Edit tour

Windows Analysis Report
https://server.h74w.com/invite/12536668

Overview

General Information

Sample URL:	https://server.h74w.com/invite/12536668
Analysis ID:	1532584
Tags:	openphish
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Phishing site detected (based on logo match)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3604 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,8860286179167095346,6853340784234321705,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://server.h74w.com/invite/12536668" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /api/v1/h5/version?version=5.0.3 HTTP/1.1Host: server.e9sg.comConnection: keep-aliveContent-Length: 2sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Security-Policy: upgrade-insecure-requestsDevice-Type: windowsLanguage: enAuthorization: Bearer XUser-Language: enSdk-Version: 0.0.0Request-Time: 1728835130325Device-Id: 0290d5b2-0a42-4e89-882f-f80b3eb11bffX-Sign: 17609047d0a353b55ffd8cfd95f016d2Network-Type: unknownsec-ch-ua-platform: "Windows"Anonymous-Uid: 1728835130325HsPXFAEeW5D21Ftrqgmlb5whaIYvMxPdWgt-Version: 0.0.0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;charset=UTF-8Device-Model: PCSdk-Type: h5version: 5.0.3Accept: */*Origin: https://h5.g7or.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://h5.g7or.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_166.2.dr	String found in binary or memory: http://www.behance.net/astronautdesign
Source: chromecache_166.2.dr	String found in binary or memory: http://www.behance.net/astronautdesignCopyright
Source: chromecache_136.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_139.2.dr, chromecache_154.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_190.2.dr, chromecache_156.2.dr	String found in binary or memory: https://apis.map.qq.com/uri/v1/routeplan?type=drive
Source: chromecache_138.2.dr, chromecache_179.2.dr, chromecache_125.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_121.2.dr, chromecache_155.2.dr, chromecache_113.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr, chromecache_136.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_214.2.dr	String found in binary or memory: https://cdn.shippinghero.vip/resource-files/2023-04-13/nP16KABtPQPg42Ti.png
Source: chromecache_214.2.dr	String found in binary or memory: https://cdn.shippinghero.vip/resource-files/2023-12-25/Ca3LTaMQl7OLCg1K.png
Source: chromecache_214.2.dr	String found in binary or memory: https://cdn.shippinghero.vip/resource-files/2023-12-25/b1LOrCIivZNMislm.png
Source: chromecache_147.2.dr, chromecache_159.2.dr, chromecache_137.2.dr, chromecache_135.2.dr, chromecache_111.2.dr, chromecache_209.2.dr, chromecache_114.2.dr, chromecache_107.2.dr, chromecache_183.2.dr, chromecache_186.2.dr	String found in binary or memory: https://ext.dcloud.net.cn
Source: chromecache_190.2.dr, chromecache_156.2.dr	String found in binary or memory: https://github.com/facebook/regenerator/blob/main/LICENSE
Source: chromecache_190.2.dr, chromecache_156.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_190.2.dr, chromecache_156.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.1/LICENSE
Source: chromecache_136.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_138.2.dr, chromecache_179.2.dr, chromecache_125.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_121.2.dr, chromecache_155.2.dr, chromecache_113.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr, chromecache_136.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_183.2.dr, chromecache_186.2.dr	String found in binary or memory: https://server.e9sg.com
Source: chromecache_138.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_121.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr, chromecache_136.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_154.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_214.2.dr	String found in binary or memory: https://t.me/Jenny1727
Source: chromecache_214.2.dr	String found in binary or memory: https://t.me/gl230222
Source: chromecache_139.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_138.2.dr, chromecache_179.2.dr, chromecache_125.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_121.2.dr, chromecache_155.2.dr, chromecache_113.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr, chromecache_136.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_190.2.dr, chromecache_156.2.dr	String found in binary or memory: https://uri.amap.com/navigation?
Source: chromecache_155.2.dr, chromecache_113.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_139.2.dr, chromecache_154.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_139.2.dr, chromecache_154.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_139.2.dr, chromecache_154.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_136.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_139.2.dr, chromecache_154.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_190.2.dr, chromecache_156.2.dr	String found in binary or memory: https://www.google.com/maps/dir/?api=1
Source: chromecache_138.2.dr, chromecache_179.2.dr, chromecache_125.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_121.2.dr, chromecache_155.2.dr, chromecache_113.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_136.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_139.2.dr, chromecache_154.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_138.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_121.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_138.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.51:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50048 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.51:443 -> 192.168.2.6:50178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50231 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@17/166@18/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,8860286179167095346,6853340784234321705,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://server.h74w.com/invite/12536668"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,8860286179167095346,6853340784234321705,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_161.2.dr, chromecache_145.2.dr

Binary or memory string: QQEMU

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://server.h74w.com/invite/12536668	14%	Virustotal		Browse
https://server.h74w.com/invite/12536668	100%	SlashNext	Fraudulent Website type: Phishing & Social usering

Source	Detection	Scanner	Link
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
server.e9sg.com	1%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
server.h74w.com	11%	Virustotal	Browse
h5.g7or.com	4%	Virustotal	Browse
cdn.shippinghero.vip	11%	Virustotal	Browse
a.nel.cloudflare.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://tagassistant.google.com/	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://github.com/zloirock/core-js	0%	Virustotal		Browse
https://www.google.com	0%	Virustotal		Browse
https://www.youtube.com/iframe_api	0%	Virustotal		Browse
https://ext.dcloud.net.cn	0%	Virustotal		Browse
https://h5.g7or.com/index.html	9%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	0%, Virustotal, Browse	unknown
server.e9sg.com	8.219.197.25	true	false	1%, Virustotal, Browse	unknown
server.h74w.com	104.21.19.103	true	false	11%, Virustotal, Browse	unknown
h5.g7or.com	104.21.44.152	true	false	4%, Virustotal, Browse	unknown
www.google.com	172.217.18.4	true	false	0%, Virustotal, Browse	unknown
cdn.shippinghero.vip	104.21.52.99	true	false	11%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://h5.g7or.com/static/img/register_header1.833f0960.jpg	false		unknown
https://h5.g7or.com/static/img/head_one.f7e798be.png	false		unknown
https://h5.g7or.com/static/img/bottom2.84992533.png	false		unknown
https://h5.g7or.com/static/img/button-2.1f146b37.png	false		unknown
https://h5.g7or.com/static/img/background3.8cb66a81.png	false		unknown
https://server.e9sg.com/api/v1/static/invitePageRewardLogs?version=5.0.3	false		unknown
https://cdn.shippinghero.vip/resource-files/2023-12-25/b1LOrCIivZNMislm.png	false		unknown
https://a.nel.cloudflare.com/report/v4?s=sNMwhAG3sTGYT63oEZBtO1jTllxAQvCD2DWBBIX%2B%2FahW%2FpZzlNl9AY0Zr1jn3dm3qopWaqKQVMLTFpqpemXYz0h3WxCwMIIdNC9aVGdtLeSl5zvyqABt6F1QZSlwix%2BjEu8YCqvLxw%3D%3D	false		unknown
https://h5.g7or.com/static/img/bg-in.9e70ec73.png	false		unknown
https://server.h74w.com/invite/12536668	true		unknown
https://h5.g7or.com/static/img/logo.95e0c48a.png	false		unknown
https://h5.g7or.com/static/fonts/Axis_extrabold.ee4dbb45.otf	false		unknown
https://h5.g7or.com/static/img/bg2_new.2df68bf4.png	false		unknown
https://a.nel.cloudflare.com/report/v4?s=97x8LdIZsJv%2BSIQaSBOHedT%2FGLK8uM6qc9yP75VBeNQY1HBSg9rCZJrGXEUu3qyMTqoC764zqE8Np1rng%2FjgE5yeB6DB%2FRyay98FuhxmdfMmQND90UUTGhxMfqDxsOI0iLzYrJ3ntg%3D%3D	false		unknown
https://h5.g7or.com/static/img/register_header3.136e3527.jpg	false		unknown
https://h5.g7or.com/static/img/value-one-1.d4b0c142.png	false		unknown
https://server.e9sg.com/api/v1/static/invite_page_rank?version=5.0.3	false		unknown
https://h5.g7or.com/static/img/logo_text.16117719.png	false		unknown
https://h5.g7or.com/static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new.16acf52e.js	false		unknown
https://h5.g7or.com/static/img/icon-liwu-in.8826eb23.png	false		unknown
https://h5.g7or.com/static/fonts/Archive_regular.a51a0e27.otf	false		unknown
https://h5.g7or.com/static/img/qipao.ed43cd4f.png	false		unknown
https://h5.g7or.com/static/images/team/activity_icon.png	false		unknown
https://server.e9sg.com/api/v1/member/phone_code?version=5.0.3	false		unknown
https://h5.g7or.com/static/img/logo.9c46be7e.png	false		unknown
https://h5.g7or.com/static/images/common/icon_invite.png	false		unknown
https://h5.g7or.com/static/js/chunk-vendors.c519f2ef.js	false		unknown
https://h5.g7or.com/index.html	false	9%, Virustotal, Browse	unknown
https://cdn.shippinghero.vip/resource-files/2023-12-25/Ca3LTaMQl7OLCg1K.png	false		unknown
https://h5.g7or.com/static/img/register_header2.4cca5d29.jpg	false		unknown
https://h5.g7or.com/static/img/logo-bt.295f5a78.png	false		unknown
https://h5.g7or.com/static/img/good_text_two.b3c83d2a.png	false		unknown
https://h5.g7or.com/static/img/Earning.5193259d.png	false		unknown
https://h5.g7or.com/static/img/only.b30711a6.png	false		unknown
https://h5.g7or.com/static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab.ed0a5c28.js	false		unknown
https://h5.g7or.com/static/img/no_investment.c05fbbd7.png	false		unknown
https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	true		unknown
https://server.e9sg.com/api/v1/customer-service/lists?version=5.0.3	false		unknown
https://h5.g7or.com/static/img/buding-in.537670f0.png	false		unknown
https://h5.g7or.com/static/img/no_time.a22c9afd.png	false		unknown
https://h5.g7or.com/static/img/millions_users.81f2b3d3.png	false		unknown
https://server.e9sg.com/api/v1/test-page-view-count-log/invitePage?version=5.0.3	false		unknown
https://h5.g7or.com/static/images/active/icon-steps1.png	false		unknown
https://cdn.shippinghero.vip/resource-files/2023-04-13/nP16KABtPQPg42Ti.png	false		unknown
https://h5.g7or.com/static/img/background1.5d83944f.png	false		unknown
https://h5.g7or.com/static/images/common/icon_state_selected.png	false		unknown
https://h5.g7or.com/favicon.ico	false		unknown
https://h5.g7or.com/static/index.97465e7b.css	false		unknown
https://server.e9sg.com/api/v1/h5/version?version=5.0.3	false		unknown
https://h5.g7or.com/static/img/botton-1.93f3ca53.png	false		unknown
https://h5.g7or.com/static/images/common/icon_me.png	false		unknown
https://h5.g7or.com/static/js/pages-active-active.d55d2611.js	false		unknown
https://h5.g7or.com/static/js/index.21ba2144.js	false		unknown
https://h5.g7or.com/static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-in~2ace6e53.e328c61f.js	false		unknown
https://cdn.shippinghero.vip/resource-files/2023-02-20/ZsIuf5QJP53BJNF2.mp4	false		unknown
https://h5.g7or.com/static/images/common/icon_tutorial.png	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_138.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_121.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
https://t.me/Jenny1727	chromecache_214.2.dr	false		unknown
https://github.com/zloirock/core-js	chromecache_190.2.dr, chromecache_156.2.dr	false	0%, Virustotal, Browse	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_139.2.dr, chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_136.2.dr	false	0%, Virustotal, Browse	unknown
https://www.youtube.com/iframe_api	chromecache_138.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr	false	0%, Virustotal, Browse	unknown
https://ext.dcloud.net.cn	chromecache_147.2.dr, chromecache_159.2.dr, chromecache_137.2.dr, chromecache_135.2.dr, chromecache_111.2.dr, chromecache_209.2.dr, chromecache_114.2.dr, chromecache_107.2.dr, chromecache_183.2.dr, chromecache_186.2.dr	false	0%, Virustotal, Browse	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js/blob/v3.26.1/LICENSE	chromecache_190.2.dr, chromecache_156.2.dr	false		unknown
https://apis.map.qq.com/uri/v1/routeplan?type=drive	chromecache_190.2.dr, chromecache_156.2.dr	false		unknown
https://tagassistant.google.com/	chromecache_139.2.dr, chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://t.me/gl230222	chromecache_214.2.dr	false		unknown
https://uri.amap.com/navigation?	chromecache_190.2.dr, chromecache_156.2.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_138.2.dr, chromecache_179.2.dr, chromecache_125.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_121.2.dr, chromecache_155.2.dr, chromecache_113.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/ads/ga-audiences	chromecache_139.2.dr, chromecache_154.2.dr	false		unknown
https://www.google.%/ads/ga-audiences	chromecache_139.2.dr, chromecache_154.2.dr	false		unknown
https://td.doubleclick.net	chromecache_138.2.dr, chromecache_179.2.dr, chromecache_125.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_121.2.dr, chromecache_155.2.dr, chromecache_113.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr, chromecache_136.2.dr	false		unknown
https://www.merchant-center-analytics.goog	chromecache_138.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_121.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
http://www.behance.net/astronautdesignCopyright	chromecache_166.2.dr	false		unknown
http://www.behance.net/astronautdesign	chromecache_166.2.dr	false		unknown
https://www.google.com/maps/dir/?api=1	chromecache_190.2.dr, chromecache_156.2.dr	false		unknown
https://adservice.google.com/pagead/regclk?	chromecache_136.2.dr	false		unknown
https://github.com/facebook/regenerator/blob/main/LICENSE	chromecache_190.2.dr, chromecache_156.2.dr	false		unknown
https://server.e9sg.com	chromecache_183.2.dr, chromecache_186.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
8.219.197.25	server.e9sg.com	Singapore	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
104.21.19.103	server.h74w.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.44.152	h5.g7or.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.52.99	cdn.shippinghero.vip	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532584
Start date and time:	2024-10-13 17:57:48 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://server.h74w.com/invite/12536668
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@17/166@18/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 64.233.167.84, 172.217.16.206, 34.104.35.123, 142.250.186.136, 172.217.18.10, 142.250.184.234, 142.250.186.106, 142.250.186.42, 142.250.185.170, 142.250.185.138, 142.250.186.138, 142.250.185.74, 216.58.206.42, 142.250.181.234, 172.217.18.106, 142.250.185.234, 142.250.186.74, 142.250.185.202, 142.250.74.202, 142.250.185.106, 142.250.185.174, 142.250.185.200, 4.175.87.197, 192.229.221.95, 142.250.185.142, 20.242.39.171, 93.184.221.240, 40.69.42.241, 172.217.18.3
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "text": "Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubies Commitment: No investment required GO SHARE I am earning cash automatically on the GoShare platform via WhatsApp. Log in now to receive instant cash, no cost required! SIMPLE 2 STEPS Immediately withdraw 100.00 to bank account Step 1 Step 2 Step 1: Register an Account", "contains_trigger_text": true, "trigger_text": "Log in now to receive instant cash", "prominent_button_name": "GO SHARE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": true}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: jbxai	{ "brands":["Meta", "WhatsApp", "GoShare"], "text":"Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles", "contains_trigger_text":true, "trigger_text":"Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles", "prominent_button_name":"GO SHARE", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "brands": ["Meta", "GoShare", "WhatsApp"]}
	{ "brands": ["Meta", "GoShare", "WhatsApp"]}
URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "text": "Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles Commitment: No investment required I am earning cash automatically on the GoShare platform via WhatsApp. Log in now to receive instant cash, no cost required! SIMPLE 2 STEPS Immediately withdraw 100.00 to bank account Step 1: Register an Account", "contains_trigger_text": true, "trigger_text": "Log in now to receive instant cash", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": true}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: jbxai	{ "brands":["Meta", "WhatsApp", "GoShare"], "text":"Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles", "contains_trigger_text":true, "trigger_text":"Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles", "prominent_button_name":"GO SHARE", "text_input_field_labels":["Step 1", "Step 2"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "brands": ["Meta", "GoShare", "WhatsApp"]}
	{ "brands": ["Meta", "GoShare", "WhatsApp"]}
URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "text": "Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles Commitment: No investment required I am earning cash automatically on the GoShare platform via WhatsApp. Log in now to receive instant cash, no cost required! SIMPLE 2 STEPS Immediately withdraw 100.00 to bank account Step 1: Register an Account", "contains_trigger_text": true, "trigger_text": "Log in now to receive instant cash", "prominent_button_name": "GO SHARE", "text_input_field_labels": ["unknown"], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": true}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: jbxai	{ "brands":["Meta", "WhatsApp", "GoShare"], "text":"Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles", "contains_trigger_text":true, "trigger_text":"Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles", "prominent_button_name":"GO SHARE", "text_input_field_labels":["Step 1", "Step 2"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "brands": ["Meta", "GoShare", "WhatsApp"]}
	{ "brands": ["Meta", "GoShare", "WhatsApp"]}
URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: jbxai	{ "brands":["Meta", "WhatsApp", "GoShare"], "text":"Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"GO SHARE", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "text": "Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles Commitment: No investment required I am earning cash automatically on the GoShare platform via WhatsApp. Log in now to receive instant cash, no cost Contact us Registration login problem Withdrawal problem invite friend question Income Calculation Questions Other problems instagram [exclusive] facebook [exclusive]", "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "GO SHARE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": true}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "brands": ["Meta", "GoShare", "Instagram", "Facebook", "WhatsApp"]}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "text": "Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles Commitment: No investment required I am earning cash automatically on the GoShare platform via WhatsApp. Log in now to receive instant cash, no cost required! SIMPLE 2 STEPS Immediately withdraw 100.00 to bank account Step 1: Register an Account", "contains_trigger_text": true, "trigger_text": "Log in now to receive instant cash", "prominent_button_name": "unknown", "text_input_field_labels": ["unknown"], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": true}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: jbxai	{ "brands":["Meta", "WhatsApp", "GoShare"], "text":"Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles", "contains_trigger_text":true, "trigger_text":"I am earning cash automatically on the GoShare platform via WhatsApp. Log in now to receive instant cash, no cost required!", "prominent_button_name":"GO SHARE", "text_input_field_labels":["Step 1", "Step 2"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "brands": ["Meta", "GoShare", "WhatsApp"]}
	{ "brands": ["Meta", "GoShare", "WhatsApp"]}
URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: jbxai	{ "brands":["Meta", "WhatsApp", "GoShare"], "text":"Meta's social platform GoShare invites you to claim a monthly salary of 50, 000 rubles", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"GO SHARE", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "text": "Contact us Registration login problem Withdrawal problem invite friend question Income Calculation Questions Other problems instagram [exclusive] facebook [exclusive] I am earning cash automatically on the GoShare platform via WhatsApp. Log in now to receive instant cash, no cost", "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "GO SHARE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": true}

URL: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Model: gemini-1.5-flash	{ "brands": ["Meta", "GoShare", "Instagram", "Facebook", "WhatsApp"]}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	843
Entropy (8bit):	5.301144382881283
Encrypted:	false
SSDEEP:	12:hEVjRk9aKzpCqKQ02kD5XACLSLNYjo2zp3WARmpMKpPmG7LxG8PUBzUdA2cI:hEVa9ZHs2g5XBuNY82zjmpX7U8qQgI
MD5:	E69A93B4E82202401BD494190740D904
SHA1:	E1038D3ACB01766BB2EF30C38271642B50991CA5
SHA-256:	40096A8F5B025155A7345F0F0FB752D2294C230D4C5F22029B055B46B001170A
SHA-512:	EC5B48FCAD74F70FD55A4BFE8FDF8931995785C9A2C4EFDD7A9E2D977BB549C37FF94A64ECF72E67EB1046923B6FC9F6916911BB0F8DC51BD72202788740C2C7
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/index.html
Preview:	<!DOCTYPE html><html lang=en><head><meta charset=utf-8><meta http-equiv=X-UA-Compatible content="IE=edge"><title>Whats APP</title><script>var coverSupport = 'CSS' in window && typeof CSS.supports === 'function' && (......CSS.supports('top: env(a)') \|\| CSS.supports('top: constant(a)')).....document.write(......'<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0' +......(coverSupport ? ', viewport-fit=cover' : '') + '" />')</script><link rel=stylesheet href=/static/index.97465e7b.css><style>body::after {......content: none;.....}</style></head><body><noscript><strong>Please enable JavaScript to continue.</strong></noscript><div id=app></div><script src=/static/js/chunk-vendors.c519f2ef.js></script><script src=/static/js/index.21ba2144.js></script></body></html>

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4201)
Category:	dropped
Size (bytes):	320528
Entropy (8bit):	5.562601807454363
Encrypted:	false
SSDEEP:	6144:Vxp8OF1uFwO54gBB1xcQLwDXERaCmQdZ6Io:VxTFgF5ttfa
MD5:	903B94F9DB14BF424B16925299DD1B67
SHA1:	FC7B0420BCDBF4C8DD903FE0D13046F02C3510B1
SHA-256:	1E4BF98043F90E16A482BA7A25E9FA83055F6940B3A0163FFA2AB4BCBB88D2E4
SHA-512:	D5C7A6DD6214F75E38E2BBA792C65A793E62A15F971F442BCBB03DC2ECE34ECE8ED7A344AEAA66990740AE735C866FA03B93828D9D63489AC71D5AEB9CC32D5B
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56476), with no line terminators
Category:	dropped
Size (bytes):	58946
Entropy (8bit):	6.388046025096562
Encrypted:	false
SSDEEP:	768:ehbSQkZX5jxalg0GmxA4SQfeddhl3h74Oxbi9eKVEQ85dxeXZ6qsodP23S5E9tyR:ehb2l2PledL1htW9LoxepDp2yE94nR
MD5:	12CD44749EE4953EF6640A904E3A71D5
SHA1:	D0FDB88918B07B38D0DC815B63175C2301507155
SHA-256:	56D89CB634B127B42D701043E85208E6BEC49ECD2AF35593C5B7A7117657162B
SHA-512:	612FB0FA72FAD2F232EEBF2FED4A9F6588B80B304D6914437A6CC488F08FC3F9094AB6DA18DDFC11C02ED9DA171EC75159C51447A9056DC1CDB5A899CD2BF404
Malicious:	false
Reputation:	low
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new"],{"0230":function(t,e){t.exports="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEIAAABCCAYAAADjVADoAAAAAXNSR0IArs4c6QAACvhJREFUeF7tWm2MFWcVfs7sLqR82i5Y3WYTErclpbRAgUWDISBQ0WjSNhXTQrcsyEdZ2lJaQEBNNLVN/VEESlIqBUooWsUiRkHZXak/GsruAhpj20DRfiAfi1Y+dhdh751j3nk/5n1n5i73LrOrP+7+4TJ37sz7Puc5z3nOmSEU/wIEqIiDRKAIhGJCEYgiEK4oFBlRZESREYmFspgavZ0a0/dzBXnZKfBKqgl8B4BhYAxlQr9gLYwOAOcY+ABMf/WRbfL8kgP199Cp3vA6PcqIqQ1cXuL5NQA9RISxYBBzfFvBIXXc/poBJsZhgHcyedsbp9G/egqUHgFCRN8r8VcBNBdAv8jm5KbFncVOw49yj+qY3rAFUocP3tIJ77m3eoAlqQIxdhOXld/qLwXoe2AMsKOnN+RsPIEFDhDR7wOKoI19/kHbR96PDy+kzrQYkhoQXz7AVb7PPydgjGG6XDhIRzmJ/hZdzMcEAIJrKhRVeh31iGa+OYPeTwOMVICYVp+5nzxvKxiDCqC6zoS4PthAREAxGiPBvZQlv+bgV0t/db1gXDcQUxuydR5oPQNeLMcjWtCVBthsiOqpLbAJn7M+aPHBr9HL1wPGdQExtYHrCLyBGWTEL7KLaJWwtcIs3BLI2PkJ7LBTT34WyYfHDn6dNnYXjG4DMbWB7wXzLjBKEquCqohBcUgSPWvF14i4k0JJzFHg+sz0QNO9tLs7YHQ

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	633
Entropy (8bit):	6.869658778638955
Encrypted:	false
SSDEEP:	12:6v/721iyfceR4doRrrrTZECFoGszwpW1iN5ENxBFZ/8aniAca0uNvwKuX+pK:P1DdRrPrdNFoVLc8LBX/8aniAcNuNpuH
MD5:	A989B6777314B48946C9EA85957C102A
SHA1:	3D106C4BE7BC99D95A32E44E9382F1C215C0877D
SHA-256:	D18DD47244780E50B824F9BF1C8D0D6B098EDEE73DE6A8A9BF93507EB21719A7
SHA-512:	7639CC3EFD14EC742966B4A2D4CFB3935B3049F5C880DC17CB9015DF2562998C2D1BDE34E1B01B9FA56F63E62DF566A1FFEE49667628B070244DF2CF563267FD
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/images/common/icon_me.png
Preview:	.PNG........IHDR..............7uQ....PLTE................................................................................................................................................................................................................................j....JtRNS......r.......D..9{.....Q%......K_.x....nM.(.@p....A.8.....=Y.c.=.O.5<g.II..m....IDATx.e...!.E.....uw...Z2K.d..r..]]@x..Gw..a.....Nd1l...?.c..P2..8.&........`F.8{.I........j.....b+.>...n..`z.....c.u...NL... d.B....Y......9.....f.T\| .:.........%............G.>.OOh]...........[.,..AI.t.....!...J.rm...Z2_.i.h.L.>.0X..*0...(.........IEND.B`.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 94 x 94, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8504
Entropy (8bit):	7.957866491573075
Encrypted:	false
SSDEEP:	192:zFSQEhfsMhLlGt1YXz5i/msilaaCEU34F6w4cgQFFIsmFy+EPL8:QlfsMZgGzA/2U34FPGQFFwFyFj8
MD5:	F7E798BEBDE903CC9FC214C94548DDB3
SHA1:	9F0F8745E3E2A9A174FBAF71C64792583F5C2202
SHA-256:	C2A3BF30AF7D7833D292FD23EF580143CFEEBE363B06E521DF440CBA56EEFDE6
SHA-512:	E213D5EA1AB821DC2D54FC809E2115AF687EB40EC35694296466B0AF2771E510DDADA980488290A68D76EF08524ADCCE361D1D0D557937BAA2B3F618476FC561
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...^...^.......n....sRGB....... .IDATx^.}..]U..w.o..WC.2Uf.I.b.D..@.$..-(.N-"...O....v..f....%.d..... ..!@ )..k.7.;.^{.s_...R......)...w.......<... ../........~7...8]v....~.............t......qB`.....w.?N...e... h.0..A...0........D.6..,.....6.x.....!...'.Gt.].\|..I.'.X..8.{.......<......!.#Bd.}h.............@m.....<.............<.......4..4@.....<...~..a!......e... .../......]..+_.v5..../....m...p......q...A.$.\.....I...p..-..P..G"@$g.<..\.`...T.K..\|U.>.......L...n..=...h.r....{B....v.kV.. .....XP...ox...^....T7...X..+B...]~T... .....P...2%... ..}..?.....q.Q.....O.7X.fGu.DA.x.3D.B..p.U}..!.......\.0.aqx.........-....M.z.A8e.b4.LD.....5........3h..q...8`.).n.p...*..s...J\|.....Z...!k^..`...c]..8..I..0..}..'..(ZG4.c..i8q.>{..c4.....X..5.....#.>........G+...ZFx..7..w.y.J..w.....`...Q.4..\|.}=.....x.......c.Q'....~).I$...;!...cz... .....@+G,...Dg..LT.8....[X...,.p}..@..0"....z.2.......Jx..GQ.0y.W..[.....+[(..B....w\|.a........Z.....(.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 502 x 340, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	78738
Entropy (8bit):	7.990087575665658
Encrypted:	true
SSDEEP:	1536:/Al4n1uPwgk1pgIGvDqoeaWsKUdSmMTV1zPixkXN9F0:/Al4ngP7DVe6KUjMTV1zPaqNP0
MD5:	D4B0C1420FFEE14F8ADD3A8045CA1554
SHA1:	398909092A3F06C4E825233D6813A07B099A2E9A
SHA-256:	39EE913323D4372DF83595B0E661BDAF938F74EC0F062788444449BA309EA6CA
SHA-512:	8A5C2DDD01F0EBEDE6282C85FDCB9189227038C1C1E09BC01FD88C3206B14CB033278510787FCC2440F01EDB71D99C15CAB23BFC18CC8019B24077D0F425D71E
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/value-one-1.d4b0c142.png
Preview:	.PNG........IHDR.......T......?.Y....sRGB....... .IDATx^.].\|[.....4,..eg..[.Y.....B....>.l)e.2.....^....0....`.,.e;1.v.x......O.c;.S.,....%.{..s.=..{.A/..`f..JD.C...,.%.<....\1.J...HK...i.2(.1D...Z.........X/:.:.:.:.:.:.Q....D..0t.t.t.t.t....b..........@.!.+.(..>...........!...n$.9.A...t.D.LtN.F@..]c...C}m.....%.B.....~.:..0..,u.Y....5....k....P_S..b...R,%.E......r.._J_.+u.-.z...+G"..x.t........S...(.V.X.y.rr.r.].;.i.,..2.snHw-d..l...BD.....9x....."U.B.7..'...0.E..)..v.e(3.`.....y...... a...]X....N8.f......Cn..V.....\p....CF.....~..........&..2....#m..>}..^......qB..9.Q.VX}..mx.1...!..[..Q.Ks..VC.7.;L........m4...e..ga....FaT......b5$....6a.d..l..ZC.gq..D.E.f.C^.~J2..v.........a.2...mL.7S\.2{.d....u`z.z..`G..6.r.^..3.:...X.K ...I.G.Tt&"...{W..1..\|.n......}.....b-....#<.fh.".+.r..\|..l..G^C[.......",AI<.M....%./hv.m%W..F.w..rw......](..1.%XQ..k.vR.......h4.k..*.x.....V.aN. ..V....V..1.3F..D.Z...]..D.-.k....C..\|...d.....<....E).p.....r...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63472), with no line terminators
Category:	dropped
Size (bytes):	73320
Entropy (8bit):	6.327706771531478
Encrypted:	false
SSDEEP:	1536:kmFEHewINCnAfsYId0FHoMqu7NdEAaM2Ol51hwJX2RcJZHYpN7xCIx/+eJF4cL3v:TsFINCnusp0NVr7fnaMj51hwJX2RcJZi
MD5:	97D9827B5A2010ABF9F4F2CF641A546D
SHA1:	745A498A40192AB8545CF1674E36EBCEB70888F8
SHA-256:	70DEA432FDD8F0C73B755E250A2FA024B0D3FF006FE7F52D235299BA8A477287
SHA-512:	E05F406153CB71373BEA1D9F4D2A519620C1CA62751E7F651BB472DF37EA77984ED9B19BBA6DE705D551129A63DE3B5DCB66D997770EE79EBB21FFEF8CEE976F
Malicious:	false
Reputation:	low
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab"],{"0633":function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return a})),n.d(t,"a",(function(){return o}));var o={uRowNotice:n("8fe3").default,uColumnNotice:n("f148").default},i=function(){var e=this,t=e.$createElement,n=e._self._c\|\|t;return e.isShow?n("v-uni-view",{staticClass:"u-notice-bar-wrap",style:{borderRadius:e.borderRadius+"rpx"}},["horizontal"==e.mode&&e.isCircular?[n("u-row-notice",{attrs:{type:e.type,color:e.color,bgColor:e.bgColor,list:e.list,volumeIcon:e.volumeIcon,moreIcon:e.moreIcon,volumeSize:e.volumeSize,closeIcon:e.closeIcon,mode:e.mode,fontSize:e.fontSize,speed:e.speed,playState:e.playState,padding:e.padding},on:{getMore:function(t){arguments[0]=t=e.$handleEvent(t),e.getMore.apply(void 0,arguments)},close:function(t){arguments[0]=t=e.$handleEvent(t),e.close.apply(vo

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 928, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	55021
Entropy (8bit):	7.820695013015921
Encrypted:	false
SSDEEP:	1536:JgGnOn5ZbpojM3U2syEEDkzCwok4JaY5/QLiAAm3LWQECn:Jg4Wfw8U29EhgYGHAHBH
MD5:	5D83944FD444D1F802CB50F5761FF538
SHA1:	7FF1FBBF13F731C8EAE1CD2A6D3A0C7F04925DFC
SHA-256:	03136ED9063EA0A4035B48568AFBC2C39D0037ED08AC364EC1EEB600DC989B40
SHA-512:	2660EFC095F341ED6F11B924FD85C6866B229EBA85CB67112E4CE2F0E3218E66CA7E49B117D45E1001ABAC2DDD1C71E4DC67C6604EA1898C1AA84CAEC19F0506
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/background1.5d83944f.png
Preview:	.PNG........IHDR...............A.....sRGB....... .IDATx^._.]I...>......53mH....x.....@... ...E2B.%...PZj)(...!.@.t#.B..(.4.j.C..K.%<..$...rGiG..W..L..9..{..V........>......L.{.U.....]Uk5................@7.U.....H..H..H..H..H``.M# .. .. .. .. ...X@/..KI..H..H..H..H..4m..H..H..H..H....`..../%.. .. .. .. ..... .. .. .. ..X@....X...H..H..H..H..X@..H..H..H..H..H`.....`.R. .. .. .. ..`.M. .. .. .. .. ...X@/..KI..H..H..H..H..4m..H..H..H..H....`..../%.. .. .. .. ..... .. .. .. ..X@....X...H..H..H..H..X@..H..H..H..H..H`......K.w;..vPQ...{...K../S.......?..P7}.`q:/.V..m.G.m]d.}.._u.2^E..G~.w\4K..].....B.z...\|..^V.X..Q(.......#.]+......%....V...Eq..K/.^...x{XY2#;.]O...........,z..W..u...8.\..Gw......b..^...tK..>Zq..C..K.W.cl.6.1.lqW~/.f{.WK.g..,...../O.%9.......z....\|...u^..HM.V....=,.[u.y..}.v.]Y..?.>..9....I..H..H..H.....p.0.9(..=)._~aj.6.d..}r?...0..8..?.?.}..[Z......Z}..o...."..d..-......x_......Ey=;....g...k..[L..SK......./..f...^.Xc...jW..d....lJ.k....w..-~..

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4201)
Category:	dropped
Size (bytes):	223778
Entropy (8bit):	5.545955980685244
Encrypted:	false
SSDEEP:	3072:ME+H1CEOFp7760T6oI1Lirsiy330V9KjmxcQLr0NXW:h8OF1kO5+EyjmxcQLrwW
MD5:	F7457DBD4E1DE448842E5983F35CBF60
SHA1:	C8CE36BE7F4875E91E511CDDC692379836121F3A
SHA-256:	4D161FFD43F00C28E8D638F73921523492A97F144DB7696B6A66D12A372049D0
SHA-512:	DF03EE02D4339A313C573ABED2D991D2BDDFC743DFFDEC35CBE1EC6C5E69E51B7A4460DFF9EB8254AA625169226F51849A0DB830D2210D9D67FE958426795A68
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-255502036-2","tag_id":9},{"function":"__rep","vtp_containerId":"UA-255502036-2","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-QN2PH612DM"]],"vtp_inheritParentConfig":true,"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-255502036-2","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56476), with no line terminators
Category:	downloaded
Size (bytes):	58946
Entropy (8bit):	6.388046025096562
Encrypted:	false
SSDEEP:	768:ehbSQkZX5jxalg0GmxA4SQfeddhl3h74Oxbi9eKVEQ85dxeXZ6qsodP23S5E9tyR:ehb2l2PledL1htW9LoxepDp2yE94nR
MD5:	12CD44749EE4953EF6640A904E3A71D5
SHA1:	D0FDB88918B07B38D0DC815B63175C2301507155
SHA-256:	56D89CB634B127B42D701043E85208E6BEC49ECD2AF35593C5B7A7117657162B
SHA-512:	612FB0FA72FAD2F232EEBF2FED4A9F6588B80B304D6914437A6CC488F08FC3F9094AB6DA18DDFC11C02ED9DA171EC75159C51447A9056DC1CDB5A899CD2BF404
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new.16acf52e.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new"],{"0230":function(t,e){t.exports="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEIAAABCCAYAAADjVADoAAAAAXNSR0IArs4c6QAACvhJREFUeF7tWm2MFWcVfs7sLqR82i5Y3WYTErclpbRAgUWDISBQ0WjSNhXTQrcsyEdZ2lJaQEBNNLVN/VEESlIqBUooWsUiRkHZXak/GsruAhpj20DRfiAfi1Y+dhdh751j3nk/5n1n5i73LrOrP+7+4TJ37sz7Puc5z3nOmSEU/wIEqIiDRKAIhGJCEYgiEK4oFBlRZESREYmFspgavZ0a0/dzBXnZKfBKqgl8B4BhYAxlQr9gLYwOAOcY+ABMf/WRbfL8kgP199Cp3vA6PcqIqQ1cXuL5NQA9RISxYBBzfFvBIXXc/poBJsZhgHcyedsbp9G/egqUHgFCRN8r8VcBNBdAv8jm5KbFncVOw49yj+qY3rAFUocP3tIJ77m3eoAlqQIxdhOXld/qLwXoe2AMsKOnN+RsPIEFDhDR7wOKoI19/kHbR96PDy+kzrQYkhoQXz7AVb7PPydgjGG6XDhIRzmJ/hZdzMcEAIJrKhRVeh31iGa+OYPeTwOMVICYVp+5nzxvKxiDCqC6zoS4PthAREAxGiPBvZQlv+bgV0t/db1gXDcQUxuydR5oPQNeLMcjWtCVBthsiOqpLbAJn7M+aPHBr9HL1wPGdQExtYHrCLyBGWTEL7KLaJWwtcIs3BLI2PkJ7LBTT34WyYfHDn6dNnYXjG4DMbWB7wXzLjBKEquCqohBcUgSPWvF14i4k0JJzFHg+sz0QNO9tLs7YHQ

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 670 x 198, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	55074
Entropy (8bit):	7.9819123673260215
Encrypted:	false
SSDEEP:	1536:+x5YK3TjEYhmrpSsdvdWlmlUsvpEUKRtM5u4LfyT:+x5YaTZCMsdvdW+XHKR4LyT
MD5:	ED43CD4FAEC430DEA22831297A7035CE
SHA1:	3F4A645B66E9861C14AB9A082A495465E1200CD3
SHA-256:	01822E0FE4FD24426CEFE83CF47700925010AD7A150EFFC7ABFDF91F483FC9BE
SHA-512:	19B3B481CF93944BBE3EFE0D641C3EB233D4A2A2B7ED627AF491F72CC8218AF559DFD2A0360EA4D3D462CEFBA384ACF12676E1A9E5E3A619BE8D75CFA0158149
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/qipao.ed43cd4f.png
Preview:	.PNG........IHDR.............{4. ....sRGB....... .IDATx^.[.nKv.Ts]..g...%............. ..!<.!...P..$<..... .. ...B...%A(\.....@.!.n.....u..?..Q..QcT....9g........Qc\|.:.6.p...\|..X...!...B.........!.;....!..K..............,.m.&.....u].3...B..X..Sj.5...eY~..1t.t p p p p p p1....bP...A`]._.B.C!..*.nz...eY~....................G....~...X..I...!......wOk...5\|..U.......................=.......u].{..'B.?.B.sZ./<...S..!....U..2...eY....@.@.@.@.@.@.#..Qx~...:...q.x.....k..^.k.....:..iC.B......W.e..................G.......H.u]..~_....e..5..?..7..cTp.a~.f....f.'.S....a.............Qx^.....u].(.....~3..........U.Im.8...U.ug..eY~j<...@.@.@.@.@.@...Qx~.....+m...!.?.Bx..:....^b..>q....e...!\|qY...=~............>.....GPi....u..C..._...^...qZ........V5.....,..GE...................<.....YN.....,.{.5.....7.L...'.e..j..nY...................^..G....x....WB..Y...>.Y.tx.f9}....3.!\|...f..e.[>...R..................W....d..O.....i....O.3s.K..(/...v...t.._...~................\..

