])<<12\|(63&e[o++])<<6\|63&e[o++]);return a}};t.exports={base64Encode:function(t){return r.encode(t)},base64Decode:function(t){r
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 6b 65 79 3a 22 69 74 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 5b 74 5d 7c 7c 6e 75 6c 6c 7d 7d 2c 7b 6b 65 79 3a 22 72 65 70 6c 61 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 28 74 29 2c 74 68 69 73 2e 61 64 64 28 72 29 7d 7d 5d 2c 61 26 26 74 28 69 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 6f 7d 28 29 2c 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: key:"item",value:function(t){return this.element.className.split(/\s+/)[t]\|\|null}},{key:"replace",value:function(t,r){this.remove(t),this.add(r)}}],a&&t(i.prototype,a),Object.defineProperty(i,"prototype",{writable:!1}),o}(),"classList"in Element.prototype
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 29 2c 65 28 32 37 34 29 2c 65 28 39 34 33 39 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4e 75 6d 62 65 72 7d 2c 34 39 34 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 39 39 31 34 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7d 2c 38 32 32 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 37 32 35 30 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 6b 65 79 73 7d 2c 38 33 38 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 34 34 35 37 29 3b 76 61 72 20 6e 3d 65 28 31 30 39 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 53 74 72 69 6e 67 22 2c 22 70 61 64 45 6e 64 22 29 7d 2c 37 31 35 30 3a 28 74 2c 72 Data Ascii: ),e(274),e(9439);var n=e(6386);t.exports=n.Number},4945:(t,r,e)=>{e(9914);var n=e(6386);t.exports=n.Object.assign},8229:(t,r,e)=>{e(7250);var n=e(6386);t.exports=n.Object.keys},8385:(t,r,e)=>{e(4457);var n=e(1099);t.exports=n("String","padEnd")},7150:(t,r
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 3b 6e 75 6c 6c 3d 3d 73 5b 61 5d 26 26 69 2e 66 28 73 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6f 28 6e 75 6c 6c 29 7d 29 2c 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 61 5d 5b 74 5d 3d 21 30 7d 7d 2c 35 31 35 31 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 33 30 38 33 29 2c 6f 3d 65 28 35 35 38 37 29 2c 69 3d 6e 2e 53 74 72 69 6e 67 2c 61 3d 6e 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 32 33 35 35 3a 28 74 2c 72 2c 65 29 3d 3e Data Ascii: ray.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},5151:(t,r,e)=>{var n=e(3083),o=e(5587),i=n.String,a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},2355:(t,r,e)=>
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 72 29 53 5b 4f 5d 3d 6d 3b 65 6c 73 65 20 69 66 28 6d 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 30 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 62 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 4f 3b 63 61 73 65 20 32 3a 63 28 53 2c 62 29 7d 65 6c 73 65 20 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 20 37 3a 63 28 53 2c 62 29 7d 72 65 74 75 72 6e 20 70 3f 2d 31 3a 6f 7c 7c 66 3f 66 3a 53 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 66 6f 72 45 61 63 68 3a 66 28 30 29 2c 6d 61 70 3a 66 28 31 29 2c 66 69 6c 74 65 72 3a 66 28 32 29 2c 73 6f 6d 65 3a 66 28 33 29 2c 65 76 65 72 79 3a 66 28 34 29 2c 66 69 6e 64 3a 66 28 35 29 2c 66 69 6e 64 49 6e 64 65 78 3a 66 28 36 29 2c 66 69 6c 74 65 Data Ascii: r)S[O]=m;else if(m)switch(t){case 3:return!0;case 5:return b;case 6:return O;case 2:c(S,b)}else switch(t){case 4:return!1;case 7:c(S,b)}return p?-1:o\|\|f?f:S}};t.exports={forEach:f(0),map:f(1),filter:f(2),some:f(3),every:f(4),find:f(5),findIndex:f(6),filte
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 7d 2c 38 30 35 36 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 33 30 38 33 29 2c 6f 3d 65 28 38 35 35 36 29 2c 69 3d 65 28 33 39 35 37 29 2c 61 3d 65 28 32 30 38 33 29 2c 73 3d 65 28 37 39 37 38 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 75 3d 6e 2e 4f 62 6a 65 63 74 2c 63 3d 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 65 2c 6e 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 55 6e 64 65 66 69 6e 65 64 22 3a 6e 75 6c 6c 3d 3d 3d 74 3f 22 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: },8056:(t,r,e)=>{var n=e(3083),o=e(8556),i=e(3957),a=e(2083),s=e(7978)("toStringTag"),u=n.Object,c="Arguments"==a(function(){return arguments}());t.exports=o?a:function(t){var r,e,n;return void 0===t?"Undefined":null===t?"Null":"string"==typeof(e=function
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 61 3d 6e 28 72 29 3b 61 20 69 6e 20 74 3f 6f 2e 66 28 74 2c 61 2c 69 28 30 2c 65 29 29 3a 74 5b 61 5d 3d 65 7d 7d 2c 37 33 35 34 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 38 39 37 32 29 2c 6f 3d 65 28 36 39 37 29 2c 69 3d 65 28 37 31 34 31 29 2c 61 3d 65 28 32 37 31 39 29 2c 73 3d 65 28 33 39 35 37 29 2c 75 3d 65 28 35 39 37 37 29 2c 63 3d 65 28 36 34 33 39 29 2c 66 3d 65 28 34 37 33 30 29 2c 70 3d 65 28 37 31 31 34 29 2c 6c 3d 65 28 36 37 38 35 29 2c 68 3d 65 28 34 33 33 39 29 2c 76 3d 65 28 37 39 37 38 29 2c 67 3d 65 28 35 31 39 36 29 2c 64 3d 65 28 32 34 36 36 29 2c 79 3d 61 2e 50 52 4f 50 45 52 2c 62 3d 61 Data Ascii: ;t.exports=function(t,r,e){var a=n(r);a in t?o.f(t,a,i(0,e)):t[a]=e}},7354:(t,r,e)=>{"use strict";var n=e(8972),o=e(697),i=e(7141),a=e(2719),s=e(3957),u=e(5977),c=e(6439),f=e(4730),p=e(7114),l=e(6785),h=e(4339),v=e(7978),g=e(5196),d=e(2466),y=a.PROPER,b=a
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 74 28 74 29 3a 7b 7d 7d 7d 2c 36 34 35 33 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 37 32 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 6e 61 76 69 67 61 74 6f 72 22 2c 22 75 73 65 72 41 67 65 6e 74 22 29 7c 7c 22 22 7d 2c 33 31 37 31 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 2c 6f 2c 69 3d 65 28 33 30 38 33 29 2c 61 3d 65 28 36 34 35 33 29 2c 73 3d 69 2e 70 72 6f 63 65 73 73 2c 75 3d 69 2e 44 65 6e 6f 2c 63 3d 73 26 26 73 2e 76 65 72 73 69 6f 6e 73 7c 7c 75 26 26 75 2e 76 65 72 73 69 6f 6e 2c 66 3d 63 26 26 63 2e 76 38 3b 66 26 26 28 6f 3d 28 6e 3d 66 2e 73 70 6c 69 74 28 22 2e 22 29 29 5b 30 5d 3e 30 26 26 6e 5b 30 5d 3c 34 3f 31 3a 2b 28 6e 5b 30 5d 2b 6e 5b 31 5d 29 29 2c 21 6f 26 26 61 26 26 28 21 28 6e 3d 61 2e 6d 61 74 63 68 Data Ascii: t(t):{}}},6453:(t,r,e)=>{var n=e(727);t.exports=n("navigator","userAgent")\|\|""},3171:(t,r,e)=>{var n,o,i=e(3083),a=e(6453),s=i.process,u=i.Deno,c=s&&s.versions\|\|u&&u.version,f=c&&c.v8;f&&(o=(n=f.split("."))[0]>0&&n[0]<4?1:+(n[0]+n[1])),!o&&a&&(!(n=a.match

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49749	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:11 UTC	512	OUT	GET /js/LazyImage.77b7aec17419c3045fee.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:11 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 10 Oct 2025 19:17:11 GMT last-modified: Mon, 23 Sep 2024 10:27:13 GMT etag: W/"fd2989a6a52e8047daa77f3ed7672238" vary: Accept-Encoding x-goog-generation: 1727087233383837 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1216 x-goog-hash: crc32c=YB4HYQ== x-goog-hash: md5=/SmJpqUugEfap38+12ciOA== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: AD-8ljtEwtb0vO0xSYw-upqnjwOynGicOBdKfyHbgRvCU5rxwpNsZK5cpFXM80rTR4cNFBYiTUamLAYdOA CF-Cache-Status: HIT Age: 1496584 Server: cloudflare CF-RAY: 8d08f2fced587c69-EWR
2024-10-10 19:17:11 UTC	594	IN	Data Raw: 62 38 38 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 30 5d 2c 7b 38 32 33 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 35 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: b88"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[180],{8239:(t,r,e)=>{var n=e(4594);function o(t){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof
2024-10-10 19:17:11 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 65 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 65 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 65 7c 7c 22 53 65 74 22 3d 3d 3d 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 65 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 65 29 3f 61 28 74 2c 72 29 3a 76 6f 69 64 20 30 7d 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 Data Ascii: all(t).slice(8,-1);return"Object"===e&&t.constructor&&(e=t.constructor.name),"Map"===e\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e)?a(t,r):void 0}}(t)\|\|function(){throw new TypeError("Invalid attempt to spre
2024-10-10 19:17:11 UTC	996	IN	Data Raw: 28 30 2c 6e 2e 69 54 29 28 74 2e 74 61 72 67 65 74 2c 22 2e 73 6c 69 64 65 20 2e 69 6d 67 2d 6c 61 7a 79 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 28 74 2c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 72 63 22 29 2c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 65 74 69 6e 61 2d 73 72 63 22 29 29 7d 29 29 2c 72 2e 75 6e 6f 62 73 65 72 76 65 28 74 2e 74 61 72 67 65 74 29 29 7d 29 29 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 Data Ascii: (0,n.iT)(t.target,".slide .img-lazy").forEach((function(t){return s(t,t.getAttribute("data-src"),t.getAttribute("data-retina-src"))})),r.unobserve(t.target))}))},b=function(){return t=function t(){!function(t,r){if(!(t instanceof r))throw new TypeError("C
2024-10-10 19:17:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49751	172.64.149.213	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:11 UTC	715	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js? HTTP/1.1 Host: helawok.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ
2024-10-10 19:17:12 UTC	368	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:12 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8149 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Strict-Transport-Security: max-age=15552000 Server: cloudflare CF-RAY: 8d08f2fe0b0b1851-EWR
2024-10-10 19:17:12 UTC	1001	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 69 2c 6a 2c 6e 2c 6f 2c 76 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 33 30 37 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 34 30 31 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 55 28 33 37 35 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 55 28 33 34 32 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 55 28 33 35 39 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 37 30 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 33 31 32 29 29 2f 37 29 2b 2d Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=-parseInt(U(307))/1(-parseInt(U(401))/2)+parseInt(U(375))/3(parseInt(U(342))/4)+parseInt(U(359))/5+-parseInt(U(370))/6*(-parseInt(U(312))/7)+-
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 4b 5d 29 2c 61 30 28 33 34 38 29 3d 3d 3d 45 2b 4b 3f 47 28 45 2b 4b 2c 4c 29 3a 4d 7c 7c 47 28 45 2b 4b 2c 44 5b 4b 5d 29 29 3a 47 28 45 2b 4b 2c 4c 29 2c 4a 2b 2b 29 3b 72 65 74 75 72 6e 20 46 3b 66 75 6e 63 74 69 6f 6e 20 47 28 4e 2c 4f 2c 5a 29 7b 5a 3d 62 2c 4f 62 6a 65 63 74 5b 5a 28 33 32 37 29 5d 5b 5a 28 33 35 30 29 5d 5b 5a 28 33 32 30 29 5d 28 46 2c 4f 29 7c 7c 28 46 5b 4f 5d 3d 5b 5d 29 2c 46 5b 4f 5d 5b 5a 28 33 36 30 29 5d 28 4e 29 7d 7d 2c 6e 3d 56 28 33 33 32 29 5b 56 28 33 31 38 29 5d 28 27 3b 27 29 2c 6f 3d 6e 5b 56 28 33 33 37 29 5d 5b 56 28 33 36 36 29 5d 28 6e 29 2c 67 5b 56 28 34 30 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 2c 61 32 2c 45 2c 46 2c 47 2c 48 29 7b 66 6f 72 28 61 32 3d 56 2c 45 3d 4f 62 6a 65 63 74 5b 61 32 28 33 Data Ascii: K]),a0(348)===E+K?G(E+K,L):M\|\|G(E+K,D[K])):G(E+K,L),J++);return F;function G(N,O,Z){Z=b,Object[Z(327)][Z(350)][Z(320)](F,O)\|\|(F[O]=[]),F[O][Z(360)](N)}},n=V(332)[V(318)](';'),o=n[V(337)][V(366)](n),g[V(400)]=function(C,D,a2,E,F,G,H){for(a2=V,E=Object[a2(3
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 54 26 31 7c 4f 3c 3c 31 2e 32 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 36 28 33 36 30 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 4a 3d 28 4b 2d 2d 2c 30 3d 3d 4b 26 26 28 4b 3d 4d 61 74 68 5b 61 36 28 33 32 35 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 48 5b 53 5d 3d 4c 2b 2b 2c 53 74 72 69 6e 67 28 52 29 29 7d 69 66 28 27 27 21 3d 3d 4a 29 7b 69 66 28 4f 62 6a 65 63 74 5b 61 36 28 33 32 37 29 5d 5b 61 36 28 33 35 30 29 5d 5b 61 36 28 33 32 30 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 61 36 28 33 33 30 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 36 28 33 36 30 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b Data Ascii: T&1\|O<<1.2,P==E-1?(P=0,N[a6(360)](F(O)),O=0):P++,T>>=1,G++);J=(K--,0==K&&(K=Math[a6(325)](2,M),M++),H[S]=L++,String(R))}if(''!==J){if(Object[a6(327)][a6(350)][a6(320)](I,J)){if(256>J[a6(330)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[a6(360)](F(O)),O=0):P++,G++
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 4c 3d 47 5b 33 5d 3d 54 2c 4b 5b 61 39 28 33 36 30 29 5d 28 54 29 3b 3b 29 7b 69 66 28 50 3e 44 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 33 32 35 29 5d 28 32 2c 4a 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 54 3d 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 33 32 35 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 Data Ascii: ,M<<=1);T=e(Q);break;case 2:return''}for(L=G[3]=T,K[a9(360)](T);;){if(P>D)return'';for(Q=0,R=Math[a9(325)](2,J),M=1;M!=R;S=O&N,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=M*(0<S?1:0),M<<=1);switch(T=Q){case 0:for(Q=0,R=Math[a9(325)](2,8),M=1;R!=M;S=N&O,O>>=1,0==O&&(O=E
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 2c 6a 73 64 2c 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 63 68 63 74 78 2c 20 2d 20 2c 63 68 6c 41 70 69 52 75 6d 57 69 64 67 65 74 41 67 65 4d 73 2c 72 65 6d 6f 76 65 43 68 69 6c 64 2c 31 50 76 48 71 6e 6a 2c 72 65 61 64 79 53 74 61 74 65 2c 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 36 37 32 38 48 46 64 77 53 49 2c 6e 75 6d 62 65 72 2c 31 37 35 50 45 56 68 47 64 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 73 6f 72 74 2c 66 75 6e 63 74 69 6f 6e 2c 50 4f 53 54 2c 6e 6f 77 2c 73 70 6c 69 74 2c 62 69 67 69 6e 74 2c 63 61 6c 6c 2c 72 65 70 6c 61 63 65 2c 63 68 6c 41 70 69 55 72 6c 2c 63 68 6c 41 70 69 53 69 74 65 6b 65 79 2c 4f 62 6a 65 63 74 2c 70 6f 77 2c 45 72 72 6f 72 20 6f 62 6a 65 63 74 3a 20 2c 70 72 6f 74 6f 74 79 70 65 2c 64 6f 63 75 6d 65 Data Ascii: ,jsd,DOMContentLoaded,chctx, - ,chlApiRumWidgetAgeMs,removeChild,1PvHqnj,readyState,fromCharCode,6728HFdwSI,number,175PEVhGd,XMLHttpRequest,sort,function,POST,now,split,bigint,call,replace,chlApiUrl,chlApiSitekey,Object,pow,Error object: ,prototype,docume
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 2c 65 2c 66 2c 43 29 7b 69 66 28 28 61 62 3d 56 2c 64 3d 67 5b 61 62 28 33 38 37 29 5d 2c 65 3d 33 36 30 30 2c 64 2e 74 29 26 26 28 66 3d 4d 61 74 68 5b 61 62 28 33 36 31 29 5d 28 2b 61 74 6f 62 28 64 2e 74 29 29 2c 43 3d 4d 61 74 68 5b 61 62 28 33 36 31 29 5d 28 44 61 74 65 5b 61 62 28 33 31 37 29 5d 28 29 2f 31 65 33 29 2c 43 2d 66 3e 65 29 29 72 65 74 75 72 6e 21 5b 5d 3b 72 65 74 75 72 6e 21 21 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 43 2c 44 2c 58 2c 45 29 7b 58 3d 56 3b 74 72 79 7b 72 65 74 75 72 6e 20 43 5b 44 5d 5b 58 28 32 39 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 27 70 27 7d 63 61 74 63 68 28 46 29 7b 7d 74 72 79 7b 69 66 28 43 5b 44 5d 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 43 5b 44 5d 3d 3d 3d 76 6f 69 64 20 30 3f 27 Data Ascii: ,e,f,C){if((ab=V,d=g[ab(387)],e=3600,d.t)&&(f=Math[ab(361)](+atob(d.t)),C=Math[ab(361)](Date[ab(317)]()/1e3),C-f>e))return![];return!![]}function l(e,C,D,X,E){X=V;try{return C[D][X(298)](function(){}),'p'}catch(F){}try{if(C[D]==null)return C[D]===void 0?'
2024-10-10 19:17:12 UTC	303	IN	Data Raw: 29 5d 3d 27 2d 31 27 2c 68 5b 61 33 28 33 34 34 29 5d 5b 61 33 28 33 35 31 29 5d 28 43 29 2c 44 3d 43 5b 61 33 28 33 33 31 29 5d 2c 45 3d 7b 7d 2c 45 3d 56 42 59 4d 36 28 44 2c 44 2c 27 27 2c 45 29 2c 45 3d 56 42 59 4d 36 28 44 2c 44 5b 61 33 28 32 39 35 29 5d 7c 7c 44 5b 61 33 28 33 33 34 29 5d 2c 27 6e 2e 27 2c 45 29 2c 45 3d 56 42 59 4d 36 28 44 2c 43 5b 61 33 28 33 38 35 29 5d 2c 27 64 2e 27 2c 45 29 2c 68 5b 61 33 28 33 34 34 29 5d 5b 61 33 28 33 30 36 29 5d 28 43 29 2c 46 3d 7b 7d 2c 46 2e 72 3d 45 2c 46 2e 65 3d 6e 75 6c 6c 2c 46 7d 63 61 74 63 68 28 48 29 7b 72 65 74 75 72 6e 20 47 3d 7b 7d 2c 47 2e 72 3d 7b 7d 2c 47 2e 65 3d 48 2c 47 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 3d 61 28 29 2c 62 3d 66 75 6e Data Ascii: )]='-1',h[a3(344)][a3(351)](C),D=C[a3(331)],E={},E=VBYM6(D,D,'',E),E=VBYM6(D,D[a3(295)]\|\|D[a3(334)],'n.',E),E=VBYM6(D,C[a3(385)],'d.',E),h[a3(344)][a3(306)](C),F={},F.r=E,F.e=null,F}catch(H){return G={},G.r={},G.e=H,G}}function b(c,d,e){return e=a(),b=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49752	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:12 UTC	372	OUT	GET /js/LazyImage.77b7aec17419c3045fee.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:12 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 10 Oct 2025 19:17:12 GMT last-modified: Mon, 23 Sep 2024 10:27:13 GMT etag: W/"fd2989a6a52e8047daa77f3ed7672238" vary: Accept-Encoding x-goog-generation: 1727087233383837 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1216 x-goog-hash: crc32c=YB4HYQ== x-goog-hash: md5=/SmJpqUugEfap38+12ciOA== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: AD-8ljtEwtb0vO0xSYw-upqnjwOynGicOBdKfyHbgRvCU5rxwpNsZK5cpFXM80rTR4cNFBYiTUamLAYdOA CF-Cache-Status: HIT Age: 1496585 Server: cloudflare CF-RAY: 8d08f3014f5e7c8e-EWR
2024-10-10 19:17:12 UTC	594	IN	Data Raw: 62 38 38 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 30 5d 2c 7b 38 32 33 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 35 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: b88"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[180],{8239:(t,r,e)=>{var n=e(4594);function o(t){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 65 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 65 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 65 7c 7c 22 53 65 74 22 3d 3d 3d 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 65 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 65 29 3f 61 28 74 2c 72 29 3a 76 6f 69 64 20 30 7d 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 Data Ascii: all(t).slice(8,-1);return"Object"===e&&t.constructor&&(e=t.constructor.name),"Map"===e\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e)?a(t,r):void 0}}(t)\|\|function(){throw new TypeError("Invalid attempt to spre
2024-10-10 19:17:12 UTC	996	IN	Data Raw: 28 30 2c 6e 2e 69 54 29 28 74 2e 74 61 72 67 65 74 2c 22 2e 73 6c 69 64 65 20 2e 69 6d 67 2d 6c 61 7a 79 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 28 74 2c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 72 63 22 29 2c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 65 74 69 6e 61 2d 73 72 63 22 29 29 7d 29 29 2c 72 2e 75 6e 6f 62 73 65 72 76 65 28 74 2e 74 61 72 67 65 74 29 29 7d 29 29 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 Data Ascii: (0,n.iT)(t.target,".slide .img-lazy").forEach((function(t){return s(t,t.getAttribute("data-src"),t.getAttribute("data-retina-src"))})),r.unobserve(t.target))}))},b=function(){return t=function t(){!function(t,r){if(!(t instanceof r))throw new TypeError("C
2024-10-10 19:17:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49753	172.64.149.213	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:12 UTC	793	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/8d08f2f35a7332c7 HTTP/1.1 Host: helawok.x-sns.cloud Connection: keep-alive Content-Length: 15775 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://helawok.x-sns.cloud Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ
2024-10-10 19:17:12 UTC	15775	OUT	Data Raw: 7b 22 77 70 22 3a 22 42 38 44 41 54 58 61 4f 54 39 44 54 35 33 46 61 30 61 57 34 2d 41 58 76 34 62 74 34 63 36 63 4a 4a 58 4f 61 71 31 34 6e 43 76 47 43 52 44 34 56 6e 72 77 46 43 39 61 68 34 35 30 44 79 66 38 38 34 62 4e 4a 34 53 34 4a 76 4a 44 61 34 70 4a 61 51 46 37 41 4e 39 38 6c 73 64 41 6e 43 65 38 74 62 6d 68 57 33 79 50 41 51 65 54 6f 74 67 61 6d 31 6e 4e 63 34 54 44 44 55 63 56 58 6c 66 34 78 79 66 52 75 6c 34 75 41 33 56 34 58 6f 44 34 63 41 58 58 41 65 35 41 63 34 61 43 34 2d 39 45 34 61 67 6c 34 59 6b 4f 62 79 38 72 61 62 4e 66 44 34 58 6b 6c 34 58 46 77 2d 34 77 58 34 61 6c 70 52 49 44 64 68 74 76 58 79 58 61 75 51 74 38 31 54 65 69 2b 75 6e 34 36 41 58 63 7a 48 38 34 4f 45 38 43 33 52 6e 5a 70 79 34 77 2b 75 4e 65 36 62 41 34 49 4e 36 52 63 Data Ascii: {"wp":"B8DATXaOT9DT53Fa0aW4-AXv4bt4c6cJJXOaq14nCvGCRD4VnrwFC9ah450Dyf884bNJ4S4JvJDa4pJaQF7AN98lsdAnCe8tbmhW3yPAQeTotgam1nNc4TDDUcVXlf4xyfRul4uA3V4XoD4cAXXAe5Ac4aC4-9E4agl4YkOby8rabNfD4Xkl4XFw-4wX4alpRIDdhtvXyXauQt81Tei+un46AXczH84OE8C3RnZpy4w+uNe6bA4IN6Rc
2024-10-10 19:17:12 UTC	988	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.helawok.x-sns.cloud; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=_zViBhYw.3fRIG27BRl7YVX2yk5hrtUliwTdcl0iJ4A-1728587832-1.2.1.1-iSo_ZVOl_Q2uGX4Q2ME4nuqYEVNWjkHZD70pNT8QTh6Pfq604px_HPXkLR.1PxJG80qJCNeBoXrvpRW3RZHNts2tzNwQ1wy04MocyAG_zSntOgU7J6qhEo3sY7FkqkU8n36lN4NLE3ZTLV_qrXnhAkiTJbSZjp8iXwgjUOb4q0.Ih2_Zfw_3CVs5SX6JGhLJreew7AvHHD_jq73Hax6XFEnUV9WtmKzZUZqJ0LZcFy_g3vYjJaO7h96ASBuhjZQEBR5Nd1bdqOs8lVy9aUXbImQaskLwI5SNGLwzrzdw2jFLQ3_yohWoVzHyGkXUYIYhWGegwTmEgyXioIs7CzJWGn363NPBVrYIfX7HGNQPN1nEenIRU4AHOD09xX_ufv2L; Path=/; Expires=Fri, 10-Oct-25 19:17:12 GMT; Domain=.helawok.x-sns.cloud; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned Strict-Transport-Security: max-age=15552000 Server: cloudflare CF-RAY: 8d08f302c93642cf-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49754	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:12 UTC	367	OUT	GET /js/sptw.051afd940be1c95d0063.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:12 UTC	769	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 10 Oct 2025 19:17:12 GMT last-modified: Mon, 02 Sep 2024 11:33:43 GMT etag: W/"6ef7f49017e8190f22a389f4a0462fae" vary: Accept-Encoding x-goog-generation: 1725276823205082 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 20505 x-goog-hash: crc32c=ddebnQ== x-goog-hash: md5=bvf0kBfoGQ8io4n0oEYvrg== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: AD-8ljulr61-BZPP6h9mqmtxi5AU8yLvK8fEGSjVdEvFSDRM0C2zp44eh4sBVFjp4JShnauttLQ CF-Cache-Status: HIT Age: 3301728 Server: cloudflare CF-RAY: 8d08f3032c9d15c3-EWR
2024-10-10 19:17:12 UTC	600	IN	Data Raw: 37 63 36 35 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 38 34 31 32 3a 74 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 65 28 Data Ascii: 7c65(()=>{var t={8412:t=>{function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},e(
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 74 2c 65 2c 6e 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 72 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 65 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 72 2c 6e 29 7b 72 65 74 75 Data Ascii: function(e){o(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,r,n){retu
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 20 24 7b 6e 61 76 54 69 6d 69 6e 67 28 22 2b 65 2b 22 29 7d 2c 20 30 29 22 29 29 7d 29 2c 7b 7d 29 7d 29 2e 72 65 70 6c 61 63 65 28 2f 5c 22 28 5c 24 5b 5c 24 5c 73 2c 5c 77 7b 7d 28 29 5d 2b 29 5c 22 2f 67 2c 22 24 31 22 29 7d 2c 67 65 74 53 6e 6f 77 70 6c 6f 77 50 65 72 66 6f 72 6d 61 6e 63 65 54 69 6d 69 6e 67 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 6d 6f 7a 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 6d 73 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 77 65 62 6b 69 74 50 65 72 66 6f 72 6d 61 6e 63 65 3b 69 66 28 65 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 2e 74 69 6d 69 6e 67 29 61 28 6e 2c 69 29 26 26 6e 75 6c 6c 21 3d 3d 65 2e Data Ascii: ${navTiming("+e+")}, 0)"))}),{})}).replace(/\"(\$[\$\s,\w{}()]+)\"/g,"$1")},getSnowplowPerformanceTimingContext:function(t){var e=t.performance\|\|t.mozPerformance\|\|t.msPerformance\|\|t.webkitPerformance;if(e){var r={};for(var n in e.timing)a(n,i)&&null!==e.