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 640x640, components 3
Category:	dropped
Size (bytes):	49187
Entropy (8bit):	7.956548595206711
Encrypted:	false
SSDEEP:	1536:L1PVhaxoFqyWA8PR+3vZgR6EU6P1CzD52S:JNoCWiM6t/gS
MD5:	4CCA5D29BF78C4DEB2181D4CAB726856
SHA1:	111280AECCA18F989F11A7EAEB4A66563F76EFDF
SHA-256:	1C777CEA9CD3E8144B9C638D4A59D9E049E138BD4BA2A8033E425CAC9EA78B33
SHA-512:	88528DA0552B9E92A083FFEC032FB9B46534F88FDEF47D4122893654B67BB550A33388DC4EB003A05E8B6B0890FD68D7BA5D81BD97307B6A97B26438E8857D5D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE...............mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................B.........................!1A.."Qa.2q#B.R..3b...$r.4C.%S.5..Ds.................................".......................!1A..Q".2............?......A 0..8...... ebppzW;t.T......DE[-.T.....4.9&../..N*@=.n.#...,.$..NA....ZjD6......\...w.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	6.995808422831353
Encrypted:	false
SSDEEP:	12:6v/7J2/jyySfUaOi835UqJJacieJSNq9sSqAjdnWwIEm3JVtYo9:u2/m8PJJaWJ59s5ARD0Pt39
MD5:	96C29F5BF4139617BE6F27AE20B2D299
SHA1:	09D725CDD4DF1217BFCBC40665F3D5DBC1E853FA
SHA-256:	ED5794E68BF62C106E7F63F7477644912858FBA6AF1148B46E53DF2935CAC7F6
SHA-512:	FB9F5D952B8ACA3296C315FC9D20B5D4E120B80C21EB7E3E2DA35B3487C1DB02BA98025126BA4DA3EE2A8B284446ACCDF230423F372331A48FE09D1E1A62323D
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/images/common/icon_invite.png
Preview:	.PNG........IHDR..............7uQ....PLTE...................................................................................................................................................................................................................................................................W.....VtRNS.............f..;...".a@.)...,4..8...)..Z..y.7....H.6....'.o1.../...%..9.E.+6.0%5V#?.*.....IDATx....@.E'.)-..\...;n..+0C...<.....bD.~B..0......YCbq.ZM...N.-+I^.X.....h.5B.-.... .OR.....7.2.{.{.<..SZ....d...D..emg..O..../.D..S.<.)t7(........c..K. c.....Yo.]....K...J.H.3..S.dJ..@.....g....pP..C.@.;%@..i..{..C.#...}.[....b....!_.Z.....IEND.B`.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 652 x 188, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	33006
Entropy (8bit):	7.9519726567688265
Encrypted:	false
SSDEEP:	768:7BYasNtOH2h4tq6eFSsPnRWOPlyybQJXMREmyfox1okBKU0WvmfK:NPMMrqLPJDPsy8CRlnxCsKUrvYK
MD5:	537670F0CFE6D2EEF641A50FA13D3752
SHA1:	73019775F9DA237A04282EA094B83BDD7CD32B9D
SHA-256:	7F68708FE7ECCD54DF02813553F287B041ACD58E7A7049494653A5A7415BF329
SHA-512:	0F4CFABCD16B6F1B85FCA0A9C7B48660504DB9940D229869347FF6775C8FBC7FB8AEB34EECB8748ACFEB614B0A9EA181BE5BF7696A457C497E9D669D520BB7FA
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/buding-in.537670f0.png
Preview:	.PNG........IHDR................R....sRGB....... .IDATx^...egU..~...s'!....a......$.$..F..(Q.x..2.._...E/.!..I ...P.0%....YB d.k:g..y..>..O.}...].ux......+.W....+....X?yJ..(..A..W.q\.8......tj?.+......+....wT....B..2.....bym.p..-~6\|.......j.4......xN....S..WS]?.+......+............/.c...~..Z.`.gm;=..;..9...Z....p.\.W..p.\.W`E...py..o........._...s.~R.W..G..B\|.W..p.\.W..p.\..W "^.{....?Vz...c\|...2.].8g.'..\.W..p.\.W..p.n?...B.....q.:60v.\|./.P\..-..w.\.W..p.\.W..8..D.E....._.YEk`.g.9]..^....9.o......+......+p.)..E.....?8.fe..1.}..1v/...osP...p.\.W..p.\.W..V D\|"..g...m........g.SNL\|.!<t....+......+....kH...\t...+.}.r.^.....,;.......TW..p.\.W..p..P ..........6l.....^.ty.x...\~.N..p.p.#.;o....y..y........?.?.}.A..3....?A.+.~.@..??....?..<...7........0...G.9....a;....e..a[..x......8..{g.{...LO .....c....C....$.........{..=.....W\|......1. ...b.S............uNQ.m..\|.c...........K?.,t..v$R...=...$..._...].W..p.\.W..8....'.`.$.a.8b.Dfq.#.........

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5456
Entropy (8bit):	7.94496070647304
Encrypted:	false
SSDEEP:	96:ekgLqYAvuv0bPSJJb2PxLf1P/taL/ksaoXKyVG1z0g12GeE5A8vdKRdxc:ekX5mMbajgD1P/ToVkX1H1Ybc
MD5:	C05FBBD7BCDD5E14D07E652823720A29
SHA1:	46BD0BCE8C0689ADB9BFFFCE9911B0A4B98E66AA
SHA-256:	96AE5E6D01C2166E819A9A8D3A0D20902A3123285309480E4B89F9C32ACAF8BF
SHA-512:	E3E00916A065F1DF4429EFA7A066CC7803F6F1EB3BD312FF0C50449935F7F1771D616787D814B4B493A4F80C799FA5D7B798284395B2157738856EBD1850D46E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB.........IDATx^.\...Wy....s..vwv.^K.dlI..IF>dc,.S..0...........B\.(...."qb.....bp.#...S.....[.fw.....?....3...q%;U..;....7....{o.K.....[.5..X. ..XK`...y4]b..X.@`.M...z._.S...#.n.'......@...L%./Os..C4T..s-J...g&&....@..... ..h.>0...2.. x>W0.^..9.(..r.9;z..b..;.N)u...@3..uO.. co......n"r.:g!./.X###.Hwd3.7..-Dg.\..=.g0....._Z..,\|P..F..l6`..`...E............2kO);h..6E...m....g.h0.....i. `13.yc..8.@..}....9E.V0..d.....<...8....(...ww....Q...u.c....1..bb:a..U./c`....." 2.y.8....S.....\..q&~.....f........Z...o.......L...1i.....t."<6.}..u-..~:v.?j.4P..n.H..af^............?#..g=U!.._.....KLo...>......7..n...=.f..P....e......b...K..?v..E8..\........F......<..}...\| ...n...6..e.....c......a.=Z.7X.r.\2....4....qd....<..Ap}..P<.n}.? .B.k.......k.8....<... ..]....c..J.G..b.]i+}w._....V.....oo..p..A..y...BP\...... B.(.IU..-..!.._..$.....,.,.e...p=.e.F....\|d...-S.....a.7w.......y...3..4"z...*...cB..o.YnC..Y.B..

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 375 x 3116, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	235388
Entropy (8bit):	7.987870654807163
Encrypted:	false
SSDEEP:	6144:pSy+E5Ie8O70swiwEO1FgGjV3vOBlgd6X1CBZTRDQd:Qywe8ONMEOIGdou6FQZ5Qd
MD5:	2DF68BF46FE2CFC505D7799C988600CE
SHA1:	05229EE80B9840008049A890075708BE8CA23E4F
SHA-256:	09F71D353F3FB6AF5402F929F93A1A5922C7E6ED123BAD61E02A4DF9CDB9A455
SHA-512:	4CA5E1C5211063C72B85A324B835887B009AE1F375BBFCB3C4DF242633444DC0B740FB6F4BEF14E5B9B2EA9DCF79FF41AB238DD9BB601A88C2F5B8BE3273E701
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...w...,.....Y^......sRGB....... .IDATx^.;.-I..T.{.=.s..+!...B....p..@...x....B...!tAX.L.....a.+!,$.:....3..PfVVEF.3+k.:...N.^..._D\|.....4u....i...i...i...i...i...i..b..w."c....4M.y...'.o....j._.<.~1.E..p...a..i.~....................;.N.....a.w>...i...i....].M.l.Y@...\.....(.G.s..G.>.....{.....kQ....Ev"..z....t:..V.L.\|>...i...i...i.......r.......~{.^...<%=....Q.s...:.Vm..e....3...\.W.{.7...t.......<.;...yz..{:e..2M..5M..p:..Z.I%..../N...N..W...}.u...)Sy....@ ......t..}.v....L..4.n....t:....,......2`......:.......O.Z....@ ...X.><};.....tJ.=..2m..N...o~Hr?...O...M...~\|.8.....r......@...H[7?>.0}x......i..N../X.......x>...._~.n.......@ ..H]...?....y....w............/g......@ ...n........./......._.5.n.....&........@ `@.....o...>.w..?}.............. ..h..._.S4.h=&...?..........Q7.....@ ..".........t:..iN&........../..._D.B....@ .....)..z...<.....M.J...O_..wb;.v......@ .E`..ON..{J..{9..?......+(....@ ........o.....0..?.....__?...M .........>L?..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	273799
Entropy (8bit):	5.572437386712588
Encrypted:	false
SSDEEP:	6144:dkd8OF1uiBO5egGjmxcQLRDyDCmQdZKlW:uvFgiEyWfN
MD5:	23B205D8FF508F57F710BE0FCC8B8A27
SHA1:	56723D1BE68B19328598559057C2AB33C78FDED3
SHA-256:	B8B2C6234840D41FB96B36928343A70CA2C334D22F82FC58143BC6C5C6591AEC
SHA-512:	5F7A172D70732E7421324F7DC23F91536D037F9E494155114531C691B0134781F4C676041430A3F5E3A4168872CAA635787AAE2EC6DB136E3F16BF95724DBE60
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","shippinghero\\.vip"],"tag_id":12},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELE

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3
Category:	dropped
Size (bytes):	44401
Entropy (8bit):	7.963663990350384
Encrypted:	false
SSDEEP:	768:csIkhpph7UQMRK4CtNs3wsp2BBHrv1g/OjQ6hAWdw3hfKEUvCSV+RKXZNSfwPs+:5nhp2G3soBxZgGhlYhiEUKU3Pf
MD5:	136E3527E2A0B7A623B3CA8EE3CE1BA9
SHA1:	9CAB83DD7C233DDCBC1090C5C3C0B0FA82F6D800
SHA-256:	E7C466F986E79573667DBA1E6F11D6CC7769C8D06542EDA1751B5F2A98E07D15
SHA-512:	8635123368819E64B71A7E9ACFC6AF5B8DFA159ABECD30E76F9DDA344A600FC78CF5BA08F31D5837AF1290A94764579C9B3D90352C5794A45D8FCB7AD1153268
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................D.........................!1..AQ"aq..2B...#3Rr...$Cb...%5S..4..cs................................#.......................!1.A."Qa.2............?..'Ye...5e....j.]9e.0.,.u. e.Yd.,...$.u.Y..$.u. E.R".... E.l..$NIdB'$J..X.b.X.(E".YdF..`.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 479x480, components 3
Category:	downloaded
Size (bytes):	30174
Entropy (8bit):	7.929810738594688
Encrypted:	false
SSDEEP:	768:AnNBUIilXEmBw1gIWncljPq1PMBt+wnpc:GNBR1g/ncljC1fU6
MD5:	833F0960A696CF075E6DC43A8133DC85
SHA1:	C9FBF9720E76C57A761A296041C3AB74062D9074
SHA-256:	7889C790CE19DE58A37836E7979529D32709CE6A57A06D43734448A06D45B05B
SHA-512:	AA4E40BC0A8042981C1C0B230904B63EF3B7DD673EA7F776D0564C36DECF9AD0B2BB4F3443C6DC774AE4BB32E201E277BBB2BA6A83CDF40F30CEC75409ED5F51
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/register_header1.833f0960.jpg
Preview:	......JFIF.............(ICC_PROFILE...............mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................<.........................!1A."Q.aq.2B.....#R.3..$b...r.................................%......................!.1.A."Q2.a#R............?....F#.N..:t....N..:t....N..:t...-..A.H.X..2...!..).<I.#.n9................."....:;....9&v#...q

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5620
Entropy (8bit):	7.941132828964223
Encrypted:	false
SSDEEP:	96:pyHCpuC/rZDAgvHYC1fse1pqvUjM0faIBrfEUXYQJkimbtQABgP4xcsRrYJgWmyY:MYZDAgvHYyUmQiMKaIBrMUXTkNQABgPY
MD5:	A2F552EE8B265238F44132F9DB63734F
SHA1:	AE43DD95E8DB37ACBDE785994767EB364CCC44EC
SHA-256:	5C99F1B4E0C79E359B6D7353B00575748F652050694394D933AA9D5C2F40394F
SHA-512:	4A1A74BE65268148DD27CC9F2F187A610274712FBC6916F38BFF1FB7D8EB575AFF7B249CBB56020B1F7AB42FC6DB9593C09BD73FE87CC3B432A183C8BCC68EE8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB.........IDATx^.\..\.y..~.......Y...-.. ......1.\|.PqH*.6..TQ......._.r.......1>..A\.1H !$t.9......Nu..jgvvt...UMi.^.>........!.....-..8.V.$8..)..@.........!q..%5..$\N....p&X..T...pDv9-/51..R.5e...xK4\...'....#P.>.....`...\|.L^...m.. .H..;z...B....F.......N.6%x.i....RFj..y..9..O.XCCC..n./ ..`........o.$.....x..9.:K..e.........A..E.J...~......e.@1.c..U.X.dtv)ur...@.a...XJ.f.....4..]..R..h...().H.!.!l...".QY..h. ...R+......z.cD.......`.!..p.j...Qc..[....k......{...8......`..;. ..]k......oT....C.......QC\.4@.O.~.\|.....z..v6j......E.....,..7>...b..B....!.....-@...?%.=............7._...........Ma J.p..b....U...?"P}. 0.2Rw..I6..r.....(B...@lQ.M.C8.;X.= fC...V~......x........VC. ...9b........a....o..L)s).......l..k....y.vd..P...a.[V.D.O. ...^......Z..9..n...<p.u^..=ch_..N2.".....g.....~t...W.)..".........\|.]....?.......xE@[.....>.^.c.o.+.p.0...!....o.... B...c.......v%.....x..=Y..)+4].#I..%..........\.MD.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2565)
Category:	downloaded
Size (bytes):	225724
Entropy (8bit):	5.5456076192665495
Encrypted:	false
SSDEEP:	3072:Po+H1CEOFp7B60iuoI1LirsiACV9ujmxcQLWUAo:g8OF1rO5lGjmxcQLWbo
MD5:	116E6A21B30BF9E9ED6A45B57579D796
SHA1:	41CB2AA80C2CC1B2F2D82477D1E3C727AE831F49
SHA-256:	9456AEBB33619954734A9DEF2290C168FC083EF232D3815773884A6A5916FF7A
SHA-512:	99D4F268472132887E64F94B04CED8D0ADD87153128C89E84E37CCFEF29C63756A6C7EE5EFDA6A11DF8825DAA9044744D6C35356ACC610C309F48779496D31EC
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NZ5QQ868
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"23",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"pagePath"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"pageTitle"},{"function":"__cvt_137365873_25"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.eleme

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 1088, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	36933
Entropy (8bit):	7.451549192853749
Encrypted:	false
SSDEEP:	768:57vSWUohhmMZJDtPogmVVHUzCTa0DBgon0Fk8B7:57KTohvZ11Gz0uBHnk
MD5:	8CB66A81237E072DE84020DBF7646C01
SHA1:	C415409D17ABE12511C3E75C5332A7561E183602
SHA-256:	FCCA56B2F6B2AAD976A51908B8AA918D21AD4A0711CFE149BC9ABD3D2C34B2C9
SHA-512:	C6D8307631E418EE02C27E569B84E19A5E26C9504BC6C9FCDEDE09F37B4AE1218C1C2659761E50F423761733BC3A87FF2F2AD086AC8B0A35FC083BB22F4C9C3E
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/background3.8cb66a81.png
Preview:	.PNG........IHDR.......@.......d.....sRGB....... .IDATx^.._ld....w.ug.=..5s...F3..A....A./.......(..D...RK.(.n.(.q.D...%Q..$..C......S...F.Q.(...9w..i..[.7Zn.s.....v.,.z.x..k..g.....&... @........,.V..... @......$.hA@....... @`.....X.%@....... ...... @........@..R.... @.....h1@....... @`.....X.%@....... ...... @........@..R.... @.....h1@....... @`.....X.%@....... ...... @........@..R.... @.....h1@....... @`.....X.%@....... ...... @......../....c..$.o2s...\............0.u.u0+..L....9.e....>v.._.U.n.? .<l.y.{..C..G...d.f..(.S......W.O...Q.)..xV..=}.S..i7..b.]3..W..h..O..1.Pe.U^.....H..U.N..;-!{,Q.'.&..\|...=.N.~..7Qx..}.J..sM..E.cR.Nz.S..}U.?O.\u...\-.N..L...<-..?S5.f..E.W.KU..z...Y...3...i........cU~....\|l..~G..4.s...<.of..cq<.+....T.{.,......r.k'$.%..^c]\|.>I....... 0C.m........(.A2]..tB.<)a....+.}.$....0....o.{.....a.kF....r...D......Y..5...U}....L....d1.....]U}..&..c....Wy.....?...g.....C..i?.......}.....Ec....6....x,?v...?:....1

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3649
Entropy (8bit):	7.732139832980448
Encrypted:	false
SSDEEP:	96:elmGRGiy+6a/rD+gJcwTjpBSSSSSSSSSSSSSSx02:gmGRGDa3Jc8jpgSSSSSSSSSSSSSx02
MD5:	9468071E1C9975E47CAC235DB9356EF0
SHA1:	C111A304D6A437C01D4335DEA91023A79CDD0180
SHA-256:	C6541556E32541EB8BC2B0861392C16C45F21DB908428D3A11F01D182394EB56
SHA-512:	2A328C840C57AD67F6B1E1CDF7CFE092C8CA5FD8EEDF5EE737FAA25F969A3442D6F5CE8A598B1BF6019EC442DFC1D6A02FF227D053BAE25355168AE914A38D20
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......sRGB.........IDATx^..pT......o)u@....hi.Si.Bb+..A[+.:5.$.R...eP.'.........Z...H.....J..l}......In....d...9{..wf'L.........kH6.6..S....]@..9T@}...B...z\|...!..f"ZM....7.Cz}YU..L...>Y\R1..h..u..1(.dO`g......ZF...(U.2Q8$.^..._..5.UeC.......B_/.s.......^..CQj.#D.mRM..........el4.Z..T.D......A@..u.U.s..}.S...... ./.. l........... .F.<.T2{z..c.Z ..<%...8U.JH.`O..c......E.K.-..Pc.`...E..{.~o".W$.A.."......=..(.. .p..?.........@.E.........q... ."\D.O.......E..D....'.A..C\."......... ..!.@...Q..h..@....W.H..(.E... ..{.+P$.A.."......=..(.. .p.%..}N..N8.N<....?.=...0...F...D..4.....5R....}.m..C.....I{@...H...J..t^....s.H?;u..T............~/..>(...9...1C......F._:."1..k..3.....4......o.....}..$? H.w'.g.E.C.!H.~.&.\|...$.(OgJ.;.F.....p.x.m..}...t../.3p.I!..[...{t;........].=h..A.../.....<...O..e2..1.....K.....~T:._..... .. ....7c.w\|...Y!H... ...O.B....8K.Z.A..d.{....{..3{tI..SA..x(=H`..4t...+..}. .*w"0:5.....SF..!H.w'..?.3

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3769
Entropy (8bit):	7.929124414531221
Encrypted:	false
SSDEEP:	96:ZpwC5EY4e5xRW6eaTzfd+TLuc7bILTK/izyjdstIeqT/1BWo:fZ5h5xHdELuqM2nytg1BZ
MD5:	3C36D7209A67C7E7CB7465B1799FE007
SHA1:	2666FA643C50AABDFE887996B91361B7596B3A09
SHA-256:	04CE99230182C6F8502B396865480EF1BEA057684FAC0E2AE0E09C8E68C5F4D1
SHA-512:	97F2097226B1B06395A5198AD46D321D2FA66A714AADF0E8618D7CEDB3287DD3184F4874EFE5AADDF5790E7C28353FCE0121CB0D4CDEB83314740089D8BD44DA
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/images/active/icon-steps1.png
Preview:	.PNG........IHDR...B...B......T......sRGB........sIDATx^.\k...........e%.!.R<.....VQ..(F.#...KS1F. 1(..%% ........$$>..<..HY"...+%....f.{..9.......;.....C..;...;.\|.9==.>.c...(.P.....E dP.B).B......e..9.C/v#.'(...)'q2..\.SQ.V...E't...A7>F7VS....p...!<?..P..dO..$kK.G.]hF.@F.........E....Q.R..v4Q....&.LhB5r.T....Y.F.....M...<.X.....`22.b.O...R...%.@..@j...r.@4q9..-....5 y......2N3.........0.x...Z0.7,C.Y.C]...gj.k.....F.zP....&........G...V. .....D.....@-....d.Y....C...K0.u.T...v.Gm'.z...q5.Q.....q..R......K......Q..G......H%...E..<..i...A.1:..`.}0..!.5..m..]..!.I......8....F.@...w.P.....B.8i...e...M'.xp ..N.Z..#f..#....0...f(....t(..&,.`t.......P_.*....Q..P.v,..I..g... ....f.a\|d..d.!....N........E\..4.!.d'....@0a>....mI\|0~.......kp4...a......~.......o.?........Q.j..A..p0)...h....L.....Hx.8.g%...um.....D......i.\L....._Z..\|7..Xb.....@G\.L..{.e2..!.........n]..u.is..-O.W/)~...2.....aW...B...q...B..p..V.6.gf.V..Z.a.`{4$G.?...@......=.m.^J.......CM._

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1740 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	104833
Entropy (8bit):	7.889195975394869
Encrypted:	false
SSDEEP:	1536:4eVUVI7YlAk4CCAfZpl52YRx/tHba9mGzB+AExtiQHx8jVurk41wpJAydyRCT0Eo:zUlAkzpl52YrdgRmP8ZuJ2p2ZQ0Eiz
MD5:	295F5A78F8811B8D0648F81620AD31A0
SHA1:	F513128EE8E5A1788A8ADA8573A1DB56B9AF25B8
SHA-256:	10D66A7B90A02BF74C3E4AC12CD9B5009F36F6975516D9F14016B553EEC136AD
SHA-512:	20CB3A8A2F11F2D3E7360F0BF2BE0FBEC23ABE72EA1C6F2A29CC13FED243B861B1C7DCBAD3E7889A9FDA8F91CDD1A504069911F495E8221887D38474040D6D27
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/logo-bt.295f5a78.png
Preview:	.PNG........IHDR...............E....HIDATx..y.]U..?DEP....WZVy..+...kY.e..(....C.: ".A.....2.....A.`.+.L.2.p..E ..C...!Cg.N..Y.}.:...^k.}:I.N.<U....>.}.t.?...}.....1f.^^".Q.R..%..."y...]%...N..z..^^/y..}.q.......k...C.......W....}?.{k.g...............=).&.%.K..e_.~.i..%?...9_r..f...}.y..$OI..,.,.,...>_...F_.p....".\r..g..%...{....H.+y.d.................!.i'.[%S$.JN.\.W.%[.c..s.KT.T....H...................0..q..IT../.).A...my..h..X#./.W.M.s%.H..h.M.?..................B....^..L.V.t.....e..ck%.'Tc..dX.Z.. u4...<C.-.J4.................@CD.D...5.7J.).=c.Ht......c.u/.%..."...............6"mT....}..KN..$...l~...h_.\|H...?Jvh..............`.G..N....m..$..SA..d......r.@.}.J..H^................6...Kv....%.J.H. . ..E["yX...fJt$.....................{...h..i.J.........6..$*.~'..D.7...............!.d.....I.-..DG,.mA...0Or.D.j.Q.j.K..].............0D..(.M.49Cr.du+...b..)...9P..Y.S................. .J.A.....E.......9];h.q.5..%_..O.[..................WI......$

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 502 x 340, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	78738
Entropy (8bit):	7.990087575665658
Encrypted:	true
SSDEEP:	1536:/Al4n1uPwgk1pgIGvDqoeaWsKUdSmMTV1zPixkXN9F0:/Al4ngP7DVe6KUjMTV1zPaqNP0
MD5:	D4B0C1420FFEE14F8ADD3A8045CA1554
SHA1:	398909092A3F06C4E825233D6813A07B099A2E9A
SHA-256:	39EE913323D4372DF83595B0E661BDAF938F74EC0F062788444449BA309EA6CA
SHA-512:	8A5C2DDD01F0EBEDE6282C85FDCB9189227038C1C1E09BC01FD88C3206B14CB033278510787FCC2440F01EDB71D99C15CAB23BFC18CC8019B24077D0F425D71E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......T......?.Y....sRGB....... .IDATx^.].\|[.....4,..eg..[.Y.....B....>.l)e.2.....^....0....`.,.e;1.v.x......O.c;.S.,....%.{..s.=..{.A/..`f..JD.C...,.%.<....\1.J...HK...i.2(.1D...Z.........X/:.:.:.:.:.:.Q....D..0t.t.t.t.t....b..........@.!.+.(..>...........!...n$.9.A...t.D.LtN.F@..]c...C}m.....%.B.....~.:..0..,u.Y....5....k....P_S..b...R,%.E......r.._J_.+u.-.z...+G"..x.t........S...(.V.X.y.rr.r.].;.i.,..2.snHw-d..l...BD.....9x....."U.B.7..'...0.E..)..v.e(3.`.....y...... a...]X....N8.f......Cn..V.....\p....CF.....~..........&..2....#m..>}..^......qB..9.Q.VX}..mx.1...!..[..Q.Ks..VC.7.;L........m4...e..ga....FaT......b5$....6a.d..l..ZC.gq..D.E.f.C^.~J2..v.........a.2...mL.7S\.2{.d....u`z.z..`G..6.r.^..3.:...X.K ...I.G.Tt&"...{W..1..\|.n......}.....b-....#<.fh.".+.r..\|..l..G^C[.......",AI<.M....%./hv.m%W..F.w..rw......](..1.%XQ..k.vR.......h4.k..*.x.....V.aN. ..V....V..1.3F..D.Z...]..D.-.k....C..\|...d.....<....E).p.....r...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1740 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	104833
Entropy (8bit):	7.889195975394869
Encrypted:	false
SSDEEP:	1536:4eVUVI7YlAk4CCAfZpl52YRx/tHba9mGzB+AExtiQHx8jVurk41wpJAydyRCT0Eo:zUlAkzpl52YrdgRmP8ZuJ2p2ZQ0Eiz
MD5:	295F5A78F8811B8D0648F81620AD31A0
SHA1:	F513128EE8E5A1788A8ADA8573A1DB56B9AF25B8
SHA-256:	10D66A7B90A02BF74C3E4AC12CD9B5009F36F6975516D9F14016B553EEC136AD
SHA-512:	20CB3A8A2F11F2D3E7360F0BF2BE0FBEC23ABE72EA1C6F2A29CC13FED243B861B1C7DCBAD3E7889A9FDA8F91CDD1A504069911F495E8221887D38474040D6D27
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............E....HIDATx..y.]U..?DEP....WZVy..+...kY.e..(....C.: ".A.....2.....A.`.+.L.2.p..E ..C...!Cg.N..Y.}.:...^k.}:I.N.<U....>.}.t.?...}.....1f.^^".Q.R..%..."y...]%...N..z..^^/y..}.q.......k...C.......W....}?.{k.g...............=).&.%.K..e_.~.i..%?...9_r..f...}.y..$OI..,.,.,...>_...F_.p....".\r..g..%...{....H.+y.d.................!.i'.[%S$.JN.\.W.%[.c..s.KT.T....H...................0..q..IT../.).A...my..h..X#./.W.M.s%.H..h.M.?..................B....^..L.V.t.....e..ck%.'Tc..dX.Z.. u4...<C.-.J4.................@CD.D...5.7J.).=c.Ht......c.u/.%..."...............6"mT....}..KN..$...l~...h_.\|H...?Jvh..............`.G..N....m..$..SA..d......r.@.}.J..H^................6...Kv....%.J.H. . ..E["yX...fJt$.....................{...h..i.J.........6..$*.~'..D.7...............!.d.....I.-..DG,.mA...0Or.D.j.Q.j.K..].............0D..(.M.49Cr.du+...b..)...9P..Y.S................. .J.A.....E.......9];h.q.5..%_..O.[..................WI......$

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 530 x 220, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4557
Entropy (8bit):	7.018240544426328
Encrypted:	false
SSDEEP:	48:H93ulh5JV/b6mhUKPYb349U1cadH8NbQ38clVL5GolftGlrB:HdupHbHGKPIEU1FdcN8Mc3RtGl1
MD5:	B3C83D2A0FEBAB95F2CF2DFC974E326C
SHA1:	394939B0674755595F5898C5B8A7F7664FC275F4
SHA-256:	CBF3F4B6D26A43A52324DB09514E05740B170CAFC08D575C96DECE35280AF3EA
SHA-512:	6FDB2DE8851E90AE1AEC5AB0B586E6FC1DEBEEE1B5C534FACDF2E4A40EEB3EB295A7C607A25AA2B3F33EAAAB5CF737B038DA1E30C896A26696BCE3FD77E2BE1A
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/good_text_two.b3c83d2a.png
Preview:	.PNG........IHDR.............%@HR....sRGB.........IDATx^.._...]...s...H...l..+Z.Vo....EQ.^h.UTl.j)MKB.]o........OH..b. Al!x......[A0...k.0;s.lR...sfg.9....3.....On.y..}?...ev....Wk.m......s.....5.F)?\"...........T.F.....[.....o.........(...W.r\7>.}7on._.-?Rk}(J..0.r-.....8..5..R...?~\|...w...!.........j..F..Q?... @....,.[k<]w.>s...rhfHl..>.....q.Q=... @.....S.F....Z_._<.....Z.........;..r..... @.....S.K...Rv.\|..>1.!.Y7.,..."...0..Z.... @. ......y.l.8..k.6$..KK...(F.A.s......8.@}.....](.........[./..3.... @...C...O...?\|...eHL.ae..3........ @....~\|h.......!1y.gY^....G.E..... @...ws...;f}kh.Cb....R...}P.. @.....#Pk<.~...Y.....ynqa.%.lj...%@..........}.....b.Cb8.~.F\|z.p.. @........_Z?..{ugCb..\....>;../..F.....f..._^.w....lHl..~wY.0..8N......t,P...X?...i^..!.5.<...iB9C.......S.<.....i.t6$...Wk........... 0?...k....L...!..b...iB9C.......U...J.......x8...se..... @....J\|om...;.<.v=[.]x.._.?.../...?.........Q..~)..P._.n..[^..'ue.P.. @....s..[[./N..@?.....j...[J...E.!

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 928, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	55021
Entropy (8bit):	7.820695013015921
Encrypted:	false
SSDEEP:	1536:JgGnOn5ZbpojM3U2syEEDkzCwok4JaY5/QLiAAm3LWQECn:Jg4Wfw8U29EhgYGHAHBH
MD5:	5D83944FD444D1F802CB50F5761FF538
SHA1:	7FF1FBBF13F731C8EAE1CD2A6D3A0C7F04925DFC
SHA-256:	03136ED9063EA0A4035B48568AFBC2C39D0037ED08AC364EC1EEB600DC989B40
SHA-512:	2660EFC095F341ED6F11B924FD85C6866B229EBA85CB67112E4CE2F0E3218E66CA7E49B117D45E1001ABAC2DDD1C71E4DC67C6604EA1898C1AA84CAEC19F0506
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............A.....sRGB....... .IDATx^._.]I...>......53mH....x.....@... ...E2B.%...PZj)(...!.@.t#.B..(.4.j.C..K.%<..$...rGiG..W..L..9..{..V........>......L.{.U.....]Uk5................@7.U.....H..H..H..H..H``.M# .. .. .. .. ...X@/..KI..H..H..H..H..4m..H..H..H..H....`..../%.. .. .. .. ..... .. .. .. ..X@....X...H..H..H..H..X@..H..H..H..H..H`.....`.R. .. .. .. ..`.M. .. .. .. .. ...X@/..KI..H..H..H..H..4m..H..H..H..H....`..../%.. .. .. .. ..... .. .. .. ..X@....X...H..H..H..H..X@..H..H..H..H..H`......K.w;..vPQ...{...K../S.......?..P7}.`q:/.V..m.G.m]d.}.._u.2^E..G~.w\4K..].....B.z...\|..^V.X..Q(.......#.]+......%....V...Eq..K/.^...x{XY2#;.]O...........,z..W..u...8.\..Gw......b..^...tK..>Zq..C..K.W.cl.6.1.lqW~/.f{.WK.g..,...../O.%9.......z....\|...u^..HM.V....=,.[u.y..}.v.]Y..?.>..9....I..H..H..H.....p.0.9(..=)._~aj.6.d..}r?...0..8..?.?.}..[Z......Z}..o...."..d..-......x_......Ey=;....g...k..[L..SK......./..f...^.Xc...jW..d....lJ.k....w..-~..

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 1280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	632380
Entropy (8bit):	7.991943024874214
Encrypted:	true
SSDEEP:	12288:10jtXCnG/127y78i4nSSJ97W7lcRDz5ySR0j8SavU51isGr:kV/127ygiATWiRhnG3a8W
MD5:	9E70EC7342C1C175D50E90E7A6ADCF00
SHA1:	6A6168460536FFA1FD3B7BEE39DA5C1912BAE02F
SHA-256:	88AE2F19F0231025A5C1AB143FDF08CA79E1D3635C7CFF2F9FFD57FA1849865B
SHA-512:	99D1D2665152C90FE67AF1C8DE9F482E1A7E374C1EA46DBBD5E9937F90E97B711B4A650DC77F65F0E7D90B60F0B6C4F4491AC389288C02938FBE2FEECD7D6D36
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sRGB....... .IDATx^...-Ir...Y.~..~Ko.H3.,...).!..{m..."..@..=.M..I..9[w...w..U..Ef..:...\|.....r....222....^........U...........w..;......Z...}.e..\.\.\|..K/.^...j.v./8.ZL..S....a1.....I..v....._.]c..&h0.jTU....\|...B.NP..ao....a..mfX5s...V..w.......<.....c..#.:\SN...............).....d...'?..imd.....J.....XK.....v..~...Gk.3..q..I/.c.o.....b@.....#KC}n.n..<s..S........&-&...$.,yo...H+..?.!...Y.....%]a...../tcBx.~1.I:4..7=....gVP.oL......v$...+Cc..3e..`w.....&.....=m;.7.^.&K4.ml_n.v..m;js.\|u6....{.yMmRw..}P.#....=U.wt...h=&.....%T.E.n..#....t...e..C..,..... ....>..lW..h..N.#`......5.../.k\...np>..d.`:.)PNpN..u.j...Y a-S....k.......v...;...`.L..1......=..Jz.q..;..`.&U.....l'c.#.[...C.....u[..[b...L......w.,v.....0VZ...v.AEz.r@Qw..7.....`....,XT.RlL...L.......`6i0.j,.;.-..-.S.....lZ..>kw..[.....)....U.CQ!p..S..5......3l.....%V.....n.K....j...."`.y!...2v.%#.=v)m..f..$.V..T.v!...N.].p..."pK...S]._V...Y.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63556), with no line terminators
Category:	downloaded
Size (bytes):	66274
Entropy (8bit):	5.9744386985102045
Encrypted:	false
SSDEEP:	768:UUnrCyKZ4Ko5Zd+Vq3Rk2MYsAlMnxw87iCqP1bQhOHpYBfG:URyKZFo5ewlMR7i3Qhyn
MD5:	72A5964FE495EE298B066A53BAE34F37
SHA1:	2E087DE50F16FDA07B793C9E17AB77E1537DF237
SHA-256:	9513FF972815D40FDA9CA0C5A7891A7367592AE6ED6FDB3618CEF99AA87AAFF6
SHA-512:	9E8E01647E62EA75B5EB19261C18C8CDAA43FA4FAAE4ED83468B4EFEFE672244FB774BD232EAF318AFC4DAE9BAB2E0076A41F5ABE4FF2D6BE34EC96A741A2381
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/js/pages-active-active.d55d2611.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active"],{"0278":function(t,e,i){t.exports=i.p+"static/img/no_investment.c05fbbd7.png"},"070f":function(t,e,i){"use strict";i.r(e);var a=i("1ddf"),n=i("f779");for(var o in n)["default"].indexOf(o)<0&&function(t){i.d(e,t,(function(){return n[t]}))}(o);i("e156");var s=i("f0c5"),r=Object(s["a"])(n["default"],a["b"],a["c"],!1,null,"e869ef26",null,!1,a["a"],void 0);e["default"]=r.exports},"09c4":function(t,e,i){"use strict";var a=i("b02e"),n=i.n(a);n.a},1150:function(t,e,i){t.exports=i.p+"static/img/good_text_two.b3c83d2a.png"},"177b":function(t,e,i){var a=i("4d02");a.__esModule&&(a=a.default),"string"===typeof a&&(a=[[t.i,a,""]]),a.locals&&(t.exports=a.locals);var n=i("4f06").default;n("8a6cbf5c",a,!0,{sourceMap:!1,shadowMode:!1})},1963:function(t,e,i){t.exports=i.p+"static/img/Earning.5193259d.png"},"1ddf":function(t,e,i){"use strict";i.d(e,"b",(function(){return a})),i.d(e,"c",(function(){return n})),i.d(e,"a",(func

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	273816
Entropy (8bit):	5.572578846698208
Encrypted:	false
SSDEEP:	6144:dkd8OF1uCtO5egGjmxcQLRDyDCmQdZK7W:uvFgCwyWfj
MD5:	A5D9A8000B6932CEAEADD5629E687D7C
SHA1:	BB2D95DCA8790013B33742A73ACD9A02EEDBE848
SHA-256:	6C36B8FB5DE018C0EAF3E134369ABE10CED22B95C4AEBFF6EAFB939272D0E4C6
SHA-512:	7937B7B699030CAD5AD9B9EF1E40607E16F037A706DB294A0085D01182D816A879CB61044EEB4819350B3D9350DE13F9E7DFB47379D9D6343C4EDC5E0AE2567A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-QN2PH612DM&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","shippinghero\\.vip"],"tag_id":12},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELE

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16693), with no line terminators
Category:	dropped
Size (bytes):	17235
Entropy (8bit):	5.573472241267065
Encrypted:	false
SSDEEP:	384:3yRYYxU1IkGbscGTJClaGAcdCHkZAz7VglqPIZvNXK:3yRLxU1IkGbKNC4tcdCHkZAz7Vmq6v8
MD5:	604B4EFE7B81344C906ACA1BF78B1EAB
SHA1:	B000DB21B9F8578BDD5522AC990F20AD93DDB84F
SHA-256:	7BA0EEADD534F2D1388F4916A303DABFA6C7CD56D08EF6FF3BDA7D006638EEEF
SHA-512:	552ECAE947320EF3C61A9C43191165104A28FB73A438FB614F5F55ED9B0985814E9150DE9CECFF9FAB582534E3977B5D876CDDE3EE75EAA8A6A83F507C8438C5
Malicious:	false
Reputation:	low
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-in~2ace6e53"],{"1de5":function(t,e,i){"use strict";t.exports=function(t,e){return e\|\|(e={}),t=t&&t.__esModule?t.default:t,"string"!==typeof t?t:(/^['"].*['"]$/.test(t)&&(t=t.slice(1,-1)),e.hash&&(t+=e.hash),/["'() \t\n]/.test(t)\|\|e.needQuotes?'"'.concat(t.replace(/"/g,'\\"').replace(/\n/g,"\\n"),'"'):t)}},"1ee8":function(t,e,i){"use strict";i("7a82");var n=i("4ea4").default;Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,i("c975");var o=n(i("c8fd")),a={name:"uniPopup",components:{keypress:o.default},emits:["change","maskClick"],props:{animation:{type:Boolean,default:!0},type:{type:String,default:"center"},isMaskClick:{type:Boolean,default:null},maskClick:{type:Boolean,default:null},backgroundColor:{type:String,default:"none"},safeArea:{type:Boolean,default:!0},maskBackgroundColor:{type:String,default:"rgba(0, 0,

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	325225
Entropy (8bit):	5.569036621314027
Encrypted:	false
SSDEEP:	6144:F4xP8OF1uisO54gBB1xcQL7D5E0aCmQdZKtW:exZFgil5tfn
MD5:	87F0DB33306CA3240A076B5F47A478D9
SHA1:	AED7CBFBD6A533DEDB6E2890C71FE5FEB862ADC2
SHA-256:	72D0F1CB6BAE0E84D6711117837581DB947DBF9ABAFEF13A1D39D10FA5B9FDB8
SHA-512:	7CF81F0DC89B037DC2055CDADF488F6682B43BC9664649516EF76FCBBE89DCDEA5A7BA5C293A7B5745EC2C7F41191294B4587799A64416D087A37D30F2DCCDA3
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	24532
Entropy (8bit):	6.616682414687307
Encrypted:	false
SSDEEP:	384:SMFv+6760Ie9xiJKhpq4G4d73jMf5Yf+/NvZkcRFU/unaQRsmgjfRNNNNNNNNWe:SMY6760z+b4ZWYf+/1C8Uiais/z
MD5:	EE4DBB451D934F8C1805DA54D7223F04
SHA1:	5A5B3A8C2EC2391791032D310268D6FF73FCA56D
SHA-256:	C1F7FA01AB2D5F8EF13379196785D19EB52D43B5101AB346AAECCC541AE98FA3
SHA-512:	85BE0011C38D40FF31665D1EE69D48946F9F0E3B4DCE23F1B601F76894497B2B1D276C762D2600B36F02AEF1143683C01D8DF4E198E41C9C7217102B1C59ADD1
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/fonts/Axis_extrabold.ee4dbb45.otf
Preview:	OTTO.......0CFF {n.....,..<HGPOS......Lt...vGSUB...u..Y.....OS/2jI.$.......`cmap0.ZU...,....head...........6hhea.j.........$hmtx.;.........maxp.hP.........name...... ....post...2....... ..P..h..........Rr.E_.<..........'......'....\...................B.....E.$.H.$.H.$.H.$.H.$.H.$.H.$.H.$.E.$.E.$.E.$.Z.$.c.$...L...+...+...+...+...+...L.`.$...L.`.$...L...L...L...L...L...L...L...L...L...L...L...+...+...+...+...L.x...<.L.<...<...<...<...<.@.<...<...G.....)...L...L.~.L.~...~.L.~.L.~.L.~.....L.'.B.'.B.'.B.'.B.:.L.'.B... ... ... ... ... ... ... ... .2..2.... ......G...L......L...L...L...L...-...-...-...-...-...$...$...$...$...$...............................R."...&...&...&...&...&...$.?.+.?.+.?.+.?.+.?.+. ./. ./. ./. ./.../.E.$.H.$.H.$.H.$.H.$.H.$.H.$.H.$.E.$.E.$.E.$.Z.$.c.$...L...+...+...+...+...+...L.`.$...L.`.$...L...L...L...L...L...L...L...L...L...L...L...+...+...+...+...L.x...<.L.<...<...<...<...<.@.<...<...G.....)...L...L.~.L.~...~.L.~.L.~.L.~.....L.'.B.'.B.'.B.'.B.:.L

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5216
Entropy (8bit):	7.949517609520567
Encrypted:	false
SSDEEP:	96:BgmWsDZDUX0tD6V5xxHJ9itWPeZ8lUSLzCh3vwHr76iOfD/OSREr93BHHBKvzi7:5WsDZDU26nnH3itCRzCdYOb/OaErLHHP
MD5:	5193259D70E36577812CC3F2C983F411
SHA1:	1F0CFE4D674F2E85BB736DBF68EE49D381693206
SHA-256:	D34DFBD56612BAFCB5B2BB98490E1E21017EF8A5175610D9FA3CCCAEA1D69FE4
SHA-512:	BF987B458C6A31CE8E007581C444AD817ABECC2F59AB2D02F0FEAEBBF1BABC66BFB8A13C97FAB691A20EC3BE958E3E91027C74C437AD62A5ACC9C0B3F708F262
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/Earning.5193259d.png
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB.........IDATx^.\.p..u..bq......C.NJ...,....c+qN.I....3u..d.N.G:.frt.i.G..I.4.c7i.....#.DE.u."%. H. ......../.$@....o..v...o.......%......k.V.Xe.`..U..@.....Z.......U..@..../......--.Ek.H.%"'klc..@....J.DQf.J,M..4.F..M.&_..U.+`13y..N..m.....e..Q5...s..............>....D.(slKVg...=.O9....[.+.."`].f.b.'A..@.+..38.A{+,.....'.\|`...:X..k%I...m.c.......`n8}%..{...5..6.j8.....hYm.....p#5F.zn..W....d.I.>R..........u ..X......`.A.gh..."...V.....HO.V..T..JW..xr\|.,..,/..3w....&.......p...D4....R.M9.hn.].n)...,_....K.E.aF7.7..X...a.lO.q.^!...d0../.M...o.....A.s1.... ...6oDA......TM...ih..p......1s].K.J&..i....@...f.c...h.(..v.\'...e..Mx....H.9i....Y.....c>\[g..(.xh....$.?z..Db:x.....F.l.Y.2=(...}.8r........2..D8.#].0X..'\.....V6X....d5=.`s.A...Qfl..#i....n\S.aP.5....)....:xsK.......0.)...}.<.. ........L..........e.....\.:.4T.p.\...O.bz..uU:0......%....s..X.7~....3.(.)...\|_..)...o.T.(..7TV).,...+.o(........

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 94 x 94, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8504
Entropy (8bit):	7.957866491573075
Encrypted:	false
SSDEEP:	192:zFSQEhfsMhLlGt1YXz5i/msilaaCEU34F6w4cgQFFIsmFy+EPL8:QlfsMZgGzA/2U34FPGQFFwFyFj8
MD5:	F7E798BEBDE903CC9FC214C94548DDB3
SHA1:	9F0F8745E3E2A9A174FBAF71C64792583F5C2202
SHA-256:	C2A3BF30AF7D7833D292FD23EF580143CFEEBE363B06E521DF440CBA56EEFDE6
SHA-512:	E213D5EA1AB821DC2D54FC809E2115AF687EB40EC35694296466B0AF2771E510DDADA980488290A68D76EF08524ADCCE361D1D0D557937BAA2B3F618476FC561
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/head_one.f7e798be.png
Preview:	.PNG........IHDR...^...^.......n....sRGB....... .IDATx^.}..]U..w.o..WC.2Uf.I.b.D..@.$..-(.N-"...O....v..f....%.d..... ..!@ )..k.7.;.^{.s_...R......)...w.......<... ../........~7...8]v....~.............t......qB`.....w.?N...e... h.0..A...0........D.6..,.....6.x.....!...'.Gt.].\|..I.'.X..8.{.......<......!.#Bd.}h.............@m.....<.............<.......4..4@.....<...~..a!......e... .../......]..+_.v5..../....m...p......q...A.$.\.....I...p..-..P..G"@$g.<..\.`...T.K..\|U.>.......L...n..=...h.r....{B....v.kV.. .....XP...ox...^....T7...X..+B...]~T... .....P...2%... ..}..?.....q.Q.....O.7X.fGu.DA.x.3D.B..p.U}..!.......\.0.aqx.........-....M.z.A8e.b4.LD.....5........3h..q...8`.).n.p...*..s...J\|.....Z...!k^..`...c]..8..I..0..}..'..(ZG4.c..i8q.>{..c4.....X..5.....#.>........G+...ZFx..7..w.y.J..w.....`...Q.4..\|.}=.....x.......c.Q'....~).I$...;!...cz... .....@+G,...Dg..LT.8....[X...,.p}..@..0"....z.2.......Jx..GQ.0y.W..[.....+[(..B....w\|.a........Z.....(.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 590 x 88, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25026
Entropy (8bit):	7.988167882908714
Encrypted:	false
SSDEEP:	384:M4VrnTTXoj0vC3GzWs+mfHe1A5DjMqippOYYDl3QurmPcyjAuCYZtS4o:M0rngISGzCeHlfMbppOYYRgurmPdRZER
MD5:	1F146B37A4DF36275C83DB80263261F5
SHA1:	AE0E64D73E8356E4EC9BEFD583E15C71805FD5CE
SHA-256:	96C054425C6C99DAE9D4971052F5C2AD448B59993B2EDC49028298C522C82A0C
SHA-512:	26D5C5ABA493553E3116D4B49CAA150F5DA1C0DDC13B9DB9B9CCF381121E7656E61ABBD71C59140DA28AD6C10947E9C59E203355A533C4D336F8E6826F36471B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...N...X......IxZ....sRGB....... .IDATx^.}..m.U.>w2..$.)."VDA-EK(....".....A.....F."&.1.\|......\|....h\|.B@)5J..h.D&...{.......Z...{...s+..9....z\|.gw..}......COlO<...g.yd{.%w.;w.l.it........J.......J.A...m;....{f..s.....Wm.z.t:......o=..C..}....=z%J.....J.......J...J`'R........E..#N.;..G.G^..v.s..._%p..U.W.\%p..U...................8....^....+...^.\|..U.W.\%p..U.W...^....'.>.I...>.t.....n.Z.U.W.\%p..U.W.\%. K.=...y.I.._u].{..z..U.W.\%p..U.W......v..^...T...<.....<6j..?.-.....}....U.v~.....o>m...n.......w....]z..,.`Q..uK..0.k......D...\|....c.....O\|%..]....R^<.)..u..+.r...X......z.n..zw.w....5..4+}.....}......+.)I..p..]..(.(..f....v.u.ve.\2..i..n.l.E....fr.`..A./F...R.<k?.(AVg..-u.~..{....V&i....{....K..8.].......v..K..d.v.\|.k....i;...;/}.'............=..'.~..N.l......g........;.......~...)J.m..?.......^w....T.v....~i.epqK6p...............-p.....@p(D.~...1......5#4Z....U..).p!....qg.......5..P&\|.x.P.Q..XF....3..T.u.../.H..%.g

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	667
Entropy (8bit):	6.995808422831353
Encrypted:	false
SSDEEP:	12:6v/7J2/jyySfUaOi835UqJJacieJSNq9sSqAjdnWwIEm3JVtYo9:u2/m8PJJaWJ59s5ARD0Pt39
MD5:	96C29F5BF4139617BE6F27AE20B2D299
SHA1:	09D725CDD4DF1217BFCBC40665F3D5DBC1E853FA
SHA-256:	ED5794E68BF62C106E7F63F7477644912858FBA6AF1148B46E53DF2935CAC7F6
SHA-512:	FB9F5D952B8ACA3296C315FC9D20B5D4E120B80C21EB7E3E2DA35B3487C1DB02BA98025126BA4DA3EE2A8B284446ACCDF230423F372331A48FE09D1E1A62323D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............7uQ....PLTE...................................................................................................................................................................................................................................................................W.....VtRNS.............f..;...".a@.)...,4..8...)..Z..y.7....H.6....'.o1.../...%..9.E.+6.0%5V#?.*.....IDATx....@.E'.)-..\...;n..+0C...<.....bD.~B..0......YCbq.ZM...N.-+I^.X.....h.5B.-.... .OR.....7.2.{.{.<..SZ....d...D..emg..O..../.D..S.<.)t7(........c..K. c.....Yo.]....K...J.H.3..S.dJ..@.....g....pP..C.@.;%@..i..{..C.#...}.[....b....!_.Z.....IEND.B`.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1065 x 1065, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	314320
Entropy (8bit):	7.925356206518614
Encrypted:	false
SSDEEP:	6144:cyi5bgZ6/KWN3SzZFmysM+f91M53t07FXmeKYwL4ELO+J9m1V8TYwGyqKNfHF:6bgU/KWNi7H3tCFXm9ssg1AGyqkvF
MD5:	95E0C48A5B2B60D2CC1638B9F64B7ADF
SHA1:	4B53BAEA18B949F4D136D4A9062D38A1E88382D1
SHA-256:	29F9B464C7858591B214D8A88A47C0A178EAB77E57633927E53A9F3712A0DD03
SHA-512:	88A96E48EFDB560BE0F25E654CEA61F096DD4ABC45184C88B5402C412F0A8709D89695936B27A8D58DF4C12F69D8C2D6BBDD78FC60FAB65D9615805E2B75CCE8
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/logo.95e0c48a.png
Preview:	.PNG........IHDR...)...).......Wg...IDATx....\u...Ti..`/..v..k}t..(..."MQ@.t.,=.:(E..H..D"!..j.%..:.H0b ........M...z.....<.17....s.y..}....c.1..c.1..c.1c....u...R.V.V.V.^#.&..k.iMi-......ZG..i.\.Io...7..[....V...Q.s..}..].....Z..........W.o...........X....8.x.V?.<.5..~.f.1..c.1..._.s..Es....b...d0p.......J.>"}L.......W..K.6.6.6.......v.v.v-hOioi.\.}...:@:P./.M(...(..............W.....w......U.:.......-.....[........................c...._.y...Qa.1..c.1f.!.......7.....0...x..F.H.....'.../I....../...].z..1.0.0.N.........n(.fi.t[....i..'=(.....5S.-=)=#=W..{...w...=.}.....7}.\|=\|]................98..y.x<030hx.x.01.C.b.x.~..X....z^Hu....<.\|.t..3.wLa..5h.1..c.1f....\.2f.....`..s..si{...I...I.T..m..I\..._..".....H....JW....$i.4U.;7....,=\0..,.q........x.+.P._.y.K.\|.o..1.<}........W......>_._W.........7.....>14...............S..q...qM..$..Z.......?....H_.g.o...)^.6+.1..c.1...].....:...K.].P._..t.DR..p....U..?)]......-..J.Ws-....5....4P.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 590 x 88, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	26008
Entropy (8bit):	7.985868308237434
Encrypted:	false
SSDEEP:	768:MPO6gAI20tMbq+QGu2+ZG6hJLWDoXsgVd:MP6OQN2woU
MD5:	93F3CA53871F273491D214494A0B5D43
SHA1:	5F878C2FAD7B8FBF3F5B6FDF3C69FAD0457D573E
SHA-256:	035583DE437D0EBB6C5B0835D7328081BA99493D00E88A348E650994008DD366
SHA-512:	08C07B3C6E78D00ABFF1F85BCA4894043D683E8EA405B12FD587295B11221D6F08FDC9E7909F12257D9501CDF252CD2FC09E0C7828B3F3F485E258CE52B37BDD
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/botton-1.93f3ca53.png
Preview:	.PNG........IHDR...N...X......IxZ....sRGB....... .IDATx^.{..u...g<sf.M..q...!...o.R....T.U..B....."..z..(r..$...].&.8m.4j(.%.E...F.%....mN5.P._.r....z.^k........}g<.yG:.}...g_..~{..s......'^.^x......=..;.;w..4z...U.W.\%p..U.W.\%.F...m;?..=...../...../.N..Y.C.....}.7m.......D..k?...J.......J....i{._...3..........v...l.;7m...U.W.\%p..U.W.\%.F....3..o...s..^..;......>.x..q..>_%p..U.W.\%p..U..-.....~.../j.F.........v......J.......J..7..N.+...B.$.....7.Z.}.J.......J...!.}...[_.s..q...........w..O..'?....\|...~;......\|].w..R.}N....w.;.}...M........M...`..Gm#kW?..1.n.o\|..:P...i...{..l...\|...v......../i..~W...`EoQ..g...n5..b...z:$vovG'j....G.NUZ....J.(...p.....#.../{..]4v.R.+~.G...$..X...&!\|....c+...X.S.Qm.Z..D....&.yI..E..Yh.c..h8..$.(...h\.P.P...sI.6.j......_.}..\.==..9o....?....<...}.\|.o..#.>oO..kN..S.}...?~Wvz...w../..7=....n.v.#>H.v!D......'".>.=.2.V.,....@.Y...q.Q.5..@..Q.@..}.)...b..g.....)Y...(..#.#F[....&.T.,.@}.`...=.Q.&L..\..

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63472), with no line terminators
Category:	downloaded
Size (bytes):	73320
Entropy (8bit):	6.327706771531478
Encrypted:	false
SSDEEP:	1536:kmFEHewINCnAfsYId0FHoMqu7NdEAaM2Ol51hwJX2RcJZHYpN7xCIx/+eJF4cL3v:TsFINCnusp0NVr7fnaMj51hwJX2RcJZi
MD5:	97D9827B5A2010ABF9F4F2CF641A546D
SHA1:	745A498A40192AB8545CF1674E36EBCEB70888F8
SHA-256:	70DEA432FDD8F0C73B755E250A2FA024B0D3FF006FE7F52D235299BA8A477287
SHA-512:	E05F406153CB71373BEA1D9F4D2A519620C1CA62751E7F651BB472DF37EA77984ED9B19BBA6DE705D551129A63DE3B5DCB66D997770EE79EBB21FFEF8CEE976F
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab.ed0a5c28.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab"],{"0633":function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return a})),n.d(t,"a",(function(){return o}));var o={uRowNotice:n("8fe3").default,uColumnNotice:n("f148").default},i=function(){var e=this,t=e.$createElement,n=e._self._c\|\|t;return e.isShow?n("v-uni-view",{staticClass:"u-notice-bar-wrap",style:{borderRadius:e.borderRadius+"rpx"}},["horizontal"==e.mode&&e.isCircular?[n("u-row-notice",{attrs:{type:e.type,color:e.color,bgColor:e.bgColor,list:e.list,volumeIcon:e.volumeIcon,moreIcon:e.moreIcon,volumeSize:e.volumeSize,closeIcon:e.closeIcon,mode:e.mode,fontSize:e.fontSize,speed:e.speed,playState:e.playState,padding:e.padding},on:{getMore:function(t){arguments[0]=t=e.$handleEvent(t),e.getMore.apply(void 0,arguments)},close:function(t){arguments[0]=t=e.$handleEvent(t),e.close.apply(vo

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	2.6118150858689284
Encrypted:	false
SSDEEP:	96:wJKZYwIbcUkr1WtlTIlRfeQ4SvC8LJqkQ:MKZYtbcUkrUlsbe9SvpJ
MD5:	2A8C751608D1A5B5A21551A9EE6859C3
SHA1:	332777ABDF555A4C30185B475E96D301C78FF2F6
SHA-256:	384B25EBFB3B80AE03D503BE2C8575A89744B81320D773DFC20351A52F08DE4E
SHA-512:	C673B0278BF5DFCA15EB03C0E763740C211BA6A0E361C35A9BED0C05580849C917D3932BB9DF989F40D610B218464CFBE08DF4D3FE3A9A35252A0057EF1D1B26
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ............................~...........................................................~............................................................................................................................................h.h.@.@.<.<.U.U...............Q.Q.B.B.\.\............q.q.............................................................................N.N...............................9.9.R.R....................G.G.........................}.}.....3.3.0.0.................'.'.....................w.w................:.:....................{.{.{.{.........%.%.........2.2........q.q.....z.z.............................................................................................7.7........................................................(.(...................................T.T.M.M.l.l................z.z.D.D.B.B.j.j...............................................................................

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5227
Entropy (8bit):	7.943879829452175
Encrypted:	false
SSDEEP:	96:1PNuzTNwq/8TGEKhArOqf0hxc92+lKf1xWv7io0oqPUC:1VuPNPEbrOqf0hxY2CstomMC
MD5:	B30711A6D73E1488BA77FE950C84503B
SHA1:	457704A6CFAAB8AF992D1BABEA8BC44CDADC428E
SHA-256:	C8FEDBAF7570D47D5417398531B115E819B45446EC2BFCA187F17C611D69EBC8
SHA-512:	1E4BAFEEC407718EB02849D549DA4FE844D5F86714D50F338439195B566A90FC4ED612FBE0417AAF2F3DB6A7A20FE0B1057F22F5D83C9B74F0C96229057D57B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB........%IDATx^.\.p...^.sh..H#......L.`s&..(.KR."...U..l...fkkC.=+)....1......`.Y..m...6`.\|I.H.uk....==3.fF...H.]]...}}.......M.\...y..@L.U..L.5.V..T0t.&......~....Z.Vy.....&;JD!...`.@.-..H.~f.VX9ei.I./qbJ`J{..wV.~"`13..F.r..`..U..F.e..`..CD..>V.;N(X..m./..b".Vxm..g....g.3.N.:0..g8`B.:...@&p..e...3..Qwgp...W.]?..%G.a...:X'.'..(....3...w...gr.R..5...Z.`.......j-.......e.Y......C.. p+........5 ..x...,..0zA.....t.....c...d.W...1...3..-.@S.;...v>f...E.....6......b..\|D.."j.m..e2vfY.Y.g..c....jO./d.[.T.8.8..kA...E..I.v.....Nv..t.)t.t!.N...y.....u.....^..6T.W..fb.].Q.u,..7f.`.S.@...P.\OP.`..r.1..@s.!4..zX..lCQ.h...0`.&L.....NDPX.x./..S...``,....g....'......89....6....K..8....q.d.Z;O@..G.t....a.4=..I....M.%PbUTE.t:...D/\9-8m...$..6,..........j.i.1..C.6..Tl'...8'.sl.u..@..hj.c.G`Y..YMU..:<.G.b........TM...U..U.m.@H'.X.....y^&pQ.E.dJK=3..v.....bf...X...b'.mT..M6.8...G...{..wZ...G.a..xL.t.b..(.b.(..

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	580
Entropy (8bit):	6.718697490430258
Encrypted:	false
SSDEEP:	12:6v/7JGwV/GvihwtZLN43/pa7K1v59Y5BDaiVxYyYUD6VL96346SwBVvNKZcy+bb:FwVOd4382VfY5Bge6VL9j6SwBhNxbb
MD5:	7427E0A7A90B982D0D7EDB662054C40C
SHA1:	F8199CE038282CBD37FA939F2FD9E047B08DC7D7
SHA-256:	5BB4A84DE8B1BE0815802669EA3A674DE6FFC0245C5C4EF08B9E1BD8B72D9FE2
SHA-512:	6CC1B7CF9EF6B18D0F1A1174206E0CA5A032A6F72D5561564EEC04405C74C09C21A102B92F2F74D6C905B14CE6C7FC9FEA9218E8622692AB719AF245644A61F9
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/images/common/icon_tutorial.png
Preview:	.PNG........IHDR..............7uQ....PLTE...........................................................................................................................................................................................................................CU.....ItRNS.......{......~.N......E.'.V.1E....$..7.Z..l/..P..@_#..I).+.3.d.6Lo...h....IDATx......@.E......;..{........@.}.9.....KOJ3.0.....$(.gA.2.....JK\>.\.._6..Z.`Aj{......<.\|..;..../.l............%..:....^.......~.b6r.n.&.s.J...M.6..afx....b..y...b..~2....p.nr..Dc...u.(F...\."}L..5?.....2L$....IEND.B`.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	325222
Entropy (8bit):	5.568923963541795
Encrypted:	false
SSDEEP:	6144:F4xP8OF1uY5O54gBB1xcQL7D5E0aCmQdZKQW:exZFgYM5tf4
MD5:	1C9E1F333C9A56E1E0DEF2C7D7068D4A
SHA1:	4BB7A70CF237BB85DF230AB104F3F36E78A1E7AE
SHA-256:	31BB1538C962F43156B42D0161DC206BCEBCFCD7D1EE866DCCD43728C5012E1A
SHA-512:	F106083C916791DD7BD9AF17CA733A59B95BBA584F4B571B563947135FC4FEA3C5F5C3945D19C57A338774788E6868802B095730F8C54F82CE1C3055CED0A40A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-M2HTT1MWZ4&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5216
Entropy (8bit):	7.949517609520567
Encrypted:	false
SSDEEP:	96:BgmWsDZDUX0tD6V5xxHJ9itWPeZ8lUSLzCh3vwHr76iOfD/OSREr93BHHBKvzi7:5WsDZDU26nnH3itCRzCdYOb/OaErLHHP
MD5:	5193259D70E36577812CC3F2C983F411
SHA1:	1F0CFE4D674F2E85BB736DBF68EE49D381693206
SHA-256:	D34DFBD56612BAFCB5B2BB98490E1E21017EF8A5175610D9FA3CCCAEA1D69FE4
SHA-512:	BF987B458C6A31CE8E007581C444AD817ABECC2F59AB2D02F0FEAEBBF1BABC66BFB8A13C97FAB691A20EC3BE958E3E91027C74C437AD62A5ACC9C0B3F708F262
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB.........IDATx^.\.p..u..bq......C.NJ...,....c+qN.I....3u..d.N.G:.frt.i.G..I.4.c7i.....#.DE.u."%. H. ......../.$@....o..v...o.......%......k.V.Xe.`..U..@.....Z.......U..@..../......--.Ek.H.%"'klc..@....J.DQf.J,M..4.F..M.&_..U.+`13y..N..m.....e..Q5...s..............>....D.(slKVg...=.O9....[.+.."`].f.b.'A..@.+..38.A{+,.....'.\|`...:X..k%I...m.c.......`n8}%..{...5..6.j8.....hYm.....p#5F.zn..W....d.I.>R..........u ..X......`.A.gh..."...V.....HO.V..T..JW..xr\|.,..,/..3w....&.......p...D4....R.M9.hn.].n)...,_....K.E.aF7.7..X...a.lO.q.^!...d0../.M...o.....A.s1.... ...6oDA......TM...ih..p......1s].K.J&..i....@...f.c...h.(..v.\'...e..Mx....H.9i....Y.....c>\[g..(.xh....$.?z..Db:x.....F.l.Y.2=(...}.8r........2..D8.#].0X..'\.....V6X....d5=.`s.A...Qfl..#i....n\S.aP.5....)....:xsK.......0.)...}.<.. ........L..........e.....\.:.4T.p.\...O.bz..uU:0......%....s..X.7~....3.(.)...\|_..)...o.T.(..7TV).,...+.o(........

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	633
Entropy (8bit):	6.869658778638955
Encrypted:	false
SSDEEP:	12:6v/721iyfceR4doRrrrTZECFoGszwpW1iN5ENxBFZ/8aniAca0uNvwKuX+pK:P1DdRrPrdNFoVLc8LBX/8aniAcNuNpuH
MD5:	A989B6777314B48946C9EA85957C102A
SHA1:	3D106C4BE7BC99D95A32E44E9382F1C215C0877D
SHA-256:	D18DD47244780E50B824F9BF1C8D0D6B098EDEE73DE6A8A9BF93507EB21719A7
SHA-512:	7639CC3EFD14EC742966B4A2D4CFB3935B3049F5C880DC17CB9015DF2562998C2D1BDE34E1B01B9FA56F63E62DF566A1FFEE49667628B070244DF2CF563267FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............7uQ....PLTE................................................................................................................................................................................................................................j....JtRNS......r.......D..9{.....Q%......K_.x....nM.(.@p....A.8.....=Y.c.=.O.5<g.II..m....IDATx.e...!.E.....uw...Z2K.d..r..]]@x..Gw..a.....Nd1l...?.c..P2..8.&........`F.8{.I........j.....b+.>...n..`z.....c.u...NL... d.B....Y......9.....f.T\| .:.........%............G.>.OOh]...........[.,..AI.t.....!...J.rm...Z2_.i.h.L.>.0X..*0...(.........IEND.B`.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4201)
Category:	downloaded
Size (bytes):	223785
Entropy (8bit):	5.546077766106404
Encrypted:	false
SSDEEP:	3072:ME+H1CEOFp7f60T6oI1Lirsiy330V9KjmxcQLr0NmW:h8OF1gO5+EyjmxcQLrdW
MD5:	EBEDE921FED9F3A1CEE9D4C045BE0F99
SHA1:	9F7A0E7355CD3E1982B65000E7BB401814588748
SHA-256:	EC4A29E866A77AAD38391D5058439C76A448AED6AC4BB771A851EDB3364D8151
SHA-512:	E9C5D8451557A83D0E16689E50B6F1A34B3A39C68C4A7AA0453446282C273D8F88B8BD40BCC6F0F626D6CC48BAA189484747F3F73D2177B7AFAE6B0627BE31B9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-255502036-2&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-255502036-2","tag_id":9},{"function":"__rep","vtp_containerId":"UA-255502036-2","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-QN2PH612DM"]],"vtp_inheritParentConfig":true,"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-255502036-2","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65188), with no line terminators
Category:	downloaded
Size (bytes):	899379
Entropy (8bit):	5.420133075418542
Encrypted:	false
SSDEEP:	6144:hWA3PKLAuI/ZS1SQUTz5CfbNZCafbKvmBFPV9bhyc/Iz0Rgg7PclczJ6gdFCkmYm:juIZS1SPTz5CfBZ5xuegG7UdjNb/
MD5:	2BDDA0EC52A0C487C97D2A27A77093D0
SHA1:	A2994336D5B5FBE555A4D9A1C08CD68FEB6DC8EE
SHA-256:	8D806A8E86A1EF3F36145C3E49F17361A6C60BD76AA35CAB9633C92923D7A3C4
SHA-512:	0043986609B4AB3E0DFC7F47759108CBAA6E3633B0B5D6A810C862C415E8E44E1AF3EE646D5DCE51E892367170537667D1867213E2DA0988DCD14B13F1CF3BAB
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/js/chunk-vendors.c519f2ef.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-vendors"],{"00b4":function(t,e,n){"use strict";n("ac1f");var i=n("23e7"),r=n("c65b"),o=n("1626"),a=n("825a"),s=n("577e"),c=function(){var t=!1,e=/[ac]/;return e.exec=function(){return t=!0,/./.exec.apply(this,arguments)},!0===e.test("abc")&&t}(),u=/./.test;i({target:"RegExp",proto:!0,forced:!c},{test:function(t){var e=a(this),n=s(t),i=e.exec;if(!o(i))return r(u,e,n);var c=r(i,e,n);return null!==c&&(a(c),!0)}})},"00ee":function(t,e,n){var i=n("b622"),r=i("toStringTag"),o={};o[r]="z",t.exports="[object z]"===String(o)},"01b4":function(t,e){var n=function(){this.head=null,this.tail=null};n.prototype={add:function(t){var e={item:t,next:null};this.head?this.tail.next=e:this.head=e,this.tail=e},get:function(){var t=this.head;if(t)return this.head=t.next,this.tail===t&&(this.tail=null),t.item}},t.exports=n},"0366":function(t,e,n){var i=n("4625"),r=n("59ed"),o=n("40d5"),a=i(i.bind);t.exports=function(t,e){return r(t),void 0===e?

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 710 x 240, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	55860
Entropy (8bit):	7.966788241356306
Encrypted:	false
SSDEEP:	1536:O+9iaiOxRQ68XXFmE1oFWK9+Bh9S+jG/q/2uLLEHZ47fz9:tiZAHYXFmES7wVlL/rLLEOZ
MD5:	84992533DA0944DC5F66F030F43EF7D2
SHA1:	6E1E783ADA1EB39342BE53A67866834CB17D78DA
SHA-256:	5EEBA00F5C044DA3A6A5351AA0274FC3F69154AB3D8069006C7C96D12AA1790E
SHA-512:	0EB02E115669A0B525EF69E07710B8458682B3B6CECAF5EA915552733286446D3BE3E076C4D29E796ED5D0BAD02C2CBD35192F1A1146E85A62C2628777C504B9
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/bottom2.84992533.png
Preview:	.PNG........IHDR.............4.R.....PLTE......................................................................q........}......'....k.....................(..2.......w.....`...%........"....b........{...+....w........g.................f...5..!..............,..1.............p..k.........................p...........e............%.[.....].........................$..)..................../..........."....~....!#&...............',...8:=..0..8/14pqs..)...y{}.....3.....6...(.F...........=.E.!.D...&w7...............).?....;....j,JLN.#.............hik.\|0...DGI.]%?ADVXZbcf..PRT.....'2........6o...k..:.\^a.x.b.z...d.xt..C.\#..9.W..!..V.pJ.c.3.A.....W.l~...-.M.M....4.O1.Hm..%\|....>.U'.B,..G.eu....W../.R...P...w".X.b.......I......R"..................-O5.......]..o..^...........`.._.....\..c.T._..oF....tRNS...................................................................................................................................................................................