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 5d 2c 75 3d 2d 31 3b 69 66 28 65 2e 69 65 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 3b 2b 2b 75 3c 61 3b 29 72 3d 69 5b 75 5d 2c 6e 3d 69 5b 2b 2b 75 5d 2c 73 5b 30 5d 3d 72 3e 3e 32 2c 73 5b 31 5d 3d 28 33 26 72 29 3c 3c 34 7c 6e 3e 3e 34 2c 65 2e 63 68 65 63 6b 49 73 4e 61 4e 28 6e 29 3f 28 73 5b 32 5d 3d 36 34 2c 73 5b 33 5d 3d 36 34 29 3a 28 6f 3d 69 5b 2b 2b 75 5d 2c 73 5b 32 5d 3d 28 31 35 26 6e 29 3c 3c 32 7c 6f 3e 3e 36 2c 73 5b 33 5d 3d 65 2e 63 68 65 63 6b 49 73 4e 61 4e 28 6f 29 3f 36 34 3a 36 33 26 6f 29 2c 63 2e 70 75 73 68 28 65 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 73 5b 30 5d 29 2c 65 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 73 5b 31 5d 29 2c 65 2e 61 6c 70 68 61 62 65 74 2e 63 Data Ascii: ull,null,null],u=-1;if(e.ie){for(var c=[];++u<a;)r=i[u],n=i[++u],s[0]=r>>2,s[1]=(3&r)<<4\|n>>4,e.checkIsNaN(n)?(s[2]=64,s[3]=64):(o=i[++u],s[2]=(15&n)<<2\|o>>6,s[3]=e.checkIsNaN(o)?64:63&o),c.push(e.alphabet.charAt(s[0]),e.alphabet.charAt(s[1]),e.alphabet.c
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 30 32 38 29 2c 72 28 33 32 31 29 2c 72 28 39 35 37 30 29 2c 72 28 36 32 35 33 29 2c 72 28 34 34 34 31 29 2c 72 28 38 39 32 39 29 2c 72 28 31 35 35 34 29 2c 72 28 37 36 32 31 29 2c 72 28 35 36 32 37 29 3b 76 61 72 20 6e 3d 72 28 37 34 37 39 29 7d 2c 37 36 32 31 3a 28 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 Data Ascii: 028),r(321),r(9570),r(6253),r(4441),r(8929),r(1554),r(7621),r(5627);var n=r(7479)},7621:()=>{function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 68 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 61 3d 30 3b 61 3c 65 3b 61 2b 2b 29 72 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 69 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 6e 28 74 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 72 65 70 6c 61 63 65 28 6f 28 65 29 2c 22 20 22 29 29 7d 29 2c 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 67 67 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 3f 28 74 68 69 73 2e 72 65 6d 6f 76 65 28 74 29 2c 21 31 29 3a 28 74 68 69 73 2e 61 64 64 28 74 29 2c 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 74 61 69 6e 73 22 2c 76 61 6c 75 65 3a 66 75 6e Data Ascii: h,r=new Array(e),a=0;a<e;a++)r[a]=arguments[a];i(r,(function(e){t.element.className=n(t.element.className.replace(o(e)," "))}),this)}},{key:"toggle",value:function(t){return this.contains(t)?(this.remove(t),!1):(this.add(t),!0)}},{key:"contains",value:fun
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6e 28 65 29 3f 65 3a 65 2b 22 22 7d 72 2e 64 28 65 2c 7b 6c 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d Data Ascii: ypeError("@@toPrimitive must return a primitive value.")}return String(t)}(t);return"symbol"==n(e)?e:e+""}r.d(e,{l:()=>f});var a=function(){return t=function t(){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 73 28 65 29 3f 65 3a 65 2b 22 22 7d 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 65 3d 74 2c 72 3d 5b 7b 6b 65 79 3a 22 69 6e 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 5f 65 76 65 6e 74 42 75 73 3d 6e 65 77 20 61 7d 7d 2c Data Ascii: e.")}return String(t)}(t);return"symbol"==s(e)?e:e+""}var f=function(){function t(){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}(this,t)}return e=t,r=[{key:"init",value:function(){window.__eventBus=new a}},
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 37 38 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4e 75 6d 62 65 72 7d 2c 31 33 31 37 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 31 38 35 37 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7d 2c 39 38 35 36 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 31 32 36 38 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 6b 65 79 73 7d 2c 33 38 38 39 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 36 37 31 30 29 3b 76 61 72 20 6e 3d 72 28 36 39 33 31 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 53 74 72 69 6e 67 22 2c 22 70 61 64 45 6e 64 22 29 7d 2c 36 35 31 32 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 34 32 31 36 29 Data Ascii: 78);var n=r(8355);t.exports=n.Number},1317:(t,e,r)=>{r(1857);var n=r(8355);t.exports=n.Object.assign},9856:(t,e,r)=>{r(1268);var n=r(8355);t.exports=n.Object.keys},3889:(t,e,r)=>{r(6710);var n=r(6931);t.exports=n("String","padEnd")},6512:(t,e,r)=>{r(4216)
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 79 70 65 3b 6e 75 6c 6c 3d 3d 73 5b 61 5d 26 26 69 2e 66 28 73 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6f 28 6e 75 6c 6c 29 7d 29 2c 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 61 5d 5b 74 5d 3d 21 30 7d 7d 2c 34 33 37 31 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 36 39 30 33 29 2c 6f 3d 72 28 35 34 34 36 29 2c 69 3d 6e 2e 53 74 72 69 6e 67 2c 61 3d 6e 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 38 33 36 30 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 Data Ascii: ype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},4371:(t,e,r)=>{var n=r(6903),o=r(5446),i=n.String,a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},8360:(t,e,r)=>{"use stri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49755	34.36.17.181	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:12 UTC	360	OUT	GET /t/js/3/it.js HTTP/1.1 Host: cdn.instapagemetrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:12 UTC	724	IN	HTTP/1.1 200 OK x-goog-generation: 1686655294888925 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 55266 x-goog-hash: crc32c=JVvUKA== x-goog-hash: md5=7ukxGHBgcZqxejUt4kJODA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes X-GUploader-UploadID: AHmUCY3A0z-wT6NexsglW4hoc72NXx_8HiWKkQ3ENs_jwPZNhWcqhIiDHjOk6Q9mfJuPoCO7p3CwnH_Xyg Server: UploadServer Date: Thu, 10 Oct 2024 18:20:35 GMT Age: 3397 Last-Modified: Tue, 13 Jun 2023 11:21:34 GMT ETag: "eee931187060719ab17a352de2424e0c" Content-Type: text/javascript Content-Length: 55266 Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 19:17:12 UTC	666	IN	Data Raw: 2f 2a 21 0a 20 2a 20 57 65 62 20 61 6e 61 6c 79 74 69 63 73 20 66 6f 72 20 53 6e 6f 77 70 6c 6f 77 20 76 33 2e 31 2e 30 20 28 68 74 74 70 3a 2f 2f 62 69 74 2e 6c 79 2f 73 70 2d 6a 73 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 53 6e 6f 77 70 6c 6f 77 20 41 6e 61 6c 79 74 69 63 73 20 4c 74 64 2c 20 32 30 31 30 20 41 6e 74 68 6f 6e 20 50 61 6e 67 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 20 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 3b 66 6f 72 28 74 20 69 6e 20 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 Data Ascii: /! Web analytics for Snowplow v3.1.0 (http://bit.ly/sp-js) * Copyright 2021 Snowplow Analytics Ltd, 2010 Anthon Pang * Licensed under BSD-3-Clause */"use strict";!function(){function e(e,n){var t,r={};for(t in e)Object.prototype.hasOwnProperty.ca
2024-10-10 19:17:12 UTC	1390	IN	Data Raw: 20 72 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 30 2c 74 3d 30 2c 72 3d 5b 5d 3b 69 66 28 65 29 7b 65 3d 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 29 3b 64 6f 7b 76 61 72 20 6f 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 69 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 61 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 73 3d 6f 3c 3c 31 36 7c 69 3c 3c 38 7c 61 3b 6f 3d 73 3e 3e 31 38 26 36 33 2c 69 3d 73 3e 3e 31 32 26 36 33 2c 61 3d 73 3e 3e 36 26 36 33 2c 73 26 3d 36 33 2c 72 5b 74 2b 2b 5d 3d 64 65 2e 63 68 61 72 41 74 28 6f 29 2b 64 65 2e 63 68 61 72 41 74 28 69 29 2b 64 65 2e 63 68 61 72 41 74 28 61 29 2b 64 65 2e 63 68 61 72 41 74 28 73 Data Ascii: r(e){if(!e)return e;var n=0,t=0,r=[];if(e){e=unescape(encodeURIComponent(e));do{var o=e.charCodeAt(n++),i=e.charCodeAt(n++),a=e.charCodeAt(n++),s=o<<16\|i<<8\|a;o=s>>18&63,i=s>>12&63,a=s>>6&63,s&=63,r[t++]=de.charAt(o)+de.charAt(i)+de.charAt(a)+de.charAt(s
2024-10-10 19:17:12 UTC	1390	IN	Data Raw: 28 74 29 3f 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 29 29 3a 67 28 74 29 26 26 28 65 3d 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 29 29 29 7d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 28 74 5b 6f 5d 29 7d 2c 67 65 74 41 70 70 6c 69 63 61 62 6c 65 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3a 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 74 2e 67 65 74 4a 73 6f 6e 28 29 3b 72 3c 6f 2e 6c 65 6e Data Ascii: (t)?n=n.filter((function(e){return JSON.stringify(e)===JSON.stringify(t)})):g(t)&&(e=e.filter((function(e){return JSON.stringify(e)===JSON.stringify(t)})))},o=0;o<t.length;o++)r(t[o])},getApplicableContexts:function(t){e:{for(var r=0,o=t.getJson();r<o.len
2024-10-10 19:17:12 UTC	1390	IN	Data Raw: 69 66 28 6e 75 6c 6c 21 3d 3d 28 65 3d 2f 5e 69 67 6c 75 3a 28 28 3f 3a 28 3f 3a 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 5d 2b 7c 5c 2a 29 2e 29 2b 28 3f 3a 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 5d 2b 7c 5c 2a 29 29 5c 2f 28 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 2e 5d 2b 7c 5c 2a 29 5c 2f 6a 73 6f 6e 73 63 68 65 6d 61 5c 2f 28 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 2d 28 30 7c 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 2d 28 30 7c 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 24 2f 2e 65 78 65 63 28 65 29 29 26 26 63 28 65 5b 31 5d 29 29 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 31 2c 36 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 69 66 28 65 3d 75 28 65 29 29 7b 76 61 72 20 6e 3d 65 5b 30 5d 3b 72 65 74 75 72 6e 20 35 3d 3d 3d 65 2e 6c 65 6e 67 74 Data Ascii: if(null!==(e=/^iglu:((?:(?:[a-zA-Z0-9-_]+\|\).)+(?:[a-zA-Z0-9-_]+\|\))\/([a-zA-Z0-9-_.]+\|\)\/jsonschema\/([1-9][0-9]\|\)-(0\|[1-9][0-9]\|\)-(0\|[1-9][0-9]\|\*)$/.exec(e))&&c(e[1]))return e.slice(1,6)}function l(e){if(e=u(e)){var n=e[0];return 5===e.lengt
2024-10-10 19:17:12 UTC	1390	IN	Data Raw: 69 74 28 22 2e 22 29 2c 65 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6e 26 26 65 29 7b 69 66 28 6e 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 21 77 28 6e 5b 74 5d 2c 65 5b 74 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 28 65 5b 30 5d 2c 6e 5b 30 5d 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 31 3b 35 3e 74 3b 74 2b 2b 29 69 66 28 21 77 28 65 5b 74 5d 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 26 6e 26 26 22 2a 22 3d 3d 3d 65 7c 7c Data Ascii: it("."),e=e.split("."),n&&e){if(n.length!==e.length)return!1;for(var t=0;t<e.length;t++)if(!w(n[t],e[t]))return!1;return!0}return!1}(e[0],n[0]))return!1;for(var t=1;5>t;t++)if(!w(e[t],n[t]))return!1;return!0}return!1}function w(e,n){return e&&n&&"*"===e\|\|
2024-10-10 19:17:12 UTC	1390	IN	Data Raw: 6c 65 6e 67 74 68 3d 30 7d 7d 28 75 29 29 2c 65 2e 61 64 64 28 22 65 69 64 22 2c 66 65 2e 76 34 28 29 29 2c 65 2e 61 64 64 44 69 63 74 28 6c 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 3f 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 65 7d 3a 22 74 74 6d 22 3d 3d 3d 65 2e 74 79 70 65 3f 7b 74 79 70 65 3a 22 74 74 6d 22 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 7d 3a 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 28 73 29 2c 65 2e Data Ascii: length=0}}(u)),e.add("eid",fe.v4()),e.addDict(l),s=function(e){return null==e?{type:"dtm",value:(new Date).getTime()}:"number"==typeof e?{type:"dtm",value:e}:"ttm"===e.type?{type:"ttm",value:e.value}:{type:"dtm",value:e.value\|\|(new Date).getTime()}}(s),e.
2024-10-10 19:17:12 UTC	1390	IN	Data Raw: 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 61 64 64 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 65 29 7d 2c 63 6c 65 61 72 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 6c 65 61 72 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 29 7d 2c 72 65 6d 6f 76 65 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 72 65 6d 6f 76 65 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 65 29 7d 7d 7d 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 2c 6f 2c 65 2e 63 61 6c 6c 62 61 63 6b 29 3b 76 61 72 20 69 3d 24 28 24 28 7b 7d 2c 65 29 2c 7b 61 64 64 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3b 65 3d 65 2e 70 6c 75 67 69 6e 2c 6f 2e 70 75 Data Ascii: lobalContexts:function(e){c.addGlobalContexts(e)},clearGlobalContexts:function(){c.clearGlobalContexts()},removeGlobalContexts:function(e){c.removeGlobalContexts(e)}}}(null==n\|\|n,o,e.callback);var i=$($({},e),{addPlugin:function(e){var n,t;e=e.plugin,o.pu
2024-10-10 19:17:12 UTC	1390	IN	Data Raw: 65 74 2c 65 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 3a 65 2e 65 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 7d 3b 76 61 72 20 6e 3d 76 6f 69 64 20 30 3b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 7b 7d 29 3b 76 61 72 20 74 2c 72 3d 7b 7d 3b 66 6f 72 28 74 20 69 6e 20 65 29 28 6e 5b 74 5d 7c 7c 6e 75 6c 6c 21 3d 3d 65 5b 74 5d 26 26 76 6f 69 64 20 30 21 3d 3d 65 5b 74 5d 29 26 26 28 72 5b 74 5d 3d 65 5b 74 5d 29 3b 72 65 74 75 72 6e 20 53 28 7b 65 76 65 6e 74 3a 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 6c 69 6e 6b 5f 63 6c 69 63 6b 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 31 22 2c 64 61 74 61 3a 72 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 Data Ascii: et,elementContent:e.elementContent};var n=void 0;void 0===n&&(n={});var t,r={};for(t in e)(n[t]\|\|null!==e[t]&&void 0!==e[t])&&(r[t]=e[t]);return S({event:{schema:"iglu:com.snowplowanalytics.snowplow/link_click/jsonschema/1-0-1",data:r}})}function x(e){ret
2024-10-10 19:17:12 UTC	1390	IN	Data Raw: 6e 20 4e 28 65 29 7b 74 72 79 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3b 72 65 74 75 72 6e 20 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 2c 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 2b 22 2e 65 78 70 69 72 65 73 22 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 6e 2c 74 2c 72 2c 6f 2c 69 2c 61 29 7b 72 65 74 75 72 6e 20 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 75 6c 6c 21 3d 6e 3f 6e 3a 22 22 29 2b 28 74 3f 22 3b 20 45 78 70 69 72 65 73 3d 22 2b 6e 65 77 20 44 61 74 65 28 2b 6e 65 77 20 44 61 74 65 2b 31 65 33 2a Data Ascii: n N(e){try{var n=window.localStorage;return n.removeItem(e),n.removeItem(e+".expires"),!0}catch(e){return!1}}function U(e,n,t,r,o,i,a){return 1<arguments.length?document.cookie=e+"="+encodeURIComponent(null!=n?n:"")+(t?"; Expires="+new Date(+new Date+1e3*
2024-10-10 19:17:12 UTC	1390	IN	Data Raw: 6e 7d 2c 72 3d 76 6f 69 64 20 30 3b 69 66 28 45 28 41 29 29 76 61 72 20 6f 3d 6d 28 72 3d 68 2c 21 30 2c 65 29 2c 69 3d 6e 28 41 29 3b 65 6c 73 65 20 72 3d 76 28 41 5b 30 5d 29 2c 6f 3d 6d 28 72 2c 21 31 2c 65 29 2c 69 3d 31 3b 76 61 72 20 73 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 61 62 6f 72 74 28 29 2c 79 3d 21 31 7d 29 2c 75 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 41 2e 73 68 69 66 74 28 29 3b 74 26 26 42 28 4f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 41 2e 73 6c 69 63 65 28 30 2c 63 29 29 29 2c 64 28 29 7d 3b 69 66 28 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 6f 2e 72 65 61 Data Ascii: n},r=void 0;if(E(A))var o=m(r=h,!0,e),i=n(A);else r=v(A[0]),o=m(r,!1,e),i=1;var s=setTimeout((function(){o.abort(),y=!1}),u),f=function(e){for(var n=0;n<e;n++)A.shift();t&&B(O,JSON.stringify(A.slice(0,c))),d()};if(o.onreadystatechange=function(){4===o.rea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49756	104.18.41.218	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:12 UTC	344	OUT	GET /js/cm.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:12 UTC	769	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-goog-generation: 1656555137097208 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 17906 x-goog-hash: crc32c=ZpZBfw== x-goog-hash: md5=jkZtmPofdGx0sbQJ0goM8w== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ABPtcPpQ_LHM-K8bazeZGCR0h28B-h-Typ8hD3VAz0-cQkVr-V1-3PfT6OQtuuXRZOwBtdj0X_A expires: Fri, 10 Oct 2025 19:17:12 GMT Cache-Control: public, max-age=31536000 last-modified: Thu, 30 Jun 2022 02:12:17 GMT etag: W/"8e466d98fa1f746c74b1b409d20a0cf3" vary: Accept-Encoding CF-Cache-Status: HIT Age: 3700781 Server: cloudflare CF-RAY: 8d08f30329b0c409-EWR
2024-10-10 19:17:12 UTC	600	IN	Data Raw: 37 63 36 35 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 36 32 31 33 3a 74 3d 3e 7b 76 61 72 20 72 3d 7b 61 6c 70 68 61 62 65 74 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 6c 6f 6f 6b 75 70 3a 6e 75 6c 6c 2c 69 65 3a 2f 4d 53 49 45 20 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 69 65 6f 3a 2f 4d 53 49 45 20 5b 36 37 5d 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 63 68 65 63 6b 49 73 4e 61 4e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 4e 75 6d 62 65 72 2e 69 73 4e Data Ascii: 7c65(()=>{var t={6213:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),ieo:/MSIE [67]/.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isN
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 67 74 68 2c 72 2e 6c 6f 6f 6b 75 70 3d 7b 7d 3b 2b 2b 6e 3c 65 3b 29 72 2e 6c 6f 6f 6b 75 70 5b 72 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 6e 29 5d 3d 6e 3b 6e 3d 2d 31 7d 66 6f 72 28 65 3d 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 3c 65 26 26 28 69 5b 30 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 6e 29 5d 2c 69 5b 31 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 6f 2e 70 75 73 68 28 69 5b 30 5d 3c 3c 32 7c 69 5b 31 5d 3e 3e 34 29 2c 69 5b 32 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 32 5d 29 26 26 28 6f 2e 70 75 73 68 28 28 31 35 26 69 5b 31 5d 29 3c 3c 34 7c 69 5b 32 5d 3e 3e 32 29 2c 69 5b 33 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 Data Ascii: gth,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.char