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 610 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	48128
Entropy (8bit):	7.992115334234441
Encrypted:	true
SSDEEP:	768:ALPsgi+xmpVZVBRS0EZ2Wn52+WDWhfpqt18OJ1HdSzdMqnl8+q9uOZjkSAe1IpHv:4ni+xY3rEZ2kg+s+xwlRdSzmqc9oSP1Y
MD5:	9C46BE7E85A648192C0BD6A5FAF10048
SHA1:	99FA2A7C0AFF6A5A2385AE2CE41CCF02114AC821
SHA-256:	8C9079ECA305C47AD2631B2C444F65C17BFDC51F9D4C716266E93616288C1398
SHA-512:	3CF59B105F83E48C65E0799A770E58B6D7EA0FCA9C5C168E9CB9AAE6EAB788E5B06CF75BBD70566E8E2C4D8C05EF4FD21F4B671152C277746A8F03BFE04A41C3
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/logo.9c46be7e.png
Preview:	.PNG........IHDR...b...d.....%.\.....sRGB....... .IDATx^.].x...~gw...C $.z....A.`.)XP@@..t... .X....AQ.E....D....)$.^.2.3{... .E.....A..)......h.h.h.h.h.h.h.h..#....W.S................hDL{.4.4.4.4.4.4.4..!.4"....u.!.!.!.!.!.!.!..1.....................?.................F.w@C@C@C@C@C@C@C..B@#b...Z........................................C.k.j.h.h.h.h.h.h.hDL{.4.4.4.4.4.4.4..!.4"....u.!.!.!.!.!.!.!..1.....................?.................F.w@C@C@C@C@C@C@C..B@#b...Z..............................5{...H..q$6..^..Z..B..Z!z.3..Z.......TQ....=v&...\|.].........E.fQ.....w..F.!..G@#b....._C@C.......u2.wk].j!.....U..^=$.T.`....t..Ju....8.....[.E.6Q.r(.Y.........<...}.xbJ.o{....yL.9U...i......&.o@@#b.....AC@C@C.$..`./&..YY..j....^.Nt....U...A.!../.....u.....(...(..$.Pjf..c...9.x>..u;...j.4R.....7..... `.f5.4.4...%.l.zX5.y.`\|._..M..3.d...Z..'...p..C....eE.y.U.....K.6.....7>;.w*...5G\|$l.r.}i.k.h.......QJ..Z... .@.o!..p.@<.=....\|........ ...@....;..B...}jmi.h...D.K.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63556), with no line terminators
Category:	dropped
Size (bytes):	66274
Entropy (8bit):	5.9744386985102045
Encrypted:	false
SSDEEP:	768:UUnrCyKZ4Ko5Zd+Vq3Rk2MYsAlMnxw87iCqP1bQhOHpYBfG:URyKZFo5ewlMR7i3Qhyn
MD5:	72A5964FE495EE298B066A53BAE34F37
SHA1:	2E087DE50F16FDA07B793C9E17AB77E1537DF237
SHA-256:	9513FF972815D40FDA9CA0C5A7891A7367592AE6ED6FDB3618CEF99AA87AAFF6
SHA-512:	9E8E01647E62EA75B5EB19261C18C8CDAA43FA4FAAE4ED83468B4EFEFE672244FB774BD232EAF318AFC4DAE9BAB2E0076A41F5ABE4FF2D6BE34EC96A741A2381
Malicious:	false
Reputation:	low
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active"],{"0278":function(t,e,i){t.exports=i.p+"static/img/no_investment.c05fbbd7.png"},"070f":function(t,e,i){"use strict";i.r(e);var a=i("1ddf"),n=i("f779");for(var o in n)["default"].indexOf(o)<0&&function(t){i.d(e,t,(function(){return n[t]}))}(o);i("e156");var s=i("f0c5"),r=Object(s["a"])(n["default"],a["b"],a["c"],!1,null,"e869ef26",null,!1,a["a"],void 0);e["default"]=r.exports},"09c4":function(t,e,i){"use strict";var a=i("b02e"),n=i.n(a);n.a},1150:function(t,e,i){t.exports=i.p+"static/img/good_text_two.b3c83d2a.png"},"177b":function(t,e,i){var a=i("4d02");a.__esModule&&(a=a.default),"string"===typeof a&&(a=[[t.i,a,""]]),a.locals&&(t.exports=a.locals);var n=i("4f06").default;n("8a6cbf5c",a,!0,{sourceMap:!1,shadowMode:!1})},1963:function(t,e,i){t.exports=i.p+"static/img/Earning.5193259d.png"},"1ddf":function(t,e,i){"use strict";i.d(e,"b",(function(){return a})),i.d(e,"c",(function(){return n})),i.d(e,"a",(func

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 118 x 130, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14883
Entropy (8bit):	7.975053945157043
Encrypted:	false
SSDEEP:	384:EDusC+5PQQ/gKNRUDuUD4GbtnO7FkpfiuR/16qGz:89rPVzXUDrPtO7Fkd18z
MD5:	8826EB232B2BA2C08DC2C423991276BD
SHA1:	93B8683A463F7EDAEB4EDAA296978C963A90EF8C
SHA-256:	68E9C54868981CBC50D4600A6C4AB3CEA37308B66021F6AB8715EC91AD4C601A
SHA-512:	A86D048E2E128A44F9C1D29B8D3EE1633D5BBA10A57597468C4F1E33E7C2909619C737596287C6FA0E1793EF05EEE79A6BC6C687F99AE363420F330CEBCB7F36
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/icon-liwu-in.8826eb23.png
Preview:	.PNG........IHDR...v...........<.....sRGB....... .IDATx^.}..$Uy....z..6.w`6fX.0 ..D.QTT...c4.[L\.O...1q..E.%...Hb..D...%2..,...3w....9...Su.g.}..\.~...S.]u..}..[...6'W...:qR8.....~#.U.c."L;_.%...U....pN..KO..}R.........5.<.p...`..Kv...w..g~..%P.v.....?}.WU,"..~P........b;.s..p.............+...~.Y/.wO.\|.o.d...1[@........k}7....^2.....+......xq.Ln.....q...j....}.w....8......V-[8p.%.sz.8....-.cLZ.....oO....3....Er.........(W..G..^..o....9Fk2.r.'..e.\q]p..=..7.gO.u. .........y..g...........JD...Y.e.g.C.s.+[.....s./..p...}.<.d.6..k..,....,7..V...H...re.+..6..}....'.p..X..o..[6.!.\\...-...6..N.:{&.........G..p3..J.l........8....^.....w.....8`..W.r].W4`..@4U.q.....3..........@.&.J....`.Z..t......7}._d.1v..=.`v......Q.F.8...W..;...U..m.-.^............4T...m.=.?z.......P...i.,.S..X.<.jW...J.m....y..<.M.v.q [K.e.@..v...6..N>.....m.u.J.$....~.....Q....v.nA.B...........r.!.....R.2....D.......J.x\|.vLv...L.}........I......?.....c%]s.XR.~...?..O..{

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1065 x 1065, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	314320
Entropy (8bit):	7.925356206518614
Encrypted:	false
SSDEEP:	6144:cyi5bgZ6/KWN3SzZFmysM+f91M53t07FXmeKYwL4ELO+J9m1V8TYwGyqKNfHF:6bgU/KWNi7H3tCFXm9ssg1AGyqkvF
MD5:	95E0C48A5B2B60D2CC1638B9F64B7ADF
SHA1:	4B53BAEA18B949F4D136D4A9062D38A1E88382D1
SHA-256:	29F9B464C7858591B214D8A88A47C0A178EAB77E57633927E53A9F3712A0DD03
SHA-512:	88A96E48EFDB560BE0F25E654CEA61F096DD4ABC45184C88B5402C412F0A8709D89695936B27A8D58DF4C12F69D8C2D6BBDD78FC60FAB65D9615805E2B75CCE8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...).......Wg...IDATx....\u...Ti..`/..v..k}t..(..."MQ@.t.,=.:(E..H..D"!..j.%..:.H0b ........M...z.....<.17....s.y..}....c.1..c.1..c.1c....u...R.V.V.V.^#.&..k.iMi-......ZG..i.\.Io...7..[....V...Q.s..}..].....Z..........W.o...........X....8.x.V?.<.5..~.f.1..c.1..._.s..Es....b...d0p.......J.>"}L.......W..K.6.6.6.......v.v.v-hOioi.\.}...:@:P./.M(...(..............W.....w......U.:.......-.....[........................c...._.y...Qa.1..c.1f.!.......7.....0...x..F.H.....'.../I....../...].z..1.0.0.N.........n(.fi.t[....i..'=(.....5S.-=)=#=W..{...w...=.}.....7}.\|=\|]................98..y.x<030hx.x.01.C.b.x.~..X....z^Hu....<.\|.t..3.wLa..5h.1..c.1f....\.2f.....`..s..si{...I...I.T..m..I\..._..".....H....JW....$i.4U.;7....,=\0..,.q........x.+.P._.y.K.\|.o..1.<}........W......>_._W.........7.....>14...............S..q...qM..$..Z.......?....H_.g.o...)^.6+.1..c.1...].....:...K.].P._..t.DR..p....U..?)]......-..J.Ws-....5....4P.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 375 x 3116, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	235388
Entropy (8bit):	7.987870654807163
Encrypted:	false
SSDEEP:	6144:pSy+E5Ie8O70swiwEO1FgGjV3vOBlgd6X1CBZTRDQd:Qywe8ONMEOIGdou6FQZ5Qd
MD5:	2DF68BF46FE2CFC505D7799C988600CE
SHA1:	05229EE80B9840008049A890075708BE8CA23E4F
SHA-256:	09F71D353F3FB6AF5402F929F93A1A5922C7E6ED123BAD61E02A4DF9CDB9A455
SHA-512:	4CA5E1C5211063C72B85A324B835887B009AE1F375BBFCB3C4DF242633444DC0B740FB6F4BEF14E5B9B2EA9DCF79FF41AB238DD9BB601A88C2F5B8BE3273E701
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/bg2_new.2df68bf4.png
Preview:	.PNG........IHDR...w...,.....Y^......sRGB....... .IDATx^.;.-I..T.{.=.s..+!...B....p..@...x....B...!tAX.L.....a.+!,$.:....3..PfVVEF.3+k.:...N.^..._D\|.....4u....i...i...i...i...i...i..b..w."c....4M.y...'.o....j._.<.~1.E..p...a..i.~....................;.N.....a.w>...i...i....].M.l.Y@...\.....(.G.s..G.>.....{.....kQ....Ev"..z....t:..V.L.\|>...i...i...i.......r.......~{.^...<%=....Q.s...:.Vm..e....3...\.W.{.7...t.......<.;...yz..{:e..2M..5M..p:..Z.I%..../N...N..W...}.u...)Sy....@ ......t..}.v....L..4.n....t:....,......2`......:.......O.Z....@ ...X.><};.....tJ.=..2m..N...o~Hr?...O...M...~\|.8.....r......@...H[7?>.0}x......i..N../X.......x>...._~.n.......@ ..H]...?....y....w............/g......@ ...n........./......._.5.n.....&........@ `@.....o...>.w..?}.............. ..h..._.S4.h=&...?..........Q7.....@ ..".........t:..iN&........../..._D.B....@ .....)..z...<.....M.J...O_..wb;.v......@ .E`..ON..{J..{9..?......+(....@ ........o.....0..?.....__?...M .........>L?..

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 1280, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	632380
Entropy (8bit):	7.991943024874214
Encrypted:	true
SSDEEP:	12288:10jtXCnG/127y78i4nSSJ97W7lcRDz5ySR0j8SavU51isGr:kV/127ygiATWiRhnG3a8W
MD5:	9E70EC7342C1C175D50E90E7A6ADCF00
SHA1:	6A6168460536FFA1FD3B7BEE39DA5C1912BAE02F
SHA-256:	88AE2F19F0231025A5C1AB143FDF08CA79E1D3635C7CFF2F9FFD57FA1849865B
SHA-512:	99D1D2665152C90FE67AF1C8DE9F482E1A7E374C1EA46DBBD5E9937F90E97B711B4A650DC77F65F0E7D90B60F0B6C4F4491AC389288C02938FBE2FEECD7D6D36
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/bg-in.9e70ec73.png
Preview:	.PNG........IHDR....................sRGB....... .IDATx^...-Ir...Y.~..~Ko.H3.,...).!..{m..."..@..=.M..I..9[w...w..U..Ef..:...\|.....r....222....^........U...........w..;......Z...}.e..\.\.\|..K/.^...j.v./8.ZL..S....a1.....I..v....._.]c..&h0.jTU....\|...B.NP..ao....a..mfX5s...V..w.......<.....c..#.:\SN...............).....d...'?..imd.....J.....XK.....v..~...Gk.3..q..I/.c.o.....b@.....#KC}n.n..<s..S........&-&...$.,yo...H+..?.!...Y.....%]a...../tcBx.~1.I:4..7=....gVP.oL......v$...+Cc..3e..`w.....&.....=m;.7.^.&K4.ml_n.v..m;js.\|u6....{.yMmRw..}P.#....=U.wt...h=&.....%T.E.n..#....t...e..C..,..... ....>..lW..h..N.#`......5.../.k\...np>..d.`:.)PNpN..u.j...Y a-S....k.......v...;...`.L..1......=..Jz.q..;..`.&U.....l'c.#.[...C.....u[..[b...L......w.,v.....0VZ...v.AEz.r@Qw..7.....`....,XT.RlL...L.......`6i0.j,.;.-..-.S.....lZ..>kw..[.....)....U.CQ!p..S..5......3l.....%V.....n.K....j...."`.y!...2v.%#.=v)m..f..$.V..T.v!...N.].p..."pK...S]._V...Y.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 640x640, components 3
Category:	downloaded
Size (bytes):	49187
Entropy (8bit):	7.956548595206711
Encrypted:	false
SSDEEP:	1536:L1PVhaxoFqyWA8PR+3vZgR6EU6P1CzD52S:JNoCWiM6t/gS
MD5:	4CCA5D29BF78C4DEB2181D4CAB726856
SHA1:	111280AECCA18F989F11A7EAEB4A66563F76EFDF
SHA-256:	1C777CEA9CD3E8144B9C638D4A59D9E049E138BD4BA2A8033E425CAC9EA78B33
SHA-512:	88528DA0552B9E92A083FFEC032FB9B46534F88FDEF47D4122893654B67BB550A33388DC4EB003A05E8B6B0890FD68D7BA5D81BD97307B6A97B26438E8857D5D
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/register_header2.4cca5d29.jpg
Preview:	......JFIF.............(ICC_PROFILE...............mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................B.........................!1A.."Qa.2q#B.R..3b...$r.4C.%S.5..Ds.................................".......................!1A..Q".2............?......A 0..8...... ebppzW;t.T......DE[-.T.....4.9&../..N*@=.n.#...,.$..NA....ZjD6......\...w.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 1088, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	36933
Entropy (8bit):	7.451549192853749
Encrypted:	false
SSDEEP:	768:57vSWUohhmMZJDtPogmVVHUzCTa0DBgon0Fk8B7:57KTohvZ11Gz0uBHnk
MD5:	8CB66A81237E072DE84020DBF7646C01
SHA1:	C415409D17ABE12511C3E75C5332A7561E183602
SHA-256:	FCCA56B2F6B2AAD976A51908B8AA918D21AD4A0711CFE149BC9ABD3D2C34B2C9
SHA-512:	C6D8307631E418EE02C27E569B84E19A5E26C9504BC6C9FCDEDE09F37B4AE1218C1C2659761E50F423761733BC3A87FF2F2AD086AC8B0A35FC083BB22F4C9C3E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@.......d.....sRGB....... .IDATx^.._ld....w.ug.=..5s...F3..A....A./.......(..D...RK.(.n.(.q.D...%Q..$..C......S...F.Q.(...9w..i..[.7Zn.s.....v.,.z.x..k..g.....&... @........,.V..... @......$.hA@....... @`.....X.%@....... ...... @........@..R.... @.....h1@....... @`.....X.%@....... ...... @........@..R.... @.....h1@....... @`.....X.%@....... ...... @........@..R.... @.....h1@....... @`.....X.%@....... ...... @......../....c..$.o2s...\............0.u.u0+..L....9.e....>v.._.U.n.? .<l.y.{..C..G...d.f..(.S......W.O...Q.)..xV..=}.S..i7..b.]3..W..h..O..1.Pe.U^.....H..U.N..;-!{,Q.'.&..\|...=.N.~..7Qx..}.J..sM..E.cR.Nz.S..}U.?O.\u...\-.N..L...<-..?S5.f..E.W.KU..z...Y...3...i........cU~....\|l..~G..4.s...<.of..cq<.+....T.{.,......r.k'$.%..^c]\|.>I....... 0C.m........(.A2]..tB.<)a....+.}.$....0....o.{.....a.kF....r...D......Y..5...U}....L....d1.....]U}..&..c....Wy.....?...g.....C..i?.......}.....Ec....6....x,?v...?:....1

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	47560
Entropy (8bit):	6.903599234923973
Encrypted:	false
SSDEEP:	768:BD/vJAaW/mHYv3mh02RH3deFvmh0ylH5x64mHyr6mHyrmXz47a+NV1:BD/xAaWjv2h02RH39h0sr+rmXU++P1
MD5:	A51A0E278C95C61A3A4BF2A46E7407A4
SHA1:	DB17A65B4D0113DD834A621A4087930B859D05B3
SHA-256:	20559616BB94A1FAFF34703FAAC6E325821EBC0661257C03C56E88C867140605
SHA-512:	AD816D1F91F3C5AA9CF9CE7515194321A9BCD582DB3F3367A46115113D50FD4BD95263EC9658C85E14658270AFC4D439EFD7E32F454332CE74347E34C8B8E7F2
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/fonts/Archive_regular.a51a0e27.otf
Preview:	OTTO.......@CFF ..>.........GDEF............GPOS.t.#.......(GSUB............OS/2l%.........`cmap^>V.........head...........6hhea.?.....d...$hmtxC.C].......Xmaxp.VP.........name............post...2....... ..P..V..........Wg.._.<..........$&......$&............................J.x.5...J.s.J.Z.J...6...J...0.W.2...B./.+.2...f...1...Q.'...=.I.".O.'.2.P.5.S.6.5.1.1.6.5.".5.D...B.E...9...1.z.7...1...9.e.B...0.,.1.-.B...4...9.......J.F.J...J...J...7.t.J...6...J.]...>.....B.\|.......J...\...7.$...J.Q.d.......X...!.....R.....c...#...J...0...R.,.+...9...9...1.,.F...*...#.e.3...(.....,.`.9.1.-.B.".B.".B.".B.1.B.-.B.Q.d.N.....p.....,...........................s.J.s.J.s.J.s.J...8...8...8...8...J...7...7...7...7...7...B...B...B...B.\.....9...1.......".../.1.1.&.9...e...H.....A.e.A...A...].%...<...7.e.......A.....,...,...-.......J.x.5...J.s.J.Z.J...6...J...0.D.....J.F.J...J...J...7.t.J...6...J.]...>.....B.\|.......J...\...7.$.]...7.$.]...7.$...0.......'.<.>.x.5.............................x.5.s.J.s.J.s.J

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	2.6118150858689284
Encrypted:	false
SSDEEP:	96:wJKZYwIbcUkr1WtlTIlRfeQ4SvC8LJqkQ:MKZYtbcUkrUlsbe9SvpJ
MD5:	2A8C751608D1A5B5A21551A9EE6859C3
SHA1:	332777ABDF555A4C30185B475E96D301C78FF2F6
SHA-256:	384B25EBFB3B80AE03D503BE2C8575A89744B81320D773DFC20351A52F08DE4E
SHA-512:	C673B0278BF5DFCA15EB03C0E763740C211BA6A0E361C35A9BED0C05580849C917D3932BB9DF989F40D610B218464CFBE08DF4D3FE3A9A35252A0057EF1D1B26
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ............................~...........................................................~............................................................................................................................................h.h.@.@.<.<.U.U...............Q.Q.B.B.\.\............q.q.............................................................................N.N...............................9.9.R.R....................G.G.........................}.}.....3.3.0.0.................'.'.....................w.w................:.:....................{.{.{.{.........%.%.........2.2........q.q.....z.z.............................................................................................7.7........................................................(.(...................................T.T.M.M.l.l................z.z.D.D.B.B.j.j...............................................................................

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 118 x 130, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14883
Entropy (8bit):	7.975053945157043
Encrypted:	false
SSDEEP:	384:EDusC+5PQQ/gKNRUDuUD4GbtnO7FkpfiuR/16qGz:89rPVzXUDrPtO7Fkd18z
MD5:	8826EB232B2BA2C08DC2C423991276BD
SHA1:	93B8683A463F7EDAEB4EDAA296978C963A90EF8C
SHA-256:	68E9C54868981CBC50D4600A6C4AB3CEA37308B66021F6AB8715EC91AD4C601A
SHA-512:	A86D048E2E128A44F9C1D29B8D3EE1633D5BBA10A57597468C4F1E33E7C2909619C737596287C6FA0E1793EF05EEE79A6BC6C687F99AE363420F330CEBCB7F36
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...v...........<.....sRGB....... .IDATx^.}..$Uy....z..6.w`6fX.0 ..D.QTT...c4.[L\.O...1q..E.%...Hb..D...%2..,...3w....9...Su.g.}..\.~...S.]u..}..[...6'W...:qR8.....~#.U.c."L;_.%...U....pN..KO..}R.........5.<.p...`..Kv...w..g~..%P.v.....?}.WU,"..~P........b;.s..p.............+...~.Y/.wO.\|.o.d...1[@........k}7....^2.....+......xq.Ln.....q...j....}.w....8......V-[8p.%.sz.8....-.cLZ.....oO....3....Er.........(W..G..^..o....9Fk2.r.'..e.\q]p..=..7.gO.u. .........y..g...........JD...Y.e.g.C.s.+[.....s./..p...}.<.d.6..k..,....,7..V...H...re.+..6..}....'.p..X..o..[6.!.\\...-...6..N.:{&.........G..p3..J.l........8....^.....w.....8`..W.r].W4`..@4U.q.....3..........@.&.J....`.Z..t......7}._d.1v..=.`v......Q.F.8...W..;...U..m.-.^............4T...m.=.?z.......P...i.,.S..X.<.jW...J.m....y..<.M.v.q [K.e.@..v...6..N>.....m.u.J.$....~.....Q....v.nA.B...........r.!.....R.2....D.......J.x\|.vLv...L.}........I......?.....c%]s.XR.~...?..O..{

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4201)
Category:	downloaded
Size (bytes):	317378
Entropy (8bit):	5.562697567297106
Encrypted:	false
SSDEEP:	6144:Cxp8OF1uFpO54gBB1xcQL7DXERaCmQdZKQW:CxTFgFcmtf4
MD5:	EF8ABEAFA68721026DF410A1436B69D6
SHA1:	3C7A027AC307C9A19E3C60A40C84DDEF2656FFD6
SHA-256:	91890D15DF55C235F4D45C528F35F720E1125B621ECA7E619845AEB421B81139
SHA-512:	F41452D46B500FF47C5A3FBED5138BF705871DA7D5BC066A43D300C8DD823846372C86CEB67B8EB26469E9BA888E03A434329315210A573F8C21706278012922
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-5RJY6ZKWY8&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 670 x 198, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	55074
Entropy (8bit):	7.9819123673260215
Encrypted:	false
SSDEEP:	1536:+x5YK3TjEYhmrpSsdvdWlmlUsvpEUKRtM5u4LfyT:+x5YaTZCMsdvdW+XHKR4LyT
MD5:	ED43CD4FAEC430DEA22831297A7035CE
SHA1:	3F4A645B66E9861C14AB9A082A495465E1200CD3
SHA-256:	01822E0FE4FD24426CEFE83CF47700925010AD7A150EFFC7ABFDF91F483FC9BE
SHA-512:	19B3B481CF93944BBE3EFE0D641C3EB233D4A2A2B7ED627AF491F72CC8218AF559DFD2A0360EA4D3D462CEFBA384ACF12676E1A9E5E3A619BE8D75CFA0158149
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............{4. ....sRGB....... .IDATx^.[.nKv.Ts]..g...%............. ..!<.!...P..$<..... .. ...B...%A(\.....@.!.n.....u..?..Q..QcT....9g........Qc\|.:.6.p...\|..X...!...B.........!.;....!..K..............,.m.&.....u].3...B..X..Sj.5...eY~..1t.t p p p p p p1....bP...A`]._.B.C!..*.nz...eY~....................G....~...X..I...!......wOk...5\|..U.......................=.......u].{..'B.?.B.sZ./<...S..!....U..2...eY....@.@.@.@.@.@.#..Qx~...:...q.x.....k..^.k.....:..iC.B......W.e..................G.......H.u]..~_....e..5..?..7..cTp.a~.f....f.'.S....a.............Qx^.....u].(.....~3..........U.Im.8...U.ug..eY~j<...@.@.@.@.@.@...Qx~.....+m...!.?.Bx..:....^b..>q....e...!\|qY...=~............>.....GPi....u..C..._...^...qZ........V5.....,..GE...................<.....YN.....,.{.5.....7.L...'.e..j..nY...................^..G....x....WB..Y...>.Y.tx.f9}....3.!\|...f..e.[>...R..................W....d..O.....i....O.3s.K..(/...v...t.._...~................\..

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	373679
Entropy (8bit):	1.2401078089227136
Encrypted:	false
SSDEEP:	768:0HAdyrqRu1R8HnfB0HAxRMaA2iRWO/6LxoTR7yQ1nwn:0gErgLBYLUqtyxoFwn
MD5:	57DE31511CB21541390454922B97B93B
SHA1:	8A3F16B865015E254A5C59A4CE88D14A05D66DB2
SHA-256:	7C55D90364F954B91DF178204F7038FC6B5A021418DF62C6CF45756C3C50E34D
SHA-512:	4CA830063B88FC0DB3DAF6D56EA2068AB8A6781738D42C8A947645389CC88B96B1551FDA74B3C13EE0868679C7F79F497D9A8007EE7B0F80FBF7F0D9C0DCC460
Malicious:	false
Reputation:	low
URL:	https://cdn.shippinghero.vip/resource-files/2023-02-20/ZsIuf5QJP53BJNF2.mp4:2f82f414ae3eb2:16
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4948
Entropy (8bit):	7.947930260377226
Encrypted:	false
SSDEEP:	96:XOPI3AI7njjBWXEx6LV2FVs+yakKk5lw0Q/hD20EtcD/60ecRCeZ87E5:5jjBW0IU7z9Xk5lwRhDGA6VACeMs
MD5:	A22C9AFD98198C14E779579F3B5FE345
SHA1:	0D2EC5FDC70F04E8A8FF6AC1F7F8A2162EE2F402
SHA-256:	2596AEE94553F108E443DC79C93688561881AD6E3735D99DADB2568B676D0256
SHA-512:	0A5B9C313DE576BBE6443452B466C984E94AF34E5A1B1C9C1BE444475CC727AED9EC37DDF030E21DE77CC8DEE0CEAB1A771F0A5FBA35DF3BD4C8953DD5D686A3
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/no_time.a22c9afd.png
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB.........IDATx^.\.tTU....T%!.I%..D..". .j....A.Q.......c.tK;.5..hK..2j;...&..B. `..IU Tj...s.{U...JU...L.1.X...{../...{..u......!.........+..2h.eY]`e.@.M.P...l.C...T....;...!...3.t.......r.......}.....z.C...{..G..c`0..aI......f.._QQS. ..CS..D...6W.5T..a:..N.>.x2....\..o#.P.{N..;......Jl..\|....1.$....8b.-++.ub?'..2.\...!.a..A.."PP...8."".3:=..U.s.R.m.DRqg.6.g.l....W..&....9)`135h....G ....A.f.&B....$.X.Q..."r.....}(.....(%..(..R=...bf.Ao.JL.Su..{w...c.....R..@..j.......T...3...d....i.....u...a.:.JSud0..x.......G...+..3U.`....2:...a.L.....p.7`f......rb.6 .y).U.{.....~.D...X..\a.M.Y..s...........6.....S.Fm.Z...d.`..\o..n.".f....e>....!..q0.."1........#..'....A.S.r.....u0.H.mJ:>.gN..yG...,7.{.~S2z...(u.+x.W....]Gh`_..B..........5CY..X....5.d...v&.n.....[.'...I...=L..Y..pP.<,m.Lf...y2.).6...`.d.j.;X..-hv7.......v.d.~...D...@.w...m.A.G..5.M...A..@.1....!u....r.-.....j......Es(..2!...P6.g..F.......P.s3e.i.U.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2053
Entropy (8bit):	7.565379714147097
Encrypted:	false
SSDEEP:	48:JfmD9ySlANlnFALcxJ/rbLO84/2yFaOHQGmH7hzKPk:kRywAbn3lrG84NFmH7hf
MD5:	19056E8DCEC69218C3CB0C675C093794
SHA1:	BE9DF7DF63B7089DE890392C61F8FEEE5DB8E6A2
SHA-256:	5A5E96AA3612AEBFEE4EEF0829A193126179320BFE9EE04A6BF9382A3220024D
SHA-512:	92964CA247A42CA8FBA8849510E293B06D0D899040459E70E712F1D194D7DCE4B8683479E6FD07102444959E37F1B73D4273F050613F6498D15CFC3666535704
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............^.....PLTE........................................................................................................................................................................................................................................................................................................................................................................................................................!.......tRNS....@.`.....u.LJ....[....j.0.........b../.W3Xo.M....rFUJ.e...-..D}xkn..{Q_...).Y.6(.$..<n"v;VBNS%O..a <H,7Y..Rb.........2..i741........IDATx...{.J...n.u.;U.A.(P..pww..~..-.....d&O........-..M:......k..O..(ko/.Q.....vxlb+....b..L.v.^.KV.W.......Lbk;g.."....b...K..]6K..Z....O..Ta......>.{.i...z.B/..Vcg@......V....VI...T.D..4.<'.<w...>..,.....R..\...yx_...a...!(..?m0T.{....e.._..y..T....$.8I.D.bb.\|Q..Xn.he.`..VV.......=.j.n.?B._....wB#6.jL.<\w...].......7..n.....n.1.'.*..F.JJ..B..z...L...Wr...F"m.....

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9574
Entropy (8bit):	7.963545666907591
Encrypted:	false
SSDEEP:	192:FS0AXpo3We5owMUpfKBaHjjeiZ4NMs8UxdFZLFa3RV89FEDWzppsp0T:k0MpA9ob4fnDjeiuMs8e1LFab8HEDWzZ
MD5:	F0F6FB1C05D7595623686E8778F3559A
SHA1:	58B6596D4390338D4996E23BB8966D8C24D72F77
SHA-256:	4BDBDB5D68509E4EBF29FA9F24DC4DAE021816422745FCCA96D9527DC5604073
SHA-512:	CAEA7EA9D73565CD9CD5B764A9C896DE8B361504B644A7C047012601E2B2C71E900CB9474B629EC9BE8FBEEFEBDDA339DF4FAC5E9CE68ED5265A84A35841AA36
Malicious:	false
Reputation:	low
URL:	https://cdn.shippinghero.vip/resource-files/2023-04-13/nP16KABtPQPg42Ti.png
Preview:	.PNG........IHDR.....................pHYs...............%.IDATx..{.]e}.?.Zk.os.$..L2..0!@.FA"..qU...>....9R.s.VOm.^..Z..mk-.T... B.........$..e&s.....=..{O..3.\2{.$..yV2{..^{...}...........[...t.......Pa.H..La..#@7p.8..(l.9..s.q....X.\.l........M.>_...oY...-......[.....9.J..J....+PO....U.~.0.[...<.lE...1.$"D.M.....a......p....)....g8CH1........E...0&;0a..&m.d.?eqd4.-0.I..l...........74...W.....uA..=,.@{. ...l.t..v...O....9.\|%B.....(eo..x.m..'-..ey.x...@.&a...K.d.....Hp......B...4..@.`.A@..!...Q.Fs..=jpQ......"..Ss...Q..C.......f...K...>....N..........8..?.0.s..9d....)A....!....Lc,Q..i.....8R..k..5..:.~.E!..[\|.S.eC.....T.o...x...pdz..z./Dh.....X......~[_.m}Yv...M....Fs.......z.E..f..p%..v....:.>.....&..Z.lh.....:....q.[@o..w.5..P....P...].9.c.4/...JZ.IZ.m.!.....j.~2H.T.8.[JB.`i.CG...^6.....Op....X..6j6e...........@.t...4?>.b.I..I.xt..0..G8.,Wb9.....r^...w.y........(.....Dh....]`e..36O...dO....o.$....6o..28.L.%.HV.{y..........%8......w...b.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1353
Entropy (8bit):	4.937287525710615
Encrypted:	false
SSDEEP:	24:YtEiOWFi9Kn90q+q+q+zIvGW91kqPKHQFk5EX/g21mL:YtErgIv3LBV
MD5:	4DE48398AC44C7C0A88FFB2A93A39BEC
SHA1:	FA7AD0FC7A5EDF77CE9DA3136ABC9AD25BD4CF9B
SHA-256:	D3C88D0FF605600340C585E0FAACEBC4ADDFFFCCAB8E7C7AAB254C0D277E559A
SHA-512:	EE96DF5B5A6E615276B7260EA45093CD1C2653988125539E24F2AA3794C05086AD919AA8EAA0EBEBF075C2D5002D48AF160EFD49061617D79FA40FD4A9AF3FFD
Malicious:	false
Reputation:	low
Preview:	{"status":1,"code":200,"msg":"ok","data":{"lists":[{"contents":"+91 995**819 successful withdrawal Rs 500.00."},{"contents":"+91 824294 successful withdrawal Rs 500.00."},{"contents":"+91 741889 successful withdrawal Rs 500.00."},{"contents":"+91 811941 successful withdrawal Rs 500.00."},{"contents":"+91 881309 successful withdrawal Rs 500.00."},{"contents":"+91 956516 successful withdrawal Rs 500.00."},{"contents":"+91 956516 successful withdrawal Rs 500.00."},{"contents":"+91 956516 successful withdrawal Rs 500.00."},{"contents":"+91 908998 successful withdrawal Rs 500.00."},{"contents":"+91 896649 successful withdrawal Rs 500.00."},{"contents":"+91 882877 successful withdrawal Rs 500.00."},{"contents":"+91 822562 successful withdrawal Rs 500.00."},{"contents":"+91 956995 successful withdrawal Rs 500.00."},{"contents":"+91 884300 successful withdrawal Rs 500.00."},{"contents":"+91 777**631 successful

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	96404
Entropy (8bit):	5.565568812590006
Encrypted:	false
SSDEEP:	1536:OlIApuK7hmVmb2RS1Wu3xdyn37ehgnKhlvbc:VApuK7hmVrS1Wu3iy6nKPI
MD5:	97A29764A1DF91AF2F287E5641B1EFEB
SHA1:	887CBD5CD4630164C4AC6B8738D8A32459C920D6
SHA-256:	F6789EE8A50F44F18BA717956BD34C4CD17B1D658443E92408976907B83A0242
SHA-512:	B54537789BC819FF8B1EDD39E579AD2C5731E399379E817F3BEDBC3105853D87891BB19DC0373F4D3AF03554173EF4C486E5F6B85CAB3B8CD9EDCB8B5624F67A
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/index.97465e7b.css
Preview:	uni-tabbar{display:block;box-sizing:border-box;width:100%;z-index:998}uni-tabbar .uni-tabbar{display:-webkit-box;display:-webkit-flex;display:flex;z-index:998;box-sizing:border-box}uni-tabbar.uni-tabbar-bottom,uni-tabbar.uni-tabbar-bottom .uni-tabbar,uni-tabbar.uni-tabbar-top,uni-tabbar.uni-tabbar-top .uni-tabbar{position:fixed;left:var(--window-left);right:var(--window-right)}.uni-app--showlayout+uni-tabbar.uni-tabbar-bottom,.uni-app--showlayout+uni-tabbar.uni-tabbar-bottom .uni-tabbar,.uni-app--showlayout+uni-tabbar.uni-tabbar-top,.uni-app--showlayout+uni-tabbar.uni-tabbar-top .uni-tabbar{left:var(--window-margin);right:var(--window-margin)}uni-tabbar.uni-tabbar-bottom .uni-tabbar{bottom:0;padding-bottom:0;padding-bottom:constant(safe-area-inset-bottom);padding-bottom:env(safe-area-inset-bottom)}uni-tabbar .uni-tabbar~.uni-placeholder{width:100%;margin-bottom:0;margin-bottom:constant(safe-area-inset-bottom);margin-bottom:env(safe-area-inset-bottom)}uni-tabbar .uni-tabbar *{box-sizing

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5264
Entropy (8bit):	7.955514430263806
Encrypted:	false
SSDEEP:	96:XPHthxjw06khYMJfMI82sAe3FETJ1W/PC5sxp6z33GCPKtDJ4p+omv4VIW:/HthZw068JfM2sAe3FybW3CO6zKZvhW
MD5:	81F2B3D309B38A2D0B1145BD8AEDAE53
SHA1:	813BAA289E62F2010AEF1A4FBF3FB32374C393D4
SHA-256:	E58437BA894323551D77E16038E228D434E68D57AFE75D47C1007E793A798463
SHA-512:	49C4B13337757796498440BA10CAD92B24833B3EF136F7772F64483762048D00034E9AD41370E4822E27C9EB6E2781CABB4FB204599C99B9C2CC59BAE997D079
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB........JIDATx^.y.eU}.?....^fzy..0df..A.30.l..B...Q.`i.`.4....E...hL...b..@..5...q...a...........:.g..u..z.I..Uw.{.Y..{~...w.y...m.D.%....V.$X.k................V..W...G..f.7!TV....@....%.(r*.J..j..q...G....roOW.^..Z!.U....e..J..)..3..U../.....D...eG..CJ.d1(n4.....V..N.65x.0....$...B...9....X.....`r.B....Gg....7rZ>222b..v..(UJ.......P....K ....y+...":...Vf..U.+.......l;uJ%.Ah.hU.....9,`)..T8u.p.@ho..%.._)5 ..(.V.S.".p..&.(.T.P.V.P.xp........Z...`)..S..eB..Z5v..2.'..`..d......"x^.6`..3....As..!D.N.Ve....5.M...!.n.T..j.@..C..ZG...!x.U.(&.D..q....`.@.......Rj=B...P.uZ@....K.......#..C.lQ`.W...X.Q..E.....)....O".].1.tPL.$.n=.).1X.1...X.F..Q.+......'j..v......}.F.c..N.<a.7..!.NA.w.....#..S..y..z ..?..&:...J..0..\|.@I..!.v..\|1.x.3:...0.....[.E.:.m.be....OpJ.N.B...PJ.~...:....:I..M2."G..Tt....L,3q........J......T..V!(.#..4}[.c...z.E..^w(.LQqv.oz.E...a6...?.c.!..a.l.g.B:...A...*...%a-:b.@i..k...,........XZ&$...7..f.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	49
Entropy (8bit):	4.022075149884437
Encrypted:	false
SSDEEP:	3:YWR4bqdBVFHlCOzn:YWybqxjCk
MD5:	A2A1A0A2CF3E189A48A8E10F1AFB8350
SHA1:	75675561F6C7258296AA5A735DB309479D67BB6A
SHA-256:	75777E07D2D1EE5C22D518D3E06EF00DC423E8EDEF3A1C77F150DB48E74EAB9B
SHA-512:	F81A77E99F474B60F937414B7078177B676E07C06DB7275D6FA6F16AE5D2C5213369243283F9D01BD3DD30379AC3DCF67AB769A1505763F1F5E6DD228D367279
Malicious:	false
Reputation:	low
Preview:	{"status":1,"code":200,"msg":"ok","data":["+91"]}

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2565)
Category:	dropped
Size (bytes):	225707
Entropy (8bit):	5.545385561919085
Encrypted:	false
SSDEEP:	3072:Po+H1CEOFp7B60iuoI1LirsiACV9ujmxcQLWU2o:g8OF1rO5lGjmxcQLWFo
MD5:	DC64661DAA948927700A7F4294BA47A9
SHA1:	84A59966A716F9A1711824F0B43CD3A35A02CBFB
SHA-256:	1710AC7EDAF219E384AB883CCFB25A61A72915227156B13BF8AA6155A52A3CB7
SHA-512:	3E8A448E118EFCB6FD09B47A7C9215773CE9A237875448E5E7E71F88AD4522BD81DDEC6C78F8DDF8C8A95ADA31DD415D47479343EB51A110CD11E2BC9BF1AC22
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"23",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"pagePath"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"pageTitle"},{"function":"__cvt_137365873_25"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.eleme

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	35058
Entropy (8bit):	7.981369838198539
Encrypted:	false
SSDEEP:	768:aOgsCqTDNnj/p2jdvjWAJhR/cllNY1V6c28JSsg/OwRhmqA8mviN8GPv3:JTDFp2jRWAPOl7Y36WSsg/lRhdCiS+3
MD5:	C3598CA8938BF2D9B53DCBD9E0788249
SHA1:	C873A485FD9C8626F475227E1AA4E95A1BAF2066
SHA-256:	38F840CDCE9D7AB412D8FEB317F55572E4A70E5F103F47AA268C4FFA10657C36
SHA-512:	B096DB2D486CF8307406511116B640BD145C6B6561763F7DE6BEF25CB8EA304F2B786341257A54D5FA14E43BE1D16DF1DA16A0D4367720CBB2CC436C128D158B
Malicious:	false
Reputation:	low
URL:	https://cdn.shippinghero.vip/resource-files/2023-12-25/b1LOrCIivZNMislm.png
Preview:	.PNG........IHDR..............7~.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............orNT..w....%tEXtdate:create.2023-07-19T01:59:51+00:00.D....%tEXtdate:modify.2023-07-19T01:59:51+00:00..f....ZeXIfMM..............................J...........R.(.............................H.......H.....R.4....IDATx..y.mGY&..U..9w.In.$d..L...Ii$ (..@;kk....M...v.-....-b....6..3a.!.!!.BB...!..9{.........=.$..u....o.j.U..S...D.t.. ..8..W.O..bpu.........x..!P..>.........^...w..o.a..A1=$...j.d..@p..\|&.tW.c0..b.....^.1.#..P`%^.!$t..#..U.S...&..Q..D.}.:^Q`.xU}`.p\|.....r~._$.K.I9....&.p.`8j.....\~...a......8..a}....YF...!.1..$....X.%0J..^.........#.Q..J7..E.b.11..j9.Xy......+Od.bDg...V ...."Wel.........q,....P.."`Z..$..4..?..@0....../.H....1..y...Rg).%E.K5=.b.sM@..K.....(.%..+.......'G.xM...U..)....4......S...........C..@u.@v.z......Dy..W..,y..LS.[.y.l..k..5.......$._&.#.eJ$..>.....!Y...rr.....T.bf&J,H...S.'.N).....#.cx..0C.X...K,..o....K.G..Z.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4201)
Category:	downloaded
Size (bytes):	320534
Entropy (8bit):	5.562627208984622
Encrypted:	false
SSDEEP:	6144:Vxp8OF1uOwO54gBB1xcQLwDXERaCmQdZ6Io:VxTFgO5ttfa
MD5:	B78D47360AE0A32A7F351DEBB333B4F0
SHA1:	1009EC8F261ED21C9C4EC3A7CB9F394053CEDBFC
SHA-256:	1986AEB533AAE38012849D804DA572405BF5A1EE6795C60C729FBD5F663A3B90
SHA-512:	0D5AF7EDA38D0B6BE7D40495005FE47B1DBD749F8D582B0F40515DC51B7C70576F90C7B7EDD818DA59C16B86E9291065916316701BB0E5544E88E58691636556
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-5RJY6ZKWY8
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5620
Entropy (8bit):	7.941132828964223
Encrypted:	false
SSDEEP:	96:pyHCpuC/rZDAgvHYC1fse1pqvUjM0faIBrfEUXYQJkimbtQABgP4xcsRrYJgWmyY:MYZDAgvHYyUmQiMKaIBrMUXTkNQABgPY
MD5:	A2F552EE8B265238F44132F9DB63734F
SHA1:	AE43DD95E8DB37ACBDE785994767EB364CCC44EC
SHA-256:	5C99F1B4E0C79E359B6D7353B00575748F652050694394D933AA9D5C2F40394F
SHA-512:	4A1A74BE65268148DD27CC9F2F187A610274712FBC6916F38BFF1FB7D8EB575AFF7B249CBB56020B1F7AB42FC6DB9593C09BD73FE87CC3B432A183C8BCC68EE8
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/no_experience.a2f552ee.png
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB.........IDATx^.\..\.y..~.......Y...-.. ......1.\|.PqH*.6..TQ......._.r.......1>..A\.1H !$t.9......Nu..jgvvt...UMi.^.>........!.....-..8.V.$8..)..@.........!q..%5..$\N....p&X..T...pDv9-/51..R.5e...xK4\...'....#P.>.....`...\|.L^...m.. .H..;z...B....F.......N.6%x.i....RFj..y..9..O.XCCC..n./ ..`........o.$.....x..9.:K..e.........A..E.J...~......e.@1.c..U.X.dtv)ur...@.a...XJ.f.....4..]..R..h...().H.!.!l...".QY..h. ...R+......z.cD.......`.!..p.j...Qc..[....k......{...8......`..;. ..]k......oT....C.......QC\.4@.O.~.\|.....z..v6j......E.....,..7>...b..B....!.....-@...?%.=............7._...........Ma J.p..b....U...?"P}. 0.2Rw..I6..r.....(B...@lQ.M.C8.;X.= fC...V~......x........VC. ...9b........a....o..L)s).......l..k....y.vd..P...a.[V.D.O. ...^......Z..9..n...<p.u^..=ch_..N2.".....g.....~t...W.)..".........\|.]....?.......xE@[.....>.^.c.o.+.p.0...!....o.... B...c.......v%.....x..=Y..)+4].#I..%..........\.MD.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (57847), with no line terminators
Category:	dropped
Size (bytes):	358342
Entropy (8bit):	5.503845795823859
Encrypted:	false
SSDEEP:	3072:g7y8FFl+h8jr8YzZleCSxAtS/b3ecY3hyjBiNYSP5FYPEoULL+ChBGlH4mhl+:g7yIFl+h8v8cZ/ijaGm3RFowLLdGaQ+
MD5:	985D05F602F171AC65258B0DEFAAD9B9
SHA1:	31C565B6906DA573B370777C74FF11C6B6449D19
SHA-256:	88CD3BDB62D43148057E369AD7E9A2A1114A336D3FC9B8C112CC0AB22EEBF5B1
SHA-512:	6F2C45CDFA03117009B9DFC99CE4F18CF7185C600E7D7E3C56FD4C8ED86A542097D697F0722FBBD9519C07CF40E7F7CEF79940695F4CA86CC3372055F3C58129
Malicious:	false
Reputation:	low
Preview:	(function(a){function t(t){for(var n,r,s=t[0],u=t[1],d=t[2],m=0,l=[];m<s.length;m++)r=s[m],Object.prototype.hasOwnProperty.call(i,r)&&i[r]&&l.push(i[r][0]),i[r]=0;for(n in u)Object.prototype.hasOwnProperty.call(u,n)&&(a[n]=u[n]);p&&p(t);while(l.length)l.shift()();return o.push.apply(o,d\|\|[]),e()}function e(){for(var a,t=0;t<o.length;t++){for(var e=o[t],n=!0,s=1;s<e.length;s++){var u=e[s];0!==i[u]&&(n=!1)}n&&(o.splice(t--,1),a=r(r.s=e[0]))}return a}var n={},i={index:0},o=[];function r(t){if(n[t])return n[t].exports;var e=n[t]={i:t,l:!1,exports:{}};return a[t].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.e=function(a){var t=[],e=i[a];if(0!==e)if(e)t.push(e[2]);else{var n=new Promise((function(t,n){e=i[a]=[t,n]}));t.push(e[2]=n);var o,s=document.createElement("script");s.charset="utf-8",s.timeout=120,r.nc&&s.setAttribute("nonce",r.nc),s.src=function(a){return r.p+"static/js/"+({"pages-APPOnline-APPOnline":"pages-APPOnline-APPOnline","pages-Benefit-Benefit":"pages-Benefit-Benefit","pag

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 530 x 220, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4557
Entropy (8bit):	7.018240544426328
Encrypted:	false
SSDEEP:	48:H93ulh5JV/b6mhUKPYb349U1cadH8NbQ38clVL5GolftGlrB:HdupHbHGKPIEU1FdcN8Mc3RtGl1
MD5:	B3C83D2A0FEBAB95F2CF2DFC974E326C
SHA1:	394939B0674755595F5898C5B8A7F7664FC275F4
SHA-256:	CBF3F4B6D26A43A52324DB09514E05740B170CAFC08D575C96DECE35280AF3EA
SHA-512:	6FDB2DE8851E90AE1AEC5AB0B586E6FC1DEBEEE1B5C534FACDF2E4A40EEB3EB295A7C607A25AA2B3F33EAAAB5CF737B038DA1E30C896A26696BCE3FD77E2BE1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%@HR....sRGB.........IDATx^.._...]...s...H...l..+Z.Vo....EQ.^h.UTl.j)MKB.]o........OH..b. Al!x......[A0...k.0;s.lR...sfg.9....3.....On.y..}?...ev....Wk.m......s.....5.F)?\"...........T.F.....[.....o.........(...W.r\7>.}7on._.-?Rk}(J..0.r-.....8..5..R...?~\|...w...!.........j..F..Q?... @....,.[k<]w.>s...rhfHl..>.....q.Q=... @.....S.F....Z_._<.....Z.........;..r..... @.....S.K...Rv.\|..>1.!.Y7.,..."...0..Z.... @. ......y.l.8..k.6$..KK...(F.A.s......8.@}.....](.........[./..3.... @...C...O...?\|...eHL.ae..3........ @....~\|h.......!1y.gY^....G.E..... @...ws...;f}kh.Cb....R...}P.. @.....#Pk<.~...Y.....ynqa.%.lj...%@..........}.....b.Cb8.~.F\|z.p.. @........_Z?..{ugCb..\....>;../..F.....f..._^.w....lHl..~wY.0..8N......t,P...X?...i^..!.5.<...iB9C.......S.<.....i.t6$...Wk........... 0?...k....L...!..b...iB9C.......U...J.......x8...se..... @....J\|om...;.<.v=[.]x.._.?.../...?.........Q..~)..P._.n..[^..'ue.P.. @....s..[[./N..@?.....j...[J...E.!

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3769
Entropy (8bit):	7.929124414531221
Encrypted:	false
SSDEEP:	96:ZpwC5EY4e5xRW6eaTzfd+TLuc7bILTK/izyjdstIeqT/1BWo:fZ5h5xHdELuqM2nytg1BZ
MD5:	3C36D7209A67C7E7CB7465B1799FE007
SHA1:	2666FA643C50AABDFE887996B91361B7596B3A09
SHA-256:	04CE99230182C6F8502B396865480EF1BEA057684FAC0E2AE0E09C8E68C5F4D1
SHA-512:	97F2097226B1B06395A5198AD46D321D2FA66A714AADF0E8618D7CEDB3287DD3184F4874EFE5AADDF5790E7C28353FCE0121CB0D4CDEB83314740089D8BD44DA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...B......T......sRGB........sIDATx^.\k...........e%.!.R<.....VQ..(F.#...KS1F. 1(..%% ........$$>..<..HY"...+%....f.{..9.......;.....C..;...;.\|.9==.>.c...(.P.....E dP.B).B......e..9.C/v#.'(...)'q2..\.SQ.V...E't...A7>F7VS....p...!<?..P..dO..$kK.G.]hF.@F.........E....Q.R..v4Q....&.LhB5r.T....Y.F.....M...<.X.....`22.b.O...R...%.@..@j...r.@4q9..-....5 y......2N3.........0.x...Z0.7,C.Y.C]...gj.k.....F.zP....&........G...V. .....D.....@-....d.Y....C...K0.u.T...v.Gm'.z...q5.Q.....q..R......K......Q..G......H%...E..<..i...A.1:..`.}0..!.5..m..]..!.I......8....F.@...w.P.....B.8i...e...M'.xp ..N.Z..#f..#....0...f(....t(..&,.`t.......P_.*....Q..P.v,..I..g... ....f.a\|d..d.!....N........E\..4.!.d'....@0a>....mI\|0~.......kp4...a......~.......o.?........Q.j..A..p0)...h....L.....Hx.8.g%...um.....D......i.\L....._Z..\|7..Xb.....@G\.L..{.e2..!.........n]..u.is..-O.W/)~...2.....aW...B...q...B..p..V.6.gf.V..Z.a.`{4$G.?...@......=.m.^J.......CM._

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (57847), with no line terminators
Category:	downloaded
Size (bytes):	358342
Entropy (8bit):	5.503845795823859
Encrypted:	false
SSDEEP:	3072:g7y8FFl+h8jr8YzZleCSxAtS/b3ecY3hyjBiNYSP5FYPEoULL+ChBGlH4mhl+:g7yIFl+h8v8cZ/ijaGm3RFowLLdGaQ+
MD5:	985D05F602F171AC65258B0DEFAAD9B9
SHA1:	31C565B6906DA573B370777C74FF11C6B6449D19
SHA-256:	88CD3BDB62D43148057E369AD7E9A2A1114A336D3FC9B8C112CC0AB22EEBF5B1
SHA-512:	6F2C45CDFA03117009B9DFC99CE4F18CF7185C600E7D7E3C56FD4C8ED86A542097D697F0722FBBD9519C07CF40E7F7CEF79940695F4CA86CC3372055F3C58129
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/js/index.21ba2144.js
Preview:	(function(a){function t(t){for(var n,r,s=t[0],u=t[1],d=t[2],m=0,l=[];m<s.length;m++)r=s[m],Object.prototype.hasOwnProperty.call(i,r)&&i[r]&&l.push(i[r][0]),i[r]=0;for(n in u)Object.prototype.hasOwnProperty.call(u,n)&&(a[n]=u[n]);p&&p(t);while(l.length)l.shift()();return o.push.apply(o,d\|\|[]),e()}function e(){for(var a,t=0;t<o.length;t++){for(var e=o[t],n=!0,s=1;s<e.length;s++){var u=e[s];0!==i[u]&&(n=!1)}n&&(o.splice(t--,1),a=r(r.s=e[0]))}return a}var n={},i={index:0},o=[];function r(t){if(n[t])return n[t].exports;var e=n[t]={i:t,l:!1,exports:{}};return a[t].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.e=function(a){var t=[],e=i[a];if(0!==e)if(e)t.push(e[2]);else{var n=new Promise((function(t,n){e=i[a]=[t,n]}));t.push(e[2]=n);var o,s=document.createElement("script");s.charset="utf-8",s.timeout=120,r.nc&&s.setAttribute("nonce",r.nc),s.src=function(a){return r.p+"static/js/"+({"pages-APPOnline-APPOnline":"pages-APPOnline-APPOnline","pages-Benefit-Benefit":"pages-Benefit-Benefit","pag

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	26445
Entropy (8bit):	7.70986924067177
Encrypted:	false
SSDEEP:	384:dLT9a9oBDznYWLA01wIdS79d9PhmVsblzjsGX1Fga88qUrYQ6:dPsaRJLAOg7/9pm4PHWFUX6
MD5:	16117719842894CC3CB832508DDFD082
SHA1:	F6632CB01AD6FD58A3A24E8AD74AD58359ADA9FA
SHA-256:	3C37EE0009F05934DDD4AEE52767F7C9876E1EF2982EA85F187926487E6263B0
SHA-512:	2B34FCBA683BF7E98EE0E2DB69ED3346ADC06D24A6FAF1AEF5540AABE3611CCDFB9114D64C29611F5D0CF543B45643EB507B7A2A526513D156A35BB09B93D2E2
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/logo_text.16117719.png
Preview:	.PNG........IHDR..................g.IDATx.....\U..qP...e... 6..[.......(.. .......q\|up@.....b\|c...U.!a.D...,. ....-d..Vw...?..L.7i..O...S.....\|f...s.n.{.]..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................S+..s.G.\2....\z.O)....d...:E........@.EA..

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5264
Entropy (8bit):	7.955514430263806
Encrypted:	false
SSDEEP:	96:XPHthxjw06khYMJfMI82sAe3FETJ1W/PC5sxp6z33GCPKtDJ4p+omv4VIW:/HthZw068JfM2sAe3FybW3CO6zKZvhW
MD5:	81F2B3D309B38A2D0B1145BD8AEDAE53
SHA1:	813BAA289E62F2010AEF1A4FBF3FB32374C393D4
SHA-256:	E58437BA894323551D77E16038E228D434E68D57AFE75D47C1007E793A798463
SHA-512:	49C4B13337757796498440BA10CAD92B24833B3EF136F7772F64483762048D00034E9AD41370E4822E27C9EB6E2781CABB4FB204599C99B9C2CC59BAE997D079
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/millions_users.81f2b3d3.png
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB........JIDATx^.y.eU}.?....^fzy..0df..A.30.l..B...Q.`i.`.4....E...hL...b..@..5...q...a...........:.g..u..z.I..Uw.{.Y..{~...w.y...m.D.%....V.$X.k................V..W...G..f.7!TV....@....%.(r*.J..j..q...G....roOW.^..Z!.U....e..J..)..3..U../.....D...eG..CJ.d1(n4.....V..N.65x.0....$...B...9....X.....`r.B....Gg....7rZ>222b..v..(UJ.......P....K ....y+...":...Vf..U.+.......l;uJ%.Ah.hU.....9,`)..T8u.p.@ho..%.._)5 ..(.V.S.".p..&.(.T.P.V.P.xp........Z...`)..S..eB..Z5v..2.'..`..d......"x^.6`..3....As..!D.N.Ve....5.M...!.n.T..j.@..C..ZG...!x.U.(&.D..q....`.@.......Rj=B...P.uZ@....K.......#..C.lQ`.W...X.Q..E.....)....O".].1.tPL.$.n=.).1X.1...X.F..Q.+......'j..v......}.F.c..N.<a.7..!.NA.w.....#..S..y..z ..?..&:...J..0..\|.@I..!.v..\|1.x.3:...0.....[.E.:.m.be....OpJ.N.B...PJ.~...:....:I..M2."G..Tt....L,3q........J......T..V!(.#..4}[.c...z.E..^w(.LQqv.oz.E...a6...?.c.!..a.l.g.B:...A...*...%a-:b.@i..k...,........XZ&$...7..f.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3649
Entropy (8bit):	7.732139832980448
Encrypted:	false
SSDEEP:	96:elmGRGiy+6a/rD+gJcwTjpBSSSSSSSSSSSSSSx02:gmGRGDa3Jc8jpgSSSSSSSSSSSSSx02
MD5:	9468071E1C9975E47CAC235DB9356EF0
SHA1:	C111A304D6A437C01D4335DEA91023A79CDD0180
SHA-256:	C6541556E32541EB8BC2B0861392C16C45F21DB908428D3A11F01D182394EB56
SHA-512:	2A328C840C57AD67F6B1E1CDF7CFE092C8CA5FD8EEDF5EE737FAA25F969A3442D6F5CE8A598B1BF6019EC442DFC1D6A02FF227D053BAE25355168AE914A38D20
Malicious:	false
Reputation:	low
URL:	https://cdn.shippinghero.vip/resource-files/2023-12-25/Ca3LTaMQl7OLCg1K.png
Preview:	.PNG........IHDR..............X......sRGB.........IDATx^..pT......o)u@....hi.Si.Bb+..A[+.:5.$.R...eP.'.........Z...H.....J..l}......In....d...9{..wf'L.........kH6.6..S....]@..9T@}...B...z\|...!..f"ZM....7.Cz}YU..L...>Y\R1..h..u..1(.dO`g......ZF...(U.2Q8$.^..._..5.UeC.......B_/.s.......^..CQj.#D.mRM..........el4.Z..T.D......A@..u.U.s..}.S...... ./.. l........... .F.<.T2{z..c.Z ..<%...8U.JH.`O..c......E.K.-..Pc.`...E..{.~o".W$.A.."......=..(.. .p..?.........@.E.........q... ."\D.O.......E..D....'.A..C\."......... ..!.@...Q..h..@....W.H..(.E... ..{.+P$.A.."......=..(.. .p.%..}N..N8.N<....?.=...0...F...D..4.....5R....}.m..C.....I{@...H...J..t^....s.H?;u..T............~/..>(...9...1C......F._:."1..k..3.....4......o.....}..$? H.w'.g.E.C.!H.~.&.\|...$.(OgJ.;.F.....p.x.m..}...t../.3p.I!..[...{t;........].=h..A.../.....<...O..e2..1.....K.....~T:._..... .. ....7c.w\|...Y!H... ...O.B....8K.Z.A..d.{....{..3{tI..SA..x(=H`..4t...+..}. .*w"0:5.....SF..!H.w'..?.3

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65188), with no line terminators
Category:	dropped
Size (bytes):	899379
Entropy (8bit):	5.420133075418542
Encrypted:	false
SSDEEP:	6144:hWA3PKLAuI/ZS1SQUTz5CfbNZCafbKvmBFPV9bhyc/Iz0Rgg7PclczJ6gdFCkmYm:juIZS1SPTz5CfBZ5xuegG7UdjNb/
MD5:	2BDDA0EC52A0C487C97D2A27A77093D0
SHA1:	A2994336D5B5FBE555A4D9A1C08CD68FEB6DC8EE
SHA-256:	8D806A8E86A1EF3F36145C3E49F17361A6C60BD76AA35CAB9633C92923D7A3C4
SHA-512:	0043986609B4AB3E0DFC7F47759108CBAA6E3633B0B5D6A810C862C415E8E44E1AF3EE646D5DCE51E892367170537667D1867213E2DA0988DCD14B13F1CF3BAB
Malicious:	false
Reputation:	low
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-vendors"],{"00b4":function(t,e,n){"use strict";n("ac1f");var i=n("23e7"),r=n("c65b"),o=n("1626"),a=n("825a"),s=n("577e"),c=function(){var t=!1,e=/[ac]/;return e.exec=function(){return t=!0,/./.exec.apply(this,arguments)},!0===e.test("abc")&&t}(),u=/./.test;i({target:"RegExp",proto:!0,forced:!c},{test:function(t){var e=a(this),n=s(t),i=e.exec;if(!o(i))return r(u,e,n);var c=r(i,e,n);return null!==c&&(a(c),!0)}})},"00ee":function(t,e,n){var i=n("b622"),r=i("toStringTag"),o={};o[r]="z",t.exports="[object z]"===String(o)},"01b4":function(t,e){var n=function(){this.head=null,this.tail=null};n.prototype={add:function(t){var e={item:t,next:null};this.head?this.tail.next=e:this.head=e,this.tail=e},get:function(){var t=this.head;if(t)return this.head=t.next,this.tail===t&&(this.tail=null),t.item}},t.exports=n},"0366":function(t,e,n){var i=n("4625"),r=n("59ed"),o=n("40d5"),a=i(i.bind);t.exports=function(t,e){return r(t),void 0===e?

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3
Category:	downloaded
Size (bytes):	44401
Entropy (8bit):	7.963663990350384
Encrypted:	false
SSDEEP:	768:csIkhpph7UQMRK4CtNs3wsp2BBHrv1g/OjQ6hAWdw3hfKEUvCSV+RKXZNSfwPs+:5nhp2G3soBxZgGhlYhiEUKU3Pf
MD5:	136E3527E2A0B7A623B3CA8EE3CE1BA9
SHA1:	9CAB83DD7C233DDCBC1090C5C3C0B0FA82F6D800
SHA-256:	E7C466F986E79573667DBA1E6F11D6CC7769C8D06542EDA1751B5F2A98E07D15
SHA-512:	8635123368819E64B71A7E9ACFC6AF5B8DFA159ABECD30E76F9DDA344A600FC78CF5BA08F31D5837AF1290A94764579C9B3D90352C5794A45D8FCB7AD1153268
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/register_header3.136e3527.jpg
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................D.........................!1..AQ"aq..2B...#3Rr...$Cb...%5S..4..cs................................#.......................!1.A."Qa.2............?..'Ye...5e....j.]9e.0.,.u. e.Yd.,...$.u.Y..$.u. E.R".... E.l..$NIdB'$J..X.b.X.(E".YdF..`.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5227
Entropy (8bit):	7.943879829452175
Encrypted:	false
SSDEEP:	96:1PNuzTNwq/8TGEKhArOqf0hxc92+lKf1xWv7io0oqPUC:1VuPNPEbrOqf0hxY2CstomMC
MD5:	B30711A6D73E1488BA77FE950C84503B
SHA1:	457704A6CFAAB8AF992D1BABEA8BC44CDADC428E
SHA-256:	C8FEDBAF7570D47D5417398531B115E819B45446EC2BFCA187F17C611D69EBC8
SHA-512:	1E4BAFEEC407718EB02849D549DA4FE844D5F86714D50F338439195B566A90FC4ED612FBE0417AAF2F3DB6A7A20FE0B1057F22F5D83C9B74F0C96229057D57B5
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/only.b30711a6.png
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB........%IDATx^.\.p...^.sh..H#......L.`s&..(.KR."...U..l...fkkC.=+)....1......`.Y..m...6`.\|I.H.uk....==3.fF...H.]]...}}.......M.\...y..@L.U..L.5.V..T0t.&......~....Z.Vy.....&;JD!...`.@.-..H.~f.VX9ei.I./qbJ`J{..wV.~"`13..F.r..`..U..F.e..`..CD..>V.;N(X..m./..b".Vxm..g....g.3.N.:0..g8`B.:...@&p..e...3..Qwgp...W.]?..%G.a...:X'.'..(....3...w...gr.R..5...Z.`.......j-.......e.Y......C.. p+........5 ..x...,..0zA.....t.....c...d.W...1...3..-.@S.;...v>f...E.....6......b..\|D.."j.m..e2vfY.Y.g..c....jO./d.[.T.8.8..kA...E..I.v.....Nv..t.)t.t!.N...y.....u.....^..6T.W..fb.].Q.u,..7f.`.S.@...P.\OP.`..r.1..@s.!4..zX..lCQ.h...0`.&L.....NDPX.x./..S...``,....g....'......89....6....K..8....q.d.Z;O@..G.t....a.4=..I....M.%PbUTE.t:...D/\9-8m...$..6,..........j.i.1..C.6..Tl'...8'.sl.u..@..hj.c.G`Y..YMU..:<.G.b........TM...U..U.m.@H'.X.....y^&pQ.E.dJK=3..v.....bf...X...b'.mT..M6.8...G...{..wZ...G.a..xL.t.b..(.b.(..

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	543
Entropy (8bit):	4.579270515215699
Encrypted:	false
SSDEEP:	6:YWybqxjiJcv8FMFYfKXC/klLFY1J/5U0JEgFY3leYSi/0TJhFYT+S/XgFYey/xlc:YWybEiG+KXzc3XJEXlHcTU+KRRw93Nr
MD5:	E2EE46D49C9604B24B17163EFEF113AA
SHA1:	CA6A18F9B1B8E91ACDF7209E7FFF74C715457862
SHA-256:	40CE792BD93A80E20180E790DCBD2067893602FD4DA3BA40E53B461EFB6D8806
SHA-512:	70F39DF8B0F4F19541F01D1DE8E7D70A289BB06C67CF4399088C5341580BFC8FB3994CF9A329F2214FED49A95CB61F255241C25469A212A006F95DA594F7538E
Malicious:	false
Reputation:	low
Preview:	{"status":1,"code":200,"msg":"ok","data":{"lists":[{"name":"+91 952**783","amount":"+Rs 9567.89"},{"name":"+91 736945","amount":"+Rs 8321.44"},{"name":"+91 891227","amount":"+Rs 6721.31"},{"name":"+91 992518","amount":"+Rs 5932.76"},{"name":"+91 761367","amount":"+Rs 4879.55"},{"name":"+91 810899","amount":"+Rs 4165.12"},{"name":"+91 995294","amount":"+Rs 3912.67"},{"name":"+91 931471","amount":"+Rs 3265.89"},{"name":"+91 783711","amount":"+Rs 2849.75"},{"name":"+91 847**222","amount":"+Rs 2087.44"}]}}

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5456
Entropy (8bit):	7.94496070647304
Encrypted:	false
SSDEEP:	96:ekgLqYAvuv0bPSJJb2PxLf1P/taL/ksaoXKyVG1z0g12GeE5A8vdKRdxc:ekX5mMbajgD1P/ToVkX1H1Ybc
MD5:	C05FBBD7BCDD5E14D07E652823720A29
SHA1:	46BD0BCE8C0689ADB9BFFFCE9911B0A4B98E66AA
SHA-256:	96AE5E6D01C2166E819A9A8D3A0D20902A3123285309480E4B89F9C32ACAF8BF
SHA-512:	E3E00916A065F1DF4429EFA7A066CC7803F6F1EB3BD312FF0C50449935F7F1771D616787D814B4B493A4F80C799FA5D7B798284395B2157738856EBD1850D46E
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/no_investment.c05fbbd7.png
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB.........IDATx^.\...Wy....s..vwv.^K.dlI..IF>dc,.S..0...........B\.(...."qb.....bp.#...S.....[.fw.....?....3...q%;U..;....7....{o.K.....[.5..X. ..XK`...y4]b..X.@`.M...z._.S...#.n.'......@...L%./Os..C4T..s-J...g&&....@..... ..h.>0...2.. x>W0.^..9.(..r.9;z..b..;.N)u...@3..uO.. co......n"r.:g!./.X###.Hwd3.7..-Dg.\..=.g0....._Z..,\|P..F..l6`..`...E............2kO);h..6E...m....g.h0.....i. `13.yc..8.@..}....9E.V0..d.....<...8....(...ww....Q...u.c....1..bb:a..U./c`....." 2.y.8....S.....\..q&~.....f........Z...o.......L...1i.....t."<6.}..u-..~:v.?j.4P..n.H..af^............?#..g=U!.._.....KLo...>......7..n...=.f..P....e......b...K..?v..E8..\........F......<..}...\| ...n...6..e.....c......a.=Z.7X.r.\2....4....qd....<..Ap}..P<.n}.? .B.k.......k.8....<... ..]....c..J.G..b.]i+}w._....V.....oo..p..A..y...BP\...... B.(.IU..-..!.._..$.....,.,.e...p=.e.F....\|d...-S.....a.7w.......y...3..4"z...*...cB..o.YnC..Y.B..

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2053
Entropy (8bit):	7.565379714147097
Encrypted:	false
SSDEEP:	48:JfmD9ySlANlnFALcxJ/rbLO84/2yFaOHQGmH7hzKPk:kRywAbn3lrG84NFmH7hf
MD5:	19056E8DCEC69218C3CB0C675C093794
SHA1:	BE9DF7DF63B7089DE890392C61F8FEEE5DB8E6A2
SHA-256:	5A5E96AA3612AEBFEE4EEF0829A193126179320BFE9EE04A6BF9382A3220024D
SHA-512:	92964CA247A42CA8FBA8849510E293B06D0D899040459E70E712F1D194D7DCE4B8683479E6FD07102444959E37F1B73D4273F050613F6498D15CFC3666535704
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/images/team/activity_icon.png
Preview:	.PNG........IHDR...............^.....PLTE........................................................................................................................................................................................................................................................................................................................................................................................................................!.......tRNS....@.`.....u.LJ....[....j.0.........b../.W3Xo.M....rFUJ.e...-..D}xkn..{Q_...).Y.6(.$..<n"v;VBNS%O..a <H,7Y..Rb.........2..i741........IDATx...{.J...n.u.;U.A.(P..pww..~..-.....d&O........-..M:......k..O..(ko/.Q.....vxlb+....b..L.v.^.KV.W.......Lbk;g.."....b...K..]6K..Z....O..Ta......>.{.i...z.B/..Vcg@......V....VI...T.D..4.<'.<w...>..,.....R..\...yx_...a...!(..?m0T.{....e.._..y..T....$.8I.D.bb.\|Q..Xn.he.`..VV.......=.j.n.?B._....wB#6.jL.<\w...].......7..n.....n.1.'.*..F.JJ..B..z...L...Wr...F"m.....