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 5b 6f 2b 2b 5d 29 3a 65 5b 6f 5d 3e 31 39 31 26 26 65 5b 6f 5d 3c 32 32 34 3f 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 33 31 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3a 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 31 35 26 65 5b 6f 2b 2b 5d 29 3c 3c 31 32 7c 28 36 33 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 62 61 73 65 36 34 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 65 6e 63 6f 64 65 28 74 29 7d 2c 62 61 73 65 36 34 44 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 Data Ascii: =String.fromCharCode(e[o++]):e[o]>191&&e[o]<224?a+=String.fromCharCode((31&e[o++])<<6\|63&e[o++]):a+=String.fromCharCode((15&e[o++])<<12\|(63&e[o++])<<6\|63&e[o++]);return a}};t.exports={base64Encode:function(t){return r.encode(t)},base64Decode:function(t){r
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 6b 65 79 3a 22 69 74 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 5b 74 5d 7c 7c 6e 75 6c 6c 7d 7d 2c 7b 6b 65 79 3a 22 72 65 70 6c 61 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 28 74 29 2c 74 68 69 73 2e 61 64 64 28 72 29 7d 7d 5d 2c 61 26 26 74 28 69 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 6f 7d 28 29 2c 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: key:"item",value:function(t){return this.element.className.split(/\s+/)[t]\|\|null}},{key:"replace",value:function(t,r){this.remove(t),this.add(r)}}],a&&t(i.prototype,a),Object.defineProperty(i,"prototype",{writable:!1}),o}(),"classList"in Element.prototype
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 29 2c 65 28 32 37 34 29 2c 65 28 39 34 33 39 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4e 75 6d 62 65 72 7d 2c 34 39 34 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 39 39 31 34 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7d 2c 38 32 32 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 37 32 35 30 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 6b 65 79 73 7d 2c 38 33 38 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 34 34 35 37 29 3b 76 61 72 20 6e 3d 65 28 31 30 39 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 53 74 72 69 6e 67 22 2c 22 70 61 64 45 6e 64 22 29 7d 2c 37 31 35 30 3a 28 74 2c 72 Data Ascii: ),e(274),e(9439);var n=e(6386);t.exports=n.Number},4945:(t,r,e)=>{e(9914);var n=e(6386);t.exports=n.Object.assign},8229:(t,r,e)=>{e(7250);var n=e(6386);t.exports=n.Object.keys},8385:(t,r,e)=>{e(4457);var n=e(1099);t.exports=n("String","padEnd")},7150:(t,r
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 3b 6e 75 6c 6c 3d 3d 73 5b 61 5d 26 26 69 2e 66 28 73 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6f 28 6e 75 6c 6c 29 7d 29 2c 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 61 5d 5b 74 5d 3d 21 30 7d 7d 2c 35 31 35 31 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 33 30 38 33 29 2c 6f 3d 65 28 35 35 38 37 29 2c 69 3d 6e 2e 53 74 72 69 6e 67 2c 61 3d 6e 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 32 33 35 35 3a 28 74 2c 72 2c 65 29 3d 3e Data Ascii: ray.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},5151:(t,r,e)=>{var n=e(3083),o=e(5587),i=n.String,a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},2355:(t,r,e)=>
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 72 29 53 5b 4f 5d 3d 6d 3b 65 6c 73 65 20 69 66 28 6d 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 30 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 62 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 4f 3b 63 61 73 65 20 32 3a 63 28 53 2c 62 29 7d 65 6c 73 65 20 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 20 37 3a 63 28 53 2c 62 29 7d 72 65 74 75 72 6e 20 70 3f 2d 31 3a 6f 7c 7c 66 3f 66 3a 53 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 66 6f 72 45 61 63 68 3a 66 28 30 29 2c 6d 61 70 3a 66 28 31 29 2c 66 69 6c 74 65 72 3a 66 28 32 29 2c 73 6f 6d 65 3a 66 28 33 29 2c 65 76 65 72 79 3a 66 28 34 29 2c 66 69 6e 64 3a 66 28 35 29 2c 66 69 6e 64 49 6e 64 65 78 3a 66 28 36 29 2c 66 69 6c 74 65 Data Ascii: r)S[O]=m;else if(m)switch(t){case 3:return!0;case 5:return b;case 6:return O;case 2:c(S,b)}else switch(t){case 4:return!1;case 7:c(S,b)}return p?-1:o\|\|f?f:S}};t.exports={forEach:f(0),map:f(1),filter:f(2),some:f(3),every:f(4),find:f(5),findIndex:f(6),filte
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 7d 2c 38 30 35 36 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 33 30 38 33 29 2c 6f 3d 65 28 38 35 35 36 29 2c 69 3d 65 28 33 39 35 37 29 2c 61 3d 65 28 32 30 38 33 29 2c 73 3d 65 28 37 39 37 38 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 75 3d 6e 2e 4f 62 6a 65 63 74 2c 63 3d 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 65 2c 6e 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 55 6e 64 65 66 69 6e 65 64 22 3a 6e 75 6c 6c 3d 3d 3d 74 3f 22 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: },8056:(t,r,e)=>{var n=e(3083),o=e(8556),i=e(3957),a=e(2083),s=e(7978)("toStringTag"),u=n.Object,c="Arguments"==a(function(){return arguments}());t.exports=o?a:function(t){var r,e,n;return void 0===t?"Undefined":null===t?"Null":"string"==typeof(e=function
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 61 3d 6e 28 72 29 3b 61 20 69 6e 20 74 3f 6f 2e 66 28 74 2c 61 2c 69 28 30 2c 65 29 29 3a 74 5b 61 5d 3d 65 7d 7d 2c 37 33 35 34 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 38 39 37 32 29 2c 6f 3d 65 28 36 39 37 29 2c 69 3d 65 28 37 31 34 31 29 2c 61 3d 65 28 32 37 31 39 29 2c 73 3d 65 28 33 39 35 37 29 2c 75 3d 65 28 35 39 37 37 29 2c 63 3d 65 28 36 34 33 39 29 2c 66 3d 65 28 34 37 33 30 29 2c 70 3d 65 28 37 31 31 34 29 2c 6c 3d 65 28 36 37 38 35 29 2c 68 3d 65 28 34 33 33 39 29 2c 76 3d 65 28 37 39 37 38 29 2c 67 3d 65 28 35 31 39 36 29 2c 64 3d 65 28 32 34 36 36 29 2c 79 3d 61 2e 50 52 4f 50 45 52 2c 62 3d 61 Data Ascii: ;t.exports=function(t,r,e){var a=n(r);a in t?o.f(t,a,i(0,e)):t[a]=e}},7354:(t,r,e)=>{"use strict";var n=e(8972),o=e(697),i=e(7141),a=e(2719),s=e(3957),u=e(5977),c=e(6439),f=e(4730),p=e(7114),l=e(6785),h=e(4339),v=e(7978),g=e(5196),d=e(2466),y=a.PROPER,b=a
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 74 28 74 29 3a 7b 7d 7d 7d 2c 36 34 35 33 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 37 32 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 6e 61 76 69 67 61 74 6f 72 22 2c 22 75 73 65 72 41 67 65 6e 74 22 29 7c 7c 22 22 7d 2c 33 31 37 31 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 2c 6f 2c 69 3d 65 28 33 30 38 33 29 2c 61 3d 65 28 36 34 35 33 29 2c 73 3d 69 2e 70 72 6f 63 65 73 73 2c 75 3d 69 2e 44 65 6e 6f 2c 63 3d 73 26 26 73 2e 76 65 72 73 69 6f 6e 73 7c 7c 75 26 26 75 2e 76 65 72 73 69 6f 6e 2c 66 3d 63 26 26 63 2e 76 38 3b 66 26 26 28 6f 3d 28 6e 3d 66 2e 73 70 6c 69 74 28 22 2e 22 29 29 5b 30 5d 3e 30 26 26 6e 5b 30 5d 3c 34 3f 31 3a 2b 28 6e 5b 30 5d 2b 6e 5b 31 5d 29 29 2c 21 6f 26 26 61 26 26 28 21 28 6e 3d 61 2e 6d 61 74 63 68 Data Ascii: t(t):{}}},6453:(t,r,e)=>{var n=e(727);t.exports=n("navigator","userAgent")\|\|""},3171:(t,r,e)=>{var n,o,i=e(3083),a=e(6453),s=i.process,u=i.Deno,c=s&&s.versions\|\|u&&u.version,f=c&&c.v8;f&&(o=(n=f.split("."))[0]>0&&n[0]<4?1:+(n[0]+n[1])),!o&&a&&(!(n=a.match

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49758	104.18.38.43	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:12 UTC	722	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js? HTTP/1.1 Host: helawok.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ; instap-spses.9ea5=*; instap-spid.9ea5=616adf73-2482-4d1d-90c8-d1322c27fd73.1728587831.1.1728587831.1728587831.b1e638f6-4ec4-4984-a154-beed748f425a
2024-10-10 19:17:12 UTC	368	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:12 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8059 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Strict-Transport-Security: max-age=15552000 Server: cloudflare CF-RAY: 8d08f3032d8cc3ff-EWR
2024-10-10 19:17:12 UTC	1001	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 69 2c 6a 2c 6e 2c 6f 2c 76 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 70 61 72 73 65 49 6e 74 28 55 28 32 32 34 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 55 28 31 35 37 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 55 28 31 37 30 29 29 2f 33 29 2b 70 61 72 73 65 49 6e 74 28 55 28 31 39 35 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 31 33 30 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 55 28 32 33 32 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 31 35 38 29 29 2f 37 2b 70 61 72 73 65 Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=parseInt(U(224))/1+parseInt(U(157))/2(parseInt(U(170))/3)+parseInt(U(195))/4+-parseInt(U(130))/5(parseInt(U(232))/6)+-parseInt(U(158))/7+parse
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 6f 6e 20 47 28 4e 2c 4f 2c 5a 29 7b 5a 3d 62 2c 4f 62 6a 65 63 74 5b 5a 28 32 32 39 29 5d 5b 5a 28 31 36 36 29 5d 5b 5a 28 31 33 36 29 5d 28 46 2c 4f 29 7c 7c 28 46 5b 4f 5d 3d 5b 5d 29 2c 46 5b 4f 5d 5b 5a 28 32 33 34 29 5d 28 4e 29 7d 7d 2c 6e 3d 56 28 31 34 32 29 5b 56 28 31 32 37 29 5d 28 27 3b 27 29 2c 6f 3d 6e 5b 56 28 32 33 30 29 5d 5b 56 28 32 31 33 29 5d 28 6e 29 2c 67 5b 56 28 31 35 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 2c 61 32 2c 45 2c 46 2c 47 2c 48 29 7b 66 6f 72 28 61 32 3d 56 2c 45 3d 4f 62 6a 65 63 74 5b 61 32 28 31 33 38 29 5d 28 44 29 2c 46 3d 30 3b 46 3c 45 5b 61 32 28 31 33 39 29 5d 3b 46 2b 2b 29 69 66 28 47 3d 45 5b 46 5d 2c 27 66 27 3d 3d 3d 47 26 26 28 47 3d 27 4e 27 29 2c 43 5b 47 5d 29 7b 66 6f 72 28 48 3d 30 3b 48 3c Data Ascii: on G(N,O,Z){Z=b,Object[Z(229)][Z(166)][Z(136)](F,O)\|\|(F[O]=[]),F[O][Z(234)](N)}},n=V(142)[V(127)](';'),o=n[V(230)][V(213)](n),g[V(150)]=function(C,D,a2,E,F,G,H){for(a2=V,E=Object[a2(138)](D),F=0;F<E[a2(139)];F++)if(G=E[F],'f'===G&&(G='N'),C[G]){for(H=0;H<
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 26 26 28 4b 3d 4d 61 74 68 5b 61 36 28 32 31 38 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 48 5b 53 5d 3d 4c 2b 2b 2c 53 74 72 69 6e 67 28 52 29 29 7d 69 66 28 27 27 21 3d 3d 4a 29 7b 69 66 28 4f 62 6a 65 63 74 5b 61 36 28 32 32 39 29 5d 5b 61 36 28 31 36 36 29 5d 5b 61 36 28 31 33 36 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 61 36 28 31 37 32 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 36 28 32 33 34 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 36 28 31 37 32 29 5d 28 30 29 2c 47 3d 30 3b 38 3e 47 3b 4f 3d 4f 3c 3c 31 7c 54 26 31 2e 32 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 36 28 32 33 34 29 5d 28 46 28 4f 29 29 Data Ascii: &&(K=Math[a6(218)](2,M),M++),H[S]=L++,String(R))}if(''!==J){if(Object[a6(229)][a6(166)][a6(136)](I,J)){if(256>J[a6(172)](0)){for(G=0;G<M;O<<=1,P==E-1?(P=0,N[a6(234)](F(O)),O=0):P++,G++);for(T=J[a6(172)](0),G=0;8>G;O=O<<1\|T&1.2,P==E-1?(P=0,N[a6(234)](F(O))
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 7b 69 66 28 50 3e 44 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 32 31 38 29 5d 28 32 2c 4a 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 54 3d 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 32 31 38 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 47 5b 49 2b 2b 5d 3d 65 28 51 29 2c 54 3d 49 2d 31 2c 48 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 Data Ascii: {if(P>D)return'';for(Q=0,R=Math[a9(218)](2,J),M=1;M!=R;S=N&O,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);switch(T=Q){case 0:for(Q=0,R=Math[a9(218)](2,8),M=1;M!=R;S=O&N,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);G[I++]=e(Q),T=I-1,H--;break;case
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 20 66 3d 66 2d 31 32 36 2c 68 3d 65 5b 66 5d 2c 68 7d 2c 62 28 63 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 2c 61 61 29 7b 72 65 74 75 72 6e 20 61 61 3d 56 2c 4d 61 74 68 5b 61 61 28 32 32 31 29 5d 28 29 3c 64 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 62 2c 64 2c 65 2c 66 2c 43 29 7b 69 66 28 28 61 62 3d 56 2c 64 3d 67 5b 61 62 28 31 33 34 29 5d 2c 65 3d 33 36 30 30 2c 64 2e 74 29 26 26 28 66 3d 4d 61 74 68 5b 61 62 28 32 30 36 29 5d 28 2b 61 74 6f 62 28 64 2e 74 29 29 2c 43 3d 4d 61 74 68 5b 61 62 28 32 30 36 29 5d 28 44 61 74 65 5b 61 62 28 31 33 32 29 5d 28 29 2f 31 65 33 29 2c 43 2d 66 3e 65 29 29 72 65 74 75 72 6e 21 5b 5d 3b 72 65 74 75 72 6e 21 21 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 68 29 7b 72 65 74 75 72 6e 20 61 68 3d 27 63 68 6c 41 Data Ascii: f=f-126,h=e[f],h},b(c,d)}function x(d,aa){return aa=V,Math[aa(221)]()<d}function y(ab,d,e,f,C){if((ab=V,d=g[ab(134)],e=3600,d.t)&&(f=Math[ab(206)](+atob(d.t)),C=Math[ab(206)](Date[ab(132)]()/1e3),C-f>e))return![];return!![]}function a(ah){return ah='chlA
2024-10-10 19:17:12 UTC	1369	IN	Data Raw: 61 64 65 72 2c 2f 62 65 61 63 6f 6e 2f 6f 76 2c 20 2d 20 2c 72 65 70 6c 61 63 65 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 2c 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 64 6f 63 75 6d 65 6e 74 2c 73 74 72 69 6e 67 2c 6e 61 76 69 67 61 74 6f 72 2c 32 31 76 59 68 56 67 70 2c 62 6f 64 79 2c 63 68 61 72 43 6f 64 65 41 74 2c 33 34 32 30 34 31 36 57 74 61 78 76 46 2c 63 68 6c 41 70 69 41 43 43 48 2c 2f 6a 73 64 2f 72 2f 2c 63 68 63 74 78 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 66 72 6f 6d 2c 56 42 59 4d 36 2c 2f 30 2e 31 35 35 33 33 38 36 32 34 33 35 34 34 33 37 35 37 3a 31 37 32 38 35 38 33 39 30 35 3a 72 4e 73 61 54 36 6a 77 59 34 47 6a 34 71 47 6e 4f 75 51 6c 66 59 4a 64 36 4e 6a 79 78 36 74 77 39 2d 39 58 64 70 59 55 2d 59 77 2f 2c 61 70 70 65 6e Data Ascii: ader,/beacon/ov, - ,replace,createElement,hasOwnProperty,document,string,navigator,21vYhVgp,body,charCodeAt,3420416WtaxvF,chlApiACCH,/jsd/r/,chctx,XMLHttpRequest,from,VBYM6,/0.15533862435443757:1728583905:rNsaT6jwY4Gj4qGnOuQlfYJd6Njyx6tw9-9XdpYU-Yw/,appen
2024-10-10 19:17:12 UTC	213	IN	Data Raw: 2c 43 5b 61 33 28 31 35 31 29 5d 2c 27 64 2e 27 2c 45 29 2c 68 5b 61 33 28 31 37 31 29 5d 5b 61 33 28 31 33 33 29 5d 28 43 29 2c 46 3d 7b 7d 2c 46 2e 72 3d 45 2c 46 2e 65 3d 6e 75 6c 6c 2c 46 7d 63 61 74 63 68 28 48 29 7b 72 65 74 75 72 6e 20 47 3d 7b 7d 2c 47 2e 72 3d 7b 7d 2c 47 2e 65 3d 48 2c 47 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 64 2c 65 2c 57 29 7b 72 65 74 75 72 6e 20 57 3d 56 2c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 5b 57 28 32 32 38 29 5d 26 26 30 3c 64 5b 57 28 32 32 38 29 5d 5b 57 28 32 32 39 29 5d 5b 57 28 31 38 32 29 5d 5b 57 28 31 33 36 29 5d 28 65 29 5b 57 28 31 35 34 29 5d 28 57 28 32 30 37 29 29 7d 7d 28 29 Data Ascii: ,C[a3(151)],'d.',E),h[a3(171)][a3(133)](C),F={},F.r=E,F.e=null,F}catch(H){return G={},G.r={},G.e=H,G}}function k(d,e,W){return W=V,e instanceof d[W(228)]&&0<d[W(228)][W(229)][W(182)][W(136)](e)[W(154)](W(207))}}()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	172.67.185.227	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:13 UTC	482	OUT	OPTIONS /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://helawok.x-sns.cloud User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:13 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:13 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://helawok.x-sns.cloud access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Th8G9a0DdTF53botWDJJkvqtdhlefteMKK0Eig0J6shLtySxyR3D7ayrikhMBz9uBoGGldle4SBaHKDoNOs%2FpR9lnzHjurkpgxheaJL1GrBisEAz8enEWwC2%2F7QO571rQDHfWmheFkos7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d08f3064b9a80d6-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49766	104.18.38.43	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:13 UTC	711	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/8d08f2f35a7332c7 HTTP/1.1 Host: helawok.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=LerJv5jwZNtycwhoHez1JhnfQknd_8c6bizz73tBwQg-1728587830-1.0.1.1-9wHyHYnR.xAnjPR7ba6TjIBezlo_WAFHfN.xvnD9B4xHM8L9y3AqoFdvzqlHQaJAj74lfgYXXgqg5gMFpZ26HQ; instap-spses.9ea5=*; instap-spid.9ea5=616adf73-2482-4d1d-90c8-d1322c27fd73.1728587831.1.1728587831.1728587831.b1e638f6-4ec4-4984-a154-beed748f425a
2024-10-10 19:17:13 UTC	218	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 10 Oct 2024 19:17:13 GMT Content-Length: 0 Connection: close allow: POST Strict-Transport-Security: max-age=15552000 Server: cloudflare CF-RAY: 8d08f307496a186d-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49767	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 19:17:13 UTC	515	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=163699 Date: Thu, 10 Oct 2024 19:17:13 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49772	172.67.185.227	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:14 UTC	595	OUT	POST /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive Content-Length: 1942 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://helawok.x-sns.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:14 UTC	1942	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 68 65 6c 61 77 6f 6b 2e 78 2d 73 6e 73 2e 63 6c 6f 75 64 2f 22 2c 22 70 61 67 65 22 3a 22 48 61 72 74 73 66 69 65 6c 64 20 26 20 45 67 62 65 72 74 2c 20 50 4c 4c 43 22 2c 22 65 69 64 22 3a 22 35 64 65 65 33 35 65 61 2d 63 62 66 34 2d 34 66 31 36 2d 39 66 61 66 2d 38 31 62 61 39 31 38 66 33 64 34 30 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 31 2e 30 22 2c 22 74 6e 61 22 3a 22 69 6e 73 74 61 70 61 67 65 2d 73 70 22 2c 22 61 69 64 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pv","url":"https://helawok.x-sns.cloud/","page":"Hartsfield & Egbert, PLLC","eid":"5dee35ea-cbf4-4f16-9faf-81ba918f3d40","tv":"js-3.1.0","tna":"instapage-sp","aid"
2024-10-10 19:17:14 UTC	929	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://helawok.x-sns.cloud access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zPJXbFDXeduAUAdUA1g0DKP%2BLZb6Bm7WJZ1pdH3z7Xyjcwftv9Qb5oD4p7HwgDtXstDg5xUdz8IHoTYmlz45dRfeDEWokirTqcZCYjrazA7E8shPqMqjrj8Kct9AXg3Zk8ojOmWNJg3%2Fcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d08f30def964246-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 19:17:14 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49770	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:14 UTC	691	OUT	GET /?0tB=gvEvb HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:15 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-10-10 19:17:15 UTC	7100	IN	Data Raw: 31 62 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 47 35 28 47 2c 59 29 7b 76 61 72 20 4b 3d 61 30 47 34 28 29 3b 72 65 74 75 72 6e 20 61 30 47 35 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 41 29 7b 70 3d 70 2d 30 78 63 65 3b 76 61 72 20 73 3d 4b 5b 70 5d 3b 72 65 74 75 72 6e 20 73 3b 7d 2c 61 30 47 35 28 47 2c 59 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 47 2c 59 29 7b 76 61 72 20 70 57 3d 61 30 47 35 2c 4b 3d 47 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 70 3d 2d 70 61 72 73 65 49 6e 74 28 70 57 28 30 78 34 Data Ascii: 1bb4<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> function a0G5(G,Y){var K=a0G4();return a0G5=function(p,A){p=p-0xce;var s=K[p];return s;},a0G5(G,Y);}(function(G,Y){var pW=a0G5,K=G();while(!![]){try{var p=-parseInt(pW(0x4
2024-10-10 19:17:15 UTC	16384	IN	Data Raw: 37 66 66 39 0d 0a 76 61 72 20 4b 57 3d 27 53 79 6d 62 6f 6c 28 64 65 73 63 72 69 70 74 69 6f 6e 5c 78 32 30 64 65 74 65 63 74 69 6f 6e 29 27 3d 3d 3d 4b 4d 28 4b 4f 28 41 33 28 30 78 31 31 36 29 29 29 2c 4b 55 3d 4b 51 28 4b 6e 5b 27 76 61 6c 75 65 4f 66 27 5d 29 2c 4b 71 3d 4b 51 28 4b 6e 5b 41 33 28 30 78 31 31 32 29 5d 29 2c 4b 76 3d 2f 5e 53 79 6d 62 6f 6c 5c 28 28 2e 2a 29 5c 29 5b 5e 29 5d 2b 24 2f 2c 4b 58 3d 4b 51 28 27 27 5b 41 33 28 30 78 32 34 65 29 5d 29 2c 4b 46 3d 4b 51 28 27 27 5b 41 33 28 30 78 34 65 36 29 5d 29 3b 4b 6b 28 4b 6e 2c 41 33 28 30 78 31 63 34 29 2c 7b 27 63 6f 6e 66 69 67 75 72 61 62 6c 65 27 3a 21 30 78 30 2c 27 67 65 74 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4b 61 3d 4b 55 28 74 68 69 73 29 3b 69 66 28 4b 64 28 Data Ascii: 7ff9var KW='Symbol(description\x20detection)'===KM(KO(A3(0x116))),KU=KQ(Kn['valueOf']),Kq=KQ(Kn[A3(0x112)]),Kv=/^Symbol$(.*)$[^)]+$/,KX=KQ(''[A3(0x24e)]),KF=KQ(''[A3(0x4e6)]);Kk(Kn,A3(0x1c4),{'configurable':!0x0,'get':function(){var Ka=KU(this);if(Kd(
2024-10-10 19:17:15 UTC	16384	IN	Data Raw: 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 29 7c 7c 4b 77 28 73 5a 28 30 78 33 65 37 29 3d 3d 74 79 70 65 6f 66 20 4b 42 5b 27 67 27 5d 26 26 4b 42 5b 27 67 27 5d 29 7c 7c 4b 77 28 73 5a 28 30 78 33 65 37 29 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 26 26 74 68 69 73 29 7c 7c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 3b 7d 28 29 29 7c 7c 46 75 6e 63 74 69 6f 6e 28 73 5a 28 30 78 33 66 32 29 29 28 29 3b 7d 2c 30 78 31 36 37 62 3a 66 75 6e 63 74 69 6f 6e 28 4b 6a 2c 4b 7a 2c 4b 42 29 7b 76 61 72 20 73 6a 3d 61 30 47 35 2c 4b 77 3d 4b 42 28 30 78 31 32 39 61 29 2c 4b 53 3d 4b 42 28 30 78 39 32 62 29 2c 4b 48 3d 4b 77 28 7b 7d 5b 27 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 27 5d 29 3b 4b 6a 5b 73 6a 28 30 78 31 34 32 29 5d 3d 4f Data Ascii: ypeof self&&self)\|\|Kw(sZ(0x3e7)==typeof KB['g']&&KB['g'])\|\|Kw(sZ(0x3e7)==typeof this&&this)\|\|(function(){return this;}())\|\|Function(sZ(0x3f2))();},0x167b:function(Kj,Kz,KB){var sj=a0G5,Kw=KB(0x129a),KS=KB(0x92b),KH=Kw({}['hasOwnProperty']);Kj[sj(0x142)]=O
2024-10-10 19:17:15 UTC	16384	IN	Data Raw: 0a 34 30 30 30 0d 0a 4c 28 30 78 32 33 62 29 5d 2c 4b 79 3d 68 4c 28 30 78 31 61 38 29 2c 4b 51 3d 27 63 6f 6e 66 69 67 75 72 61 62 6c 65 27 2c 4b 64 3d 68 4c 28 30 78 32 39 61 29 3b 4b 7a 5b 27 66 27 5d 3d 4b 77 3f 4b 48 3f 66 75 6e 63 74 69 6f 6e 28 4b 4e 2c 4b 52 2c 4b 6b 29 7b 76 61 72 20 68 67 3d 68 4c 3b 69 66 28 4b 6c 28 4b 4e 29 2c 4b 52 3d 4b 69 28 4b 52 29 2c 4b 6c 28 4b 6b 29 2c 68 67 28 30 78 33 33 30 29 3d 3d 74 79 70 65 6f 66 20 4b 4e 26 26 68 67 28 30 78 34 38 38 29 3d 3d 3d 4b 52 26 26 68 67 28 30 78 32 32 30 29 69 6e 20 4b 6b 26 26 4b 64 20 69 6e 20 4b 6b 26 26 21 4b 6b 5b 4b 64 5d 29 7b 76 61 72 20 4b 4d 3d 4b 67 28 4b 4e 2c 4b 52 29 3b 4b 4d 26 26 4b 4d 5b 4b 64 5d 26 26 28 4b 4e 5b 4b 52 5d 3d 4b 6b 5b 68 67 28 30 78 32 32 30 29 5d 2c Data Ascii: 4000L(0x23b)],Ky=hL(0x1a8),KQ='configurable',Kd=hL(0x29a);Kz['f']=Kw?KH?function(KN,KR,Kk){var hg=hL;if(Kl(KN),KR=Ki(KR),Kl(Kk),hg(0x330)==typeof KN&&hg(0x488)===KR&&hg(0x220)in Kk&&Kd in Kk&&!Kk[Kd]){var KM=Kg(KN,KR);KM&&KM[Kd]&&(KN[KR]=Kk[hg(0x220)],
2024-10-10 19:17:15 UTC	9	IN	Data Raw: 28 4b 4a 5b 30 78 30 0d 0a Data Ascii: (KJ[0x0
2024-10-10 19:17:15 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 5d 29 2c 4b 56 28 4b 4a 5b 30 78 31 5d 29 2c 4b 56 28 4b 4a 5b 30 78 32 5d 29 2c 4b 56 28 4b 4a 5b 30 78 33 5d 29 5d 5d 3b 7d 7d 29 3b 7d 7d 2c 4b 66 3d 66 75 6e 63 74 69 6f 6e 28 4b 75 29 7b 76 61 72 20 5a 72 3d 5a 49 3b 4b 61 28 4b 75 5b 5a 72 28 30 78 34 38 65 29 5d 29 3b 7d 2c 4b 45 3d 66 75 6e 63 74 69 6f 6e 28 4b 75 29 7b 76 61 72 20 5a 4a 3d 5a 49 3b 4b 69 5b 5a 4a 28 30 78 34 63 62 29 5d 28 4b 71 28 4b 75 29 2c 4b 77 5b 27 70 72 6f 74 6f 63 6f 6c 27 5d 2b 27 2f 2f 27 2b 4b 77 5b 27 68 6f 73 74 27 5d 29 3b 7d 3b 4b 4f 26 26 4b 6e 7c 7c 28 4b 4f 3d 66 75 6e 63 74 69 6f 6e 28 4b 75 29 7b 4b 52 28 61 72 67 75 6d 65 6e 74 73 5b 27 6c 65 6e 67 74 68 27 5d 2c 30 78 31 29 3b 76 61 72 20 4b 72 3d 4b 67 28 4b 75 29 3f 4b 75 3a 4b 57 28 4b Data Ascii: 4000]),KV(KJ[0x1]),KV(KJ[0x2]),KV(KJ[0x3])]];}});}},Kf=function(Ku){var Zr=ZI;Ka(Ku[Zr(0x48e)]);},KE=function(Ku){var ZJ=ZI;Ki[ZJ(0x4cb)](Kq(Ku),Kw['protocol']+'//'+Kw['host']);};KO&&Kn\|\|(KO=function(Ku){KR(arguments['length'],0x1);var Kr=Kg(Ku)?Ku:KW(K
2024-10-10 19:17:15 UTC	8	IN	Data Raw: 75 72 6e 20 6e 65 0d 0a Data Ascii: urn ne
2024-10-10 19:17:15 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 77 20 47 7a 28 21 30 78 31 29 3b 7d 47 30 3d 47 32 28 47 32 2c 47 30 29 3b 7d 7d 29 3b 72 65 74 75 72 6e 20 4b 62 5b 27 65 72 72 6f 72 27 5d 26 26 4b 64 28 4b 62 5b 27 76 61 6c 75 65 27 5d 29 2c 4b 79 5b 27 70 72 6f 6d 69 73 65 27 5d 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 76 61 72 20 4b 67 3d 47 61 28 27 61 27 2c 27 79 27 29 3b 72 65 74 75 72 6e 20 4b 67 5b 6a 43 28 30 78 34 34 61 29 5d 3d 30 78 32 2c 6e 75 6c 6c 21 3d 3d 4b 67 5b 27 65 78 65 63 27 5d 28 6a 43 28 30 78 32 61 61 29 29 3b 7d 7d 2c 30 78 31 61 31 39 3a 66 75 6e 63 74 69 6f 6e 28 4b 6a 2c 4b 7a 2c 4b 42 29 7b 76 61 72 20 7a 33 3d 61 30 47 35 2c 4b 77 3d 4b 42 28 30 78 32 31 61 34 29 2c 4b 53 3d 4b 42 28 30 78 32 35 35 35 29 2c 4b 48 3d 4b 42 28 30 78 31 35 37 65 29 5b 7a 33 28 30 Data Ascii: 4000w Gz(!0x1);}G0=G2(G2,G0);}});return Kb['error']&&Kd(Kb['value']),Ky['promise'];}});}else{var Kg=Ga('a','y');return Kg[jC(0x44a)]=0x2,null!==Kg['exec'](jC(0x2aa));}},0x1a19:function(Kj,Kz,KB){var z3=a0G5,Kw=KB(0x21a4),KS=KB(0x2555),KH=KB(0x157e)[z3(0
2024-10-10 19:17:15 UTC	8	IN	Data Raw: 75 6e 63 74 69 6f 0d 0a Data Ascii: unctio
2024-10-10 19:17:15 UTC	8388	IN	Data Raw: 32 30 62 63 0d 0a 6e 28 4b 6a 2c 4b 7a 2c 4b 42 29 7b 76 61 72 20 7a 54 3d 61 30 47 35 2c 4b 77 3d 4b 42 28 30 78 31 35 63 61 29 2c 4b 53 3d 4b 42 28 30 78 31 32 65 61 29 2c 4b 48 3d 4b 42 28 30 78 37 36 65 29 2c 4b 6c 3d 4b 42 28 30 78 31 33 36 32 29 2c 4b 69 3d 4b 42 28 30 78 32 33 34 64 29 2c 4b 78 3d 4b 42 28 30 78 38 65 35 29 2c 4b 4c 3d 4b 42 28 30 78 31 29 28 7a 54 28 30 78 33 64 30 29 29 2c 4b 67 3d 4b 6c 5b 27 76 61 6c 75 65 73 27 5d 2c 4b 79 3d 66 75 6e 63 74 69 6f 6e 28 4b 64 2c 4b 62 29 7b 76 61 72 20 7a 65 3d 7a 54 3b 69 66 28 4b 64 29 7b 69 66 28 7a 65 28 30 78 32 66 66 29 3d 3d 3d 27 41 66 65 79 4f 27 29 7b 69 66 28 4b 64 5b 4b 4c 5d 21 3d 3d 4b 67 29 74 72 79 7b 4b 69 28 4b 64 2c 4b 4c 2c 4b 67 29 3b 7d 63 61 74 63 68 28 4b 52 29 7b 4b 64 Data Ascii: 20bcn(Kj,Kz,KB){var zT=a0G5,Kw=KB(0x15ca),KS=KB(0x12ea),KH=KB(0x76e),Kl=KB(0x1362),Ki=KB(0x234d),Kx=KB(0x8e5),KL=KB(0x1)(zT(0x3d0)),Kg=Kl['values'],Ky=function(Kd,Kb){var ze=zT;if(Kd){if(ze(0x2ff)==='AfeyO'){if(Kd[KL]!==Kg)try{Ki(Kd,KL,Kg);}catch(KR){Kd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49773	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 19:17:15 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=163698 Date: Thu, 10 Oct 2024 19:17:14 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-10 19:17:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49776	172.67.185.227	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:15 UTC	352	OUT	GET /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:15 UTC	979	IN	HTTP/1.1 302 Found Date: Thu, 10 Oct 2024 19:17:15 GMT Content-Length: 0 Connection: close location: https://ec.instapagemetrics.com/t/two?3thpc=true Cache-Control: no-cache, no-store, must-revalidate p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: * access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pz6iO4Ji2oOG04%2FdtDAjFEHo2azP%2BWcg0o9iDlwBES3qkGOioi6F%2BvZKElDcyLaaE6Tm3zE0xTt1MOgEbPOGomk9vA0eN4oXaoc9k6bREt1IKP6nGPs8qi2jc31ThqhdJbYm3w7mfDZboA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d08f3152b280f51-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49777	172.67.185.227	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:15 UTC	595	OUT	POST /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive Content-Length: 1942 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://helawok.x-sns.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:15 UTC	1942	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 68 65 6c 61 77 6f 6b 2e 78 2d 73 6e 73 2e 63 6c 6f 75 64 2f 22 2c 22 70 61 67 65 22 3a 22 48 61 72 74 73 66 69 65 6c 64 20 26 20 45 67 62 65 72 74 2c 20 50 4c 4c 43 22 2c 22 65 69 64 22 3a 22 61 62 35 35 35 62 63 31 2d 34 65 63 33 2d 34 65 34 32 2d 62 62 38 64 2d 62 35 32 61 66 32 62 61 37 64 61 36 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 31 2e 30 22 2c 22 74 6e 61 22 3a 22 69 6e 73 74 61 70 61 67 65 2d 73 70 22 2c 22 61 69 64 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://helawok.x-sns.cloud/","page":"Hartsfield & Egbert, PLLC","eid":"ab555bc1-4ec3-4e42-bb8d-b52af2ba7da6","tv":"js-3.1.0","tna":"instapage-sp","aid"
2024-10-10 19:17:15 UTC	935	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:15 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://helawok.x-sns.cloud access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Psmt1gAd%2FzXDGDMI%2B3Qz7ZCP6APCtKt6mt3anAV4wLykSJmYy1wEUZHgxaOf%2FlvW0YPHzhOgPAPm0U254%2FFMnjS27TTcvmsNj%2BEGnGTc6hBxLxo8QNYVipxFwSCqUJvqNXPPIdtsw3jyww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d08f31508637c6f-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 19:17:15 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49771	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:15 UTC	885	OUT	POST /?0tB=gvEvb HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: keep-alive Content-Length: 4628 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://okvanguardofficelogin.x-sns.cloud Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:15 UTC	4628	OUT	Data Raw: 68 61 6e 34 66 33 68 39 66 6f 76 67 3d 25 35 42 25 35 42 25 32 32 37 61 32 35 33 37 34 32 33 35 33 39 34 34 32 35 33 33 34 32 32 35 34 33 25 32 32 25 32 43 25 32 32 33 32 32 35 33 38 33 31 32 35 34 33 33 32 32 35 33 38 34 32 33 38 37 36 25 32 32 25 32 43 25 32 32 34 37 32 35 33 37 34 32 36 65 32 35 33 37 34 36 36 37 37 31 33 34 32 35 25 32 32 25 32 43 25 32 32 33 37 34 36 33 38 33 32 33 38 33 35 33 31 33 30 33 36 33 31 33 33 33 36 25 32 32 25 32 43 25 32 32 33 38 33 37 33 38 33 36 33 36 33 35 33 32 25 32 32 25 35 44 25 32 43 25 32 32 38 32 38 35 31 30 36 31 33 36 25 32 32 25 32 43 25 32 32 38 33 31 36 30 32 30 25 32 32 25 32 43 39 25 35 44 26 31 68 62 73 64 37 79 3d 25 35 42 25 35 42 25 32 32 36 31 32 35 33 33 34 35 32 35 33 37 34 32 32 35 33 33 34 35 36 Data Ascii: han4f3h9fovg=%5B%5B%227a2537423539442533422543%22%2C%22322538312543322538423876%22%2C%22472537426e25374667713425%22%2C%22374638323835313036313336%22%2C%2238373836363532%22%5D%2C%228285106136%22%2C%228316020%22%2C9%5D&1hbsd7y=%5B%5B%22612533452537422533456
2024-10-10 19:17:16 UTC	409	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 10 Oct 2024 19:17:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb set-cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; Domain=x-sns.cloud; HttpOnly; Path=/; SameSite=None; Secure
2024-10-10 19:17:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49780	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:16 UTC	881	OUT	GET /?0tB=gvEvb HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:17 UTC	779	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 56592 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 4e9c5941-3878-4d46-9eef-869dcaad1400 x-ms-ests-server: 2.1.19066.8 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:17 UTC	15605	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 bd f9 5b e2 ca f2 38 fc fb f9 2b 94 ef 79 94 5c 23 c3 ea 02 93 e3 75 1f 50 11 05 15 e5 f2 fa 84 24 40 14 12 48 82 a8 23 ff fb 5b 55 dd 9d 74 58 e6 cc 5d 3e f7 b9 67 4c 3a bd 54 57 d7 de d5 cd f7 f5 93 eb e3 c6 63 ed 74 ad 1f 0c 07 7f fd f1 9d fd 59 fb de b7 74 13 fe ae 7d 0f ec 60 60 e1 d3 da ad 65 da 9e 65 04 b6 d3 c3 0f df c2 2f df 87 56 a0 af 19 ae 13 58 4e a0 25 02 eb 3d f8 86 fd 94 d6 8c be ee f9 56 a0 4d 82 ee f6 5e 02 c6 08 46 db d6 78 62 bf 69 89 63 56 7d bb f1 31 b2 12 df 96 74 53 3e d5 2c b3 67 c5 5b 35 b7 ef 0e b7 8f dd e1 48 0f ec ce 60 79 c3 a9 6d 06 7d cd b4 de 6c c3 da a6 17 75 cd 76 ec c0 d6 07 db be a1 0f 2c 2d 93 4a ab 6b 43 fd dd 1e 4e 86 bc 28 8b 45 13 df f2 e8 5d 87 be b5 0f cb 4f ac 39 fa d0 d2 12 6f Data Ascii: [8+y\#uP$@H#[UtX]>gL:TWctYt}``ee/VXN%=VM^FxbicV}1tS>,g[5H`ym}luv,-JkCN(E]O9o
2024-10-10 19:17:17 UTC	14460	IN	Data Raw: c3 11 df bf f4 42 1c a0 30 02 de b1 41 6c a0 f5 21 8c 71 2e ff f9 2a 76 2c 89 50 24 3b 2a bb bb 93 ce ef a7 6f bc 77 6f f0 b0 20 55 98 50 c3 45 ec de 05 b7 5d 86 42 9c 78 36 b7 97 ce 67 80 33 df 07 0e b2 78 68 22 47 e4 c3 6f 56 64 be 89 b8 5c 91 98 64 7a 5e af 13 ae 8f 6e af 1f ea 24 e4 57 0a 07 ec fb fe 7c 70 cb 70 17 52 c1 91 6e 4a 9e cb 22 85 82 d0 d2 6d 9c 9f 43 5c 0c 04 cb 88 61 09 0b 71 27 89 21 88 7e d7 86 e8 13 3d 10 a0 20 cc f4 47 4c db ef 17 28 e5 b9 f1 47 02 2a 93 2e a4 73 e9 b3 9b db 27 03 27 73 fe 72 62 22 ed d6 fd e1 0f b4 da 8c a3 f3 57 94 5f c7 1f 37 3a 52 da 91 3d e9 e0 4a 0e 4e 5e cf 9e 18 5b d0 36 4b 5c ea e0 6e b4 84 86 70 4f 9a 70 22 b6 a5 f1 65 61 67 9a 34 0f d4 b7 b6 5f fc 67 76 13 2f a9 20 e1 6c 35 74 54 2f cf be 60 0a ba f4 0c 69 Data Ascii: B0Al!q.v,P$;owo UPE]Bx6g3xh"GoVd\dz^n$W\|ppRnJ"mC\aq'!~= GL(G*.s''srb"W_7:R=JN^[6K\npOp"eag4_gv/ l5tT/`i
2024-10-10 19:17:17 UTC	16384	IN	Data Raw: 67 81 25 c3 0c 3c 8a fd 08 81 13 fe fa 23 53 f3 da ff 6b cd 0e 61 9e 70 71 35 b2 ad 71 f7 e9 43 c8 42 51 14 39 1c 39 26 bd 0f aa c3 d1 80 62 61 4a ab cb f0 94 96 28 c1 36 ca 2f 08 3f cd b4 52 64 b3 95 93 7a f9 0b 9b ca 5c 40 df 74 cb 21 23 ca 63 47 d1 cf 3c ec a9 84 f0 ed 5e 6a 4a 92 77 c7 a5 b3 3b 7c 7e 09 df 86 bb af 9f df a4 df 66 5e e0 5e a1 12 04 8e 46 4f f3 e6 c0 b4 61 35 17 47 50 33 c3 31 6b 82 cd 2f 11 05 ae b2 34 4c 78 c3 4a 39 cb b3 48 67 47 c6 f4 b4 3b 2a 58 8d 19 9c de 1f 5a a2 cc e2 65 2d 93 b8 f4 29 f0 6b 1e bc d7 cd 5c ce 06 87 92 06 d5 57 c7 80 e9 e6 21 22 33 68 4f 83 8a 13 1d 3b 63 6c 01 b0 6e cb 0b b1 1d 85 56 1a 5a 4e 68 5c 73 44 c2 64 93 eb 68 0c 77 e1 73 ab e8 36 46 b8 c8 1c ff 2c 44 e9 c2 57 80 03 bf 1e cb e5 71 28 40 e9 fc 6e 98 06 Data Ascii: g%<#Skapq5qCBQ99&baJ(6/?Rdz\@t!#cG<^jJw;\|~f^^FOa5GP31k/4LxJ9HgG;*XZe-)k\W!"3hO;clnVZNh\sDdhws6F,DWq(@n