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	580
Entropy (8bit):	6.718697490430258
Encrypted:	false
SSDEEP:	12:6v/7JGwV/GvihwtZLN43/pa7K1v59Y5BDaiVxYyYUD6VL96346SwBVvNKZcy+bb:FwVOd4382VfY5Bge6VL9j6SwBhNxbb
MD5:	7427E0A7A90B982D0D7EDB662054C40C
SHA1:	F8199CE038282CBD37FA939F2FD9E047B08DC7D7
SHA-256:	5BB4A84DE8B1BE0815802669EA3A674DE6FFC0245C5C4EF08B9E1BD8B72D9FE2
SHA-512:	6CC1B7CF9EF6B18D0F1A1174206E0CA5A032A6F72D5561564EEC04405C74C09C21A102B92F2F74D6C905B14CE6C7FC9FEA9218E8622692AB719AF245644A61F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............7uQ....PLTE...........................................................................................................................................................................................................................CU.....ItRNS.......{......~.N......E.'.V.1E....$..7.Z..l/..P..@_#..I).+.3.d.6Lo...h....IDATx......@.E......;..{........@.}.9.....KOJ3.0.....$(.gA.2.....JK\>.\.._6..Z.`Aj{......<.\|..;..../.l............%..:....^.......~.b6r.n.&.s.J...M.6..afx....b..y...b..~2....p.nr..Dc...u.(F...\."}L..5?.....2L$....IEND.B`.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.003096052133837
Encrypted:	false
SSDEEP:	3:YWR4bqdBVFHliNSfwh/P8Y:YWybqxjiNSfwh8Y
MD5:	3CD6C359E5F35A2FAB15ED4A6AC24C8C
SHA1:	D55DE0FD80BE2494305ACE448C888164467D148B
SHA-256:	BCF12382230127E9D33E507A300F259D921C7990FADBF135EF76B8F558B0D091
SHA-512:	21C033468CDF8EC0C2421C8F86477767673F63011BF35A9A912C59D12A76DA7CD94E1F65D99700EE0AFF03FFE4CD29D871056BC4F9A915362404C9DBB90C76DC
Malicious:	false
Reputation:	low
Preview:	{"status":1,"code":200,"msg":"ok","data":{"h5":"5.0.3","app":"5.0.3"}}

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	35058
Entropy (8bit):	7.981369838198539
Encrypted:	false
SSDEEP:	768:aOgsCqTDNnj/p2jdvjWAJhR/cllNY1V6c28JSsg/OwRhmqA8mviN8GPv3:JTDFp2jRWAPOl7Y36WSsg/lRhdCiS+3
MD5:	C3598CA8938BF2D9B53DCBD9E0788249
SHA1:	C873A485FD9C8626F475227E1AA4E95A1BAF2066
SHA-256:	38F840CDCE9D7AB412D8FEB317F55572E4A70E5F103F47AA268C4FFA10657C36
SHA-512:	B096DB2D486CF8307406511116B640BD145C6B6561763F7DE6BEF25CB8EA304F2B786341257A54D5FA14E43BE1D16DF1DA16A0D4367720CBB2CC436C128D158B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............7~.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............orNT..w....%tEXtdate:create.2023-07-19T01:59:51+00:00.D....%tEXtdate:modify.2023-07-19T01:59:51+00:00..f....ZeXIfMM..............................J...........R.(.............................H.......H.....R.4....IDATx..y.mGY&..U..9w.In.$d..L...Ii$ (..@;kk....M...v.-....-b....6..3a.!.!!.BB...!..9{.........=.$..u....o.j.U..S...D.t.. ..8..W.O..bpu.........x..!P..>.........^...w..o.a..A1=$...j.d..@p..\|&.tW.c0..b.....^.1.#..P`%^.!$t..#..U.S...&..Q..D.}.:^Q`.xU}`.p\|.....r~._$.K.I9....&.p.`8j.....\~...a......8..a}....YF...!.1..$....X.%0J..^.........#.Q..J7..E.b.11..j9.Xy......+Od.bDg...V ...."Wel.........q,....P.."`Z..$..4..?..@0....../.H....1..y...Rg).%E.K5=.b.sM@..K.....(.%..+.......'G.xM...U..)....4......S...........C..@u.@v.z......Dy..W..,y..LS.[.y.l..k..5.......$._&.#.eJ$..>.....!Y...rr.....T.bf&J,H...S.'.N).....#.cx..0C.X...K,..o....K.G..Z.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9574
Entropy (8bit):	7.963545666907591
Encrypted:	false
SSDEEP:	192:FS0AXpo3We5owMUpfKBaHjjeiZ4NMs8UxdFZLFa3RV89FEDWzppsp0T:k0MpA9ob4fnDjeiuMs8e1LFab8HEDWzZ
MD5:	F0F6FB1C05D7595623686E8778F3559A
SHA1:	58B6596D4390338D4996E23BB8966D8C24D72F77
SHA-256:	4BDBDB5D68509E4EBF29FA9F24DC4DAE021816422745FCCA96D9527DC5604073
SHA-512:	CAEA7EA9D73565CD9CD5B764A9C896DE8B361504B644A7C047012601E2B2C71E900CB9474B629EC9BE8FBEEFEBDDA339DF4FAC5E9CE68ED5265A84A35841AA36
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs...............%.IDATx..{.]e}.?.Zk.os.$..L2..0!@.FA"..qU...>....9R.s.VOm.^..Z..mk-.T... B.........$..e&s.....=..{O..3.\2{.$..yV2{..^{...}...........[...t.......Pa.H..La..#@7p.8..(l.9..s.q....X.\.l........M.>_...oY...-......[.....9.J..J....+PO....U.~.0.[...<.lE...1.$"D.M.....a......p....)....g8CH1........E...0&;0a..&m.d.?eqd4.-0.I..l...........74...W.....uA..=,.@{. ...l.t..v...O....9.\|%B.....(eo..x.m..'-..ey.x...@.&a...K.d.....Hp......B...4..@.`.A@..!...Q.Fs..=jpQ......"..Ss...Q..C.......f...K...>....N..........8..?.0.s..9d....)A....!....Lc,Q..i.....8R..k..5..:.~.E!..[\|.S.eC.....T.o...x...pdz..z./Dh.....X......~[_.m}Yv...M....Fs.......z.E..f..p%..v....:.>.....&..Z.lh.....:....q.[@o..w.5..P....P...].9.c.4/...JZ.IZ.m.!.....j.~2H.T.8.[JB.`i.CG...^6.....Op....X..6j6e...........@.t...4?>.b.I..I.xt..0..G8.,Wb9.....r^...w.y........(.....Dh....]`e..36O...dO....o.$....6o..28.L.%.HV.{y..........%8......w...b.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4201)
Category:	dropped
Size (bytes):	317385
Entropy (8bit):	5.562822559884219
Encrypted:	false
SSDEEP:	6144:Cxp8OF1uJfO54gBB1xcQL7DXERaCmQdZKQW:CxTFgJ2mtf4
MD5:	6D7599B6228AAB3E2E6CCD33655FFA2D
SHA1:	4AEDC5973ED497FF64E41A000E09C391D1DF23D7
SHA-256:	6E0A701FEC691E201AEAA43A7AB623D7D17B3991CFAFC19B9ACE836B0E8E82C0
SHA-512:	622B3133F645A8A25452CA687ED5545B6AA319E05EA3F724DD4C71F642CE8ED272A8204BC066D1726AF3E4788027982D0FD199C684EA077058CF36452D1E0155
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 710 x 240, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	55860
Entropy (8bit):	7.966788241356306
Encrypted:	false
SSDEEP:	1536:O+9iaiOxRQ68XXFmE1oFWK9+Bh9S+jG/q/2uLLEHZ47fz9:tiZAHYXFmES7wVlL/rLLEOZ
MD5:	84992533DA0944DC5F66F030F43EF7D2
SHA1:	6E1E783ADA1EB39342BE53A67866834CB17D78DA
SHA-256:	5EEBA00F5C044DA3A6A5351AA0274FC3F69154AB3D8069006C7C96D12AA1790E
SHA-512:	0EB02E115669A0B525EF69E07710B8458682B3B6CECAF5EA915552733286446D3BE3E076C4D29E796ED5D0BAD02C2CBD35192F1A1146E85A62C2628777C504B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.R.....PLTE......................................................................q........}......'....k.....................(..2.......w.....`...%........"....b........{...+....w........g.................f...5..!..............,..1.............p..k.........................p...........e............%.[.....].........................$..)..................../..........."....~....!#&...............',...8:=..0..8/14pqs..)...y{}.....3.....6...(.F...........=.E.!.D...&w7...............).?....;....j,JLN.#.............hik.\|0...DGI.]%?ADVXZbcf..PRT.....'2........6o...k..:.\^a.x.b.z...d.xt..C.\#..9.W..!..V.pJ.c.3.A.....W.l~...-.M.M....4.O1.Hm..%\|....>.U'.B,..G.eu....W../.R...P...w".X.b.......I......R"..................-O5.......]..o..^...........`.._.....\..c.T._..oF....tRNS...................................................................................................................................................................................

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	26445
Entropy (8bit):	7.70986924067177
Encrypted:	false
SSDEEP:	384:dLT9a9oBDznYWLA01wIdS79d9PhmVsblzjsGX1Fga88qUrYQ6:dPsaRJLAOg7/9pm4PHWFUX6
MD5:	16117719842894CC3CB832508DDFD082
SHA1:	F6632CB01AD6FD58A3A24E8AD74AD58359ADA9FA
SHA-256:	3C37EE0009F05934DDD4AEE52767F7C9876E1EF2982EA85F187926487E6263B0
SHA-512:	2B34FCBA683BF7E98EE0E2DB69ED3346ADC06D24A6FAF1AEF5540AABE3611CCDFB9114D64C29611F5D0CF543B45643EB507B7A2A526513D156A35BB09B93D2E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..................g.IDATx.....\U..qP...e... 6..[.......(.. .......q\|up@.....b\|c...U.!a.D...,. ....-d..Vw...?..L.7i..O...S.....\|f...s.n.{.]..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................S+..s.G.\2....\z.O)....d...:E........@.EA..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	365979
Entropy (8bit):	7.9850388610298
Encrypted:	false
SSDEEP:	6144:+CrObVnXwi6hS6DdfOy6aUb66+JxBS/IzuiNAcMFMyGgAm:+CrObVD6hSCfOy6B+bBSAzPraGgAm
MD5:	455DF096114AB9C630FE95347113DE0D
SHA1:	4D802D00A5A5ABBFE320DE5F5156F6F5A2530EE7
SHA-256:	1D28798DBB47D038EA57FFD1C628617B0B1CA0A7B9F488BF3338019C2046814F
SHA-512:	7C8BFA3075BF7D4B267F40C3AAA6BA2F425287AC312700FDABB14FF02BEF232E2B688C1237F94D31265DED573032A19FC266EB938B610DCB654229F7B09A0E6A
Malicious:	false
Reputation:	low
URL:	https://cdn.shippinghero.vip/resource-files/2023-02-20/ZsIuf5QJP53BJNF2.mp4:2f82f414ae3eb2:0
Preview:	... ftypisom....isomiso2avc1mp41....free.euMmdat...Lavc58.134.100.B ...8!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`..!..`

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4948
Entropy (8bit):	7.947930260377226
Encrypted:	false
SSDEEP:	96:XOPI3AI7njjBWXEx6LV2FVs+yakKk5lw0Q/hD20EtcD/60ecRCeZ87E5:5jjBW0IU7z9Xk5lwRhDGA6VACeMs
MD5:	A22C9AFD98198C14E779579F3B5FE345
SHA1:	0D2EC5FDC70F04E8A8FF6AC1F7F8A2162EE2F402
SHA-256:	2596AEE94553F108E443DC79C93688561881AD6E3735D99DADB2568B676D0256
SHA-512:	0A5B9C313DE576BBE6443452B466C984E94AF34E5A1B1C9C1BE444475CC727AED9EC37DDF030E21DE77CC8DEE0CEAB1A771F0A5FBA35DF3BD4C8953DD5D686A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...K.....8Nz.....sRGB.........IDATx^.\.tTU....T%!.I%..D..". .j....A.Q.......c.tK;.5..hK..2j;...&..B. `..IU Tj...s.{U...JU...L.1.X...{../...{..u......!.........+..2h.eY]`e.@.M.P...l.C...T....;...!...3.t.......r.......}.....z.C...{..G..c`0..aI......f.._QQS. ..CS..D...6W.5T..a:..N.>.x2....\..o#.P.{N..;......Jl..\|....1.$....8b.-++.ub?'..2.\...!.a..A.."PP...8."".3:=..U.s.R.m.DRqg.6.g.l....W..&....9)`135h....G ....A.f.&B....$.X.Q..."r.....}(.....(%..(..R=...bf.Ao.JL.Su..{w...c.....R..@..j.......T...3...d....i.....u...a.:.JSud0..x.......G...+..3U.`....2:...a.L.....p.7`f......rb.6 .y).U.{.....~.D...X..\a.M.Y..s...........6.....S.Fm.Z...d.`..\o..n.".f....e>....!..q0.."1........#..'....A.S.r.....u0.H.mJ:>.gN..yG...,7.{.~S2z...(u.+x.W....]Gh`_..B..........5CY..X....5.d...v&.n.....[.'...I...=L..Y..pP.<,m.Lf...y2.).6...`.d.j.;X..-hv7.......v.d.~...D...@.w...m.A.G..5.M...A..@.1....!u....r.-.....j......Es(..2!...P6.g..F.......P.s3e.i.U.

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 590 x 88, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	26008
Entropy (8bit):	7.985868308237434
Encrypted:	false
SSDEEP:	768:MPO6gAI20tMbq+QGu2+ZG6hJLWDoXsgVd:MP6OQN2woU
MD5:	93F3CA53871F273491D214494A0B5D43
SHA1:	5F878C2FAD7B8FBF3F5B6FDF3C69FAD0457D573E
SHA-256:	035583DE437D0EBB6C5B0835D7328081BA99493D00E88A348E650994008DD366
SHA-512:	08C07B3C6E78D00ABFF1F85BCA4894043D683E8EA405B12FD587295B11221D6F08FDC9E7909F12257D9501CDF252CD2FC09E0C7828B3F3F485E258CE52B37BDD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...N...X......IxZ....sRGB....... .IDATx^.{..u...g<sf.M..q...!...o.R....T.U..B....."..z..(r..$...].&.8m.4j(.%.E...F.%....mN5.P._.r....z.^k........}g<.yG:.}...g_..~{..s......'^.^x......=..;.;w..4z...U.W.\%p..U.W.\%.F...m;?..=...../...../.N..Y.C.....}.7m.......D..k?...J.......J....i{._...3..........v...l.;7m...U.W.\%p..U.W.\%.F....3..o...s..^..;......>.x..q..>_%p..U.W.\%p..U..-.....~.../j.F.........v......J.......J..7..N.+...B.$.....7.Z.}.J.......J...!.}...[_.s..q...........w..O..'?....\|...~;......\|].w..R.}N....w.;.}...M........M...`..Gm#kW?..1.n.o\|..:P...i...{..l...\|...v......../i..~W...`EoQ..g...n5..b...z:$vovG'j....G.NUZ....J.(...p.....#.../{..]4v.R.+~.G...$..X...&!\|....c+...X.S.Qm.Z..D....&.yI..E..Yh.c..h8..$.(...h\.P.P...sI.6.j......_.}..\.==..9o....?....<...}.\|.o..#.>oO..kN..S.}...?~Wvz...w../..7=....n.v.#>H.v!D......'".>.=.2.V.,....@.Y...q.Q.5..@..Q.@..}.)...b..g.....)Y...(..#.#F[....&.T.,.@}.`...=.Q.&L..\..

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 590 x 88, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25026
Entropy (8bit):	7.988167882908714
Encrypted:	false
SSDEEP:	384:M4VrnTTXoj0vC3GzWs+mfHe1A5DjMqippOYYDl3QurmPcyjAuCYZtS4o:M0rngISGzCeHlfMbppOYYRgurmPdRZER
MD5:	1F146B37A4DF36275C83DB80263261F5
SHA1:	AE0E64D73E8356E4EC9BEFD583E15C71805FD5CE
SHA-256:	96C054425C6C99DAE9D4971052F5C2AD448B59993B2EDC49028298C522C82A0C
SHA-512:	26D5C5ABA493553E3116D4B49CAA150F5DA1C0DDC13B9DB9B9CCF381121E7656E61ABBD71C59140DA28AD6C10947E9C59E203355A533C4D336F8E6826F36471B
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/img/button-2.1f146b37.png
Preview:	.PNG........IHDR...N...X......IxZ....sRGB....... .IDATx^.}..m.U.>w2..$.)."VDA-EK(....".....A.....F."&.1.\|......\|....h\|.B@)5J..h.D&...{.......Z...{...s+..9....z\|.gw..}......COlO<...g.yd{.%w.;w.l.it........J.......J.A...m;....{f..s.....Wm.z.t:......o=..C..}....=z%J.....J.......J...J`'R........E..#N.;..G.G^..v.s..._%p..U.W.\%p..U...................8....^....+...^.\|..U.W.\%p..U.W...^....'.>.I...>.t.....n.Z.U.W.\%p..U.W.\%. K.=...y.I.._u].{..z..U.W.\%p..U.W......v..^...T...<.....<6j..?.-.....}....U.v~.....o>m...n.......w....]z..,.`Q..uK..0.k......D...\|....c.....O\|%..]....R^<.)..u..+.r...X......z.n..zw.w....5..4+}.....}......+.)I..p..]..(.(..f....v.u.ve.\2..i..n.l.E....fr.`..A./F...R.<k?.(AVg..-u.~..{....V&i....{....K..8.].......v..K..d.v.\|.k....i;...;/}.'............=..'.~..N.l......g........;.......~...)J.m..?.......^w....T.v....~i.epqK6p...............-p.....@p(D.~...1......5#4Z....U..).p!....qg.......5..P&\|.x.P.Q..XF....3..T.u.../.H..%.g

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 652 x 188, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	33006
Entropy (8bit):	7.9519726567688265
Encrypted:	false
SSDEEP:	768:7BYasNtOH2h4tq6eFSsPnRWOPlyybQJXMREmyfox1okBKU0WvmfK:NPMMrqLPJDPsy8CRlnxCsKUrvYK
MD5:	537670F0CFE6D2EEF641A50FA13D3752
SHA1:	73019775F9DA237A04282EA094B83BDD7CD32B9D
SHA-256:	7F68708FE7ECCD54DF02813553F287B041ACD58E7A7049494653A5A7415BF329
SHA-512:	0F4CFABCD16B6F1B85FCA0A9C7B48660504DB9940D229869347FF6775C8FBC7FB8AEB34EECB8748ACFEB614B0A9EA181BE5BF7696A457C497E9D669D520BB7FA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................R....sRGB....... .IDATx^...egU..~...s'!....a......$.$..F..(Q.x..2.._...E/.!..I ...P.0%....YB d.k:g..y..>..O.}...].ux......+.W....+....X?yJ..(..A..W.q\.8......tj?.+......+....wT....B..2.....bym.p..-~6\|.......j.4......xN....S..WS]?.+......+............/.c...~..Z.`.gm;=..;..9...Z....p.\.W..p.\.W`E...py..o........._...s.~R.W..G..B\|.W..p.\.W..p.\..W "^.{....?Vz...c\|...2.].8g.'..\.W..p.\.W..p.n?...B.....q.:60v.\|./.P\..-..w.\.W..p.\.W..8..D.E....._.YEk`.g.9]..^....9.o......+......+p.)..E.....?8.fe..1.}..1v/...osP...p.\.W..p.\.W..V D\|"..g...m........g.SNL\|.!<t....+......+....kH...\t...+.}.r.^.....,;.......TW..p.\.W..p..P ..........6l.....^.ty.x...\~.N..p.p.#.;o....y..y........?.?.}.A..3....?A.+.~.@..??....?..<...7........0...G.9....a;....e..a[..x......8..{g.{...LO .....c....C....$.........{..=.....W\|......1. ...b.S............uNQ.m..\|.c...........K?.,t..v$R...=...$..._...].W..p.\.W..8....'.`.$.a.8b.Dfq.#.........

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.948454723224573
Encrypted:	false
SSDEEP:	3:+uSKhypDBSNdB4V7G1MKgkRhQcAERY:RSKhEDBSXBZK1cAE+
MD5:	0B8B61D6C031AEB39904A08A52EF5258
SHA1:	E62FD0E0F8FAD326749608B1B120235E208DA166
SHA-256:	38D4E68D10E701ECFB338A24BCA0D86B6EB0EEAEED09B505253CD48D9D7CF2EB
SHA-512:	275C4D35167F8175C405A05AE9B5E790033447B03AC7CE9A53FD4335250F6CE32C8046797ECBBFB017A3EC69D0B57B5D98BC312B6189EA5F07651346D5548606
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSJQm_ovcEyy8l4xIFDYGQ8XwSBQ2RYZVOEgUNNYZUHBIFDZFhlU4=?alt=proto
Preview:	CkEKBw2BkPF8GgAKCw2RYZVOGgQIVhgCCiANNYZUHBoECEsYAioTCAooDFINCgNALiMQARj/////DwoHDZFhlU4aAA==

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16693), with no line terminators
Category:	downloaded
Size (bytes):	17235
Entropy (8bit):	5.573472241267065
Encrypted:	false
SSDEEP:	384:3yRYYxU1IkGbscGTJClaGAcdCHkZAz7VglqPIZvNXK:3yRLxU1IkGbKNC4tcdCHkZAz7Vmq6v8
MD5:	604B4EFE7B81344C906ACA1BF78B1EAB
SHA1:	B000DB21B9F8578BDD5522AC990F20AD93DDB84F
SHA-256:	7BA0EEADD534F2D1388F4916A303DABFA6C7CD56D08EF6FF3BDA7D006638EEEF
SHA-512:	552ECAE947320EF3C61A9C43191165104A28FB73A438FB614F5F55ED9B0985814E9150DE9CECFF9FAB582534E3977B5D876CDDE3EE75EAA8A6A83F507C8438C5
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-in~2ace6e53.e328c61f.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-in~2ace6e53"],{"1de5":function(t,e,i){"use strict";t.exports=function(t,e){return e\|\|(e={}),t=t&&t.__esModule?t.default:t,"string"!==typeof t?t:(/^['"].*['"]$/.test(t)&&(t=t.slice(1,-1)),e.hash&&(t+=e.hash),/["'() \t\n]/.test(t)\|\|e.needQuotes?'"'.concat(t.replace(/"/g,'\\"').replace(/\n/g,"\\n"),'"'):t)}},"1ee8":function(t,e,i){"use strict";i("7a82");var n=i("4ea4").default;Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,i("c975");var o=n(i("c8fd")),a={name:"uniPopup",components:{keypress:o.default},emits:["change","maskClick"],props:{animation:{type:Boolean,default:!0},type:{type:String,default:"center"},isMaskClick:{type:Boolean,default:null},maskClick:{type:Boolean,default:null},backgroundColor:{type:String,default:"none"},safeArea:{type:Boolean,default:!0},maskBackgroundColor:{type:String,default:"rgba(0, 0,

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 479x480, components 3
Category:	dropped
Size (bytes):	30174
Entropy (8bit):	7.929810738594688
Encrypted:	false
SSDEEP:	768:AnNBUIilXEmBw1gIWncljPq1PMBt+wnpc:GNBR1g/ncljC1fU6
MD5:	833F0960A696CF075E6DC43A8133DC85
SHA1:	C9FBF9720E76C57A761A296041C3AB74062D9074
SHA-256:	7889C790CE19DE58A37836E7979529D32709CE6A57A06D43734448A06D45B05B
SHA-512:	AA4E40BC0A8042981C1C0B230904B63EF3B7DD673EA7F776D0564C36DECF9AD0B2BB4F3443C6DC774AE4BB32E201E277BBB2BA6A83CDF40F30CEC75409ED5F51
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE...............mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................<.........................!1A."Q.aq.2B.....#R.3..$b...r.................................%......................!.1.A."Q2.a#R............?....F#.N..:t....N..:t....N..:t...-..A.H.X..2...!..).<I.#.n9................."....:;....9&v#...q

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 610 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48128
Entropy (8bit):	7.992115334234441
Encrypted:	true
SSDEEP:	768:ALPsgi+xmpVZVBRS0EZ2Wn52+WDWhfpqt18OJ1HdSzdMqnl8+q9uOZjkSAe1IpHv:4ni+xY3rEZ2kg+s+xwlRdSzmqc9oSP1Y
MD5:	9C46BE7E85A648192C0BD6A5FAF10048
SHA1:	99FA2A7C0AFF6A5A2385AE2CE41CCF02114AC821
SHA-256:	8C9079ECA305C47AD2631B2C444F65C17BFDC51F9D4C716266E93616288C1398
SHA-512:	3CF59B105F83E48C65E0799A770E58B6D7EA0FCA9C5C168E9CB9AAE6EAB788E5B06CF75BBD70566E8E2C4D8C05EF4FD21F4B671152C277746A8F03BFE04A41C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...b...d.....%.\.....sRGB....... .IDATx^.].x...~gw...C $.z....A.`.)XP@@..t... .X....AQ.E....D....)$.^.2.3{... .E.....A..)......h.h.h.h.h.h.h.h..#....W.S................hDL{.4.4.4.4.4.4.4..!.4"....u.!.!.!.!.!.!.!..1.....................?.................F.w@C@C@C@C@C@C@C..B@#b...Z........................................C.k.j.h.h.h.h.h.h.hDL{.4.4.4.4.4.4.4..!.4"....u.!.!.!.!.!.!.!..1.....................?.................F.w@C@C@C@C@C@C@C..B@#b...Z..............................5{...H..q$6..^..Z..B..Z!z.3..Z.......TQ....=v&...\|.].........E.fQ.....w..F.!..G@#b....._C@C.......u2.wk].j!.....U..^=$.T.`....t..Ju....8.....[.E.6Q.r(.Y.........<...}.xbJ.o{....yL.9U...i......&.o@@#b.....AC@C@C.$..`./&..YY..j....^.Nt....U...A.!../.....u.....(...(..$.Pjf..c...9.x>..u;...j.4R.....7..... `.f5.4.4...%.l.zX5.y.`\|._..M..3.d...Z..'...p..C....eE.y.U.....K.6.....7>;.w*...5G\|$l.r.}i.k.h.......QJ..Z... .@.o!..p.@<.=....\|........ ...@....;..B...}jmi.h...D.K.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6707
Entropy (8bit):	7.9224320865630675
Encrypted:	false
SSDEEP:	192:IkiFvBEIlRpRFHZjmZ8fpuRM6mlWoXuC7:HovBnrNZjmIlWoeA
MD5:	AE83FA2525A1F48BA4DE503330A9EB42
SHA1:	3BF26C982734B8F88C36EBA6FAA75F940F1F902A
SHA-256:	22E055F64B33F97793B9EFE83AD2E12382D599351FB95D34D12CF70B7EB5B401
SHA-512:	FF7882004DDAE0903CF11258FF3389E6D683F3E6DEF35E18C8911E55C313EE830A3D0EC95DA29776829BDA893C3034544216C4DC84B26CE948B217EEFBB1C8B0
Malicious:	false
Reputation:	low
URL:	https://h5.g7or.com/static/images/common/icon_state_selected.png
Preview:	.PNG........IHDR..............X......sRGB.........IDATx^.]..UU.....43....4oH/A ;{m...f>nZ.................ePq..RV...X>n.{m.$..=.....{x}%p..........\k...{.....3.x.s.g...c.........`#....# ...C....B.y<..!.<..@4.$.D.-\.......&.D....P....!`:.......P`..3.?... k+.......D[......3V?........$.j....#..?..&.1....x.i3......?.h=.6`Nsc.v:Z..$......p&@.K...^.....{.4...Q.F@....hT....."..(R...%,^..rT...b...At.tI.q.+..bE..u..H...+.k9..^...+B.}.....'........z$.8G.)\|^.....z....d. C....bPi...9^...._.....b.^..6.3rhB.=...>..y6@.@82..........4.....<..(l.O}...g.He..'.w.43....Yso..M...&.[~.@....12q..e..X.....G.r...K.z.b.].......6...p..UT!..<.,.:.%...Z..:].n..G.....,.4......N.h..>..\|8.O..U...A.....z.zgaF&...r0..\.[..:...q...I..iP....O.....Y......(...<.@.}[..{W.c...K.F.]`..../'....;/'..w.=...jm.......!...WnGx. ..y..g.>..;&...9....m/...].NM...j.[A...........@..T.....O.:.V.a......:../.............!.k.m.G...!l..'.~..5Qm..O..Om...q.M..T....zM ...b{.......1...q.,......5#..

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6707
Entropy (8bit):	7.9224320865630675
Encrypted:	false
SSDEEP:	192:IkiFvBEIlRpRFHZjmZ8fpuRM6mlWoXuC7:HovBnrNZjmIlWoeA
MD5:	AE83FA2525A1F48BA4DE503330A9EB42
SHA1:	3BF26C982734B8F88C36EBA6FAA75F940F1F902A
SHA-256:	22E055F64B33F97793B9EFE83AD2E12382D599351FB95D34D12CF70B7EB5B401
SHA-512:	FF7882004DDAE0903CF11258FF3389E6D683F3E6DEF35E18C8911E55C313EE830A3D0EC95DA29776829BDA893C3034544216C4DC84B26CE948B217EEFBB1C8B0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......sRGB.........IDATx^.]..UU.....43....4oH/A ;{m...f>nZ.................ePq..RV...X>n.{m.$..=.....{x}%p..........\k...{.....3.x.s.g...c.........`#....# ...C....B.y<..!.<..@4.$.D.-\.......&.D....P....!`:.......P`..3.?... k+.......D[......3V?........$.j....#..?..&.1....x.i3......?.h=.6`Nsc.v:Z..$......p&@.K...^.....{.4...Q.F@....hT....."..(R...%,^..rT...b...At.tI.q.+..bE..u..H...+.k9..^...+B.}.....'........z$.8G.)\|^.....z....d. C....bPi...9^...._.....b.^..6.3rhB.=...>..y6@.@82..........4.....<..(l.O}...g.He..'.w.43....Yso..M...&.[~.@....12q..e..X.....G.r...K.z.b.].......6...p..UT!..<.,.:.%...Z..:].n..G.....,.4......N.h..>..\|8.O..U...A.....z.zgaF&...r0..\.[..:...q...I..iP....O.....Y......(...<.@.}[..{W.c...K.F.]`..../'....;/'..w.=...jm.......!...WnGx. ..y..g.>..;&...9....m/...].NM...j.[A...........@..T.....O.:.V.a......:../.............!.k.m.G...!l..'.~..5Qm..O..Om...q.M..T....zM ...b{.......1...q.,......5#..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1925
Entropy (8bit):	5.114303989100339
Encrypted:	false
SSDEEP:	48:YtEqL6VIYTpBlL6UnIYTpL5L6pxTpI/L6xSozL6ILS5H0KL6jpTpDNL6chTpDwGn:IEqL3YVBlLBIYVFL+VI/LkSozLfS5H0f
MD5:	8C2B458279DE5F09DF93D281D19D4F15
SHA1:	2DD1AEE538DE1C83C7DA471AD7FD2F4367F5D7FA
SHA-256:	92ED3C3533D7C81BAF4F4EB37FF8A0A9700D0892863486928348645A32F7205E
SHA-512:	EF4BC92DAB858D7C1756C04E2B69CCB07D30F34D56D09D1CCE2AC7DA954C305EA2379F8591AED15CB42619133A119360FF286F429B70CE6F2B8852BEA4517748
Malicious:	false
Reputation:	low
Preview:	{"status":1,"code":200,"msg":"ok","data":{"lists":[{"id":1,"icon":"https://cdn.shippinghero.vip/resource-files/2023-04-13/nP16KABtPQPg42Ti.png","remark":"Registration login problem","link":"https://t.me/Jenny1727","flag":"1","sort":100,"created_at":"2023-02-23T06:49:53.000000Z","updated_at":"2024-06-20T07:03:25.000000Z"},{"id":2,"icon":"https://cdn.shippinghero.vip/resource-files/2023-04-13/nP16KABtPQPg42Ti.png","remark":"Withdrawal problem","link":"https://t.me/Jenny1727","flag":"1","sort":99,"created_at":"2023-04-11T08:13:56.000000Z","updated_at":"2024-09-20T08:02:27.000000Z"},{"id":3,"icon":"https://cdn.shippinghero.vip/resource-files/2023-04-13/nP16KABtPQPg42Ti.png","remark":"invite friend question","link":"https://t.me/Jenny1727","flag":"1","sort":98,"created_at":"2023-04-11T08:14:20.000000Z","updated_at":"2024-06-20T07:02:57.000000Z"},{"id":4,"icon":"https://cdn.shippinghero.vip/resource-files/2023-04-13/nP16KABtPQPg42Ti.png","remark":"Income Calculation Questions","link":"https:

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 17:58:35.470853090 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 13, 2024 17:58:35.470913887 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 13, 2024 17:58:35.798923969 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 13, 2024 17:58:43.859282970 CEST	49715	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:43.859332085 CEST	443	49715	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:43.859688044 CEST	49715	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:43.860379934 CEST	49715	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:43.860394955 CEST	443	49715	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:44.594299078 CEST	49716	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:44.594350100 CEST	443	49716	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:44.594419003 CEST	49716	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:44.594818115 CEST	49717	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:44.594918966 CEST	443	49717	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:44.594990969 CEST	49717	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:44.595042944 CEST	49716	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:44.595062017 CEST	443	49716	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:44.595262051 CEST	49717	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:44.595302105 CEST	443	49717	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:44.781779051 CEST	443	49715	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:44.781878948 CEST	49715	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:44.789633036 CEST	49715	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:44.789649963 CEST	443	49715	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:44.790096998 CEST	443	49715	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:44.791856050 CEST	49715	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:44.792047977 CEST	49715	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:44.792053938 CEST	443	49715	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:44.792171001 CEST	49715	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:44.835427999 CEST	443	49715	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:44.998522043 CEST	443	49715	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:44.998739004 CEST	443	49715	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:44.998858929 CEST	49715	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:44.999067068 CEST	49715	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:44.999089956 CEST	443	49715	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:45.084305048 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 13, 2024 17:58:45.086545944 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 13, 2024 17:58:45.128309965 CEST	443	49716	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:45.128652096 CEST	49716	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:45.128671885 CEST	443	49716	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:45.130311012 CEST	443	49716	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:45.130387068 CEST	49716	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:45.130831003 CEST	443	49717	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:45.132936954 CEST	49717	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:45.132958889 CEST	443	49717	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:45.133908033 CEST	443	49717	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:45.133980989 CEST	49717	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:45.134532928 CEST	49716	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:45.134623051 CEST	443	49716	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:45.134843111 CEST	49717	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:45.134911060 CEST	443	49717	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:45.134967089 CEST	49716	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:45.134978056 CEST	443	49716	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:45.176999092 CEST	49717	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:45.177000046 CEST	49716	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:45.177009106 CEST	443	49717	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:45.222973108 CEST	49717	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:45.409440041 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 13, 2024 17:58:46.275532007 CEST	443	49716	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:46.275717020 CEST	443	49716	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:46.275955915 CEST	49716	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:46.497970104 CEST	49716	443	192.168.2.6	104.21.19.103
Oct 13, 2024 17:58:46.498017073 CEST	443	49716	104.21.19.103	192.168.2.6
Oct 13, 2024 17:58:46.534939051 CEST	49720	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:46.535043001 CEST	443	49720	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:46.535152912 CEST	49720	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:46.535705090 CEST	49720	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:46.535741091 CEST	443	49720	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:46.933551073 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:46.933603048 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:46.933856964 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:46.934113026 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:46.934127092 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.025655985 CEST	443	49720	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.029031038 CEST	49720	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.029076099 CEST	443	49720	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.030630112 CEST	443	49720	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.030755997 CEST	49720	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.031655073 CEST	49720	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.031688929 CEST	49720	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.031745911 CEST	443	49720	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.031758070 CEST	49720	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.031977892 CEST	443	49720	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.032049894 CEST	49720	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.032052040 CEST	49722	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.032084942 CEST	49720	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.032090902 CEST	443	49722	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.032646894 CEST	49722	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.032812119 CEST	49722	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.032825947 CEST	443	49722	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.084871054 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 13, 2024 17:58:47.086713076 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 13, 2024 17:58:47.144850969 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:47.144889116 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:47.144964933 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:47.146567106 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:47.146584034 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:47.150258064 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 13, 2024 17:58:47.150315046 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 13, 2024 17:58:47.150434017 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 13, 2024 17:58:47.150701046 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 13, 2024 17:58:47.150731087 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 13, 2024 17:58:47.519654989 CEST	443	49722	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.519941092 CEST	49722	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.519973040 CEST	443	49722	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.521598101 CEST	443	49722	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.521671057 CEST	49722	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.523720980 CEST	49722	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.523807049 CEST	443	49722	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.524369955 CEST	49722	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.524379969 CEST	443	49722	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:47.568053961 CEST	49722	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:47.598329067 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.598464966 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.601320028 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.601332903 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.601736069 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.613040924 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.659396887 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.725022078 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.725064993 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.725195885 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.725200891 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.725224018 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.725287914 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.725287914 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.819282055 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 13, 2024 17:58:47.819578886 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 13, 2024 17:58:47.819613934 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 13, 2024 17:58:47.821316957 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 13, 2024 17:58:47.821382046 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 13, 2024 17:58:47.822609901 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 13, 2024 17:58:47.822705984 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 13, 2024 17:58:47.842437029 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.842494011 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.842561960 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.842561960 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.842575073 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.842628956 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.844228029 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.844271898 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.844310999 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.844320059 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.844383001 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.844383001 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.876252890 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 13, 2024 17:58:47.876312971 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 13, 2024 17:58:47.891261101 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:47.891339064 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:47.897922993 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:47.897964954 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:47.898360014 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:47.923218012 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 13, 2024 17:58:47.931349039 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.931423903 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.931430101 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.931452990 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.931509018 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.931509018 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.932039976 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.932082891 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.932118893 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.932128906 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.932185888 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.932185888 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.933516026 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.933559895 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.933599949 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.933610916 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.933646917 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.933660984 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.936650038 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.936701059 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.936738968 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.936747074 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:47.936789036 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.936789036 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:47.938524961 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:47.953782082 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:47.995490074 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:48.020311117 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.020370007 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.020457983 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.020457983 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.020468950 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.020519018 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.020576954 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.020622015 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.020642996 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.020649910 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.020677090 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.020726919 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.021042109 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.021084070 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.021115065 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.021121979 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.021168947 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.021168947 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.021294117 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.021337986 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.021388054 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.021394968 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.021416903 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.021434069 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.022171021 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.022211075 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.022249937 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.022257090 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.022295952 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.022295952 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.022725105 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.022764921 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.022829056 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.022829056 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.022836924 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.022867918 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.022885084 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.022891998 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.022924900 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.023010969 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.023061037 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.023142099 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.023142099 CEST	49721	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.023153067 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.023161888 CEST	443	49721	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.075404882 CEST	49725	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.075421095 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.075511932 CEST	49725	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.077843904 CEST	49726	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.077853918 CEST	443	49726	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.077904940 CEST	49726	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.078088045 CEST	49725	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.078110933 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.082191944 CEST	49726	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.082204103 CEST	443	49726	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.083946943 CEST	49727	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.084007025 CEST	443	49727	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.084079981 CEST	49727	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.084811926 CEST	49727	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.084846020 CEST	443	49727	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.085256100 CEST	49728	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.085304022 CEST	443	49728	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.085357904 CEST	49728	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.085583925 CEST	49728	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.085611105 CEST	443	49728	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.086282969 CEST	49729	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.086307049 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.086379051 CEST	49729	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.086513042 CEST	49729	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.086524010 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.220048904 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:48.220211029 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:48.220288992 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:48.223319054 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:48.223340034 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:48.223355055 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:48.223361969 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:48.276700020 CEST	49730	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:48.276741028 CEST	443	49730	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:48.276824951 CEST	49730	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:48.277250051 CEST	49730	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:48.277264118 CEST	443	49730	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:48.650177956 CEST	443	49722	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:48.650496960 CEST	443	49722	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:48.651164055 CEST	49722	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.683659077 CEST	49722	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.683672905 CEST	443	49722	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:48.706492901 CEST	49731	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.706569910 CEST	443	49731	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:48.706653118 CEST	49731	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.707736015 CEST	49732	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.707839966 CEST	443	49732	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:48.708596945 CEST	49732	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.709084034 CEST	49733	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.709171057 CEST	443	49733	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:48.709244013 CEST	49733	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.716314077 CEST	49731	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.716345072 CEST	443	49731	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:48.716912985 CEST	49732	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.716944933 CEST	443	49732	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:48.717358112 CEST	49733	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:48.717439890 CEST	443	49733	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:48.753434896 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.754122972 CEST	49725	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.754143000 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.754667997 CEST	49725	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.754676104 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.754712105 CEST	443	49727	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.755074978 CEST	49727	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.755105019 CEST	443	49727	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.755403042 CEST	443	49728	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.755621910 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.755872011 CEST	49727	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.755878925 CEST	443	49727	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.756306887 CEST	49728	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.756345034 CEST	443	49728	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.756505966 CEST	49729	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.756521940 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.756738901 CEST	49728	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.756748915 CEST	443	49728	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.756939888 CEST	49729	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.756944895 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.767375946 CEST	443	49726	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.768096924 CEST	49726	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.768112898 CEST	443	49726	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.768721104 CEST	49726	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.768726110 CEST	443	49726	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857419014 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857476950 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857512951 CEST	443	49728	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857533932 CEST	49725	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.857553005 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857575893 CEST	443	49728	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857609034 CEST	49725	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.857635021 CEST	49728	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.857642889 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857695103 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857753992 CEST	49729	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.857763052 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857805967 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857856035 CEST	49728	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.857877016 CEST	443	49728	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.857891083 CEST	49728	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.857893944 CEST	49729	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.857897997 CEST	443	49728	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.858001947 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.858042002 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.858177900 CEST	49725	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.858201027 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.858221054 CEST	49725	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.858221054 CEST	49725	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.858228922 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.858234882 CEST	443	49725	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.858608007 CEST	443	49727	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.858710051 CEST	49729	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.858710051 CEST	49729	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.858722925 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.858731985 CEST	443	49729	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.858768940 CEST	443	49727	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.858906031 CEST	49727	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.859189987 CEST	49727	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.859221935 CEST	443	49727	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.863424063 CEST	49734	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.863451004 CEST	49735	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.863456011 CEST	443	49734	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.863519907 CEST	49734	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.863527060 CEST	443	49735	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.863580942 CEST	49735	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.864300013 CEST	49734	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.864314079 CEST	443	49734	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.864414930 CEST	49735	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.864454031 CEST	443	49735	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.864742041 CEST	49736	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.864810944 CEST	443	49736	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.864891052 CEST	49736	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.864989042 CEST	49736	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.865006924 CEST	443	49736	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.865390062 CEST	49737	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.865462065 CEST	443	49737	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.865760088 CEST	49737	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.865904093 CEST	49737	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.865932941 CEST	443	49737	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.871203899 CEST	443	49726	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.871237040 CEST	443	49726	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.871306896 CEST	443	49726	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.871324062 CEST	49726	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.871375084 CEST	49726	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.871623993 CEST	49726	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.871642113 CEST	443	49726	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.871654034 CEST	49726	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.871659040 CEST	443	49726	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.874762058 CEST	49738	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.874784946 CEST	443	49738	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:48.875139952 CEST	49738	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.875328064 CEST	49738	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:48.875345945 CEST	443	49738	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.026518106 CEST	443	49730	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:49.026679039 CEST	49730	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:49.028604031 CEST	49730	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:49.028615952 CEST	443	49730	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:49.028951883 CEST	443	49730	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:49.030097961 CEST	49730	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:49.071413994 CEST	443	49730	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:49.194591999 CEST	443	49731	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.194909096 CEST	49731	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.194951057 CEST	443	49731	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.198507071 CEST	443	49731	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.198582888 CEST	49731	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.198955059 CEST	49731	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.198982000 CEST	49731	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.199028015 CEST	49731	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.199150085 CEST	443	49731	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.199214935 CEST	49731	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.199362993 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.199424028 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.199492931 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.199677944 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.199697018 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.202166080 CEST	443	49733	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.202383041 CEST	49733	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.202445984 CEST	443	49733	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.203907967 CEST	443	49733	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.203989983 CEST	49733	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.204294920 CEST	49733	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.204294920 CEST	49733	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.204330921 CEST	49733	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.204386950 CEST	443	49733	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.204440117 CEST	49733	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.204574108 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.204617977 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.204683065 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.204855919 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.204874039 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.208700895 CEST	443	49732	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.208951950 CEST	49732	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.209014893 CEST	443	49732	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.212215900 CEST	443	49732	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.212631941 CEST	49732	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.212631941 CEST	49732	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.212678909 CEST	49732	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.212743998 CEST	443	49732	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.212747097 CEST	49732	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.212798119 CEST	49732	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.213170052 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.213206053 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.213277102 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.213534117 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.213546038 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.364970922 CEST	443	49730	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:49.365061998 CEST	443	49730	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:49.365457058 CEST	49730	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:49.365945101 CEST	49730	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:49.365945101 CEST	49730	443	192.168.2.6	184.28.90.27
Oct 13, 2024 17:58:49.365967989 CEST	443	49730	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:49.365988970 CEST	443	49730	184.28.90.27	192.168.2.6
Oct 13, 2024 17:58:49.524557114 CEST	443	49736	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.525198936 CEST	49736	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.525233030 CEST	443	49736	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.525810003 CEST	49736	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.525824070 CEST	443	49736	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.535960913 CEST	443	49734	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.536962986 CEST	49734	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.536987066 CEST	443	49734	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.537441015 CEST	49734	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.537448883 CEST	443	49734	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.538539886 CEST	443	49735	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.538924932 CEST	49735	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.538995028 CEST	443	49735	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.539319038 CEST	49735	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.539334059 CEST	443	49735	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.569080114 CEST	443	49737	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.569700956 CEST	49737	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.569751978 CEST	443	49737	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.570326090 CEST	49737	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.570338964 CEST	443	49737	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.573332071 CEST	443	49738	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.573746920 CEST	49738	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.573776960 CEST	443	49738	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.574176073 CEST	49738	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.574187040 CEST	443	49738	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.624663115 CEST	443	49736	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.624819994 CEST	443	49736	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.624922037 CEST	49736	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.625520945 CEST	49736	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.625535965 CEST	443	49736	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.625561953 CEST	49736	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.625574112 CEST	443	49736	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.630510092 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.630522966 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.630609989 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.630773067 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.630784035 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.639925957 CEST	443	49734	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.640053034 CEST	443	49734	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.640192032 CEST	49734	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.640192032 CEST	49734	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.640218973 CEST	49734	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.640237093 CEST	443	49734	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.641174078 CEST	443	49735	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.641257048 CEST	443	49735	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.641415119 CEST	49735	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.641474009 CEST	49735	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.641474009 CEST	49735	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.641515017 CEST	443	49735	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.641541004 CEST	443	49735	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.645879984 CEST	49743	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.645932913 CEST	443	49743	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.646015882 CEST	49743	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.646192074 CEST	49743	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.646229982 CEST	443	49743	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.647687912 CEST	49744	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.647718906 CEST	443	49744	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.647845984 CEST	49744	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.647945881 CEST	49744	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.647955894 CEST	443	49744	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.670371056 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.670676947 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.670700073 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.671761990 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.671838045 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.672241926 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.672321081 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.672401905 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.672418118 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.673568964 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.673856974 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.673902035 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.674900055 CEST	443	49737	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.675031900 CEST	443	49737	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.675095081 CEST	49737	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.675321102 CEST	49737	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.675338030 CEST	443	49737	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.675367117 CEST	49737	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.675369024 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.675379992 CEST	443	49737	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.675419092 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.675843000 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.675949097 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.676012039 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.676028967 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.677947044 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.678193092 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.678203106 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.680020094 CEST	49745	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.680067062 CEST	443	49745	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.680186033 CEST	49745	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.680305004 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.680399895 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.680402994 CEST	49745	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.680418968 CEST	443	49745	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.681092024 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.681201935 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.681379080 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.681386948 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.686356068 CEST	443	49738	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.686477900 CEST	443	49738	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.686563015 CEST	49738	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.686664104 CEST	49738	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.686691046 CEST	443	49738	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.686717033 CEST	49738	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.686729908 CEST	443	49738	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.690207958 CEST	49746	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.690247059 CEST	443	49746	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.690326929 CEST	49746	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.690504074 CEST	49746	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:49.690525055 CEST	443	49746	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:49.724366903 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.724378109 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.724543095 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.797869921 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.798028946 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.798120975 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.798137903 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.798178911 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.798294067 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.798351049 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.798368931 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.798424006 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.798435926 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.798515081 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.798610926 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.798660994 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.798676968 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.798731089 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.798754930 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.802326918 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.802412033 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.802427053 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.808440924 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.808490992 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.808522940 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.808556080 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.808582067 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.808581114 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.808614969 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.808644056 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.808665991 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.808718920 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.808737040 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.808794975 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.809271097 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.809323072 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.810488939 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.810503960 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.813054085 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.814574003 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.814589977 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.826112986 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.826164007 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.826200008 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.826236963 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.826270103 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.826303959 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.826304913 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.826308012 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.826328993 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.826374054 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.826525927 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.827409029 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.827416897 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.830998898 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.831037045 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.831116915 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.831126928 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.831183910 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.848427057 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.863691092 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.886333942 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.886454105 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.886502981 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.886549950 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.886574030 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.886619091 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.886655092 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.886682987 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.886776924 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.886833906 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.886850119 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.886909008 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.886921883 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.887660980 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.887731075 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.887747049 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.887840033 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.887922049 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.887974024 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.887989044 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.888041973 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.888053894 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.888688087 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.888756990 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.888771057 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.888860941 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.888935089 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.888989925 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.889003992 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.889050961 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.889523029 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.889677048 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.889754057 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.889811039 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.889826059 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.889884949 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.891138077 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.897648096 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.897712946 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.897741079 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.897809982 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.897850990 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.897924900 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.898185015 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.898232937 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.898335934 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.898370028 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.898384094 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.898407936 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.898433924 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.898458958 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.898484945 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.898534060 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.898550034 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.898858070 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.899121046 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.899236917 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.899447918 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.899461985 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.899632931 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.899669886 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.899698019 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.899724960 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.899727106 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.899748087 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.899774075 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.899796009 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.899808884 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.900566101 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.900590897 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.900634050 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.900649071 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.900707006 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.914705992 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.914773941 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.914808989 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.914889097 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.914901018 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.914916992 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.914997101 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.915045023 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.915096045 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.915122986 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.915129900 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.915221930 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.915610075 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.915667057 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.915714025 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.915750027 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.915781021 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.915802002 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.915810108 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.915827990 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.915857077 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.916474104 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.916527033 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.916555882 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.916584015 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.916620016 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.916620016 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.916630030 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.917112112 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.917144060 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.917176962 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.917207003 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.917215109 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.917347908 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.917355061 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.917432070 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.941299915 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.975290060 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.975508928 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.975605011 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.975606918 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.975672007 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.975708961 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.975770950 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.975790024 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.975820065 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.975877047 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.975891113 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.975956917 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.975970030 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976027966 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976090908 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.976104021 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976131916 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976166964 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.976186991 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976212978 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.976231098 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976288080 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.976301908 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976325989 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976351976 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.976365089 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976393938 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.976548910 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976610899 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.976627111 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976653099 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976674080 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.976686954 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976721048 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.976741076 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976803064 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.976816893 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.976870060 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.977067947 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.977124929 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.987150908 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987221003 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987256050 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987298965 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987325907 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.987363100 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987400055 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987418890 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.987462044 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.987477064 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987534046 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.987768888 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987840891 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.987871885 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987924099 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.987926006 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987938881 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.987977982 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.988703012 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.988773108 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.988787889 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.988843918 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.988847971 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.988859892 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.988888979 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.988898993 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.988934994 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.988945961 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.989610910 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.989679098 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.989694118 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.989792109 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.989844084 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.989851952 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.989866018 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.989892006 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.989895105 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.990010977 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:49.990063906 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.990528107 CEST	49739	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:49.990562916 CEST	443	49739	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.003554106 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.003624916 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.003660917 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.003699064 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.003731012 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.003787041 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.003787041 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.003807068 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.003945112 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.004132986 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.004141092 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.004303932 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.004343987 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.004362106 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.004369974 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.004424095 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.004476070 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.004476070 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.004486084 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.005147934 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.005295992 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.005352020 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.005366087 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.005408049 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.005422115 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.005453110 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.005453110 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.006259918 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.006335974 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.006372929 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.006372929 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.006386042 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.006434917 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.006434917 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.006434917 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.007249117 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.007291079 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.007335901 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.007335901 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.007345915 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.007668972 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.016686916 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.016769886 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.048432112 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.048564911 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.064244032 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064338923 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064414978 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.064424038 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064483881 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064527988 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.064527988 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.064528942 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064588070 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.064606905 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064650059 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064707994 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.064722061 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064749956 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064838886 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064855099 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.064877987 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.064905882 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.064976931 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065040112 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.065054893 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065124035 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.065145016 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065222025 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.065392971 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065437078 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065453053 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.065466881 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065490961 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065496922 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.065541029 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.065546036 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065558910 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065593958 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065599918 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.065625906 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065643072 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.065655947 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.065684080 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.066328049 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.066379070 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.066389084 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.066401958 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.066431046 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.066503048 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.066560030 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.066560984 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.066576958 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.066612959 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.067136049 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.067193031 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.067193985 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.067207098 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.067255020 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.067401886 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.067445993 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.067456961 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.067471981 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.067495108 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.067518950 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.067542076 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.067544937 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.067554951 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.067595005 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.092226028 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.092279911 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.092363119 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.092363119 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.092380047 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.092607975 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.092879057 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.092910051 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.092931032 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.092968941 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.093641996 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.093712091 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.093743086 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.093826056 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.093826056 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.093826056 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.093842030 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.093878031 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.094125032 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.094168901 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.094240904 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.094240904 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.094249964 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.094285965 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.094413042 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.094455957 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.094468117 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.094474077 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.094512939 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.094512939 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.094919920 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.094988108 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.095048904 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.095048904 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.095057011 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.095091105 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.097191095 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.097232103 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.097306967 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.097346067 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.097362995 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.097362995 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.097362995 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.097372055 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.097417116 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.097879887 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.097927094 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.097940922 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.097946882 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.097986937 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.097986937 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.098248959 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.098290920 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.098344088 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.098344088 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.098351955 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.098505974 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.098712921 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.098762035 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.098800898 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.098803997 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.098803997 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.098815918 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.098902941 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.098905087 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.098917007 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.098958969 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.098958969 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.105353117 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.105446100 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.152543068 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.152714014 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.152724981 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.152753115 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.152786016 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.152812958 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.152945995 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.152997971 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.153024912 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.153042078 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.153075933 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.153295040 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.153372049 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.153378963 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.153424025 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.153441906 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.153841019 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.153882027 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.153913021 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.153928995 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.153958082 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.157768965 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.157844067 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.157874107 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.157887936 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.157919884 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.158205032 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.158245087 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.158271074 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.158286095 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.158314943 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.158448935 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.158519030 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.158526897 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.158555031 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.158595085 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.158970118 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.159013987 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.159044981 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.159065008 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.159094095 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.181129932 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.181155920 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.181216955 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.181257010 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.181257010 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.181277990 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.181375980 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.182005882 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.182694912 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.182715893 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.182817936 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.182826996 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.183353901 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.184621096 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.184643030 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.184792042 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.184798956 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.185205936 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.185755014 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.185776949 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.185885906 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.185893059 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.186373949 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.186594963 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.186620951 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.186659098 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.186666012 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.186703920 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.186703920 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.186719894 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.187657118 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.187680960 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.187719107 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.187726021 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.187823057 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.188842058 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.188859940 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.188963890 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.188972950 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.201045036 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.231599092 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.241734028 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.241767883 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242077112 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.242089033 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242105961 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242152929 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242188931 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242207050 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.242232084 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242292881 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.242321968 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.242506027 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242528915 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242572069 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.242587090 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242615938 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.242708921 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242731094 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242778063 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.242790937 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.242820024 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.242995977 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.243016958 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.243055105 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.243067980 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.243093967 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.244278908 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.244303942 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.244350910 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.244364023 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.244385958 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.244390011 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.244441986 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.244457006 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.244929075 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.244950056 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.244993925 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.245008945 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.245035887 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.270092010 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.270117044 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.270153999 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.270282984 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.270371914 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.270371914 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.270698071 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.271409988 CEST	49741	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.271430016 CEST	443	49741	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.288269997 CEST	49747	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.288331032 CEST	443	49747	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.288418055 CEST	49747	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.288691044 CEST	49747	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.288722038 CEST	443	49747	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.291906118 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.292454004 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.292470932 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.292731047 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.293004036 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.293009996 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.322186947 CEST	443	49744	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.323019028 CEST	49744	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.323050022 CEST	443	49744	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.323406935 CEST	49744	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.323410988 CEST	443	49744	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.330275059 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.330322981 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.330389023 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.330434084 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.330471039 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.330526114 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.330564976 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.330574989 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.330602884 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.330602884 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.330646038 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.330666065 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.330755949 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.330796957 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.330825090 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.330840111 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.330868959 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.330888033 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.330914974 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.331046104 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.331087112 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.331108093 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.331127882 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.331175089 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.331876993 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.331931114 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.331954002 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.331971884 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.331998110 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.332247972 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.332288027 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.332312107 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.332325935 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.332354069 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.333204985 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.333257914 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.333272934 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.333286047 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.333319902 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.334233999 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.334274054 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.334305048 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.334319115 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.334346056 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.337269068 CEST	443	49743	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.338185072 CEST	443	49745	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.341532946 CEST	49743	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.341609001 CEST	443	49743	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.341979027 CEST	49743	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.341990948 CEST	443	49743	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.342627048 CEST	49745	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.342704058 CEST	443	49745	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.348882914 CEST	49745	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.348898888 CEST	443	49745	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.379440069 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.383272886 CEST	443	49746	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.384145021 CEST	49746	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.384186029 CEST	443	49746	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.384567022 CEST	49746	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.384578943 CEST	443	49746	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.392735958 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.392826080 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.392883062 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.393038988 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.393038988 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.393047094 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.393057108 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.396426916 CEST	49748	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.396440983 CEST	443	49748	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.396722078 CEST	49748	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.396917105 CEST	49748	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.396927118 CEST	443	49748	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.419132948 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.419178963 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.419230938 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.419275045 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.419305086 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.419423103 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.419470072 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.419497013 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.419512033 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.419540882 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.419559002 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.419852972 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.419894934 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.419931889 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.419953108 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.419975996 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.419996023 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.420007944 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.420114994 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.420156002 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.420201063 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.420201063 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.420217991 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.420255899 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.420758963 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.420820951 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.420836926 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.420850992 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.420880079 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.420901060 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.422321081 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.422382116 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.422442913 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.422461987 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.422487974 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.422492027 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.422548056 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.422564030 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.422575951 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.422606945 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.422650099 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.423535109 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.423579931 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.423643112 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.423643112 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.423656940 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.423701048 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.423712015 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.426237106 CEST	443	49744	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.426376104 CEST	443	49744	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.426456928 CEST	49744	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.426806927 CEST	49744	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.426824093 CEST	443	49744	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.426884890 CEST	49744	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.426892042 CEST	443	49744	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.429780960 CEST	49749	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.429821968 CEST	443	49749	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.429917097 CEST	49749	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.430099964 CEST	49749	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.430130959 CEST	443	49749	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.443284988 CEST	443	49743	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.443490028 CEST	443	49743	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.443598986 CEST	49743	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.443643093 CEST	49743	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.443643093 CEST	49743	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.443662882 CEST	443	49743	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.443676949 CEST	443	49743	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.446290016 CEST	49750	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.446312904 CEST	443	49750	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.446409941 CEST	49750	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.446603060 CEST	49750	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.446628094 CEST	443	49750	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.458961964 CEST	443	49745	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.459045887 CEST	443	49745	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.459222078 CEST	49745	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.459290028 CEST	49745	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.459290028 CEST	49745	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.459323883 CEST	443	49745	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.459347963 CEST	443	49745	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.461827993 CEST	49751	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.461862087 CEST	443	49751	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.461951017 CEST	49751	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.462074041 CEST	49751	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.462085009 CEST	443	49751	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.471280098 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.488728046 CEST	443	49746	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.488806963 CEST	443	49746	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.488893986 CEST	49746	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.489132881 CEST	49746	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.489149094 CEST	443	49746	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.489161968 CEST	49746	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.489167929 CEST	443	49746	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.507035017 CEST	49752	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.507077932 CEST	443	49752	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.507191896 CEST	49752	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.507391930 CEST	49752	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:50.507406950 CEST	443	49752	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:50.508929968 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.508987904 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509037018 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.509052038 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509095907 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509095907 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.509131908 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509138107 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.509154081 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509180069 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.509180069 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.509181023 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509202957 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509243965 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.509258032 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509284019 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.509352922 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509371042 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509408951 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.509421110 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509449005 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.509762049 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509778976 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509843111 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.509864092 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.509886980 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.510231018 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.510248899 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.510294914 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.510304928 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.510332108 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.510735989 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.510754108 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.510823965 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.510838032 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.512479067 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.512496948 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.512559891 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.512562037 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.512574911 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.512603045 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.512638092 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.551078081 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.551099062 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.551240921 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.551280022 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.595084906 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.598009109 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.598030090 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.598129034 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.598136902 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.598176956 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.598371983 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.598390102 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.598433018 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.598438978 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.598467112 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.598495960 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.598526955 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.598582983 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.598588943 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.598666906 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.598710060 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.599091053 CEST	49740	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.599106073 CEST	443	49740	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.604053020 CEST	49753	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.604083061 CEST	443	49753	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.604156971 CEST	49753	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.604511023 CEST	49753	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.604540110 CEST	443	49753	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.761058092 CEST	443	49747	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.813865900 CEST	49747	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.819020987 CEST	49747	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.819048882 CEST	443	49747	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.823121071 CEST	443	49747	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.823141098 CEST	443	49747	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.823209047 CEST	49747	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.911901951 CEST	49747	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.911947966 CEST	49747	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.911969900 CEST	49747	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.912416935 CEST	443	49747	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.912442923 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.912520885 CEST	49747	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.912527084 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.912610054 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.916134119 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:50.916168928 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:50.928251028 CEST	49755	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:50.928312063 CEST	443	49755	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:50.928399086 CEST	49755	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:50.928606987 CEST	49755	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:50.928637028 CEST	443	49755	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:51.075515985 CEST	443	49748	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.075972080 CEST	49756	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.076000929 CEST	443	49756	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.076059103 CEST	49756	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.076447964 CEST	49757	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.076543093 CEST	443	49757	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.076622009 CEST	49757	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.076767921 CEST	49758	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.076790094 CEST	443	49758	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.076854944 CEST	49758	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.077133894 CEST	49759	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.077143908 CEST	443	49759	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.077187061 CEST	49759	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.077461958 CEST	49760	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.077470064 CEST	443	49760	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.077538967 CEST	49760	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.077796936 CEST	49761	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.077815056 CEST	443	49761	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.077872992 CEST	49761	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.078144073 CEST	49756	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.078161001 CEST	443	49756	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.078650951 CEST	49757	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.078689098 CEST	443	49757	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.078845978 CEST	49759	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.078855991 CEST	443	49759	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.079051971 CEST	49758	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.079078913 CEST	443	49758	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.079231977 CEST	49760	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.079241991 CEST	443	49760	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.079438925 CEST	49761	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.079467058 CEST	443	49761	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.084345102 CEST	49748	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.084358931 CEST	443	49748	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.084808111 CEST	49748	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.084811926 CEST	443	49748	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.090783119 CEST	443	49753	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.091626883 CEST	49753	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.091655016 CEST	443	49753	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.093132973 CEST	443	49753	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.093226910 CEST	49753	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.093555927 CEST	49753	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.093586922 CEST	49753	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.093635082 CEST	49753	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.093655109 CEST	443	49753	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.093717098 CEST	49753	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.094008923 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.094034910 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.094084978 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.095170021 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.095194101 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.096702099 CEST	443	49749	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.097181082 CEST	49749	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.097223997 CEST	443	49749	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.097637892 CEST	49749	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.097654104 CEST	443	49749	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.139651060 CEST	443	49750	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.140146017 CEST	49750	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.140171051 CEST	443	49750	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.140588045 CEST	49750	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.140594006 CEST	443	49750	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.141439915 CEST	443	49751	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.142831087 CEST	49751	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.142848969 CEST	443	49751	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.143219948 CEST	49751	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.143225908 CEST	443	49751	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.160756111 CEST	443	49752	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.161938906 CEST	49752	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.161977053 CEST	443	49752	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.162448883 CEST	49752	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.162456989 CEST	443	49752	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.186037064 CEST	443	49748	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.186096907 CEST	443	49748	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.186156988 CEST	49748	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.186471939 CEST	49748	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.186477900 CEST	443	49748	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.186522961 CEST	49748	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.186527967 CEST	443	49748	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.190938950 CEST	49764	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.190978050 CEST	443	49764	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.191078901 CEST	49764	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.191222906 CEST	49764	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.191241980 CEST	443	49764	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.198900938 CEST	443	49749	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.199058056 CEST	443	49749	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.199156046 CEST	49749	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.199156046 CEST	49749	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.199223995 CEST	49749	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.199254990 CEST	443	49749	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.202238083 CEST	49765	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.202287912 CEST	443	49765	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.202363014 CEST	49765	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.202585936 CEST	49765	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.202613115 CEST	443	49765	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.243084908 CEST	443	49750	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.243130922 CEST	443	49750	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.243204117 CEST	49750	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.243454933 CEST	49750	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.243454933 CEST	49750	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.243496895 CEST	443	49750	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.243525982 CEST	443	49750	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.244091034 CEST	443	49751	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.244240046 CEST	443	49751	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.244307041 CEST	49751	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.244424105 CEST	49751	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.244435072 CEST	443	49751	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.252224922 CEST	49766	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.252293110 CEST	443	49766	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.252383947 CEST	49766	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.252526045 CEST	49767	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.252551079 CEST	443	49767	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.252604961 CEST	49767	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.252816916 CEST	49766	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.252849102 CEST	443	49766	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.252990007 CEST	49767	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.253007889 CEST	443	49767	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.262404919 CEST	443	49752	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.262558937 CEST	443	49752	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.262625933 CEST	49752	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.262804985 CEST	49752	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.262814999 CEST	443	49752	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.262837887 CEST	49752	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.262844086 CEST	443	49752	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.268268108 CEST	49768	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.268299103 CEST	443	49768	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.268404007 CEST	49768	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.268547058 CEST	49768	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.268559933 CEST	443	49768	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.384825945 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.388240099 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.388303995 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.389811039 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.389889956 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.392138958 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.392236948 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.392935038 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.392951965 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.438308001 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.519912958 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.519978046 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.520013094 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.520026922 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.520051003 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.520090103 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.520092964 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.520103931 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.520153046 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.520160913 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.520204067 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.520246029 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.520251989 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.520503998 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.520546913 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.520554066 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.524929047 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.524981022 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.524991989 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.562520027 CEST	443	49760	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.563976049 CEST	49760	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.563996077 CEST	443	49760	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.564124107 CEST	443	49757	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.564353943 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.565121889 CEST	443	49760	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.565162897 CEST	49757	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.565181017 CEST	49760	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.565227032 CEST	443	49757	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.565825939 CEST	49760	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.565893888 CEST	49760	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.565917969 CEST	443	49760	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.565996885 CEST	49760	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.566009998 CEST	443	49760	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.566023111 CEST	49760	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.566060066 CEST	49760	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.566108942 CEST	443	49759	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.566967010 CEST	443	49757	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.567018032 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.567039967 CEST	49757	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.567068100 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.567137003 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.567264080 CEST	49759	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.567270041 CEST	443	49759	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.567533970 CEST	443	49756	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.568130016 CEST	49757	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.568166018 CEST	49757	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.568269968 CEST	443	49757	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.568337917 CEST	49757	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.568372011 CEST	443	49757	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.568383932 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.568398952 CEST	49757	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.568420887 CEST	49757	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.568896055 CEST	443	49759	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.568955898 CEST	49759	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.569327116 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.569348097 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.569403887 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.569792986 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.569808006 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.570173979 CEST	49756	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.570180893 CEST	443	49756	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.570429087 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.570436001 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.570461035 CEST	443	49758	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.570535898 CEST	443	49761	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.571355104 CEST	49759	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.571369886 CEST	49759	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.571453094 CEST	443	49759	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.571607113 CEST	49759	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.571614981 CEST	443	49759	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.571625948 CEST	49759	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.571631908 CEST	443	49756	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.571654081 CEST	49759	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.571700096 CEST	49756	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.572169065 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.572205067 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.572263956 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.572407007 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.572422981 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.572427988 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.572470903 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.572822094 CEST	49758	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.572837114 CEST	443	49758	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.573055029 CEST	49761	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.573069096 CEST	443	49761	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.574084997 CEST	49756	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.574098110 CEST	49756	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.574136972 CEST	49756	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.574165106 CEST	443	49756	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.574213028 CEST	49756	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.574486971 CEST	443	49758	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.574526072 CEST	443	49761	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.574567080 CEST	49758	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.574609995 CEST	49761	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.574865103 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.574945927 CEST	443	49772	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.575026989 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.575130939 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.575149059 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.575999975 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.576107025 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.577214956 CEST	49758	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.577290058 CEST	49758	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.577320099 CEST	443	49758	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.577444077 CEST	49758	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.577461958 CEST	443	49758	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.577487946 CEST	49758	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.577519894 CEST	49758	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.577898979 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.577985048 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.578054905 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.581152916 CEST	49761	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.581154108 CEST	49761	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.581191063 CEST	49761	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.581268072 CEST	443	49761	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.581329107 CEST	49761	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.581824064 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.581845999 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.581911087 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.582350016 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.582391024 CEST	443	49772	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.583093882 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.583127975 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.583391905 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.583415985 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.583724022 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.583736897 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.608922005 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.608994007 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.609041929 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.609061956 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.609225988 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.609260082 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.609270096 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.609278917 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.609323978 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.609704971 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.609822989 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.609868050 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.609870911 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.609884024 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.609924078 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.609939098 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.610713005 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.610755920 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.610759974 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.610766888 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.610805988 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.610810995 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.610846996 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.610879898 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.610893965 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.610898972 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.610938072 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.611640930 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.611747026 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.611780882 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.611804962 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.611809969 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.611851931 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.611857891 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.625916004 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.656563044 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.656590939 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698519945 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698554993 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698575974 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.698580980 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698590994 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698618889 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.698659897 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698668003 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698718071 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.698725939 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698757887 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698801041 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.698826075 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698874950 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.698887110 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.699625969 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.699678898 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.699681044 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.699687004 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.699723005 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.699726105 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.700244904 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.700294018 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.700300932 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.700309038 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.700340986 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.700896025 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.700942039 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.700948954 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.700987101 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.700997114 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.701046944 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.701071024 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.701118946 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.702007055 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.702063084 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.702084064 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.702136993 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.702203035 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.702266932 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.702802896 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.702852011 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.703197956 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.703238964 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.703330040 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.703351021 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.703828096 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.703856945 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.703871012 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.703892946 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.703950882 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.704320908 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.704371929 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.704430103 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.704438925 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.708184958 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.708239079 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.708281040 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.708290100 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.708298922 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.708347082 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.754507065 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.787931919 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.787996054 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788031101 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.788044930 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788058996 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788127899 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788136959 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.788136959 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.788146973 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788162947 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.788171053 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.788193941 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.788467884 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788521051 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.788527012 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788570881 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.788853884 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788902998 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.788912058 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788949966 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788957119 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.788961887 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.788983107 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.789431095 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.789474010 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.789479971 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.789511919 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.789530039 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.789535046 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.789546013 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.789558887 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.789586067 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.789591074 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.789630890 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.789701939 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.789747953 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.789777994 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.789787054 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.789798975 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.789824963 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.790505886 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.790556908 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.790560007 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.790570021 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.790592909 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.790610075 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.790684938 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.790723085 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.790967941 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.790967941 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.790976048 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.791016102 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.791052103 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.791100025 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.791471004 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.791527987 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.791615009 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.791677952 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.791681051 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.791729927 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.791745901 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.791769981 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.791862965 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.791908026 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.791910887 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.791922092 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.791955948 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.792598963 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.792613983 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.792658091 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.792668104 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.792673111 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.792706013 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.792712927 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.792725086 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.792766094 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.792813063 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.792813063 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.792813063 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.792829990 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.792903900 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.792908907 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.792932034 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.792994022 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.793003082 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.794219017 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.794255972 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.794274092 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.794281960 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.794325113 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.794332027 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.794476032 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.794527054 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.794534922 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.794945002 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.794994116 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.794996977 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.795006990 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.795063019 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.795069933 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.795109034 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.795253038 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.795315981 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.798073053 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.798125029 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.798171043 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.798201084 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.798280954 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.841295958 CEST	443	49764	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.842381954 CEST	49764	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.842416048 CEST	443	49764	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.843473911 CEST	49764	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.843499899 CEST	443	49764	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.856298923 CEST	443	49765	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.857037067 CEST	49765	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.857055902 CEST	443	49765	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.858474970 CEST	49765	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.858479977 CEST	443	49765	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.878091097 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.878135920 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.878182888 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.878197908 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.878226995 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.878247976 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.879627943 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.879648924 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.879717112 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.879724026 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.879761934 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.879987001 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.880006075 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.880042076 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.880047083 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.880085945 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.880085945 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.880095005 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.881422043 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.881489992 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.881515980 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.881541014 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.881563902 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.881762981 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.881772041 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.881875038 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.882047892 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.882055998 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.882133961 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.882373095 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.882447958 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.882488012 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.882488012 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.882493019 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.882505894 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.882555008 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.882555008 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.882596016 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.882622957 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.882649899 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.882658005 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.882698059 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.883080006 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.883097887 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.883142948 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.883148909 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.883167028 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.883233070 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.883356094 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.883697987 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.883718967 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.883749008 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.883754969 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.883783102 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.883958101 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.884013891 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.884481907 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.884495020 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.884526968 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.884562969 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.884568930 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.884581089 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.884603977 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.884658098 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.884715080 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.884922028 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.884958982 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.884993076 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.885001898 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.885031939 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.885031939 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.885063887 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.885111094 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.886444092 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.886504889 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.886585951 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.886650085 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.934588909 CEST	443	49768	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.934817076 CEST	443	49767	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.936263084 CEST	49768	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.936286926 CEST	443	49768	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.938400984 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.938410044 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.940440893 CEST	49768	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.940449953 CEST	443	49768	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.942187071 CEST	49767	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.942219019 CEST	443	49767	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.942548037 CEST	443	49764	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.942656994 CEST	443	49764	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.942848921 CEST	49764	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.943512917 CEST	49767	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.943517923 CEST	443	49767	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.944113970 CEST	49764	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.944113970 CEST	49764	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.944124937 CEST	443	49764	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.944134951 CEST	443	49764	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.947695017 CEST	443	49766	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.948822975 CEST	49766	