2024-10-10 19:17:17 UTC	10143	IN	Data Raw: b8 b7 7a bb ff 7a 70 91 8d 45 ab bd 20 27 e5 69 37 3b ed 46 34 46 53 c9 e0 38 3a 53 bb 78 40 8a 55 82 db cb 0f e6 d8 4a 7a c8 a8 66 0e 8b ca 11 1c 2e da c9 9c 62 40 4b 8c e1 15 66 9c a5 28 2d 38 20 f6 97 0d 04 5d ad fe fc 03 13 d2 19 52 81 21 52 54 bf 7e 07 e9 96 99 2e f6 3b 2b 7c 37 65 6c 3c b2 53 72 36 fd 87 bf d8 f4 3a 58 f3 07 75 c7 78 2c d4 a0 44 06 bd 25 eb 55 4f 9f 06 5c 14 4e 5a cc 22 27 a4 75 11 da c8 ef 0a d9 a9 c9 19 94 49 82 c9 bc 34 bc b4 5c 31 42 35 78 b7 89 22 60 7d 16 ef 04 b6 00 0a 06 cd 39 f8 37 c5 77 e0 5c 3d 40 1a 16 0b 7d f6 cd 16 da 2f 38 97 f4 d5 39 0c e7 fb a5 ec f5 38 1f 5a d2 a0 6d 12 d2 ba bd 1c 87 ba 5b a0 1d 24 41 82 58 9f da 1c 1c c4 7a 4a 92 8c 36 27 19 4a 61 0d 17 68 26 f5 8c 7f 54 b7 e0 d4 b8 a1 c8 63 4d 11 21 59 87 b2 3e Data Ascii: zzpE 'i7;F4FS8:Sx@UJzf.b@Kf(-8 ]R!RT~.;+\|7el<Sr6:Xux,D%UO\NZ"'uI4\1B5x"`}97w\=@}/898Zm[$AXzJ6'Jah&TcM!Y>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49781	172.67.185.227	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:16 UTC	352	OUT	GET /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:17 UTC	975	IN	HTTP/1.1 302 Found Date: Thu, 10 Oct 2024 19:17:17 GMT Content-Length: 0 Connection: close location: https://ec.instapagemetrics.com/t/two?3thpc=true Cache-Control: no-cache, no-store, must-revalidate p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: * access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dk4hDK0yxmEMuP4CUcu174e0aBGyWVs5sUVl76v0yg7LwvisAJchLKdefjSGMhRohF%2BpDy292IIIBZcCH3c1wgnVmf0flOTLOBBvsCssimFntlH6pJyg4RvHjs156PCgCF4v4PGW4VBnDg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d08f31dbaea8c12-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49782	172.67.185.227	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:16 UTC	363	OUT	GET /t/two?3thpc=true HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:17 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: * access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MLRoWp6AZjBfvBiN6y3TcFqQYgTvmK4S9v4wQfIfyrWngw18vlouqAvcEN0mEsoBgN76le4%2BxaK0q%2Bo3FC5wGQvfESOQ%2Fy5zgq48ClFsWLIVdhMslJUjZV4rZ4fMbQCGi1XMM4SaC6inFQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d08f31ddbae0f47-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 19:17:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49785	172.67.185.227	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:18 UTC	363	OUT	GET /t/two?3thpc=true HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:18 UTC	952	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:17:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: * access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zLraxbdd1YyAwxgwoyFd7JA3JzUfBPnw6BPtcYas7FN6v0h3Mgng3SXWz2VgeduDBL%2BbfFXixFVN4%2BEME8FIoQeIVy%2FTRA%2FO5NWoY0mn4%2B7PgfgT%2BtvDl4sSxMrH%2F%2BVoB8egdQ8BZq2FaQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d08f3284a0072ab-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 19:17:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49784	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:18 UTC	660	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: 024cc40a-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://okvanguardofficelogin.x-sns.cloud sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:19 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:19 GMT Content-Type: application/x-javascript Content-Length: 49814 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 5495554 cache-control: public, max-age=31536000 etag: 0x8DCB563C85A43C4 last-modified: Mon, 05 Aug 2024 15:32:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8fc9352a-d01e-00e2-154d-e9f70d000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-10-10 19:17:19 UTC	6449	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 e0 ce 9d 06 ba 9b 19 20 0c 81 e9 d9 05 96 cb 89 15 f0 74 b0 b3 b6 c3 cb 40 ce 6f 3f f5 22 d9 b2 e3 d0 3d bb e7 3a 5f 9e 79 21 b6 54 92 a5 52 55 a9 aa 54 92 d6 7f 5a f9 9f ca 4f 95 b5 1f ff a7 32 38 ef 9d 9d 57 fa 9f 2a e7 5f 0e cf f6 2b a7 f0 f6 8f ca 49 ff fc 70 ef e0 c7 eb c1 8f e2 ff e7 77 7e 5c 19 fb 13 51 81 df a1 1b 0b af 12 06 95 30 aa f8 c1 28 8c a6 61 e4 26 22 ae dc c3 df c8 77 27 95 71 14 de 57 92 3b 51 99 46 e1 1f 62 94 c4 95 89 1f 27 50 68 28 26 e1 63 a5 0a d5 45 5e e5 d4 8d 92 e7 ca e1 a9 59 87 fa 05 d4 e6 df fa 01 94 1e 85 d3 67 78 be 4b 2a 41 98 f8 23 51 71 03 8f 6a 9b c0 4b 10 8b ca 2c f0 44 54 79 bc f3 47 77 95 63 7f 14 85 71 38 4e 2a 91 18 09 Data Ascii: m[80OL t@o?"=:_y!TRUTZO28W_+Ipw~\Q0(a&"w'qW;QFb'Ph(&cE^YgxKA#QqjK,DTyGwcq8N*
2024-10-10 19:17:19 UTC	16384	IN	Data Raw: 1b 67 64 20 19 39 71 ca 42 72 a4 87 02 26 5d fc e9 64 41 1d a1 ee 10 ec 1a c4 bb 59 c2 df 60 ee a2 d8 27 1f f4 6e 8a 63 02 56 f2 77 43 b3 5b a5 80 2d 6d 7d de c7 0d da a3 ba 16 26 96 f3 21 fa b5 26 c8 8f 55 60 7d 07 ac 63 9b 2a 0d 57 57 a9 4e 7f b1 36 9c 87 de a8 2d 5c 56 9b 6c ea 5f af 0e db af 2a fc 0b 1d 91 e2 ff 85 83 5d 7a 81 77 ea 26 77 76 62 d1 76 26 3b b0 c6 91 7b 4b c3 16 cd 17 e2 26 b3 78 a9 5c 69 8c 83 cc 42 20 a8 22 ec 51 cd 81 e1 a9 cd 38 4c 42 a6 67 ed 00 d5 50 7d 4a 02 ff 4d 03 56 59 1a 3c 58 93 52 c1 60 69 42 64 74 ea 46 30 c3 80 62 7e 38 3e 09 93 83 27 bf 10 07 c3 ed 7d 92 a1 a1 52 17 99 84 23 e9 2f 89 c4 38 35 b2 b3 d8 4f b9 b7 4b 9f 16 51 31 10 50 0f 30 77 f6 25 a9 31 60 b0 9e 50 8d 2b 0d f1 51 df 17 8b 03 95 f5 30 8d 3b e2 af 3b f2 57 Data Ascii: gd 9qBr&]dAY`'ncVwC[-m}&!&U`}cWWN6-\Vl_]zw&wvbv&;{K&x\iB "Q8LBgP}JMVY<XR`iBdtF0b~8>'}R#/85OKQ1P0w%1`P+Q0;;W
2024-10-10 19:17:19 UTC	16384	IN	Data Raw: 95 db a0 36 92 8e 87 ac 08 a1 6f a3 2a 1b a3 1a 67 66 0d 6e a8 5e 54 65 22 f4 31 ed a1 ec 9f ea 8a ea 9a 14 6d 85 c6 4c 72 6e 6e 55 46 e8 01 96 39 dc c4 7c 1c 13 3e 9b 54 db b9 de 1b f2 49 72 c3 ad 3d d3 da ab ff 9b 5f e4 3a c8 9e f3 f2 ef bc 10 17 f5 0b e7 45 ee 7f bb bc 9e 63 d4 cd c8 69 ce ad 58 11 df 92 60 58 5a a1 a1 ad f1 6a 4f b0 8c 26 c5 79 18 bb 58 8d ac a4 2b 64 63 4d 3b 1f 26 2a 3d 8d 51 fd 02 15 d7 10 d7 8d ef 86 e8 96 b8 1b f2 f2 72 b6 c8 f2 ab 8b e9 bf ba c8 2f 0c 0f 43 c5 0f 0e aa f3 fc c8 9a 35 9e 42 a0 78 41 e3 9e 45 c1 a2 da ec 90 11 9b 64 9d 30 e5 36 e2 cf 43 35 b0 5f 5d 0a 49 60 39 ae 95 4b 24 24 ee 12 a7 87 0b dc 2e 9a 2e 12 21 37 a3 37 f4 09 28 a4 a3 bb a5 41 fb 71 70 4b 6f 07 75 b6 88 28 0f 14 7a de 1a 2d 39 1b cb 01 6f 55 c9 af 18 Data Ascii: 6ogfn^Te"1mLrnnUF9\|>TIr=_:EciX`XZjO&yX+dcM;&=Qr/C5BxAEd06C5_]I`9K$$..!77(AqpKou(z-9oU
2024-10-10 19:17:19 UTC	10597	IN	Data Raw: ba ae 14 60 05 2d 94 7d 2c 1a 54 ca bc fc a6 18 22 69 91 b8 6a 4c ef b6 61 98 1d 2b e2 0f 03 41 b1 47 fd 25 11 ca 58 fd 8c 3e 11 2f 41 7b 62 69 a2 7d e8 3c d6 7d f6 cf c2 f3 dd e5 ed ed be 7f 19 2e 87 e7 c3 fd b1 ee 61 fa 24 5c b2 d9 03 37 56 61 e9 cf 45 a8 05 90 30 c0 39 16 ee b9 9f 0e cf c0 07 c6 ee 9e 9f ee ee 7b e3 e8 49 38 1b 47 f4 4e 89 e4 9e d1 24 25 89 91 1e 9c 40 8b 75 1c d1 8f c9 8a ff 04 0b 97 7e 90 54 7d e9 97 7c 83 7e 79 c3 fd 20 a2 ff 52 d5 86 05 da 1c e3 9f 33 fc 93 86 4b fa d2 f9 38 bd bd 8d c6 de 79 38 a7 e1 a7 2a 76 f7 7d da 0a e7 f4 01 b9 81 6f c4 d2 d0 c5 f1 42 75 f2 24 5c 13 bf 5b ad ca 20 f3 05 9f a4 3a de dd 8d 00 17 43 53 81 fc 5f 48 99 a4 2a a1 1a a8 de c9 d9 f6 4a 0a 55 49 42 95 a4 ba 92 14 c6 7d aa d4 a7 7b 7e 4e 93 0b 67 d5 db Data Ascii: `-},T"ijLa+AG%X>/A{bi}<}.a$\7VaE09{I8GN$%@u~T}\|~y R3K8y8v}oBu$\[ :CS_HJUIB}{~Ng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49786	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:21 UTC	682	OUT	GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://okvanguardofficelogin.x-sns.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw==" Sec-WebSocket-Key: I750n6clYYEAeHv2k1QLXQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-10 19:17:22 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:17:21 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 649f3919-2f15-4bf3-a48d-855b9de35f00 x-ms-ests-server: 2.1.19005.9 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49787	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:21 UTC	913	OUT	GET /?0tB=gvEvb&sso_reload=true HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-10-10 19:17:22 UTC	779	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 62723 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: e05c60a7-c165-4387-acf1-41ce9dc21e00 x-ms-ests-server: 2.1.19066.8 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:22 UTC	13681	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd d9 76 22 49 d2 30 78 5f 4f 41 32 f5 a9 e0 17 42 2c da 49 5a 8d 10 48 88 55 80 f6 d6 e8 04 11 0e 84 08 22 50 2c 2c ca 14 77 f3 24 73 31 e7 bb 98 bb 79 83 7e b1 31 33 f7 d8 00 65 65 55 77 ff e7 9f 39 55 a7 3b 15 e1 e1 8b b9 b9 ed 6e ee 7c fd 72 de 2c 76 1f 5a a5 c8 d0 1e 6b 7f fb e5 2b fe 89 c8 9a 64 59 f9 68 34 a2 a8 66 3e aa d9 66 34 a2 49 fa 20 1f 65 7a f4 6f bf 44 be 0e 99 a4 c0 df c8 57 5b b5 35 86 4f 91 8e 3a d0 23 aa 1e b1 8d c8 c2 70 cc 88 24 cb 86 a3 db 58 69 d7 ab f5 75 cc 6c 29 22 1b ba cd 74 3b 1f b5 d9 dc de c5 01 73 11 79 28 99 16 b3 f3 8e dd df 39 8a 02 30 f6 64 87 bd 39 ea 34 1f 2d f2 ea 3b dd c5 84 45 77 37 74 53 29 e5 99 32 60 e1 56 f7 3b 37 85 9d a2 31 9e 48 b6 da d3 36 37 9c a9 8a 3d cc 2b 6c aa ca 6c Data Ascii: v"I0x_OA2B,IZHU"P,,w$s1y~13eeUw9U;n\|r,vZk+dYh4f>f4I ezoDW[5O:#p$Xiul)"t;sy(90d94-;Ew7tS)2`V;71H67=+ll
2024-10-10 19:17:22 UTC	16384	IN	Data Raw: 7e 82 ff be 39 fd 68 09 9d 79 d2 5f 45 be 84 42 8b ef 30 be 9a e9 45 2f cb 0e 0d 55 dd b7 33 47 ca c0 d8 9b 9b b6 31 db 3c cd af bb 63 66 4b f4 24 e6 fb 03 e2 0e ca 5d 3c 36 19 c1 81 65 3b 9a 13 79 c0 ee 57 33 e1 47 21 ec 7c b3 87 47 80 31 a4 dc 72 8f c2 34 fb a0 3f 5e 5e e8 68 cc cb 0b 1e 5e 59 3d f5 b1 b5 15 10 f9 26 7a e6 5e f5 bc f9 f1 fd 7b f8 ab 6b d3 e1 06 65 c4 8c 8b 11 fd 93 37 43 c9 6a ce 74 18 7e c2 4c 7b c1 8f e0 20 90 68 6a e1 c1 0b 32 2a 30 13 02 0b 3f 72 41 5b 2e c1 dd 60 3f e9 25 e8 fe ba f2 38 ce 0f 52 a0 55 8c c1 7e 2e e1 a3 45 4d b2 2c 0a 0f eb 8a 15 c1 5f 42 65 91 e8 b6 d0 ed 8c c2 77 dc 73 93 22 01 ff 3d 02 ff c3 7e a3 f1 5c c0 50 c2 1d 36 d5 0a fa f9 80 06 0e 2f 86 a7 dc 99 e6 85 55 c1 4e 05 0e 78 02 1d e6 4c 82 a6 f3 ab 31 ff 39 81 Data Ascii: ~9hy_EB0E/U3G1<cfK$]<6e;yW3G!\|G1r4?^^h^Y=&z^{ke7Cjt~L{ hj2*0?rA[.`?%8RU~.EM,_Bews"=~\P6/UNxL19
2024-10-10 19:17:22 UTC	16384	IN	Data Raw: 01 74 cc 32 26 21 95 2f 42 6f 69 74 3a 3b 6c ce cb 13 8a 31 13 23 97 7b 87 3c f2 17 e4 10 12 8a fb 88 3e 5f 5f b7 cf ac 3b f5 e5 53 57 2f 27 91 ae d6 d7 e5 ef aa 5a 88 57 b3 be 8e ff ae aa 11 0f 7b de a5 07 42 45 1e 56 d5 7b e4 71 29 93 8a 25 16 ff e2 ed e2 83 2a d0 14 a5 6e a5 1a b0 fc a8 20 cc ce 4a 58 1b ff 8a b2 d7 37 85 b8 52 2c f0 95 72 69 8e cd fa 6a cb 37 a9 e7 5d fc fc 99 37 96 5d e2 52 61 ef cb 5a 56 59 54 55 8c bb 46 55 31 b6 96 dc 3f d4 17 95 fe 92 2f 66 f6 8b d9 92 6b c5 99 7a 3b 1c cf 96 1a ee 8f db 1a da 5b 2a 5c bc 2a 12 eb fd f3 a0 b9 b4 18 2d 1b 5e 65 df f0 2a e9 6a 69 db 78 ce d2 96 68 6c 59 d3 d3 1c cc 3a f1 36 e7 23 19 69 76 7e 35 fd f7 f8 0b a3 79 a5 c9 50 f4 df a0 2a 22 8a f1 a3 e9 7d 0d 0c c8 1a ed d5 1c ff 30 fe 1a 8e 1f 0d 12 62 Data Ascii: t2&!/Boit:;l1#{<>__;SW/'ZW{BEV{q)%n JX7R,rij7]7]RaZVYTUFU1?/fkz;[\-^ejixhlY:6#iv~5yP*"}0b
2024-10-10 19:17:22 UTC	16274	IN	Data Raw: ba 0f 9b 7f ba 66 0d 77 6c c3 51 5c fa bd 28 2e 20 ab 78 24 59 e9 c0 94 19 7a cf bd a8 b3 05 0b a7 c8 cd 9d 24 01 3e e2 8c a8 11 d1 88 2b e3 11 bd ce 40 cb 11 41 d8 41 8e eb c3 e8 f2 ba e4 3d 05 ee 60 c5 c5 99 62 49 5e 2f ab 02 62 a0 d5 a1 0b 70 a9 19 26 36 9e bc 26 e6 23 9e d0 06 ac 89 47 bd 88 21 38 0e 29 ff 27 64 a1 56 ce 40 b1 d7 86 3b 27 54 ad 96 02 3f 2f 08 61 1d 70 04 31 57 f8 f0 e2 48 dd d9 0d 94 f3 51 a3 75 69 99 0b 45 b6 31 95 58 c2 aa 9e 12 69 e4 8f 7d 97 51 a7 c3 3f e5 a2 56 76 5b 2a 60 c8 57 a8 d9 0e 54 10 11 de 06 fe d0 6d 69 36 bf a8 67 6a 51 75 5c 83 36 a7 7f 41 1c ce e5 6c 13 fb 37 22 7a 8c 45 0c 8c 15 ce 96 f0 c2 2c 28 b7 84 1b a2 7d 20 4d aa 20 5a a0 0e 69 0e 8c 91 f3 8b ce 61 21 c7 8f 2f a6 5f 55 63 7f b6 42 3b 49 0a 51 e4 63 2f cf 26 Data Ascii: fwlQ\(. x$Yz$>+@AA=`bI^/bp&6&#G!8)'dV@;'T?/ap1WHQuiE1Xi}Q?Vv[*`WTmi6gjQu\6Al7"zE,(} M Zia!/_UcB;IQc/&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49788	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:21 UTC	793	OUT	GET /favicon.ico HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-10-10 19:17:21 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:17:21 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 23747697-da84-43aa-aeee-c03e8c48ad00 x-ms-ests-server: 2.1.19005.9 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49790	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:21 UTC	539	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: 024cc40a-acb15722.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:22 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:22 GMT Content-Type: application/x-javascript Content-Length: 49814 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 5495556 cache-control: public, max-age=31536000 etag: 0x8DCB563C85A43C4 last-modified: Mon, 05 Aug 2024 15:32:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8fc9352a-d01e-00e2-154d-e9f70d000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-10-10 19:17:22 UTC	15639	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 e0 ce 9d 06 ba 9b 19 20 0c 81 e9 d9 05 96 cb 89 15 f0 74 b0 b3 b6 c3 cb 40 ce 6f 3f f5 22 d9 b2 e3 d0 3d bb e7 3a 5f 9e 79 21 b6 54 92 a5 52 55 a9 aa 54 92 d6 7f 5a f9 9f ca 4f 95 b5 1f ff a7 32 38 ef 9d 9d 57 fa 9f 2a e7 5f 0e cf f6 2b a7 f0 f6 8f ca 49 ff fc 70 ef e0 c7 eb c1 8f e2 ff e7 77 7e 5c 19 fb 13 51 81 df a1 1b 0b af 12 06 95 30 aa f8 c1 28 8c a6 61 e4 26 22 ae dc c3 df c8 77 27 95 71 14 de 57 92 3b 51 99 46 e1 1f 62 94 c4 95 89 1f 27 50 68 28 26 e1 63 a5 0a d5 45 5e e5 d4 8d 92 e7 ca e1 a9 59 87 fa 05 d4 e6 df fa 01 94 1e 85 d3 67 78 be 4b 2a 41 98 f8 23 51 71 03 8f 6a 9b c0 4b 10 8b ca 2c f0 44 54 79 bc f3 47 77 95 63 7f 14 85 71 38 4e 2a 91 18 09 Data Ascii: m[80OL t@o?"=:_y!TRUTZO28W_+Ipw~\Q0(a&"w'qW;QFb'Ph(&cE^YgxKA#QqjK,DTyGwcq8N*
2024-10-10 19:17:22 UTC	12530	IN	Data Raw: 2e 80 2a 7d 95 75 9f bd f0 3c 9d e0 69 54 92 0e 40 a4 ab 30 9c 54 f3 53 f3 32 8c 02 fa 7d e9 ca 56 90 4a da 17 b0 b9 c2 43 2e b7 f6 3e f6 cf 10 8a e3 b7 49 a4 a8 49 28 d5 0d 41 59 e3 36 4b e1 be d9 c8 64 fa 66 93 fc 38 74 6a 0c 75 16 78 23 72 79 c7 a6 26 b6 6d 43 64 2f 6c 19 d9 74 bc 91 61 91 60 34 f0 4a 26 63 e9 09 b3 41 b5 65 76 92 3a 1d 46 75 11 80 41 e2 c1 88 1c 3c e1 b1 1f 00 db 07 eb f8 0f 26 f5 dc 01 a3 e2 d2 a0 e3 8d 8c eb 6a c9 01 95 a2 83 f7 5b 02 26 c1 28 09 c7 7c 76 1b 9d bd af 9d e4 96 7e ab 22 0f b4 ad 44 ea 4b 76 c5 a8 e1 29 90 30 a7 aa 9b fe aa da f9 4c 7c 6e 56 32 37 ad 06 5d a6 00 a8 29 bd 1e 70 e1 30 3c ed 6a b0 48 ab 31 b4 7c bc cb 21 bd f4 af 6a 9a 75 94 ac 94 b1 ac 11 21 de 37 60 e2 f5 43 a6 f9 06 6e 37 f1 4e ab a0 da 6c e0 21 eb 41 Data Ascii: .*}u<iT@0TS2}VJC.>II(AY6Kdf8tjux#ry&mCd/lta`4J&cAev:FuA<&j[&(\|v~"DKv)0L\|nV27])p0<jH1\|!ju!7`Cn7Nl!A
2024-10-10 19:17:22 UTC	16384	IN	Data Raw: 1c 3a 1e 7e 3c 3a 09 72 20 d5 86 24 aa 53 c9 95 2c 56 e7 81 33 74 3b 87 39 be 3f 89 38 83 91 37 74 1e d4 c3 71 fa 87 b7 66 9c 82 f0 f4 8f 0d 2d d3 19 7d d2 72 24 ad 75 98 8c 71 3e d8 48 d6 70 fd a1 04 75 d1 13 09 17 51 44 94 fe 99 85 22 d3 02 c7 98 89 dc d3 19 06 26 2f 4a da c6 39 73 81 d4 bc 37 8c 70 4c 1d e8 34 b7 98 80 2b 0c 0a db 7c f8 cc 8d 9b c2 06 cd 1d 38 6b b8 bc 28 aa a9 0f 2d 85 a3 ab a9 59 ea 3a ca 85 9c 8d 5e a7 7c e6 20 be d6 a1 ae af 14 95 a5 e3 c0 f4 cf dc d9 f8 2f da 6a ec 3b c4 55 95 10 0f 8d 6a e4 da d1 d6 ca 8d 9f b4 b9 32 51 01 70 24 15 fb 74 ee c0 b3 9a 13 5e e4 60 32 89 bb 06 c7 40 5d c4 70 10 9d e4 18 8e 2d dd f1 58 e9 93 9d c8 bf 8c 38 65 a4 8b e4 13 67 97 a4 ef be 4d 50 5e 61 d2 5e 6e 7f ac 27 49 6e e0 88 4e 63 e4 10 e6 63 ff 72 Data Ascii: :~<:r $S,V3t;9?87tqf-}r$uq>HpuQD"&/J9s7pL4+\|8k(-Y:^\| /j;Uj2Qp$t^`2@]p-X8egMP^a^n'InNccr
2024-10-10 19:17:22 UTC	5261	IN	Data Raw: 32 21 4f d4 16 4d 2c a6 eb 46 0e dc 4b 8e 3c 10 80 42 f3 ec c8 a2 b5 97 d4 fe 72 b5 80 23 26 8d fa 11 49 d2 38 10 26 ce fb 12 ec 74 59 39 81 f3 56 75 f9 c0 ed ec 8a 9a 64 37 d2 4e 1e f6 7d c0 51 e7 70 03 d7 68 25 c7 f6 c4 79 7d 24 8f 15 44 a4 08 cd 9a 03 84 db 76 fb 7a c4 b6 a8 c9 a5 fc 0d fb 1e 06 f5 43 d4 58 5f de d9 15 68 01 40 2e c4 d7 ab ee d4 81 75 6a 77 29 14 34 9b 0b 76 71 cf 17 09 0c 43 ea 27 71 c9 f3 dc 75 7e 3c 3a 7a 3d 78 c7 6e b0 54 92 e1 ab 46 e2 8c 4a 47 b3 7b e9 69 6f 39 9a b2 4d 36 aa 74 41 1c 31 13 21 98 eb e6 6e 0a ce 89 2d fc 31 89 e8 33 44 9a 8b 45 d0 7a 6b e3 5f fa 09 fd df 37 7b 7b 88 69 e6 ae 70 04 c6 22 3f 4b b3 df 98 5a 94 98 64 a6 79 7d a7 b0 f6 0b 8f 27 2d fe 71 67 51 a7 3c a2 d5 6e 5c fe 8d 57 ad f5 7c 74 59 fe 12 51 81 f3 f7 Data Ascii: 2!OM,FK<Br#&I8&tY9Vud7N}Qph%y}$DvzCX_h@.ujw)4vqC'qu~<:z=xnTFJG{io9M6tA1!n-13DEzk_7{{ip"?KZdy}'-qgQ<n\W\|tYQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49792	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:22 UTC	441	OUT	OPTIONS /api/report?catId=GW+estsfd+frc HTTP/1.1 Host: 04a63513-acb15722.x-sns.cloud Connection: keep-alive Origin: https://okvanguardofficelogin.x-sns.cloud Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:23 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-10-10 19:17:23 UTC	12	IN	Data Raw: 37 0d 0a 4f 50 54 49 4f 4e 53 0d 0a Data Ascii: 7OPTIONS
2024-10-10 19:17:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49796	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:23 UTC	811	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:24 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1431 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C514_BL2 x-ms-request-id: 069032aa-5114-4c55-b85e-8c8d217a2d51 ppserver: PPV: 30 H: BL02EPF0001D79B V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:24 UTC	1431	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 db 6e db 38 10 7d ef 57 d8 44 11 88 1b 56 f1 25 be ac 1c 26 28 da 2e ea a2 69 8b aa 8b 7d 70 b5 00 2d 51 36 b7 32 29 90 b4 9b c2 d1 bf ef e8 66 d9 6a 9b a0 0f 7d 48 2c 0f 67 0e cf 19 ce 0c e5 2b 13 6a 91 da 8e fd 96 72 8a 2c bf b3 17 ff b1 1d 2b ad e8 fa 49 a7 1b 6f 65 68 85 92 8e 25 1c ef 63 a5 9d 1d d3 1d d3 11 b2 c3 b1 5d 98 80 72 f8 97 39 76 2d 0c 69 9c c1 b5 7a ee 70 47 e2 bd 88 1d b3 90 01 d6 dc 6e b5 ec e4 cf 2e bf 4b 95 b6 66 96 03 0a 9a 9b e8 be b2 79 fb 8c 88 c8 93 24 51 2c e2 91 d7 ed 67 b3 2a d4 e6 a1 21 4b 12 47 d4 08 44 90 e6 99 63 f8 52 86 d1 6e af 59 c8 0a de 74 7f 00 e2 ee 86 82 28 37 a4 10 e4 a6 14 21 c2 9d 1e ce 9c 45 4b 73 2d c4 14 b2 aa 0c 70 1a 2f fc 80 18 da 23 92 72 37 e1 72 65 d7 33 73 25 67 e7 Data Ascii: Wn8}WDV%&(.i}p-Q62)fj}H,g+jr,+Ioeh%c]r9v-izpGn.Kfy$Q,g*!KGDcRnYt(7!EKs-p/#r7re3s%g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49795	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:23 UTC	685	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://okvanguardofficelogin.x-sns.cloud sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:24 UTC	790	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:24 GMT Content-Type: text/css Content-Length: 20414 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 03 Jul 2024 21:48:08 GMT etag: 0x8DC9BA9D4131BFD x-ms-request-id: 86009c23-601e-0033-3189-15a350000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191723Z-17d475c956f8skxs2sdrzwsnc40000000an00000000173d4 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:24 UTC	15589	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-10-10 19:17:24 UTC	4825	IN	Data Raw: 20 d6 45 09 41 36 3d ae 63 fa 4f 4b 7f 86 e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b Data Ascii: EA6=cOKa}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49793	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:23 UTC	662	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://okvanguardofficelogin.x-sns.cloud sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:24 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:24 GMT Content-Type: application/x-javascript Content-Length: 122191 Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 10 Sep 2024 20:27:05 GMT etag: 0x8DCD1D6EFD1736A x-ms-request-id: 61506f97-201e-0040-2b0d-12fbc3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191723Z-16456d9fcf7wgrq4edebnt033c0000000mvg00000000m9h1 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:24 UTC	13653	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 41 59 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 df 91 1d 33 b7 14 06 a5 30 2a 79 81 13 46 b3 30 b2 13 16 97 a6 f0 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsAYOix)NK7KW`G/.=30yF07l4i)ydY$.^@R%oJgP7(70Vj#Yi,<zcs0I)b
2024-10-10 19:17:24 UTC	16384	IN	Data Raw: df 52 0e 00 b0 71 65 4a 0e 40 e0 f4 e9 1b 96 76 4d bf 80 0e 55 a7 f6 2b fc f4 e5 a3 e3 f5 0a e7 58 73 cb dd f1 39 0b a4 92 27 55 ea 09 da 49 e9 86 a5 ad 76 e7 90 e6 e1 8a af 4f ec 7c 99 1f c3 ea 73 d1 49 31 8e 7c e9 d5 51 c9 31 f9 64 c1 e4 bc b5 72 22 14 1a 80 09 c5 e3 ed d9 eb 74 96 07 ec 8b 64 67 21 37 66 84 2c 46 a1 cf 2c 1b 88 46 62 1c 88 0f 71 34 46 74 c9 b9 d1 76 42 4c 9b 58 11 27 c7 a9 95 e4 c8 ec 60 6e c5 db db fc b9 05 90 d5 e3 95 d3 70 ed 40 12 1e d4 14 9b 1f 53 64 c2 bb 35 ca d3 89 a0 0c 63 09 c4 c1 69 02 ba a8 4f f4 99 3e 05 1a 40 61 03 50 22 cd 43 cf 56 93 35 76 47 72 be 58 f6 5a fc a3 45 13 ea 30 cf 2f 4b b9 64 ef b9 a2 3f ac 70 12 bd 6f d5 0e fa bf 3c 1e f4 a5 69 69 68 d5 d0 f5 e5 50 d3 cc 7e fa 08 21 00 be e2 21 58 aa 46 f4 7f 7e d6 cb 7d Data Ascii: RqeJ@vMU+Xs9'UIvO\|sI1\|Q1dr"tdg!7f,F,Fbq4FtvBLX'`np@Sd5ciO>@aP"CV5vGrXZE0/Kd?po<iihP~!!XF~}
2024-10-10 19:17:24 UTC	16384	IN	Data Raw: 18 b5 ee a5 61 cc 0a 97 3e 6f 9e f1 14 d4 d4 bc d5 93 8b 8a 31 6c 99 f0 36 81 41 b3 de e7 f9 88 6c dc 7a c2 b5 62 5b 39 79 65 7f e6 48 66 4a e7 1d 40 45 f9 d6 bb 37 67 c2 1d 78 5f 38 c2 86 52 e7 49 a6 c8 83 e5 96 0b 9f 78 e3 9a ee 3e fa c7 5e 53 ce ac d7 4d e7 e4 c2 57 b6 15 fe 16 3e 64 d2 9b cd b1 70 82 4d a9 44 51 63 9a 6c 81 52 85 5f 39 f4 d6 29 fc 6b 04 4f b5 7e 2c 6b c2 60 15 7e be 48 6b 5f 19 b3 e9 27 84 3c 36 51 24 35 38 ea a4 5a 98 e8 b2 b2 64 29 b0 16 01 f4 c1 df 68 c9 0a ac 25 42 bc dd 64 46 e3 61 47 97 75 b8 22 b9 76 62 47 ac 17 e8 26 96 76 76 14 48 ac a9 85 58 51 d3 bd e3 84 2e 26 dc 03 9a 84 37 21 c9 85 1b 15 c0 63 30 85 63 f6 a0 bb 8f e2 eb 53 38 9c 44 e4 cb a8 2f 9d 30 a3 0b 23 e5 2d 94 52 d0 7d 91 e6 17 94 d2 be 14 fe 98 e8 b2 92 ef 22 e5 Data Ascii: a>o1l6Alzb[9yeHfJ@E7gx_8RIx>^SMW>dpMDQclR_9)kO~,k`~Hk_'<6Q$58Zd)h%BdFaGu"vbG&vvHXQ.&7!c0cS8D/0#-R}"
2024-10-10 19:17:24 UTC	16384	IN	Data Raw: 55 9f 93 53 63 0c 4c 4e 2b 91 f7 87 d1 c3 24 33 a9 14 28 ba 6a a3 9e 28 c9 8e c6 80 12 d6 b9 65 a9 62 86 ec 62 a6 6f 54 61 e4 1d 57 1b 17 6c 73 ae 01 d8 77 61 09 a2 09 93 62 ad 4b b7 18 07 b2 7b 99 57 72 4d 7a d3 65 05 62 7c 66 09 c7 b4 ae ae 6e d3 ab 2b 6b a9 ce 41 bf 1b 6a 56 43 d8 d8 e7 8e 1d 05 55 20 8f 22 8a 98 24 6b 0b 29 10 de 88 e3 90 53 64 40 67 42 44 b4 08 b9 51 bc cd 71 9b cb 07 d6 6d 6a 2d 01 5e eb 62 21 e8 49 49 30 e0 73 06 88 75 75 7b 34 21 e7 c2 02 52 a1 fd 08 e3 02 40 8d e4 92 04 49 ac 5f 83 76 ca 8e 5f 3b d4 dc 68 23 27 77 4b 36 27 92 6d 7e 5e ee 58 b1 51 a1 44 d1 21 09 ad a8 1b f7 c9 08 41 a2 b1 ed 22 e4 34 14 3b 1b 2f 2e c6 80 b8 13 af b1 82 dc a0 39 0e b2 94 90 b6 24 56 0d 59 21 21 87 e9 bc 5b 29 2c b5 bd b8 87 a6 e3 40 59 8c b0 20 ab Data Ascii: UScLN+$3(j(ebboTaWlswabK{WrMzeb\|fn+kAjVCU "$k)Sd@gBDQqmj-^b!II0suu{4!R@I_v_;h#'wK6'm~^XQD!A"4;/.9$VY!![),@Y
2024-10-10 19:17:24 UTC	16384	IN	Data Raw: b6 3d cb 01 db b2 d0 b3 c4 c5 86 7e 2b d5 75 ea 35 6d 68 69 95 7b 67 25 45 e5 25 f2 07 02 20 47 42 88 e9 50 55 7e 60 7c b6 d6 20 a2 b9 d7 36 82 8e 58 f4 b4 1f ed 71 36 cf a3 d8 7e a1 26 ae 1e 90 64 93 27 e3 78 a5 eb 2d 86 0d a9 57 2e a7 dc 4f e1 4d 78 cc 91 a4 3b 58 03 10 ad 5e 4d b3 e8 ea eb 9f 79 fc fd 8e 0f 5e 87 57 f1 b2 be 68 46 a2 75 18 c5 06 c8 99 e3 1e 22 b7 19 22 26 71 1d ab e5 f2 94 1b 26 c0 ab 8a 14 6b a2 31 6d f5 5f 23 f6 52 82 33 62 0b 11 a4 96 71 c4 6d bc 93 84 8c f0 d8 e5 35 6e be a9 03 cf e2 f6 78 d4 e7 a9 03 a2 ca 64 fe 64 99 ac 3d 7c 8c e0 aa 72 d3 77 cc b9 a9 a8 f5 e5 a4 d0 25 25 cb 4b 49 bb ac 4b 73 23 de 4d 2c 10 82 c0 d5 5f 92 dc b9 4b 5b 96 ba 6c 04 46 7a 64 f3 91 8e 45 91 4b 4e 9d 25 a3 80 74 6d 29 92 0e 2f ff 4e e9 4a 1a 12 87 75 Data Ascii: =~+u5mhi{g%E% GBPU~`\| 6Xq6~&d'x-W.OMx;X^My^WhFu""&q&k1m_#R3bqm5nxdd=\|rw%%KIKs#M,_K[lFzdEKN%tm)/NJu
2024-10-10 19:17:24 UTC	16384	IN	Data Raw: 77 a6 60 1e c4 48 07 51 e9 2b 64 c1 33 ff ae a6 e7 12 cd fd 38 ae 4f 5a 2d 6f 66 ea 5c 4b f4 b1 29 40 57 c1 d2 ce 1f de 9c 54 cf 55 74 95 d2 d1 b5 96 4a 19 a0 cf e5 c3 73 e0 17 ed 83 0f 07 d6 60 44 b9 4f b3 d5 5c 41 19 8c d9 0b fc ff 4c e5 ab a7 0b a4 47 c7 7c 5c 01 68 1d ce d6 ce e9 d8 7d 34 69 2e 3a 91 27 df b3 cb 21 5f 09 14 1e d5 d9 dc ba b9 1d ff 49 b7 32 d1 ca 9d 9e 2e 05 4e 6b ba 54 6a c1 e1 bc 09 d1 24 9f cb b0 9a 08 69 bd 94 cb dc 18 a5 8a 00 34 c9 31 28 6f ea 15 5d d1 a1 c6 fc 52 5a 83 fb 18 f8 64 30 b2 86 5d c6 56 e9 0b 38 4f 72 73 f8 70 58 59 75 ec b8 55 d5 8a fe 5b b5 8e 9d c8 66 ad 5b ff 4b 5a 6f 66 7d 2a f3 9f a9 f5 8c 38 4d 1b 89 ff 4c 86 a1 7a 3d 3a fe b3 4e ba f1 76 64 d5 bf 2e 6a e4 52 28 db 4e 0b 47 59 3d 8a 8a 94 50 05 4c aa 30 64 3e Data Ascii: w`HQ+d38OZ-of\K)@WTUtJs`DO\ALG\|\h}4i.:'!_I2.NkTj$i41(o]RZd0]V8OrspXYuU[f[KZof}*8MLz=:Nvd.jR(NGY=PL0d>
2024-10-10 19:17:24 UTC	16384	IN	Data Raw: c9 0c 67 63 74 de 27 fb 21 4c e5 92 3c 24 1f 3f 0e 0e 07 3d 7d b4 97 b9 5f 92 f4 76 d3 de 15 78 d2 44 b9 d6 b7 1c b4 43 7b 87 5b 3c 2a 9d 46 26 ea f8 d0 ea 2e 65 6d e4 f6 6c 4d de c3 47 f6 c3 7a 24 c0 8a 65 dc 17 32 fa 83 b2 90 75 55 ed ed 6d ac 63 9d 7c 64 32 5d 71 f5 ae 7e 2f 56 df 5c bf 46 63 6d e5 83 52 86 77 8f b6 3d 5c 1e 31 2a 49 8f 50 9e 86 21 eb 39 8b 3d 5c 4c ca d1 c3 45 1d 31 ac 1d 2b 14 b6 dd 1c 00 a4 79 5e 66 43 a4 8c bf 3a fe 58 0b fe 61 10 8c 54 ca fb 2d 39 5e 06 3f ff e2 f1 7b 87 87 94 a8 7d 31 f4 02 72 af e0 9f 98 fe 09 42 f5 77 44 7f 3b 81 fa ad de 87 ea bd 1f a9 57 7e ac 9f 62 7c fa ea e0 f0 10 ed c9 9f 67 f8 5f dd 6e eb d5 1f 44 f1 f6 40 1d 39 a2 48 92 c9 a0 c8 8f 0e c0 13 8a b7 f2 49 c1 a6 e5 d9 e0 8f 3f cf 0e f0 67 b5 1c 37 99 8f 8f Data Ascii: gct'!L<$?=}_vxDC{[<F&.emlMGz$e2uUmc\|d2]q~/V\FcmRw=\1IP!9=\LE1+y^fC:XaT-9^?{}1rBwD;W~b\|g_nD@9HI?g7
2024-10-10 19:17:24 UTC	10234	IN	Data Raw: a9 c8 87 30 f0 03 e2 89 12 35 f9 af cf a9 be b7 e3 da 14 b3 6a d1 76 49 92 75 36 9b 19 9d e2 4c 8c 6d c6 55 c3 02 6a 36 07 1d dd f6 b3 4b d2 49 35 33 ba 44 3f 89 e8 23 0b 84 5d 41 ac bc a5 23 ba 4b 52 63 c2 9a 8d 72 b6 94 5b 56 eb 98 d2 d3 42 f4 61 80 7c c7 72 d1 ab e6 8b e4 4a 83 b7 6e 2b 01 47 75 4e 75 d5 66 75 52 02 66 45 a5 54 f6 c4 35 a3 a6 be ea 55 1e a9 37 85 da 53 5a bd ea ca 35 dc ea 18 54 c2 15 6a f1 34 e8 1d 3b ff 26 6e aa 25 53 61 e2 d5 dc 69 d2 bb 0c 12 d8 3e 6e f7 72 f3 46 4d b3 78 f9 c3 9e 6e 19 9a 37 25 da 7c 1a 6a d7 d3 54 5b 4c 7f c1 a8 26 1f 35 7f aa e7 76 f2 0b bc 4f 11 f8 1d f2 ec 59 1b 0d 47 3e 20 83 d7 de 9a a6 b7 0b 12 f9 2d d2 a3 51 45 9f 3d c3 aa 5b d3 29 ff 2d ae 99 f0 9f 7b e1 f7 fe 73 af d3 dd 9d 63 b4 31 ec af 13 60 18 33 1a Data Ascii: 05jvIu6LmUj6KI53D?#]A#KRcr[VBa\|rJn+GuNufuRfET5U7SZ5Tj4;&n%Sai>nrFMxn7%\|jT[L&5vOYG> -QE=[)-{sc1`3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49794	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:23 UTC	681	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://okvanguardofficelogin.x-sns.cloud sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:24 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:24 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 27 Aug 2024 20:17:04 GMT etag: 0x8DCC6D537C7BF24 x-ms-request-id: c06d0549-c01e-0077-76af-1a296f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191723Z-17d475c956f4zwwm6x85en3b4c00000001q000000000aa25 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:24 UTC	6414	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-10 19:17:24 UTC	9912	IN	Data Raw: 15 2e f6 9d 5c f8 a4 1f 92 0a 2a a4 50 1c 75 83 a9 32 71 16 b7 36 4d a4 25 23 ef 37 45 95 61 d2 2c 7f be 23 47 68 ba 57 ea 6e 9b a1 77 df 90 87 78 47 c8 48 6c bd 4f a4 c1 30 13 fb 9c aa 2e 53 63 5b da 0a f2 49 b4 33 a2 70 a2 f8 ca 34 27 9b 94 cd 92 f3 fb d7 57 23 bb e0 19 8a 69 00 cc 29 49 34 2d 27 82 f7 35 18 45 b7 21 59 f7 53 7a e2 39 72 f2 08 dd 0f c8 a4 c1 d4 a3 50 53 95 c9 91 32 69 90 fe ad 42 72 a5 4e f6 02 73 bd bd 48 51 a2 be f4 e3 60 3e d7 d6 3c 76 c1 64 dc c1 ea 9b 52 0e 7d 51 79 ef b6 0f e2 14 a6 12 36 24 aa 17 1c 23 48 63 28 1f ff 5d 10 c8 05 4a a5 45 ce 28 7e ed d1 88 d5 fe a6 65 2b b8 84 53 d4 9d 0b b2 d7 98 09 ef 59 08 51 37 c5 63 e1 83 b4 9e cf c9 53 ea bb 4a 10 8a 47 c2 d6 e6 a3 f5 4d cc 3d 18 54 8b 8b 8b 32 b5 4a 3e 60 7f c7 c0 8e f7 b6 Data Ascii: .\*Pu2q6M%#7Ea,#GhWnwxGHlO0.Sc[I3p4'W#i)I4-'5E!YSz9rPS2iBrNsHQ`><vdR}Qy6$#Hc(]JE(~e+SYQ7cSJGM=T2J>`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49800	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:24 UTC	365	OUT	POST /api/report?catId=GW+estsfd+frc HTTP/1.1 Host: 04a63513-acb15722.x-sns.cloud Connection: keep-alive Content-Length: 468 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 19:17:24 UTC	468	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 34 34 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 6b 76 61 6e 67 75 61 72 64 6f 66 66 69 63 65 6c 6f 67 69 6e 2e 78 2d 73 6e 73 2e 63 6c 6f 75 64 2f 3f 30 74 42 3d 67 76 45 76 62 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 32 33 33 2e 35 33 2e 32 30 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c Data Ascii: [{"age":0,"body":{"elapsed_time":1448,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://okvanguardofficelogin.x-sns.cloud/?0tB=gvEvb","sampling_fraction":1.0,"server_ip":"172.233.53.209","status_code":404,"type":"http.error"},
2024-10-10 19:17:25 UTC	367	IN	HTTP/1.1 429 Too Many Requests Server: nginx Date: Thu, 10 Oct 2024 19:17:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close request-context: appId=cid-v1:41ca65cb-08a6-4a29-94ab-18b081ee8b8b access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-10-10 19:17:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49801	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:24 UTC	560	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:25 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:25 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 27 Aug 2024 20:17:04 GMT etag: 0x8DCC6D537C7BF24 x-ms-request-id: c06d0549-c01e-0077-76af-1a296f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191725Z-16456d9fcf7f5sf7x59qnr533s00000001eg00000000navm x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:25 UTC	13648	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-10 19:17:25 UTC	2678	IN	Data Raw: 7e f2 d4 16 40 72 2a 83 8d 6c 5c 7d 56 63 a6 16 d9 b4 46 b0 ea 2c 9f 8a 82 9e 00 b1 94 33 de 07 32 b9 35 33 5c 24 3a cc 94 38 0e a8 00 a1 aa 17 9f 56 2f b7 3f c5 b7 d9 04 b9 5a c7 b9 bd 65 6a e5 f6 c5 16 c1 b5 3f bf 5a e5 f6 62 94 ef 84 85 2d 78 3b 81 e9 c9 a4 f0 9b ab 21 72 7d 26 d9 27 54 d2 64 ab b8 af f5 28 85 2a dd ba bd 5e 2d e8 ee 66 c8 39 26 78 88 cd e5 9b b1 76 e5 03 1f 9d de f1 c6 7c 42 a5 fc 9e 38 bb 14 10 17 26 10 89 e9 33 10 40 06 f9 1d e6 d7 e5 7e ab d7 ee c3 88 3f 91 b6 b1 36 a9 f9 cf a8 0c 47 f1 53 7a 7c 52 4f b9 c3 f6 02 ed 7b c1 1e b5 1b c0 cb d4 4b 41 96 d3 cf b3 da 73 5c 31 4b 55 82 8e cd ad c5 48 71 32 d8 16 af cc 8a e6 13 c8 60 6e 7c 87 95 f5 db 7a 31 f3 2a a9 a5 e9 2d a9 a5 5f 25 b5 fa 8b 59 52 0e 0f 92 f5 e2 3d 6c 22 70 65 5e 25 ed Data Ascii: ~@rl\}VcF,3253\$:8V/?Zej?Zb-x;!r}&'Td(^-f9&xv\|B8&3@~?6GSz\|RO{KAs\1KUHq2`n\|z1*-_%YR=l"pe^%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49804	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:25 UTC	724	OUT	GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://okvanguardofficelogin.x-sns.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1 Sec-WebSocket-Key: VraBEGo9osekLuJwHu1tTg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-10 19:17:26 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:17:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 629e8b30-efa2-48b0-8b1d-ec374efd0100 x-ms-ests-server: 2.1.19066.8 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49803	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:25 UTC	541	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:27 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:27 GMT Content-Type: application/x-javascript Content-Length: 122191 Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 10 Sep 2024 20:27:05 GMT etag: 0x8DCD1D6EFD1736A x-ms-request-id: 2716427c-601e-0038-5f55-1a1029000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191726Z-17d475c956f96w6gp2cnq7xsg00000000b3g000000002s49 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:27 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 41 59 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 df 91 1d 33 b7 14 06 a5 30 2a 79 81 13 46 b3 30 b2 13 16 97 a6 f0 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsAYOix)NK7KW`G/.=30yF07l4i)ydY$.^@R%oJgP7(70Vj#Yi,<zcs0I)b
2024-10-10 19:17:27 UTC	14460	IN	Data Raw: 86 16 b2 e9 0c ef 4f 70 07 10 ab 68 cf 01 9e 02 80 83 6c 30 2c ab b0 f2 0d 93 d3 41 66 df f0 a4 af ec 47 d3 a6 a3 09 c0 40 13 80 50 f9 41 fa 16 57 72 b3 19 8b 57 ca a1 fe 8e 3e 22 a0 30 1d db d1 53 76 79 1e bd 33 73 fe 6b 47 e8 55 45 1e 81 78 27 60 35 f7 77 f4 ae 52 72 d7 ea b3 6c 14 9b d0 e3 94 2e 52 5c e2 a5 63 d8 43 aa 2e 40 65 29 89 ae d0 2d ac f1 68 83 13 1d b3 a2 6a 91 b3 62 b9 f2 51 bf 85 67 18 6e a3 1f 0d 40 b8 8a 21 d8 12 8d 4a 5e d5 91 33 1d c3 a2 c3 90 6e b0 4d 6b 36 85 79 c0 80 8b bb 1e 0e 80 7b 61 86 be a6 2f 9e 3d f6 82 b6 41 df 5c f0 95 f4 25 4d 28 5a dd de 3a cf 44 3d 4f 04 a6 40 c4 c4 85 77 23 b8 6a 12 40 3e fa 44 2f b3 2b 10 c8 68 70 a6 13 f2 22 44 cb 21 d0 9a ac cf 4c ca 8d 56 a3 a2 a3 e3 fc 63 14 06 f8 fa f1 56 a8 2a 1f de 85 fd 4a d7 Data Ascii: Ophl0,AfG@PAWrW>"0Svy3skGUEx'`5wRrl.R\cC.@e)-hjbQgn@!J^3nMk6y{a/=A\%M(Z:D=O@w#j@>D/+hp"D!LVcV*J
2024-10-10 19:17:27 UTC	16384	IN	Data Raw: 18 b5 ee a5 61 cc 0a 97 3e 6f 9e f1 14 d4 d4 bc d5 93 8b 8a 31 6c 99 f0 36 81 41 b3 de e7 f9 88 6c dc 7a c2 b5 62 5b 39 79 65 7f e6 48 66 4a e7 1d 40 45 f9 d6 bb 37 67 c2 1d 78 5f 38 c2 86 52 e7 49 a6 c8 83 e5 96 0b 9f 78 e3 9a ee 3e fa c7 5e 53 ce ac d7 4d e7 e4 c2 57 b6 15 fe 16 3e 64 d2 9b cd b1 70 82 4d a9 44 51 63 9a 6c 81 52 85 5f 39 f4 d6 29 fc 6b 04 4f b5 7e 2c 6b c2 60 15 7e be 48 6b 5f 19 b3 e9 27 84 3c 36 51 24 35 38 ea a4 5a 98 e8 b2 b2 64 29 b0 16 01 f4 c1 df 68 c9 0a ac 25 42 bc dd 64 46 e3 61 47 97 75 b8 22 b9 76 62 47 ac 17 e8 26 96 76 76 14 48 ac a9 85 58 51 d3 bd e3 84 2e 26 dc 03 9a 84 37 21 c9 85 1b 15 c0 63 30 85 63 f6 a0 bb 8f e2 eb 53 38 9c 44 e4 cb a8 2f 9d 30 a3 0b 23 e5 2d 94 52 d0 7d 91 e6 17 94 d2 be 14 fe 98 e8 b2 92 ef 22 e5 Data Ascii: a>o1l6Alzb[9yeHfJ@E7gx_8RIx>^SMW>dpMDQclR_9)kO~,k`~Hk_'<6Q$58Zd)h%BdFaGu"vbG&vvHXQ.&7!c0cS8D/0#-R}"
2024-10-10 19:17:27 UTC	16384	IN	Data Raw: 55 9f 93 53 63 0c 4c 4e 2b 91 f7 87 d1 c3 24 33 a9 14 28 ba 6a a3 9e 28 c9 8e c6 80 12 d6 b9 65 a9 62 86 ec 62 a6 6f 54 61 e4 1d 57 1b 17 6c 73 ae 01 d8 77 61 09 a2 09 93 62 ad 4b b7 18 07 b2 7b 99 57 72 4d 7a d3 65 05 62 7c 66 09 c7 b4 ae ae 6e d3 ab 2b 6b a9 ce 41 bf 1b 6a 56 43 d8 d8 e7 8e 1d 05 55 20 8f 22 8a 98 24 6b 0b 29 10 de 88 e3 90 53 64 40 67 42 44 b4 08 b9 51 bc cd 71 9b cb 07 d6 6d 6a 2d 01 5e eb 62 21 e8 49 49 30 e0 73 06 88 75 75 7b 34 21 e7 c2 02 52 a1 fd 08 e3 02 40 8d e4 92 04 49 ac 5f 83 76 ca 8e 5f 3b d4 dc 68 23 27 77 4b 36 27 92 6d 7e 5e ee 58 b1 51 a1 44 d1 21 09 ad a8 1b f7 c9 08 41 a2 b1 ed 22 e4 34 14 3b 1b 2f 2e c6 80 b8 13 af b1 82 dc a0 39 0e b2 94 90 b6 24 56 0d 59 21 21 87 e9 bc 5b 29 2c b5 bd b8 87 a6 e3 40 59 8c b0 20 ab Data Ascii: UScLN+$3(j(ebboTaWlswabK{WrMzeb\|fn+kAjVCU "$k)Sd@gBDQqmj-^b!II0suu{4!R@I_v_;h#'wK6'm~^XQD!A"4;/.9$VY!![),@Y
2024-10-10 19:17:27 UTC	2731	IN	Data Raw: b6 3d cb 01 db b2 d0 b3 c4 c5 86 7e 2b d5 75 ea 35 6d 68 69 95 7b 67 25 45 e5 25 f2 07 02 20 47 42 88 e9 50 55 7e 60 7c b6 d6 20 a2 b9 d7 36 82 8e 58 f4 b4 1f ed 71 36 cf a3 d8 7e a1 26 ae 1e 90 64 93 27 e3 78 a5 eb 2d 86 0d a9 57 2e a7 dc 4f e1 4d 78 cc 91 a4 3b 58 03 10 ad 5e 4d b3 e8 ea eb 9f 79 fc fd 8e 0f 5e 87 57 f1 b2 be 68 46 a2 75 18 c5 06 c8 99 e3 1e 22 b7 19 22 26 71 1d ab e5 f2 94 1b 26 c0 ab 8a 14 6b a2 31 6d f5 5f 23 f6 52 82 33 62 0b 11 a4 96 71 c4 6d bc 93 84 8c f0 d8 e5 35 6e be a9 03 cf e2 f6 78 d4 e7 a9 03 a2 ca 64 fe 64 99 ac 3d 7c 8c e0 aa 72 d3 77 cc b9 a9 a8 f5 e5 a4 d0 25 25 cb 4b 49 bb ac 4b 73 23 de 4d 2c 10 82 c0 d5 5f 92 dc b9 4b 5b 96 ba 6c 04 46 7a 64 f3 91 8e 45 91 4b 4e 9d 25 a3 80 74 6d 29 92 0e 2f ff 4e e9 4a 1a 12 87 75 Data Ascii: =~+u5mhi{g%E% GBPU~`\| 6Xq6~&d'x-W.OMx;X^My^WhFu""&q&k1m_#R3bqm5nxdd=\|rw%%KIKs#M,_K[lFzdEKN%tm)/NJu
2024-10-10 19:17:27 UTC	16384	IN	Data Raw: a9 75 4b 17 4a dc 4a c3 3e 2f 93 69 c1 e8 4c 74 32 33 8c 0b ab be b0 ce bf 82 1a 5d 1d 4d ec 0e d5 c5 d9 e5 01 58 eb 50 6b 37 32 d0 5e e6 f1 d6 5f 5a b1 43 4a b8 86 31 c3 33 61 73 0a e3 e5 b4 a4 6d 14 e2 64 ca 2a 2d 0f 5e d8 1f f1 0b 76 a0 a8 d7 29 b8 a0 f0 15 1d 48 cc 35 ab c3 f8 57 3f f3 9e f8 3a fd 11 40 f4 1a 2a 66 af ac 31 66 90 2c aa 5d 2f 24 4b c9 99 b6 2c 41 57 c1 fd 66 48 2d 99 8d e8 88 29 43 e7 0b ed bb 85 77 2e 0b 8e d6 09 9d 84 27 fa a2 96 dd 14 af de 00 4c f7 0b 62 7e fa b3 11 d8 cf a7 4f 0f cd 9b b8 c7 d5 e9 c1 9c f4 7f 85 79 fa bc 5d dd cc 98 fb 63 57 db 50 cb 80 19 07 6d 3a 2d 5f 26 83 92 2a 13 67 a9 f4 b4 3c a3 da 6a 49 92 62 76 23 e3 27 9b 62 09 ea e0 cb 91 8e dc 5e 95 ac a4 03 61 f6 6c ad 13 3b de 7a 23 95 7d 4c f3 7b 29 8d 46 b0 7a e3 Data Ascii: uKJJ>/iLt23]MXPk72^_ZCJ13asmd-^v)H5W?:@f1f,]/$K,AWfH-)Cw.'Lb~Oy]cWPm:-_&*g<jIbv#'b^al;z#}L{)Fz
2024-10-10 19:17:27 UTC	12576	IN	Data Raw: 67 b0 08 1d 66 c7 b1 2f 12 ee 43 3f 97 e0 7c 82 67 19 83 3d c0 7c 2e ee b6 77 ba da 8d d1 8c b8 0c 64 66 33 28 46 8c 45 be 07 1c e4 b6 9b 40 95 88 dc 4c c4 c9 5e 34 23 37 4a fd 10 86 45 c8 f2 44 c4 40 72 29 84 13 c3 66 0a 33 4c 24 0f b2 78 3f 63 32 9a 91 08 03 37 62 59 1c b8 79 e8 c6 8c 43 64 38 9e 04 13 cf 72 57 86 ce 5e 4c 00 37 4e 43 70 1f 3f 90 4e 98 67 0c c2 3d 87 8d a1 76 70 19 f4 24 3b 0e f6 23 32 8c 66 94 78 36 29 ff 01 b4 58 19 c2 e8 04 8f a0 ed 75 30 a4 d0 b1 c5 9e 98 6c 92 da 50 c1 45 e6 08 c9 61 4f 07 41 9e 11 11 25 9e 23 61 47 79 c9 7e a6 ce b0 f2 c0 4d 62 0f 42 d0 86 34 0a b3 24 0b 3d e0 5e ee 79 71 18 25 c2 67 7b 19 92 07 5d 2f c8 c0 f6 42 47 02 f1 d0 53 24 c0 64 a1 fc 41 ab 05 2a ee 87 93 9b dd b8 34 71 64 c6 58 08 c9 11 86 40 8e c4 8e c0 Data Ascii: gf/C?\|g=\|.wdf3(FE@L^4#7JED@r)f3L$x?c27bYyCd8rW^L7NCp?Ng=vp$;#2fx6)Xu0lPEaOA%#aGy~MbB4$=^yq%g{]/BGS$dA*4qdX@
2024-10-10 19:17:27 UTC	16384	IN	Data Raw: d6 0a 92 52 37 ca 05 79 b4 91 fa d6 bc eb eb db 1b 2a df d4 27 20 a0 b7 ab 9d 57 ba 73 54 df da fd da 86 86 76 8a f4 a6 30 2b 8e 6f 00 08 38 71 ff 44 6c 87 63 f4 b0 d0 b9 12 a1 b8 c1 9e 51 9b b4 8a ad 43 91 1f 1d 15 b4 35 55 68 2f c3 0c 7d f6 0f f6 53 43 2d 7a 87 da 3e e3 d1 83 14 2b 4c cb 98 ae 3f d0 96 7b c1 55 70 dc 50 d6 d4 8e 71 d6 ef 75 86 32 39 1a d5 d1 ba 83 d9 15 9d 04 69 19 6c 0f e5 11 df 70 d4 84 22 44 35 d9 2a 00 87 83 d6 b7 6a 60 7d 38 79 72 54 58 3a 74 a9 b8 90 47 4d df 8f af a0 14 ce ea 1c 40 96 02 e1 68 b6 0c 31 7a a2 22 18 ef e2 3c 6f 56 77 65 da b7 b1 15 7d 7c 6d b8 20 42 2e 2a 02 e0 e5 9c 41 45 a1 8f 14 c4 36 b2 56 31 af 67 a3 68 7d fe 67 93 19 98 c6 26 6e b0 aa 82 76 c3 13 5b 6e fa 1e 0c 31 0e fb e3 e1 82 9c 0c 10 75 8b 3f 6e e6 e2 17 Data Ascii: R7y' WsTv0+o8qDlcQC5Uh/}SC-z>+L?{UpPqu29ilp"D5j`}8yrTX:tGM@h1z"<oVwe}\|m B.*AE6V1gh}g&nv[n1u?n
2024-10-10 19:17:27 UTC	11311	IN	Data Raw: 36 de 98 fc a3 ae eb ae 17 05 68 cd e8 3f 9b 89 fa f3 a7 bc 4d fa 47 6f e7 94 24 f2 ac 37 4a f4 80 9f 76 7c 7b 70 19 a1 ab 3c ee c9 4b b6 e3 26 d1 60 cd 58 05 8f 09 6a b8 a9 90 05 1b 14 25 e8 b0 36 22 4e e0 67 cd 80 86 9b 8e 7d b0 62 20 c3 27 12 2f 4a 4d 3f 41 00 c3 3f 9d 98 f1 bb 0c ea 01 e1 f0 d6 15 37 2a 4b f7 14 01 0b ff 04 c1 0a ff f8 40 85 0f 15 04 57 29 ff a7 8e 1c 52 be 9d 48 01 48 a3 ec c7 04 2d 56 2f 6c af c1 a7 a3 30 0d b5 2f 86 24 bb ac 25 9e 34 38 00 e4 3d 5e 2f f2 ed f2 1a 36 3c 6f 67 11 94 92 b5 28 6e 7a f0 b8 60 ae 1d ce f8 f6 21 4f 76 26 ce af e9 28 ae 17 4f ae 42 3c 06 e6 ea b8 2f 0f 04 f9 53 04 45 a9 c5 2f b4 58 22 91 6e 20 14 0c 6d 13 a3 82 9d d1 6d fd b1 51 5e 6a 07 f1 44 22 f3 c3 c1 f4 10 79 91 46 4f 13 72 e2 a3 a4 c6 55 c4 b3 aa 91 Data Ascii: 6h?MGo$7Jv\|{p<K&`Xj%6"Ng}b '/JM?A?7*K@W)RHH-V/l0/$%48=^/6<og(nz`!Ov&(OB</SE/X"n mmQ^jD"yFOrU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49805	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:25 UTC	756	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:27 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:27 GMT Content-Type: application/x-javascript Content-Length: 116416 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:54 GMT etag: 0x8DCBD5317046A2F x-ms-request-id: e3355a67-001e-0073-80bc-18ec7a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191726Z-16456d9fcf78vjcmxxvg0buchn000000058g00000000b9u4 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:27 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-10 19:17:27 UTC	14460	IN	Data Raw: 00 5a 9a 9a f6 c3 fe 53 af 33 c1 34 d2 84 95 05 35 93 ed 42 61 1c 0f 46 69 97 23 aa dc a7 40 cc 66 b4 87 22 87 c4 b0 91 f2 91 34 98 46 47 e8 73 94 c5 2c b4 29 c1 a5 0c 97 e8 65 73 4a aa 80 7a 81 d3 30 c5 e1 73 c9 a3 41 a2 d8 a0 74 1a 50 ff 24 ce a5 4b 4e 17 d9 c1 cc 6f 37 b2 7b 91 90 54 35 be df 41 22 57 5d e7 3b 25 76 3b 2c dd 84 3f 1e fe 89 e0 4f 89 bd cc 24 0b 36 f9 2b 8a 58 d8 2d 4c 46 f7 e9 38 48 ec ee eb 23 93 ff 14 5b 0b da a9 34 ee b1 bb 21 7c 8f 7c 37 ea f9 fb 29 45 47 a7 fc 03 09 f3 2d a8 05 cd af 37 b0 ba 31 1c 07 7f 63 2c 7a 2a 9e c0 44 8c 5d df 62 f0 b8 69 6b 56 d2 b5 f1 4f 31 6d f9 0d b4 4f c4 62 fe 86 8b df 32 6c 2e 37 7f 8e 9a de 41 2a fc 21 37 3c 12 96 f4 7c f4 7b f2 37 36 72 bd ee 14 b5 b1 13 78 3a d9 f7 7a 13 ad 77 4d 24 b9 a9 7f 13 e8 Data Ascii: ZS345BaFi#@f"4FGs,)esJz0sAtP$KNo7{T5A"W];%v;,?O$6+X-LF8H#[4!\|\|7)EG-71c,zD]bikVO1mOb2l.7A!7<\|{76rx:zwM$
2024-10-10 19:17:27 UTC	16384	IN	Data Raw: 44 5e 29 68 91 c4 c7 9e 3d 59 47 4f 8c 3c fb 0d 89 92 e2 03 05 42 6f b6 bf 95 66 50 4f 68 8e 30 d1 98 78 da 62 d2 13 62 53 b5 c2 d8 1d 86 25 0a 8a 05 fc 78 0a 20 1a 0b 36 db 36 5c 18 0f 93 33 e0 92 73 b8 e8 c8 2c 13 2c 39 9d 63 3b 58 34 a2 f4 aa 70 c8 01 0e 6c 67 8f 94 14 f4 2c ea c1 c9 e4 23 2b 87 b5 8b 63 e4 43 89 b1 8b e8 0a 0f 02 e5 5b 48 70 ce 35 9c 0d 70 46 8f 8f fc 4b 8f 8f 2d 5e 8e a1 cd b5 22 e8 f1 97 e0 11 8c 3f b2 46 db 04 3b 69 ad 84 fa d1 b9 44 aa e4 84 97 8e 06 bc 59 62 c8 8e c1 97 6d f0 e6 7c 59 a4 7e 74 d8 b2 d2 85 35 22 52 46 19 6f 62 31 0c a5 03 cf dc 83 56 e7 8b 59 d8 57 66 3f 83 d8 05 6a d8 c2 ea 68 b0 88 e2 62 df 54 a3 c6 cf 54 a3 e6 b5 fb 6d 51 bf 88 3a 0f 5e 79 2a 31 ef 67 3c 33 4f 8c 92 56 8e 9a 04 6e 69 cc 65 1e c0 5c 72 eb 31 09 Data Ascii: D^)h=YGO<BofPOh0xbbS%x 66\3s,,9c;X4plg,#+cC[Hp5pFK-^"?F;iDYbm\|Y~t5"RFob1VYWf?jhbTTmQ:^y*1g<3OVnie\r1
2024-10-10 19:17:27 UTC	16384	IN	Data Raw: 39 97 f7 45 f4 3d d1 06 07 03 da 0b 54 a0 56 a6 e0 18 af 3a 72 3a 16 f2 18 0d 30 a6 96 5c f1 8d ba 64 4d fd 91 d5 c1 2f 65 84 ed 03 69 80 14 7c ed 3e 9e 87 25 ad cc 1e 3f 3c 0f a4 4a fe 60 5b 54 c5 dd c7 3d 33 0d 50 29 85 fa 18 90 94 47 27 53 38 e9 81 10 27 4d 63 b4 70 9c 26 cd 57 61 11 fe 18 47 b7 70 a4 26 4d 05 3c 38 50 d5 19 70 13 4c 0c 98 5d 05 33 e3 ea 1a e0 71 23 d0 80 5d 02 c7 75 c3 9c 2c ca e3 bf a3 6e 42 c2 94 dd f2 07 d7 e1 dd cb 05 80 03 87 92 ba 57 e8 30 fd 26 29 60 dc 17 74 99 8b 4b 63 11 5d 38 44 86 a8 4f ab 53 c0 32 cc 10 59 20 ac 22 4b 6a 49 7d 3c 29 60 0a eb 97 70 04 5d 0a bf c9 d2 5e c3 91 bd 86 71 8e fa 7c 2c d9 30 e2 f1 12 63 f2 36 c0 a2 e2 0f 45 16 26 39 34 f2 fb c5 00 93 0a a2 c7 2e c6 66 3d 3e de 98 85 3f d1 00 7e 44 4f d6 f9 a3 24 Data Ascii: 9E=TV:r:0\dM/ei\|>%?<J`[T=3P)G'S8'Mcp&WaGp&M<8PpL]3q#]u,nBW0&)`tKc]8DOS2Y "KjI}<)`p]^q\|,0c6E&94.f=>?~DO$
2024-10-10 19:17:27 UTC	16384	IN	Data Raw: 83 6e 87 8e c1 bb e0 ac 1a c5 2e 79 59 f3 85 b8 09 13 4a e4 4e 55 36 47 a8 2d 77 f1 8a b5 f0 9c 1c 96 80 b5 ba a9 82 3a d7 a7 1d ed 52 cc 61 11 7f 76 65 95 9a ac 0b cb d4 7f 41 60 6d 17 15 48 02 60 5e 3e 4b 6d 77 5f d1 a3 85 25 8e a1 da 2c d0 9f aa d4 32 54 95 a1 5e 98 7f 3b 7d fd ca 50 a0 60 ac 9e 4d a7 4d b1 f7 e6 b1 9b 61 18 f2 dc 83 53 67 7e 51 e2 d9 f8 a1 70 07 e5 00 f5 6a 27 11 25 e0 42 c6 4d 11 31 88 61 c9 93 2d ac dc f4 65 fc 64 6a 7e b2 b0 2b d3 81 fc 8d 9b b5 04 0b e6 25 50 85 cc 62 b5 8c 32 a1 d0 2a c5 83 82 6a b6 13 7f 6a 13 e0 25 ea fe d1 b3 4c 38 c6 bf f2 8d 94 bb 7d 93 07 d4 f6 36 e5 d4 11 ec 8b 8e 0b 82 70 11 e2 0a d3 f9 42 44 b9 41 2c 5f be 31 ed ba b1 c3 e6 f7 45 fc 03 95 e4 d6 e4 ac 80 9f ca a8 cc cd 7e 0b ce ea c6 bd 31 6d af 6f 1e cc Data Ascii: n.yYJNU6G-w:RaveA`mH`^>Kmw_%,2T^;}P`MMaSg~Qpj'%BM1a-edj~+%Pb2*jj%L8}6pBDA,_1E~1mo
2024-10-10 19:17:27 UTC	2731	IN	Data Raw: 4e e8 d9 fd 66 ae c7 82 91 35 81 df 05 7b e0 b0 dc fc 1d 3e f9 5e 07 4c 09 43 4a cd e0 5b 9d 4f 1a b4 1f 02 98 c2 10 e2 93 07 80 21 4c 35 0b cd 01 9d c7 17 42 1d 29 39 fa c3 d9 03 cf 9c c9 34 6d be 88 cf 2a 38 60 e5 03 9c 90 c8 f8 80 e8 b7 05 1f e2 51 ae 9a 69 2c 18 2b 5d d4 8d 31 c1 f8 ce 80 fa 27 14 e9 03 96 2b 6d e1 d4 8c c2 74 89 63 07 50 1d 57 eb e2 ab 2b 6b bd 12 ab 03 13 3a 08 d7 ec ed 82 88 02 a5 11 f4 b2 0e 9a 63 7c ff 93 0e 14 1d 42 6f 4c 8e 7d 81 3d 49 d3 b4 1e ed 8c cc 17 65 6d 40 6e 87 d3 ce fb 82 76 06 42 12 1d 65 ec 1e 8c 44 43 32 9a e2 85 2b f6 7f 2b a8 35 4e dd ca a5 c7 28 4b 55 40 88 e9 9e 6e f3 72 72 68 70 55 5b 05 03 10 aa 43 8f 45 54 79 a8 65 63 80 0c fe 42 12 55 1e c3 09 a9 cb 12 01 9d b2 31 a3 80 ac 8e 23 49 fe 40 92 f3 91 24 b1 2d Data Ascii: Nf5{>^LCJ[O!L5B)94m*8`Qi,+]1'+mtcPW+k:c\|BoL}=Iem@nvBeDC2++5N(KU@nrrhpU[CETyecBU1#I@$-
2024-10-10 19:17:27 UTC	12576	IN	Data Raw: 99 c6 4a 79 24 ff 8a c1 5e 62 c3 ca 88 e9 7e 23 e4 f5 57 63 b3 46 4a 26 4a 87 98 8f e2 a1 c0 c6 ad da a9 b0 6a 77 8d 69 10 b6 32 91 91 d8 cd 44 b2 1d dd e0 e3 a7 9b 0c eb 65 81 9b 64 10 18 81 73 94 6b a4 8f a8 ca 36 03 94 96 7c 09 ba 8e 85 be 87 95 25 a1 2f 1d e9 29 a1 2f 89 78 d3 42 df 06 05 04 1d e9 1a 19 eb 68 28 f8 1d ab b6 b2 77 fc 24 60 43 f3 9d 15 8e e0 8c bb 5f 07 8c fa 30 45 d4 e0 92 39 b2 50 58 b1 31 f4 a2 27 70 45 1f b8 9e 11 1a 1f 01 c5 c4 fa 68 76 14 e9 69 c3 d8 7e d3 86 07 dc 46 6f 84 33 eb 9b a3 b4 39 ae 03 24 38 95 9b e6 dd 7c ee e9 7e da 1c 37 a0 c7 d2 1c d7 37 fd ce 8c 9b e3 fa 8a 65 18 13 6f fb 66 ca 5e 2c 56 5b 8d d8 84 dd 70 cc 45 39 cf f4 54 c5 f6 5d d3 37 f4 a1 7e 53 9c 20 07 47 09 60 26 47 37 ad 49 a1 c0 c6 80 dc 26 28 cd 1d a1 34 Data Ascii: Jy$^b~#WcFJ&Jjwi2Dedsk6\|%/)/xBh(w$`C_0E9PX1'pEhvi~Fo39$8\|~77eof^,V[pE9T]7~S G`&G7I&(4
2024-10-10 19:17:27 UTC	16384	IN	Data Raw: 3e 17 59 c2 0b 9d b0 ab f3 10 6f 6c 19 b1 ba 52 6e c8 3c c2 7c 34 3a 8c 01 e1 71 75 3d 0f d1 10 5b 12 c6 c1 37 72 6e 89 ab 35 12 db 69 7a 87 53 dc 6e 09 a8 27 dc d6 98 40 cd 0a c2 73 dc 2a b0 c2 12 0a 06 70 ee 74 30 81 03 e0 11 2e cf d5 07 26 6f c1 68 f1 8e cd 10 e3 93 0d f5 b4 d3 ef 9a 33 ae 10 9c e1 d2 2b 4d a2 e8 29 52 4b d0 c1 16 ce b1 42 21 4e b9 02 6f 01 8a 87 af 34 a7 8b ee 62 73 e9 61 6c 50 16 1f b8 f5 03 11 58 b8 b6 d7 48 05 7d 13 e0 30 90 e0 30 96 20 33 92 20 33 95 3a 0f 32 62 41 b3 96 99 14 31 df 49 90 79 cc 88 a5 26 a2 24 a1 e5 d1 bd 04 ab 2b 01 56 64 bc 42 e1 90 2e e4 d1 7e 66 de 08 50 43 b5 21 da af 9c 50 fc a2 6b f8 55 02 1c 09 bd 05 df cb 3b 92 d4 d4 30 8a d2 8a cc fb 43 a2 80 91 96 2d b1 e9 8a 30 6d 91 1f 44 db 96 5c ee 0b 1c ec 69 23 92 Data Ascii: >YolRn<\|4:qu=[7rn5izSn'@s*pt0.&oh3+M)RKB!No4bsalPXH}00 3 3:2bA1Iy&$+VdB.~fPC!PkU;0C-0mD\i#
2024-10-10 19:17:27 UTC	5536	IN	Data Raw: 8e 48 38 c4 be 25 7e be 80 c1 43 4d 37 b7 a2 8b f5 00 38 79 1e d1 c0 12 ea 54 27 14 ae d7 78 c7 70 84 dc d7 cc a1 70 9f 52 cb 58 56 86 56 2b 42 3e 9b 28 d7 b7 f3 c5 82 d6 01 a3 94 f0 6f e1 02 5d 0a 73 95 7f 23 5b 9b 3d e6 79 78 31 cb f1 c6 64 14 2a 47 63 b5 38 89 9b b4 16 e8 9c 5f 46 3e 68 1d c7 07 b0 69 52 bc 6a 81 fc 67 f0 45 64 71 a9 40 80 3b 45 78 6b cb 6a 17 00 4f 6b 93 e0 32 ac 05 b5 a5 e5 b6 9d da 05 20 a3 64 84 72 52 db d8 92 51 29 fc e7 52 48 1e 69 d0 57 63 72 4a b8 43 14 54 dd b2 70 49 ee 08 e1 67 76 07 35 a0 a5 b3 9a 37 d2 79 8f 9f 96 0e 16 c5 1a 2f a4 b0 3b 6e 97 dc 6a 62 81 bb 3b 72 90 89 8f 7d 3e 29 48 b9 a1 52 92 b5 2f 41 96 c8 b8 fe 8b dd f7 de 47 77 07 4e 9c c3 d3 ce 5d 67 eb 6e a3 eb c0 a3 70 b0 ed 70 0d 5f ae b7 72 58 02 d8 79 7d 1e 9b Data Ascii: H8%~CM78yT'xppRXVV+B>(o]s#[=yx1d*Gc8_F>hiRjgEdq@;ExkjOk2 drRQ)RHiWcrJCTpIgv57y/;njb;r}>)HR/AGwN]gnpp_rXy}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49806	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:25 UTC	849	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: 18f930cb-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:26 UTC	489	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:17:26 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache x-ms-correlation-id: e0c43d6b-221a-495c-a2c8-81d72d58a6c3 x-ua-compatible: IE=Edge x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 727F9A21B19E449DB863842FC8A71075 Ref B: AMS231032602011 Ref C: 2024-10-10T19:17:26Z access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:26 UTC	1252	IN	Data Raw: 34 64 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 Data Ascii: 4dd<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404
2024-10-10 19:17:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49808	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:28 UTC	564	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:29 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:29 GMT Content-Type: application/x-javascript Content-Length: 116416 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:54 GMT etag: 0x8DCBD5317046A2F x-ms-request-id: 62b42055-f01e-0005-3110-116632000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191728Z-16456d9fcf7bpr8v48k6t3gxn00000000mpg00000000nsbe x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:29 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-10 19:17:29 UTC	16384	IN	Data Raw: 28 9e d3 c6 9a 00 5a 9a 9a f6 c3 fe 53 af 33 c1 34 d2 84 95 05 35 93 ed 42 61 1c 0f 46 69 97 23 aa dc a7 40 cc 66 b4 87 22 87 c4 b0 91 f2 91 34 98 46 47 e8 73 94 c5 2c b4 29 c1 a5 0c 97 e8 65 73 4a aa 80 7a 81 d3 30 c5 e1 73 c9 a3 41 a2 d8 a0 74 1a 50 ff 24 ce a5 4b 4e 17 d9 c1 cc 6f 37 b2 7b 91 90 54 35 be df 41 22 57 5d e7 3b 25 76 3b 2c dd 84 3f 1e fe 89 e0 4f 89 bd cc 24 0b 36 f9 2b 8a 58 d8 2d 4c 46 f7 e9 38 48 ec ee eb 23 93 ff 14 5b 0b da a9 34 ee b1 bb 21 7c 8f 7c 37 ea f9 fb 29 45 47 a7 fc 03 09 f3 2d a8 05 cd af 37 b0 ba 31 1c 07 7f 63 2c 7a 2a 9e c0 44 8c 5d df 62 f0 b8 69 6b 56 d2 b5 f1 4f 31 6d f9 0d b4 4f c4 62 fe 86 8b df 32 6c 2e 37 7f 8e 9a de 41 2a fc 21 37 3c 12 96 f4 7c f4 7b f2 37 36 72 bd ee 14 b5 b1 13 78 3a d9 f7 7a 13 ad 77 4d 24 Data Ascii: (ZS345BaFi#@f"4FGs,)esJz0sAtP$KNo7{T5A"W];%v;,?O$6+X-LF8H#[4!\|\|7)EG-71c,zD]bikVO1mOb2l.7A!7<\|{76rx:zwM$
2024-10-10 19:17:29 UTC	10657	IN	Data Raw: 20 69 8d e9 1e 1b 03 f1 9a bb dc 5c b0 ef 3d 61 b2 28 7f 13 93 05 5a 55 84 c9 e2 a0 b5 fd ef 69 b2 a0 60 3b 56 ea a9 87 cf 34 4b 0a a3 a4 b2 a4 65 da 8c b6 60 0d 0e bf b6 35 18 e4 7a 10 a8 c4 9e 90 f4 28 5f 86 d0 26 8d 68 a2 3e 2b 14 55 1b 24 21 ab 96 23 b0 3d 7e 45 ab 9e 75 05 e4 05 d5 f0 5b ec 63 fe ed 96 e7 53 7a dc 0c 5d 3d 70 bf 39 cc 69 48 5f 68 d7 11 be d0 70 93 ef fc 33 90 2e 91 80 99 dd 01 a8 c9 29 0a 5d 26 f8 4e 32 ec b1 18 55 59 d2 3d 4c c0 1c ce dd e4 ab ef 20 8e a0 99 bb bb bb 8f 5b 03 7e 6c bf 40 91 16 77 cb 9e 47 ae 31 2a 47 69 df f9 f4 69 08 f3 d8 fc 39 ff 94 4f 80 5a 8d 3e 7d c2 12 7d b1 5b f7 80 61 6c 89 0b 72 12 88 6e f0 75 44 15 7d 81 d8 e2 71 ad d7 83 b8 e7 3b db cd ed fd 66 db 61 d7 18 a4 95 f4 9c 59 09 67 a9 ef 5c 4d d3 cb 70 ea b0 Data Ascii: i\=a(ZUi`;V4Ke`5z(_&h>+U$!#=~Eu[cSz]=p9iH_hp3.)]&N2UY=L [~l@wG1*Gii9OZ>}}[alrnuD}q;faYg\Mp
2024-10-10 19:17:29 UTC	16384	IN	Data Raw: c4 96 e9 87 fa e2 c3 e4 91 15 41 75 36 3a 61 6c 65 12 51 e5 5b e2 d0 5d fc 9e 19 36 4a df 13 d9 56 f8 96 6d 29 ef e7 b9 f2 29 c9 16 47 81 ce 77 8b 60 5c 98 0b 00 61 be a0 0a 70 be 69 14 8d 6f 94 8f 1a b2 bd 28 c4 c3 48 be a9 cc 21 2c aa c3 2f 88 b1 2d 0e 17 57 cb fe 36 3d e9 17 83 ee 02 69 f8 21 5d 8b a6 11 7a 55 ae 11 88 80 14 5d de 23 69 a8 7c 5b 9c 7f cb 3c 4a c4 b7 79 a4 16 d1 7c a9 e0 0f f2 6a e9 41 99 30 0b b7 93 b4 6c 3c cc f5 7e 8e 5d 69 4b 34 c6 09 f0 78 1f 5f 47 69 59 60 2a 09 82 14 e5 92 50 19 eb e6 15 7a 50 79 7f 38 8d c2 6c d5 1e 64 55 77 f4 8d d3 1f 56 e1 6f ea 0e cc a7 c5 c5 20 6c 19 3f 3e ae a3 d7 d4 e2 1b 99 d1 0b ab be 6e 98 5a 33 ba 63 58 54 8d 47 1c bd c8 3f dc 6e 64 37 10 7e a7 d0 60 3e 5f 37 16 8b ba aa 73 41 d4 c3 e9 e9 9f 7e 6c 24 Data Ascii: Au6:aleQ[]6JVm))Gw`\apio(H!,/-W6=i!]zU]#i\|[<Jy\|jA0l<~]iK4x_GiY`*PzPy8ldUwVo l?>nZ3cXTG?nd7~`>_7sA~l$
2024-10-10 19:17:29 UTC	16384	IN	Data Raw: f6 81 ba 81 0b fc 67 63 1d 47 7a d8 f7 f2 56 4b 7d af 57 ea fc 89 67 a8 cf 4d c4 01 e0 b4 5d dd 7d 3d a7 c7 07 6a 45 4a c8 14 69 26 59 d8 0e f6 1b 01 b9 aa db f4 9f aa 36 44 c4 76 50 d9 f4 16 0e e7 58 5a f4 79 2f 96 1a 8c 8a 25 ec 1b 1b 00 cb 1d f0 47 89 5c a6 f4 ca 4b 63 b9 fb 8f 1b 97 bb a7 d7 bb f7 d4 0d e4 93 7a c5 55 23 2e ef 57 56 bc 4f 2b de 35 57 bc 47 b9 d4 96 a3 65 e1 43 49 94 78 e3 3e 74 dd 89 ec 44 ff b1 fa 62 af 5f fa e2 13 5d de 29 95 3f f5 94 bb 5d 71 d0 76 15 e7 59 df 8e 99 5f 3d 95 45 65 57 66 b3 df 75 2f 9b 8e e1 4d e9 18 6e 3a 73 71 f5 cc c5 dc 73 5c 3e 73 08 58 98 e8 53 2c 91 7b 14 6d 7c d4 19 63 e8 11 0c 1a 3a ad df c1 40 7d 49 5f 3d b7 44 bc 8b e1 f4 6d 2c 67 a6 bc c7 68 15 cd 7c d0 1a 52 71 0b a5 b9 53 45 a1 12 37 24 3d 3d 71 15 41 Data Ascii: gcGzVK}WgM]}=jEJi&Y6DvPXZy/%G\KczU#.WVO+5WGeCIx>tDb_])?]qvY_=EeWfu/Mn:sqs\>sXS,{m\|c:@}I_=Dm,gh\|RqSE7$==qA
2024-10-10 19:17:29 UTC	16384	IN	Data Raw: dd dd 6b 26 2f df 3a 43 fc 14 86 92 83 ff 79 cd 3d bb fc f5 b7 b5 0f 9a da c6 ad 98 77 35 f1 de fb 08 34 f1 d0 fa d2 f2 be b4 be 74 ef 5d c1 f7 4d eb d7 ea 16 2b 28 16 b7 bf 64 01 6b 13 3f f6 df aa ec 40 94 42 d4 7e e3 1f 17 be 48 cf 3a 43 fb a5 ff f7 d6 1b f7 1d 00 f6 f1 e8 cd 58 61 02 0f cb a1 f4 5b c7 a5 c3 c0 43 6a de 92 97 b0 42 ef c6 80 c9 de 01 22 7b 89 2b 65 2e d4 27 ef b4 48 65 8a 13 75 4f 79 13 5e 39 b0 56 88 5a 8d f7 c3 57 7a 70 66 b3 76 8f 46 a1 94 c0 f7 41 86 f9 f9 c8 c3 55 84 15 76 7f 42 59 52 19 47 b4 d4 52 12 0a 81 0a 3f 51 04 1d bf 56 cb fd 69 67 27 e5 b0 49 29 1f a2 94 0f 51 ca 87 08 ff cc f9 0f 9c 25 9b ba 3b 91 69 aa 40 85 80 91 44 de 3b a8 bd 42 80 e0 51 34 8e 30 90 3e 9d 15 2e c3 e7 ac 81 d2 7c 23 8c 66 0d a8 17 8a cf 87 24 4c 2e 9f Data Ascii: k&/:Cy=w54t]M+(dk?@B~H:CXa[CjB"{+e.'HeuOy^9VZWzpfvFAUvBYRGR?QVig'I)Q%;i@D;BQ40>.\|#f$L.
2024-10-10 19:17:29 UTC	16384	IN	Data Raw: 2e d0 fa 9d c1 b5 b8 a8 60 b8 2b c9 bc af f3 79 2e d0 67 4a 98 78 e4 19 e9 4b 33 66 f3 37 c8 20 62 3e 77 71 8c 50 1d df 77 e3 f7 93 17 5d a1 5f f5 59 8f bf 8d d2 4b 72 20 96 f7 d0 17 8a b8 24 f3 08 ea 7d e8 08 34 6a 64 44 aa 80 06 3d a0 85 66 a8 ce 13 25 db a1 6d 81 14 1a 15 e9 ea d1 38 30 5a 41 ca 82 37 63 cb 06 8f 21 43 c4 54 5e 1c 56 5b a1 2d 02 7a f6 e3 b6 85 cc ed 7a 50 5b b2 48 83 de 89 0e 37 1f 90 3f 05 ac 5c 12 05 2c 19 ca f3 51 07 57 ad 65 e3 4f 4a b7 18 8a 06 c8 5d fe a4 5b 0c a6 36 ec 49 2e 86 84 52 3c e4 1f df 8b 65 be 17 6b f5 7d 61 60 86 d6 5d 64 60 b6 2f 42 05 d6 ea 07 dc c0 ac 51 2d 0b 03 33 14 5d 4c e4 2e bf a1 b7 84 81 19 9a 8b 95 6c 97 76 2e 19 99 91 9d da 15 55 a9 71 1b b3 3a 76 88 db 98 35 d0 c6 ec 4a d7 26 a4 4b 40 3b 33 9c 98 e1 d9 Data Ascii: .`+y.gJxK3f7 b>wqPw]_YKr $}4jdD=f%m80ZA7c!CT^V[-zzP[H7?\,QWeOJ][6I.R<ek}a`]d`/BQ-3]L.lv.Uq:v5J&K@;3
2024-10-10 19:17:29 UTC	8267	IN	Data Raw: 13 4f 35 7f e0 ed 67 24 4b e5 a6 56 69 6f 72 17 60 db 88 e6 e1 c9 c6 53 f8 3e f7 5f 1a 4a 48 ee 77 d5 de 15 56 f8 d6 79 a1 1c 2d da c2 2d 3e 92 b7 cb be 29 64 be f0 84 d5 f0 ee 75 88 43 02 98 88 7c 36 be 07 f8 83 eb 68 41 bf 30 3a a2 58 4a 0b fd f1 10 2d c7 8e 1a 31 1b af 2c 67 54 8b ab 3f cb 15 56 19 0e 55 82 65 10 30 ba 80 5c 77 55 e0 bd 4a b0 0c 9a c4 68 41 ac bf 6e 41 25 58 06 f6 d7 05 88 09 93 99 7f a4 17 4b 20 ac 62 a6 42 37 7e 54 09 96 81 dd 8c 6e 50 04 36 d9 05 7a b1 04 26 32 fb ca fb c9 e8 ab 4c b0 0c 38 af 0b f0 e6 52 d9 8f c4 ab a5 60 71 39 2b ef ba 52 01 91 a8 07 07 bb 50 0f 8c 5e 2c 01 dd 2c f6 d9 87 b9 f2 e4 6f 47 6f 5e 57 c6 97 12 fb ca 3c e4 0b c7 bd 2d 39 58 52 f5 dc 13 f9 eb 91 35 09 ef a8 cf 72 ff 79 6b 98 86 00 14 d9 36 10 75 d5 5f 63 Data Ascii: O5g$KVior`S>_JHwVy-->)duC\|6hA0:XJ-1,gT?VUe0\wUJhAnA%XK bB7~TnP6z&2L8R`q9+RP^,,oGo^W<-9XR5ryk6u_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49810	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:28 UTC	787	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:28 UTC	758	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:28 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 6b73e8fc-a01e-0062-73aa-150171000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191728Z-17d475c956f9dtzqvf5rycb47s0000000aw00000000159t3 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2024-10-10 19:17:28 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-10-10 19:17:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49809	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:28 UTC	801	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:28 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:28 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: 0b9d65bd-d01e-005f-42e7-1000d5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191728Z-16456d9fcf765b7l1v74vrftu80000000mv000000000802m x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:28 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-10-10 19:17:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49811	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:28 UTC	800	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:28 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:28 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: c490c1e1-b01e-0030-0e8b-174234000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191728Z-16456d9fcf7pqvxd6mv79499z8000000075g00000000dpd5 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:28 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-10-10 19:17:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49812	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:28 UTC	801	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:29 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:28 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 988c28d4-f01e-002a-2fae-156bf9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191728Z-17d475c956f96w6gp2cnq7xsg00000000b3g000000002sd7 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:29 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-10-10 19:17:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49814	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:28 UTC	762	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://okvanguardofficelogin.x-sns.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:29 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:29 GMT Content-Type: application/x-javascript Content-Length: 35193 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:55 GMT etag: 0x8DCBD5317AEB807 x-ms-request-id: b4bf79bb-801e-0049-5ffe-1abe10000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191729Z-17d475c956fxvkbcsawmkcu4d000000000u000000001hzbx x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:29 UTC	13654	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-10 19:17:29 UTC	16384	IN	Data Raw: 0d ea 8c 33 06 67 17 d0 7a f3 a0 38 04 ea 1f 14 8d 86 97 0d de 13 16 5b e3 2c 9d 61 6f 27 e9 28 aa 17 9e bf fd eb 59 73 b3 1f 6c 7e be f8 6e 3b de 2a a2 bc a8 67 de 51 be b5 58 e6 53 f8 b5 af 7e d5 fe 5c 6b d4 6b cd 5a a3 d8 2a 52 6e aa de ea 79 90 20 e3 ee 24 c8 a3 ba e7 6d e5 49 1c 46 f5 cd b6 e7 11 36 8c 43 b4 95 44 f3 49 31 25 44 f2 b3 68 2b 54 fd 1f 17 80 c1 c5 20 3a 2b 2e 0e f4 28 1e 10 a9 74 d0 f4 e3 81 a9 97 1e c6 07 29 d4 85 e1 06 03 a7 7a ea f9 40 aa ce 2e 90 2c d8 d8 48 1b ed c3 78 63 43 0f 69 7c f1 a5 fd 60 46 15 29 e4 d2 46 cb 4f 1b 1d cf f3 92 c6 c0 00 09 04 ff 0c da 07 51 02 d3 8d 5d 21 f1 b0 d0 f2 2c b8 b0 d0 67 83 9d 1d b0 9a 37 36 82 c3 c1 ce 6e a7 db f1 be 54 c0 bd 4e ab 8f e8 b4 10 9d 7a 58 c2 b9 d1 f2 bc 67 58 a8 dd dc d8 08 4d 2b 88 Data Ascii: 3gz8[,ao'(Ysl~n;gQXS~\kkZRny $mIF6CDI1%Dh+T :+.(t)z@.,HxcCi\|`F)FOQ]!,g76nTNzXgXM+
2024-10-10 19:17:29 UTC	5155	IN	Data Raw: 39 2f 11 26 e9 e0 de 57 70 1a 2e b0 e7 57 e1 18 9e c1 20 78 d0 4b e5 a6 f6 a8 37 98 e1 2f ea c9 e0 9a 16 6f e3 72 0a ca 1b 93 3e 94 22 8e d9 62 c7 be 76 3b d9 ac ad 46 ba dc 86 91 02 90 2e 2e 36 19 69 9e ab a1 6d e8 48 5a 76 23 e3 e9 6e b7 d8 73 91 35 1e 46 e0 8a ab f1 70 f4 99 86 ba f0 0d a8 7c c7 eb 22 43 df 26 13 9b fe aa 86 72 1a 24 d1 1b 1f 76 b9 6a 13 86 59 ef 3e 57 2e b7 ef 73 f5 1a f4 4a 0f 7f c1 d3 6a 30 4f ab d1 c6 51 00 f0 51 0f ff 32 93 99 e7 66 6a c1 c2 ab 44 28 49 50 38 34 ad 9e d5 77 57 96 76 9e d9 5d a3 8a fb 6b 1d cd 47 1b 5d fd 31 0b 70 ca f5 b6 91 7b 84 aa 18 d4 4d 16 00 9a 17 32 5b f8 ce ad 93 a0 ac 2b 7d db 79 d4 07 99 59 ce d1 fc 40 73 78 b6 a4 15 51 3a 58 5b 66 66 d0 f1 dd 79 ee 21 9e f3 01 47 05 46 6a b3 1f 74 1f 1a 14 a7 3c 50 80 Data Ascii: 9/&Wp.W xK7/or>"bv;F..6imHZv#ns5Fp\|"C&r$vjY>W.sJj0OQQ2fjD(IP84wWv]kG]1p{M2[+}yY@sxQ:X[ffy!GFjt<P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49815	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:29 UTC	733	OUT	GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://okvanguardofficelogin.x-sns.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: AU8ZSJ64LyDW47aaqbSTvg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-10 19:17:30 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:17:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 43cedfd3-7f04-4068-9f19-c7b8b1971800 x-ms-ests-server: 2.1.19066.8 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49817	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:29 UTC	548	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:30 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: e5712158-201e-0050-3bab-153eab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191730Z-17d475c956flttjq876t0e526n0000000aug000000014ky7 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:30 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-10-10 19:17:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49816	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:29 UTC	549	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:30 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: 0b9d65bd-d01e-005f-42e7-1000d5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191730Z-16456d9fcf7tp4j8zt0s4p7rd80000000mu000000000mwp7 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:30 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-10-10 19:17:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49818	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:29 UTC	535	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:30 UTC	758	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:30 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 6b73e8fc-a01e-0062-73aa-150171000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191730Z-17d475c956fs4gh40m35beev6g0000000amg000000003g1x x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2024-10-10 19:17:30 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-10-10 19:17:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49819	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:29 UTC	549	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:30 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 14295f9b-e01e-007b-07e7-10f675000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191730Z-16456d9fcf7f8bbkt42q7d843g0000000mx00000000079fg x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:30 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-10-10 19:17:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49820	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:30 UTC	570	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: 36f920fd-acb15722.x-sns.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="
2024-10-10 19:17:31 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 10 Oct 2024 19:17:30 GMT Content-Type: application/x-javascript Content-Length: 35193 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:55 GMT etag: 0x8DCBD5317AEB807 x-ms-request-id: 7d0dee70-801e-007d-5410-11c5ca000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241010T191730Z-16456d9fcf7hlggxws08p4urnw0000000my000000000kgg0 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-10-10 19:17:31 UTC	6414	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-10 19:17:31 UTC	16384	IN	Data Raw: b8 a4 3b 25 97 0e 64 97 ca 18 72 52 23 96 9c 98 fc 7b 99 9c c8 8b 97 65 72 e2 08 2e f1 89 1d bd 6a 68 e7 f9 bb 88 98 44 ea 5c 8a 88 49 4c ff 5d 18 4d b8 10 2e 85 d1 84 e9 bf 57 e6 03 59 f0 b2 32 1f 54 b6 32 1f 34 da 32 94 ae 84 24 c7 56 a1 19 e1 20 5f 4b 77 00 71 51 e2 40 02 82 b8 d1 13 5d 82 e1 53 43 7a 55 b6 a9 a5 d9 70 64 66 69 48 65 04 64 c8 10 1d 21 b7 4b c7 08 af 45 3a 50 f9 e6 f2 5f 4b 01 b4 9f 8e ab 24 d6 24 dc a1 16 16 80 70 64 1d 49 84 4b 12 a8 3b 50 b7 01 77 9b 65 2a 3a ac 15 75 35 60 ac e4 41 9f 9c 11 22 46 8b 2c 98 d7 22 1d 11 e5 2c e1 9a aa bc 6d 61 a4 20 5a 88 b3 0a 88 90 64 a1 21 1a 93 85 09 29 d3 65 8c f1 d0 27 e3 01 41 85 b6 b1 03 1e 4f 11 c4 ba 1a 2d fd e4 58 42 b8 69 ad 49 a8 9e 74 ec 65 10 8c 54 3a 37 00 63 77 24 43 6b 1b 11 27 e2 b1 Data Ascii: ;%drR#{er.jhD\IL]M.WY2T242$V _KwqQ@]SCzUpdfiHed!KE:P_K$$pdIK;Pwe*:u5`A"F,",ma Zd!)e'AO-XBiIteT:7cw$Ck'
2024-10-10 19:17:31 UTC	12395	IN	Data Raw: 1b 05 df f8 0e b1 b4 3b 89 b8 a3 a7 ec 2a eb 92 f6 be 95 57 91 f9 a6 4f 99 60 b6 cd 83 31 ed 42 d6 04 1b 7b 07 e3 8a 09 36 2e 99 60 9e ba 8b 62 b2 cb 1e 71 11 d5 34 16 8b 6f 8c 51 4d 4b bb fc c6 f4 a2 38 05 b0 d7 17 55 d6 0f 71 5d f5 d0 98 5a 78 aa 51 1b a9 14 fa 0b cf 37 30 e5 e9 0e d1 25 0e dc fd 25 19 70 bd a3 d6 7e db da 79 ce 90 8c e9 98 a3 e9 c8 df 3f 1b ad f8 fe 19 be ba 0e f3 38 d6 fe 28 f7 95 e7 5c 99 8e fa 80 6e 3d c1 37 d0 dc fd 70 fc 88 01 a9 17 d8 18 17 58 f0 f5 05 96 78 5f 73 d2 2e 3c 7a 1e c4 5d 61 c1 d7 56 d8 bc 5c 69 b3 45 7b bb 5c 4d 55 f4 aa ab 29 f1 be ea d2 5a 94 b4 f8 a9 5d 5c 7f 28 b2 53 78 bc f4 e2 a2 25 b5 fc c6 25 45 9b 81 f2 6f 28 23 f3 db d6 4d 48 42 d8 ae 1b d0 10 c3 ca ba 09 1f 77 5d 84 96 ff e6 c8 7f fc 98 9f f9 78 86 7e cc Data Ascii: ;*WO`1B{6.`bq4oQMK8Uq]ZxQ70%%p~y?8(\n=7pXx_s.<z]aV\iE{\MU)Z]\(Sx%%Eo(#MHBw]x~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49821	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:34 UTC	733	OUT	GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://okvanguardofficelogin.x-sns.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: l1EnESMLhFjI5zd33jj89Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-10 19:17:36 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:17:35 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: b273cdbf-491c-4873-9836-8ff488d40c00 x-ms-ests-server: 2.1.19066.8 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49822	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:43 UTC	733	OUT	GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://okvanguardofficelogin.x-sns.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: cEeVmg61/1tcxRqDr7hVXQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-10 19:17:43 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:17:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: f630d3a2-ce6c-4bf4-8c27-30e670350f00 x-ms-ests-server: 2.1.19066.8 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49823	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:53 UTC	733	OUT	GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://okvanguardofficelogin.x-sns.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: tQ3uNCLka4Ew/6sDH3MNmQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-10 19:17:54 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:17:53 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: fb3a499e-053c-4871-88e5-b90a05761500 x-ms-ests-server: 2.1.19066.8 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49824	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:17:56 UTC	733	OUT	GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://okvanguardofficelogin.x-sns.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: iLt80i48cO7kvhufvpLe9A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-10 19:17:57 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:17:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 596cc1cd-68d0-49e4-bfe6-7c2ec1c41700 x-ms-ests-server: 2.1.19066.8 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:17:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49826	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:04 UTC	733	OUT	GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://okvanguardofficelogin.x-sns.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: 5kJ7aGcsXflFgYsq6KqPIA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-10 19:18:05 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:18:05 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 0e14cede-30e5-4552-a93f-5904e8f61400 x-ms-ests-server: 2.1.19066.8 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:18:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:06 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:07 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:06 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 09 Oct 2024 03:56:29 GMT ETag: "0x8DCE8165B436280" x-ms-request-id: 933bb64d-501e-00a3-36e1-1ac0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191806Z-17db6f7c8cfrbg6x0qcg5vwtus000000015g00000000msxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:07 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-10 19:18:07 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-10 19:18:07 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-10 19:18:07 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-10 19:18:07 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-10 19:18:07 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-10 19:18:07 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-10 19:18:07 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-10 19:18:07 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-10 19:18:07 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:08 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:08 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 38350f62-a01e-0021-1402-1a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191808Z-185b7d577bdd97twt8zr6y8zrg00000002z000000000ysmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:08 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:08 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:08 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 995dd301-801e-0035-24cd-1a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191808Z-17db6f7c8cf7s6chrx36act2pg00000000z00000000125me x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:08 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:08 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:08 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191808Z-17db6f7c8cfvzwz27u5rnq9kpc00000001000000000161ek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:08 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:08 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ced16f83-c01e-008e-1322-1b7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191808Z-17db6f7c8cfnqpbkckdefmqa4400000000xg000000003x5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:08 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:08 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:08 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: d01aae37-c01e-007a-5dfb-19b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191808Z-185b7d577bdd97twt8zr6y8zrg00000002xg0000000152r0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:08 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:08 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 95652421-c01e-00a1-30d1-197e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191809Z-185b7d577bd8m52vbwet1cqbbw00000002x0000000012dzr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:08 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191808Z-17db6f7c8cfp6q2mfn13vuw4ds00000000e00000000051cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:08 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:09 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:09 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c77ee0be-a01e-0032-0c24-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191809Z-17db6f7c8cf5r84x48eqzcskcn00000000ng000000001020 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 19:18:09 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:08 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:09 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbc5b3b7-c01e-00a2-28e5-1a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191809Z-17db6f7c8cffjrz2m4352snqkw000000017g000000009gh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:09 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:08 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a417ae39-101e-008e-1f1c-1bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191809Z-17db6f7c8cfdpvbpevek8sv5g400000000sg00000000p7x3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:09 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: d01f8df5-c01e-007a-10fd-19b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191809Z-185b7d577bdt2k4f7f9nr1pp7s00000002fg000000010841 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:09 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191809Z-17db6f7c8cf9t48t10xeshst8c00000000q000000000wwd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:09 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 4a155f70-001e-0017-2dd7-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191809Z-17db6f7c8cfp6q2mfn13vuw4ds00000000n0000000004cu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:09 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 54dd9531-c01e-0079-2afa-19e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191809Z-185b7d577bdd97twt8zr6y8zrg000000033g000000003b6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:09 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 50d1697f-101e-008e-7283-1acf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191809Z-185b7d577bdt2k4f7f9nr1pp7s00000002f0000000012ayv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:10 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191810Z-17db6f7c8cf9t48t10xeshst8c00000000mg000000012vuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:10 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: f907bcfc-101e-007a-11f5-1a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191810Z-17db6f7c8cf5mtxmr1c51513n000000000wg0000000175kk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:10 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:10 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191810Z-17db6f7c8cf7s6chrx36act2pg000000010000000000wfvk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:10 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:10 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191810Z-17db6f7c8cf4g2pjavqhm24vp4000000010g00000000q93x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:10 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 69053910-001e-00ad-4022-1b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191810Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000hg00000000s0su x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:12 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 837be9b2-101e-0046-5ec9-1991b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191812Z-185b7d577bd8m52vbwet1cqbbw000000030g00000000km9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:12 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 94af937e-501e-0047-50ca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191812Z-17db6f7c8cf4g2pjavqhm24vp4000000013g0000000068vc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:12 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b59689ad-601e-005c-3fe1-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191812Z-17db6f7c8cf9t48t10xeshst8c00000000sg00000000e235 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:12 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:12 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:12 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fa6a24a8-e01e-0099-78e3-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191812Z-17db6f7c8cfqxt4wrzg7st2fm800000000v0000000017a29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:12 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:12 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:12 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6ca0adc2-b01e-0021-19e3-1acab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191812Z-17db6f7c8cf7s6chrx36act2pg000000014g000000005aq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:12 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:12 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: f30ac50d-201e-0033-27d7-1ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191812Z-17db6f7c8cfqxt4wrzg7st2fm800000000ug00000001apgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:12 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:12 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 5007ca28-801e-00a0-7d20-1b2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191812Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000sg000000004tpg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:13 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:12 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f7492d67-a01e-000d-0ae4-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191813Z-17db6f7c8cfnqpbkckdefmqa4400000000t000000000vfry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:12 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7708100b-601e-003e-5be1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191812Z-17db6f7c8cfqxt4wrzg7st2fm800000000ug00000001apgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:13 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 64a47169-201e-006e-3076-1abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191813Z-185b7d577bdd97twt8zr6y8zrg000000030g00000000q7e3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:13 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:14 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c832ddd9-b01e-0084-55ca-1ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191814Z-17db6f7c8cfvzwz27u5rnq9kpc000000013g00000000pm4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:14 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:13 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191814Z-17db6f7c8cf5mtxmr1c51513n0000000010g00000000htaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:14 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:14 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 67f4a132-701e-0021-11f5-193d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191814Z-185b7d577bdt2k4f7f9nr1pp7s00000002fg0000000108g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:14 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191814Z-17db6f7c8cfkzc2r8tan3gsa7n00000001000000000068a7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:14 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:14 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f4abfb5c-001e-00a2-33e5-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191814Z-17db6f7c8cfvzwz27u5rnq9kpc000000012000000000x56v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:14 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:15 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:15 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191815Z-17db6f7c8cf4g2pjavqhm24vp400000000y0000000013ha9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:15 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:15 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: aa8fb35a-601e-003d-30cd-1a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191815Z-17db6f7c8cfrbg6x0qcg5vwtus000000011g000000015vqd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:15 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:15 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191815Z-17db6f7c8cf4g2pjavqhm24vp4000000010000000000s7bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:15 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:15 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:15 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191815Z-17db6f7c8cfp6q2mfn13vuw4ds00000000fg000000004ta7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:15 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:15 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 5aec4ebb-b01e-0002-57ca-1a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191815Z-17db6f7c8cfrbg6x0qcg5vwtus0000000190000000001ffa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:16 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:16 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191816Z-17db6f7c8cf58jztrd88d8aypg00000000s000000000475u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:16 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:16 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:16 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 725817be-301e-0052-7ede-1a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191816Z-17db6f7c8cfrbg6x0qcg5vwtus000000013000000000ypsr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:16 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:16 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:16 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 95529de3-401e-0064-4a25-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191816Z-17db6f7c8cfqkqk8bn4ck6f72000000000gg000000009fr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:16 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:16 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:16 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191816Z-17db6f7c8cfspvtq2pgqb2w5k000000000p000000000rqvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:16 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:16 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:17 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191817Z-17db6f7c8cfrbg6x0qcg5vwtus000000017000000000c2wg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:17 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:17 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191817Z-17db6f7c8cfqkqk8bn4ck6f72000000000n0000000009fy0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:17 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:17 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191817Z-17db6f7c8cfvzwz27u5rnq9kpc0000000160000000009p3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:17 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:18 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c769d364-a01e-0032-511e-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191818Z-17db6f7c8cf58jztrd88d8aypg00000000p000000000p69d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:18 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:18 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 64ee2c34-901e-0048-70e2-1ab800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191818Z-17db6f7c8cfkzc2r8tan3gsa7n00000000xg00000000mnst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:18 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:18 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191818Z-17db6f7c8cffjrz2m4352snqkw000000012g0000000143py x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49883	172.233.53.209	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:18 UTC	733	OUT	GET /acb15722230e4dd094b9ec1a7f7ebb27/ HTTP/1.1 Host: okvanguardofficelogin.x-sns.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://okvanguardofficelogin.x-sns.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D5UbIz="YWNiMTU3MjItMjMwZS00ZGQwLTk0YjktZWMxYTdmN2ViYjI3OjY3NWU4YzkyLTQ2YzItNDRlZS1hNjA5LWNkNjM0YzI4ZWY3Yw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: UcMQG6jo5pqheGKViSFXHQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-10 19:18:19 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 10 Oct 2024 19:18:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 520639ce-0db8-4754-83d7-4b28d0971900 x-ms-ests-server: 2.1.19066.8 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://04a63513-acb15722.x-sns.cloud/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-10-10 19:18:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:19 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 150221b2-d01e-007a-13e9-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191819Z-17db6f7c8cfp6q2mfn13vuw4ds00000000n0000000004dq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:19 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95c9d568-c01e-00a1-6afa-197e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191819Z-185b7d577bdt2k4f7f9nr1pp7s00000002eg0000000168yh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:19 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c972fac3-b01e-0097-34f9-194f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191819Z-185b7d577bd8m52vbwet1cqbbw00000002yg00000000wnk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:19 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a2dd0523-901e-0064-1fe2-1ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191819Z-17db6f7c8cfdpvbpevek8sv5g400000000rg00000000uykz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:19 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:19 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 2c827ab8-101e-0079-2f05-1a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191819Z-185b7d577bdd97twt8zr6y8zrg00000002wg0000000191rv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:20 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:20 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e64af527-401e-0015-1bcc-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191820Z-17db6f7c8cfqkqk8bn4ck6f72000000000mg000000009bq0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:20 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:20 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:20 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: b3584e95-501e-0029-5500-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191820Z-17db6f7c8cf58jztrd88d8aypg00000000qg00000000ckc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:20 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:20 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:20 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191820Z-17db6f7c8cfdpvbpevek8sv5g400000000p0000000016bb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:20 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:20 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0f8fe9c7-e01e-0020-59f9-19de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191820Z-185b7d577bdd97twt8zr6y8zrg000000033g000000003c84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:20 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:20 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 54149fda-b01e-0001-69e2-1a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191820Z-17db6f7c8cfp6q2mfn13vuw4ds00000000ng0000000051fp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 19:18:21 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49894	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:21 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:21 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191821Z-17db6f7c8cf5r84x48eqzcskcn00000000hg000000000wxt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:21 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:21 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:21 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5dd409ef-301e-0099-0e1e-1b6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191821Z-17db6f7c8cfbtxhfpq53x2ehdn00000000x0000000002e2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:21 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:21 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:21 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0e570907-201e-003f-4105-1a6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191821Z-185b7d577bdt2k4f7f9nr1pp7s00000002h000000000tubh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:21 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:21 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:21 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 59d5eae0-a01e-0053-73c3-198603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191821Z-185b7d577bdd97twt8zr6y8zrg00000002x00000000185vb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:21 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:21 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:21 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 77cf7d0e-001e-000b-05d9-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191821Z-17db6f7c8cf5mtxmr1c51513n000000000z000000000v6sz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:22 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:22 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: fdc7e0a4-c01e-0034-181f-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191822Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000pg00000000m60e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:22 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:22 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191822Z-17db6f7c8cfqkqk8bn4ck6f72000000000e0000000009m9g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:22 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49902	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:22 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: b5702fc7-501e-0047-59e6-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191822Z-17db6f7c8cfvzwz27u5rnq9kpc000000013000000000rqer x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49903	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:22 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 38c628c3-f01e-00aa-23c2-198521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191822Z-185b7d577bdd97twt8zr6y8zrg000000031g00000000fsph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:23 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49904	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:23 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 7d3f2e15-101e-00a2-5aca-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191823Z-17db6f7c8cf58jztrd88d8aypg00000000ng00000000pyks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49906	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:23 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191823Z-17db6f7c8cf5mtxmr1c51513n000000000zg00000000s1bd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49905	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:23 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:23 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191823Z-17db6f7c8cfkzc2r8tan3gsa7n00000000v000000000zayd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:23 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49907	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:23 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 8f0b4528-901e-0067-42c6-19b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191823Z-185b7d577bd8m52vbwet1cqbbw00000002wg000000014930 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49908	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:23 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:23 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191823Z-17db6f7c8cfp6q2mfn13vuw4ds00000000f0000000004k2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 19:18:24 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:23 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:23 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 2c65b6c1-101e-0079-26fb-195913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191823Z-185b7d577bdfx2dd0gsb231cq000000002t000000000qpvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:24 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49909	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:24 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:24 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 94afa4f1-501e-0047-0aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191824Z-17db6f7c8cf58jztrd88d8aypg00000000ng00000000pyqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:24 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49910	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:24 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:24 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: f4b6e6ad-001e-00a2-4de9-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191824Z-17db6f7c8cf9t48t10xeshst8c00000000v00000000007qx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:24 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49911	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:24 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:24 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191824Z-17db6f7c8cf4g2pjavqhm24vp400000000xg000000015q0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:24 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49912	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:24 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:25 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8957210b-901e-005b-0df7-1a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191825Z-17db6f7c8cfbtxhfpq53x2ehdn00000000rg00000000vn29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:25 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49913	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:24 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:25 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:25 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191825Z-17db6f7c8cfqkqk8bn4ck6f72000000000kg00000000946h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 19:18:25 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49914	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 19:18:25 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 19:18:25 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 19:18:25 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c154ba59-a01e-0070-01d7-1a573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T191825Z-17db6f7c8cf5r84x48eqzcskcn00000000fg000000000ur2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 19:18:25 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Target ID:	0
Start time:	15:17:03
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:17:06
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 --field-trial-handle=2388,i,7891156904035973045,4333935852888309243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:17:08
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://helawok.x-sns.cloud/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://helawok.x-sns.cloud/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Windows Analysis Report
https://helawok.x-sns.cloud/