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.948842049 CEST	443	49766	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.949829102 CEST	49766	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.949834108 CEST	443	49766	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.957004070 CEST	443	49765	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.957159042 CEST	443	49765	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.957278013 CEST	49765	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.957534075 CEST	49765	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.957542896 CEST	443	49765	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.957556009 CEST	49765	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.957561970 CEST	443	49765	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.966726065 CEST	49775	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.966779947 CEST	443	49775	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.966972113 CEST	49775	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.967281103 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.967309952 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.967348099 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.967355967 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.967401028 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.967412949 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.967420101 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.967432976 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.967447996 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.967468977 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.967473984 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.967487097 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.967508078 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.967513084 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.967551947 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.967598915 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.967951059 CEST	49775	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.967968941 CEST	443	49775	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.969783068 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.969942093 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.969969034 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.970021963 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.970046043 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.970056057 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.970119953 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.970746994 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.970844984 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.970850945 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.970863104 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.970905066 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.970915079 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.970963955 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.970972061 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971016884 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.971112967 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971169949 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971210003 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.971210003 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.971218109 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971249104 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971290112 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.971290112 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.971297026 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971338034 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971407890 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.971415043 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971467972 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.971517086 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971569061 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.971849918 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971899033 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.971899986 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971927881 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.971956015 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.972042084 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.972095966 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.972103119 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.972193003 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.972887993 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.972960949 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.972971916 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973027945 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973027945 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973038912 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973073959 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973098993 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973164082 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973197937 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973207951 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973207951 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973217010 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973238945 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973251104 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973251104 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973259926 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973279953 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973453999 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973500967 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973510027 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973534107 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973546982 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973582029 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973598003 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973622084 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973629951 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973673105 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973828077 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973877907 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.973885059 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.973932981 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.979640007 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.988390923 CEST	49776	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.988419056 CEST	443	49776	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:51.988476992 CEST	49776	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.993952036 CEST	49754	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:51.993963957 CEST	443	49754	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:51.999428988 CEST	49776	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:51.999449968 CEST	443	49776	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.043271065 CEST	443	49768	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.043427944 CEST	443	49768	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.043477058 CEST	49768	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.047652006 CEST	443	49767	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.047801971 CEST	443	49767	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.047874928 CEST	49767	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.050081015 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.053843975 CEST	443	49772	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.054580927 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.055484056 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.060960054 CEST	443	49766	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.061034918 CEST	443	49766	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.061094046 CEST	49766	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.063990116 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.064013004 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.064090967 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.064090967 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.064110041 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.064124107 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.064148903 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.064168930 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.064215899 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.064215899 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.064655066 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.064671040 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.064740896 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.064742088 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.064749956 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.065032005 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.065052032 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.065080881 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.065099955 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.065726995 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.066576004 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068166971 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068183899 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068289042 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.068289042 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.068300009 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068341970 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068362951 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068392992 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.068412066 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068447113 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068480015 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.068510056 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068555117 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.068561077 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068577051 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.068641901 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068681955 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068717003 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.068726063 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.068820953 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.078111887 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.093661070 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.093805075 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.096153975 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.096189976 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.111666918 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.111761093 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.124885082 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.138427973 CEST	49768	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.138458014 CEST	443	49768	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.143915892 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.143923998 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.144300938 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.144334078 CEST	443	49772	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.144840002 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.144898891 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.144962072 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.144978046 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.145289898 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.145306110 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.145410061 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.145467997 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.145626068 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.145632982 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.146015882 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.146060944 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.146123886 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.146608114 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.146672964 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.146924973 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.146992922 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.147408009 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.147466898 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.147681952 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.147792101 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.148253918 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.148267031 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.148328066 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.148329020 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.148361921 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.148399115 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.148411989 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.148432016 CEST	443	49772	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.148474932 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.148497105 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.148570061 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.149049044 CEST	49767	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.149065018 CEST	443	49767	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.149116039 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.149137020 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.149209023 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.149209023 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.149219036 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.149322033 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.149626970 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.149645090 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.149694920 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.149701118 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.149734974 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.149734974 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.150511980 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.150528908 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.150607109 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.150614977 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.150665045 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.151437998 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.151453018 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.151519060 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.151525974 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.151580095 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.152275085 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.152399063 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.152785063 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.152801991 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.152829885 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.152861118 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.152868986 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.152900934 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.152900934 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.154146910 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.154242039 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.154370070 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.154386997 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.154449940 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.154457092 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.154534101 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.154815912 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.154831886 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.154882908 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.154901981 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.155036926 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.155227900 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.155360937 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.156342983 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.156539917 CEST	443	49772	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.158838034 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.158845901 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.159327030 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.159344912 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.159411907 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.159424067 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.159651041 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.159665108 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.159759045 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.159765005 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.160315037 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.160343885 CEST	443	49772	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.161753893 CEST	49766	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.161772013 CEST	443	49766	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.205513954 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.205513954 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.205553055 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.205573082 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.205620050 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.205620050 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.226681948 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.232018948 CEST	49777	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:52.232055902 CEST	443	49777	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:52.232110023 CEST	49777	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:52.234755993 CEST	49777	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:52.234771967 CEST	443	49777	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:52.234889030 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.234909058 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.234996080 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.234996080 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.235012054 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.235172033 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.235191107 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.235200882 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.235208035 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.235239983 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.235258102 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.235266924 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.236283064 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.236299038 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.236347914 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.236370087 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.236713886 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.236731052 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.236768007 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.236776114 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.236860991 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.237389088 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.237458944 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.237457991 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.237494946 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.237556934 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.240161896 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.240174055 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.240278006 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.240278006 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.240287066 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.240571976 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.240583897 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.240637064 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.240655899 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.240698099 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.241446018 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.241512060 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.241525888 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.241590023 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.241596937 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.241611958 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.246948004 CEST	49778	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.246988058 CEST	443	49778	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.247056007 CEST	49778	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.249209881 CEST	49779	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.249274015 CEST	443	49779	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.249346018 CEST	49779	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.249737978 CEST	49778	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.249757051 CEST	443	49778	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.258621931 CEST	49779	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.258641958 CEST	443	49779	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.261162043 CEST	49780	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.261205912 CEST	443	49780	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.261260986 CEST	49780	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.261521101 CEST	49780	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.261542082 CEST	443	49780	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.265221119 CEST	443	49755	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:52.272078991 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.273057938 CEST	49755	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:52.273104906 CEST	443	49755	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:52.275341034 CEST	443	49755	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:52.275433064 CEST	49755	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:52.277024984 CEST	49755	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:52.277170897 CEST	443	49755	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:52.277535915 CEST	49755	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:52.277554035 CEST	443	49755	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:52.282011032 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282079935 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282124996 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282124996 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.282139063 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282183886 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.282196999 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282265902 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282311916 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282310963 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.282321930 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282361031 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.282380104 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282440901 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282480001 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282484055 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.282507896 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282639980 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282697916 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.282726049 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282821894 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.282871008 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.282881021 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.283068895 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.283118963 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.283127069 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.283435106 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.283480883 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.283493042 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.286179066 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.286226034 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.286258936 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.286273003 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.286288023 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.286331892 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.286333084 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.286344051 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.286402941 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.286410093 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.286418915 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.286453962 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.286920071 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.287096024 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.287151098 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.287163973 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.287199020 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.287257910 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.287269115 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.290215969 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.290338039 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.290407896 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.290431023 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.290520906 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.290597916 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.290606976 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.290721893 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.290795088 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.290823936 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.290833950 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.290947914 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291030884 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.291040897 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291140079 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.291147947 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291353941 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291429043 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291476011 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.291477919 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291490078 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291533947 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.291548014 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291631937 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291677952 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.291688919 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291716099 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.291824102 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.295001984 CEST	49770	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.295026064 CEST	443	49770	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.297995090 CEST	49781	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.298049927 CEST	443	49781	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.298182011 CEST	49781	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.298716068 CEST	49781	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.298731089 CEST	443	49781	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.301780939 CEST	443	49772	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.301873922 CEST	443	49772	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.301928043 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.307013988 CEST	49772	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.307044029 CEST	443	49772	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.322984934 CEST	49782	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.323004961 CEST	443	49782	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.323117971 CEST	49782	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.323326111 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.323347092 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.323409081 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.323434114 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.323446035 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.323461056 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.323468924 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.323489904 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.323858976 CEST	49782	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.323873043 CEST	443	49782	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.323976040 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.323990107 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.324058056 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.324067116 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.324116945 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.324529886 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.324604034 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.324636936 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.324644089 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.324667931 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.325079918 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.325093985 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.325145960 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.325165987 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.325599909 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.325617075 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.325694084 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.325705051 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.327645063 CEST	49755	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:52.327651024 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.327651024 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.327696085 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.327723980 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.328243017 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.328313112 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.328321934 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.328689098 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.328706980 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.328748941 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.328758001 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.328778028 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.329322100 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.329335928 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.329375029 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.329384089 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.330177069 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.330193996 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.330240011 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.330250025 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.330267906 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.342555046 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.342570066 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.370763063 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.370814085 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.370815039 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.370829105 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.370867014 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.370897055 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.370945930 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.371000051 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.371366024 CEST	49769	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.371414900 CEST	443	49769	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.371753931 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.371828079 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.371860027 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.371887922 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.371937037 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.371974945 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.372214079 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.372273922 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.372303963 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.372400045 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.372452974 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.372467995 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.372558117 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.372617960 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.372632980 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.372708082 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.372757912 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.372771025 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.372859001 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.372927904 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.372941017 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.373025894 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.373080969 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.373095036 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.373285055 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.373358011 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.373408079 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.373409986 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.373423100 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.373512030 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.373560905 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.373574018 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.373660088 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.373712063 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.373724937 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.374419928 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.374474049 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.374488115 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.375463009 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.375679970 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.375719070 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.375730038 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.375744104 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.375818968 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.375830889 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.376090050 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.376131058 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.376137972 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.376148939 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.376194000 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.376198053 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.376209021 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.376276016 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.376998901 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.377079010 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.377110958 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.377118111 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.377129078 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.377172947 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.377173901 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.377182961 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.377219915 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.377515078 CEST	49783	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.377557993 CEST	443	49783	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.377619982 CEST	49783	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.377872944 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.377984047 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.378035069 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.378035069 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.378042936 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.378081083 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.378093958 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.378166914 CEST	49783	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.378182888 CEST	443	49783	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.378829956 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.378874063 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.378885031 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.384480000 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.384565115 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.384578943 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.384668112 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.384752989 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.384762049 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.384934902 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.385026932 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.385087967 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.385097027 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.385154963 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.385163069 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.385752916 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.385833025 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.385839939 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.385864973 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.385922909 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.385946989 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.386096954 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.386173964 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.386183023 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.386718035 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.386760950 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.386769056 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.386873007 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.386957884 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.386966944 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.386980057 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.387020111 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.387559891 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.387711048 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.387759924 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.387768984 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.411874056 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.411884069 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.411969900 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.411998034 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.412055016 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.412064075 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.412090063 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.412127972 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.412405014 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.412424088 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.412488937 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.412509918 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.412581921 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.412931919 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.412950993 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.413003922 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.413024902 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.413077116 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.413578987 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.413594007 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.413736105 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.413744926 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.413817883 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.416522980 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.416538954 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.416595936 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.416604996 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.416731119 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.416990042 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.417002916 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.417145967 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.417155981 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.417238951 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.417562008 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.417578936 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.417747021 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.417754889 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.417807102 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.418503046 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.418517113 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.418678045 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.418688059 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.418984890 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.421809912 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.421811104 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.426300049 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.426352978 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.426383018 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.460262060 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.460407019 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.460495949 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.460500956 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.460571051 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.460655928 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.460680008 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.460783005 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.460802078 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.460864067 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.460886955 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.460911989 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.461107969 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.461168051 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.461282969 CEST	49773	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.461313963 CEST	443	49773	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.465167046 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.465236902 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.465291977 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.465306997 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.465358019 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.465389967 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.465411901 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.465424061 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.465476990 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.465487957 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.466087103 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.466146946 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.466157913 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.466211081 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.466237068 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.466295004 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.466306925 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.466329098 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.466367006 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.466378927 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.466412067 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.467117071 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.467184067 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.467214108 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.467226028 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.467250109 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.467304945 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.467365026 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.467529058 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.467546940 CEST	443	49774	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.467569113 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.467601061 CEST	49774	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.468497992 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.478907108 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.479115009 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.479173899 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.479199886 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.479288101 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.479355097 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.479363918 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.479481936 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.479504108 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.479571104 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.479571104 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.479583025 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.480040073 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.480104923 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.480113029 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.480170012 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.480176926 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.480217934 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.480298996 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.480307102 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.480468988 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.480663061 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.480663061 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.500643969 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.500699043 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.500754118 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.500770092 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.500783920 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.500840902 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.500854969 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.500953913 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.500993967 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.501039028 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.501046896 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.501096964 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.501257896 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.501415014 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.501468897 CEST	49763	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.501485109 CEST	443	49763	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.625262976 CEST	443	49755	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:52.626806974 CEST	49755	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:52.626835108 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:52.626924038 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:52.626924992 CEST	443	49755	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:52.627033949 CEST	49755	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:52.627036095 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:52.627249002 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:52.627285004 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:52.632410049 CEST	443	49775	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.633461952 CEST	49775	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.633461952 CEST	49775	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.633485079 CEST	443	49775	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.633497953 CEST	443	49775	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.663039923 CEST	443	49776	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.664277077 CEST	49776	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.664277077 CEST	49776	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.664356947 CEST	443	49776	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.664391041 CEST	443	49776	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.741365910 CEST	443	49775	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.741445065 CEST	443	49775	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.741727114 CEST	49775	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.741997957 CEST	49775	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.741998911 CEST	49775	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.742010117 CEST	443	49775	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.742018938 CEST	443	49775	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.766205072 CEST	443	49781	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.770538092 CEST	443	49776	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.770612001 CEST	443	49776	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.771019936 CEST	49776	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.787892103 CEST	49781	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.787903070 CEST	443	49781	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.789041996 CEST	443	49781	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.789186954 CEST	49781	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.791312933 CEST	49781	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.791312933 CEST	49781	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.791378021 CEST	443	49781	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.791400909 CEST	49781	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.791573048 CEST	443	49781	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.791729927 CEST	49781	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.791731119 CEST	49781	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.791785002 CEST	443	49782	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.791915894 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.791964054 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.792213917 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.795361996 CEST	49771	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.795378923 CEST	443	49771	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.834089994 CEST	49782	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.834101915 CEST	443	49782	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.835628986 CEST	443	49782	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.835663080 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.835722923 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.835779905 CEST	49782	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.836755037 CEST	49782	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.836903095 CEST	49782	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.836903095 CEST	49782	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.836925983 CEST	443	49782	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.837141991 CEST	443	49782	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.837239981 CEST	49782	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.837239981 CEST	49782	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.837560892 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.837615013 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.837981939 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.837981939 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.838068962 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.863420963 CEST	443	49783	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.863914967 CEST	49783	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.863946915 CEST	443	49783	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.865375042 CEST	443	49783	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.865786076 CEST	49783	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.866425991 CEST	49783	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.866425991 CEST	49783	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.866519928 CEST	443	49783	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.866553068 CEST	49783	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.866718054 CEST	443	49783	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.866811037 CEST	49783	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.866811037 CEST	49783	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.867237091 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.867328882 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.870702982 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.871407032 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:52.871432066 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:52.920321941 CEST	443	49778	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.921415091 CEST	443	49779	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.921555042 CEST	443	49780	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:52.968064070 CEST	49778	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.968071938 CEST	49779	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:52.968776941 CEST	49780	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.032552958 CEST	49780	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.032578945 CEST	443	49780	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.032957077 CEST	443	49777	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:53.033078909 CEST	49777	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:53.039882898 CEST	49777	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:53.039911985 CEST	443	49777	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:53.040235996 CEST	443	49777	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:53.040730000 CEST	49776	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.040731907 CEST	49780	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.040755987 CEST	443	49780	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.040774107 CEST	443	49776	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.040800095 CEST	49776	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.040810108 CEST	443	49776	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.051908970 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.051956892 CEST	443	49791	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.052202940 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.052205086 CEST	49792	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.052270889 CEST	443	49792	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.052470922 CEST	49792	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.052470922 CEST	49792	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.052546978 CEST	443	49792	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.052586079 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.052606106 CEST	443	49793	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.052987099 CEST	49778	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.052989006 CEST	49794	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.052998066 CEST	443	49778	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.053005934 CEST	443	49794	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.053040028 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.053417921 CEST	49794	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.053997040 CEST	49778	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.054003954 CEST	443	49778	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.054497004 CEST	49779	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.054497004 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.054521084 CEST	443	49779	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.054558039 CEST	443	49791	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.054884911 CEST	49779	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.054898024 CEST	443	49779	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.055167913 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.055191994 CEST	443	49793	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.055289030 CEST	49794	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.055311918 CEST	443	49794	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.056265116 CEST	49777	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:53.056440115 CEST	49777	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:53.056440115 CEST	49777	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:53.056457996 CEST	443	49777	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:53.058583975 CEST	49795	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.058630943 CEST	443	49795	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.062761068 CEST	49795	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.063237906 CEST	49795	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.063271046 CEST	443	49795	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.076175928 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.076199055 CEST	443	49796	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.076390028 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.076927900 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.076939106 CEST	443	49796	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.103394032 CEST	443	49777	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:53.138036013 CEST	443	49780	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.138082027 CEST	443	49780	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.138186932 CEST	49780	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.138526917 CEST	49780	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.138526917 CEST	49780	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.138549089 CEST	443	49780	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.138557911 CEST	443	49780	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.151439905 CEST	443	49778	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.151683092 CEST	443	49778	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.152384996 CEST	49778	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.152951956 CEST	443	49779	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.153088093 CEST	443	49779	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.154798985 CEST	49779	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.233437061 CEST	443	49777	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:53.233642101 CEST	443	49777	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:53.234006882 CEST	49777	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:53.234282970 CEST	49777	443	192.168.2.6	40.113.103.199
Oct 13, 2024 17:58:53.234323978 CEST	443	49777	40.113.103.199	192.168.2.6
Oct 13, 2024 17:58:53.282799006 CEST	49797	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.282901049 CEST	443	49797	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.283133030 CEST	49779	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.283133030 CEST	49779	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.283164024 CEST	443	49779	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.283188105 CEST	443	49779	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.283217907 CEST	49797	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.284887075 CEST	49797	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.284919024 CEST	443	49797	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.285666943 CEST	49778	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.285666943 CEST	49778	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.285685062 CEST	443	49778	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.285700083 CEST	443	49778	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.303247929 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.321778059 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.346585035 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.350183010 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.374561071 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.398561001 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.530781031 CEST	443	49794	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.532270908 CEST	443	49791	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.542536020 CEST	443	49793	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.561913967 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:53.579190016 CEST	443	49796	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:53.584659100 CEST	49794	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.584939003 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.595360041 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.617712021 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:53.620125055 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:53.718787909 CEST	443	49795	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.720097065 CEST	443	49792	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.760559082 CEST	49795	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.762772083 CEST	49792	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:53.940108061 CEST	443	49797	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:53.984498024 CEST	49797	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.270972967 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.271007061 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.271507978 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.271533966 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.272193909 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.272208929 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.272862911 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.272882938 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.272942066 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.273168087 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.273185968 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.273232937 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.273720026 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.273783922 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.275460958 CEST	49798	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.275487900 CEST	443	49798	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.275537968 CEST	49798	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.276462078 CEST	49799	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.276499987 CEST	443	49799	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.276556969 CEST	49799	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.277451992 CEST	49800	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.277489901 CEST	443	49800	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.277561903 CEST	49800	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.278029919 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.278042078 CEST	443	49796	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.278671026 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.278690100 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.279118061 CEST	443	49796	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.279177904 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.279659033 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.279670954 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.279723883 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.280101061 CEST	49801	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.280138016 CEST	443	49801	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.280219078 CEST	49801	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.280320883 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.280337095 CEST	443	49793	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.280766010 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.280803919 CEST	443	49791	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.281445980 CEST	443	49793	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.281461954 CEST	443	49793	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.281507969 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.283953905 CEST	443	49791	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.283982992 CEST	443	49791	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.284024954 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.288450956 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.288484097 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.288539886 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.289834023 CEST	49794	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.289855003 CEST	443	49794	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.293710947 CEST	443	49794	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.293744087 CEST	443	49794	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.293781996 CEST	49794	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.301204920 CEST	49797	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.301278114 CEST	443	49797	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.302515984 CEST	49797	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.302531958 CEST	443	49797	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.306205988 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.306281090 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.307249069 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.307399035 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.308259010 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.308342934 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.309282064 CEST	49798	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.309290886 CEST	443	49798	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.310000896 CEST	49799	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.310019016 CEST	443	49799	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.311280966 CEST	49800	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.311292887 CEST	443	49800	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.311960936 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.311971903 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.312027931 CEST	443	49796	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.312155008 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.312161922 CEST	443	49796	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.312170029 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.312205076 CEST	49796	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.315149069 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.315169096 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.315221071 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.319960117 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.320014000 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.321084023 CEST	49801	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.321111917 CEST	443	49801	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.322877884 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.322942019 CEST	443	49793	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.322977066 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.323016882 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.323029995 CEST	443	49793	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.323043108 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.323071003 CEST	49793	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.323764086 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.323808908 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.323894978 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.324790955 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.324790955 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.324970961 CEST	443	49791	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.325037003 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.325051069 CEST	443	49791	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.325062037 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.325089931 CEST	49791	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.325659037 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.325668097 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.325717926 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.327294111 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.327307940 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.336190939 CEST	49794	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.336215019 CEST	49794	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.336416006 CEST	443	49794	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.336431980 CEST	49794	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.336489916 CEST	49794	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.336749077 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.336756945 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.336811066 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.338910103 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.338922024 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.339951038 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.339977026 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.340620041 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.340631008 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.342739105 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.342745066 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.343417883 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.343446016 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.348437071 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.348443031 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.348474979 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.348494053 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.349756956 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.349823952 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.350300074 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.350336075 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.391407967 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.391415119 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.392703056 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.392704964 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.399928093 CEST	443	49797	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.400002003 CEST	443	49797	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.400059938 CEST	49797	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.458600998 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.458710909 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.458767891 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.483314037 CEST	49795	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.483352900 CEST	443	49795	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.489423990 CEST	49795	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.489429951 CEST	443	49795	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.497488022 CEST	49792	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.497498989 CEST	443	49792	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.498811960 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.498851061 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.498891115 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.498908997 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.498944998 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.499070883 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.499077082 CEST	49792	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.499082088 CEST	443	49792	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.500320911 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.500411987 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.500458956 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.519612074 CEST	49797	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.519669056 CEST	443	49797	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.519716024 CEST	49797	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.519733906 CEST	443	49797	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.570321083 CEST	49807	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.570352077 CEST	443	49807	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.570413113 CEST	49807	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.573569059 CEST	49809	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:54.573601961 CEST	443	49809	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:54.573654890 CEST	49809	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:54.574403048 CEST	49809	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:54.574419975 CEST	443	49809	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:54.575906992 CEST	49810	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.575912952 CEST	443	49810	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.575964928 CEST	49810	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.577447891 CEST	49807	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.577464104 CEST	443	49807	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.578811884 CEST	49810	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.578824997 CEST	443	49810	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.595622063 CEST	49811	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.595678091 CEST	443	49811	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.595716953 CEST	49786	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.595731020 CEST	443	49786	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.595751047 CEST	49811	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.595901012 CEST	49811	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.595947027 CEST	443	49811	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.596261978 CEST	49812	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.596293926 CEST	443	49812	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.596354008 CEST	49812	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.596595049 CEST	49787	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.596616983 CEST	443	49787	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.596836090 CEST	49813	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.596874952 CEST	443	49813	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.596935034 CEST	49813	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.597426891 CEST	49785	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.597434998 CEST	443	49785	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.598237038 CEST	49812	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.598254919 CEST	443	49812	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.598714113 CEST	49813	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.598725080 CEST	443	49813	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.611196995 CEST	49814	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.611222029 CEST	443	49814	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.611443996 CEST	49814	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.611872911 CEST	49814	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.611884117 CEST	443	49814	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.659303904 CEST	443	49792	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.659378052 CEST	443	49792	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.659502029 CEST	49792	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.659816027 CEST	49792	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.659832001 CEST	443	49792	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.664263010 CEST	49815	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.664299965 CEST	443	49815	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.664592028 CEST	49815	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.664731979 CEST	49815	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.664742947 CEST	443	49815	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.665631056 CEST	443	49795	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.665822029 CEST	443	49795	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.665889978 CEST	49795	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.665927887 CEST	49795	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.665927887 CEST	49795	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.665945053 CEST	443	49795	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.665967941 CEST	443	49795	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.668171883 CEST	49816	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.668203115 CEST	443	49816	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.668335915 CEST	49816	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.668441057 CEST	49816	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:54.668459892 CEST	443	49816	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:54.742552042 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.744508982 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.744590998 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.744777918 CEST	49784	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:54.744824886 CEST	443	49784	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:54.936785936 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.937160015 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.937200069 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.937577009 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.938344955 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.938442945 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.938640118 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.938826084 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.939294100 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.939338923 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.940834045 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.940913916 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.941521883 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.941611052 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.941946030 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.941962004 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.951096058 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.951338053 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.951716900 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.951749086 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.951862097 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.951879025 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.952228069 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.952574015 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.952666998 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.952734947 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.953046083 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.953135014 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.953569889 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.953735113 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.979419947 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.997400999 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:54.999404907 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:54.999427080 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.052452087 CEST	443	49809	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:55.052862883 CEST	49809	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.052871943 CEST	443	49809	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:55.056452036 CEST	443	49809	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:55.056524038 CEST	49809	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.057126045 CEST	49809	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.057152033 CEST	49809	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.057219028 CEST	49809	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.057307005 CEST	443	49809	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:55.057388067 CEST	49809	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.057919025 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.058017015 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:55.058096886 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.058768988 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.058804035 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:55.067058086 CEST	443	49813	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.067282915 CEST	49813	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.067296028 CEST	443	49813	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.068867922 CEST	443	49813	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.068941116 CEST	49813	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.069525957 CEST	49813	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.069545031 CEST	49813	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.069616079 CEST	443	49813	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.069618940 CEST	49813	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.069684982 CEST	49813	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.070018053 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.070050001 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.070126057 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.070571899 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.070590019 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.070791006 CEST	443	49812	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.071163893 CEST	49812	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.071176052 CEST	443	49812	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.072609901 CEST	443	49812	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.072664022 CEST	49812	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.073101997 CEST	49812	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.073127985 CEST	49812	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.073198080 CEST	443	49812	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.073225021 CEST	49812	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.073338032 CEST	49812	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.073642015 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.073705912 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.073780060 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.074135065 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.074165106 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.074213028 CEST	443	49814	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.074462891 CEST	49814	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.074475050 CEST	443	49814	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.075481892 CEST	443	49814	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.075551987 CEST	49814	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.076216936 CEST	49814	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.076247931 CEST	49814	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.076277971 CEST	443	49814	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.076304913 CEST	49814	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.076322079 CEST	49814	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.076565981 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.076611996 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.076666117 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.077074051 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.077094078 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.078442097 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.078636885 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.078675985 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.078708887 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.078723907 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.078737974 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.078758001 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.079078913 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.079122066 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.079140902 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.079150915 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.079247952 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.079257011 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.079524040 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.079607010 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.079615116 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.081737041 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.082227945 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.082328081 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.082328081 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.082355022 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.082412004 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.082442999 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.082623959 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.082691908 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.082705975 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.082803965 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.082869053 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.082880974 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.083528996 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.083594084 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.083605051 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.084005117 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.084053993 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.084094048 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.084114075 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.084122896 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.084156990 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.084165096 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.084173918 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.084223032 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.084229946 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.084239960 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.084280968 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.085216045 CEST	49803	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.085226059 CEST	443	49803	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086096048 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086168051 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086216927 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086261988 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086280107 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.086304903 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086333036 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.086364985 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086405993 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.086410999 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086457968 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086532116 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.086536884 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086571932 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.086685896 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.086689949 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.090804100 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.090852022 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.090857983 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.090863943 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.090902090 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.120170116 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.120196104 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.135489941 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.166214943 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.171268940 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.171354055 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.171406984 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.171439886 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.171468973 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.171471119 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.171497107 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.171535969 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.171565056 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.171574116 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.171586037 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.171648026 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.171663046 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.171684980 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.171735048 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.173062086 CEST	49804	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.173073053 CEST	443	49804	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.176363945 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.176382065 CEST	443	49821	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.176441908 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.179469109 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.179631948 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.179702997 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.179712057 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.179785967 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.179836035 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.179841042 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.180027008 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.180077076 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.180082083 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.180175066 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.180253983 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.180306911 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.180311918 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.180793047 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.180845022 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.180850029 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.180892944 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.180896997 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.181010008 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.181113958 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.181669950 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.181699991 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.181705952 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.181720972 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.181821108 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.181905985 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.181955099 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.181960106 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.183885098 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.183888912 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.184185982 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.184372902 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.184379101 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.184391022 CEST	443	49821	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.184428930 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.184433937 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.184560061 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.184648991 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.184658051 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.184675932 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.184793949 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.184798956 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.184904099 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.184989929 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.185023069 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.185029030 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.185072899 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.185079098 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.185215950 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.185271978 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.185276985 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.185590029 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.185662031 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.185667038 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.185762882 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.185811996 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.185817003 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.185914040 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.185971022 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.185976028 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.186467886 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.186558008 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.186570883 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.186577082 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.186642885 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.186647892 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.186786890 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.186846972 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.186853886 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.227797985 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.227798939 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.240071058 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.246503115 CEST	443	49810	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.247139931 CEST	49810	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.247150898 CEST	443	49810	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.247867107 CEST	49810	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.247870922 CEST	443	49810	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.251473904 CEST	443	49807	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.251960039 CEST	49807	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.251981974 CEST	443	49807	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.252867937 CEST	49807	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.252876043 CEST	443	49807	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.262459993 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.262516975 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.262536049 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.262552023 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.262598991 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.262825966 CEST	49806	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.262840033 CEST	443	49806	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.263206005 CEST	443	49811	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.263681889 CEST	49811	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.263724089 CEST	443	49811	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.264311075 CEST	49811	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.264322996 CEST	443	49811	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.266282082 CEST	49822	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.266308069 CEST	443	49822	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.266379118 CEST	49822	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.266828060 CEST	49822	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.266838074 CEST	443	49822	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.277296066 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.277465105 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.277532101 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.277540922 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.277626991 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.277724981 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.277793884 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.277800083 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.277817011 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.277894974 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.277900934 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.278583050 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.278654099 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.278660059 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.278695107 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.278749943 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.278754950 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.278795958 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.278820992 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.278878927 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.279016018 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.279067993 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.279110909 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.279160976 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.279912949 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.279978037 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.280220985 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.280284882 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.318380117 CEST	443	49800	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.318744898 CEST	49800	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.318767071 CEST	443	49800	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.319689035 CEST	443	49800	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.319749117 CEST	49800	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.320596933 CEST	49800	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.320657969 CEST	443	49800	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.320832968 CEST	49800	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.320844889 CEST	443	49800	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.320895910 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.321247101 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.321270943 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.324840069 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.324919939 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.325391054 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.325577974 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.325607061 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.326385975 CEST	443	49799	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.326672077 CEST	49799	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.326719999 CEST	443	49799	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.327724934 CEST	443	49798	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.327991962 CEST	443	49801	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.328002930 CEST	49798	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.328028917 CEST	443	49798	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.328258038 CEST	443	49799	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.328325987 CEST	49799	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.328432083 CEST	49801	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.328440905 CEST	443	49801	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.328759909 CEST	443	49801	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.329166889 CEST	443	49798	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.329503059 CEST	49799	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.329579115 CEST	443	49799	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.329925060 CEST	49801	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.329977989 CEST	443	49801	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.330331087 CEST	49798	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.330522060 CEST	443	49798	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.330681086 CEST	49799	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.330688000 CEST	443	49799	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.330830097 CEST	49801	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.330985069 CEST	49798	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.361567974 CEST	443	49816	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.362193108 CEST	49816	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.362207890 CEST	443	49816	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.362879038 CEST	49816	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.362884998 CEST	443	49816	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.365072012 CEST	49800	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.371398926 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.371412039 CEST	443	49801	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.371417999 CEST	443	49798	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.380350113 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.380357981 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.380412102 CEST	49799	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.427047968 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.518209934 CEST	443	49810	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.518393040 CEST	443	49810	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.518460035 CEST	49810	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.518471956 CEST	443	49807	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.518568993 CEST	443	49807	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.518697023 CEST	49807	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.518919945 CEST	49810	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.518940926 CEST	443	49810	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.518953085 CEST	49810	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.518958092 CEST	443	49810	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.519011974 CEST	443	49811	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.519047022 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.519145966 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.519155025 CEST	443	49811	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.519226074 CEST	49811	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.519296885 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.519360065 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.519429922 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.519495010 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.519514084 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.519589901 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.519596100 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.519619942 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.519663095 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.519696951 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.519731998 CEST	49811	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.519752979 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.519767046 CEST	443	49811	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.519778967 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.519793987 CEST	49811	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.519809008 CEST	443	49811	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.519835949 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.519923925 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.519989014 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.520401955 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.520530939 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.520562887 CEST	49807	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.520586967 CEST	443	49807	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.520603895 CEST	49807	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.520606995 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.520606995 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.520611048 CEST	443	49807	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.520617962 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.520641088 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.520734072 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.521249056 CEST	443	49815	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.521465063 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.521500111 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.521538973 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.521545887 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.521584034 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.521595001 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.521600008 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.521625042 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.521655083 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.521658897 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.521667004 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.521687984 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.521728039 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.522028923 CEST	49815	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.522041082 CEST	443	49815	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.522310019 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.522346973 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.522391081 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.522396088 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.522427082 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.522485971 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.522531033 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.522535086 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.522542000 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.522583008 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.523200035 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.523202896 CEST	49815	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.523206949 CEST	443	49815	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.523266077 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.523274899 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.523319960 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.523394108 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.523418903 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.523469925 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.523475885 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.523502111 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.524343967 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.524374008 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.524408102 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.524413109 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.524467945 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.524466038 CEST	49823	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.524492025 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.524518013 CEST	443	49823	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.524543047 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.524596930 CEST	49823	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.524632931 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.524687052 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.524719954 CEST	49823	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.524734974 CEST	443	49823	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.525265932 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.525306940 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.525331020 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.525335073 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.525377989 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.525481939 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.525537968 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.525542974 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.525583982 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.526166916 CEST	49824	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.526176929 CEST	443	49824	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.526294947 CEST	49824	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.527684927 CEST	49824	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.527697086 CEST	443	49824	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.528305054 CEST	49825	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.528341055 CEST	443	49825	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.528544903 CEST	49825	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.528544903 CEST	49825	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.528584957 CEST	443	49825	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.562865973 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.562915087 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.562975883 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.563009977 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.563023090 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.563146114 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.563167095 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.563210964 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.563216925 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.563252926 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.563257933 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.563282967 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.563358068 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.563379049 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.563838959 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.563858032 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.563900948 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.563908100 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.563962936 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.564125061 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.564141989 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.564222097 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.564228058 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.565557957 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.565582991 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.565620899 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.565634012 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.565659046 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.565895081 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.565912008 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.565951109 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.565957069 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.565987110 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.565988064 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.566009045 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.566057920 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.566073895 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.566116095 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.566421032 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.566462040 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.566483974 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.566525936 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.566534996 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.566668034 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.566728115 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.566766024 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.566775084 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.566787958 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.566904068 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.566960096 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.566967964 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.566989899 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.567053080 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.567136049 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.567171097 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.567186117 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.567197084 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.567229033 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.568237066 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.568293095 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.568305016 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.568320036 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.568366051 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.614229918 CEST	443	49816	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.614312887 CEST	443	49816	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.614406109 CEST	49816	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.621504068 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.648955107 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649018049 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649056911 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649080992 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649139881 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649312973 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649359941 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649395943 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649405003 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649435043 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649465084 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649487972 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649545908 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649583101 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649590015 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649619102 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649643898 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649651051 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649672985 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649703026 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649722099 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649755955 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649763107 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649828911 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649883032 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649924040 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.649964094 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.649970055 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.650000095 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.650022984 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.650311947 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.650358915 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.650398016 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.650404930 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.650449038 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.650547981 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.650600910 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.650669098 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.650670052 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.650676966 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.650834084 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.651000023 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.651020050 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.651101112 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.651108027 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.651154995 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.656094074 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.660506010 CEST	443	49815	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.660581112 CEST	443	49815	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:55.660999060 CEST	49815	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:55.680733919 CEST	443	49801	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.681185961 CEST	49801	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.681247950 CEST	443	49801	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.681320906 CEST	49801	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.682250977 CEST	49826	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.682296038 CEST	443	49826	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.682385921 CEST	49826	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.682692051 CEST	49826	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.682709932 CEST	443	49826	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.710464001 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.715257883 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:55.717251062 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.720652103 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.741255045 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.741287947 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.741498947 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.741509914 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.741524935 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.741544962 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.741581917 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.741600990 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.741621971 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.741661072 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.741822004 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.741841078 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.741902113 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.741909027 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.741950989 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.742155075 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.742175102 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.742222071 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.742238998 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.742253065 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.742297888 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.742301941 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.742352962 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.750243902 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.765255928 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.765255928 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.765258074 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.796030045 CEST	443	49821	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.842206001 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.893556118 CEST	443	49822	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.942842960 CEST	49822	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.943479061 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.944688082 CEST	443	49800	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.946909904 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.948293924 CEST	443	49800	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.948362112 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.950545073 CEST	49800	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.955065966 CEST	443	49798	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.957290888 CEST	443	49799	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.958735943 CEST	443	49798	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.960621119 CEST	443	49799	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.960812092 CEST	49798	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.962558985 CEST	49799	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.992139101 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.992188931 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.992383003 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.992396116 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:55.992527008 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.992537022 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.992657900 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.992712975 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.992722988 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.992728949 CEST	443	49821	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.993273973 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.993375063 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:55.993463039 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:55.993491888 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.993681908 CEST	443	49821	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.993710995 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.993741035 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.993784904 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.993813992 CEST	49799	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.993844986 CEST	443	49799	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.994343996 CEST	49798	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.994376898 CEST	443	49798	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.994738102 CEST	49800	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.994757891 CEST	443	49800	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.995019913 CEST	49802	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.995042086 CEST	443	49802	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.995306969 CEST	49822	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.995317936 CEST	443	49822	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.995662928 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.995924950 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.996437073 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.996550083 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.996813059 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.996830940 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.996876001 CEST	443	49821	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.996934891 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.996942997 CEST	443	49821	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.996953011 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.996985912 CEST	49821	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.997180939 CEST	443	49822	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.997243881 CEST	49822	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.997304916 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.997330904 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.997495890 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.998120070 CEST	49828	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.998147964 CEST	443	49828	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.998207092 CEST	49828	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.998477936 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:55.998534918 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:55.999115944 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:55.999139071 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:55.999219894 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.000294924 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.000303030 CEST	443	49830	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.000504971 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.001138926 CEST	49831	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.001148939 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.001503944 CEST	49831	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.001991987 CEST	49822	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.002018929 CEST	49822	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.002051115 CEST	49822	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.002171040 CEST	443	49822	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.002222061 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.002244949 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.002248049 CEST	49822	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.002317905 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.002511024 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.002532959 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.002703905 CEST	49828	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.002716064 CEST	443	49828	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.002871037 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.002885103 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.003669977 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.003676891 CEST	443	49830	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.003696918 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.003815889 CEST	49831	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.003829002 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.003979921 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.004179955 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.004195929 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.004276991 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.004282951 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.047401905 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.048903942 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.051398039 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.114275932 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.114319086 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.114351034 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.114381075 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.114423037 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.114428043 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.114444017 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.114495039 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.115174055 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.115221977 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.115264893 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.115272999 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.115782976 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.115833044 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.115843058 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.115871906 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.115911961 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.115938902 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.115952015 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.115962982 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.115993023 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.115998030 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.116002083 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116044998 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116055965 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.116060019 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116090059 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.116092920 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116180897 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116235971 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116271973 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116292000 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.116322041 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116378069 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116379023 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116424084 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116425037 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116436958 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.116445065 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.116449118 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116466999 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116480112 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.116487980 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.116578102 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116630077 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116669893 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116677046 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.116687059 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.116719961 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.119407892 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.120579004 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.120637894 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.120645046 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.120919943 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.120970011 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.120985031 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.150825024 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.150934935 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.155246019 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.155260086 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.164388895 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.165452003 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.165465117 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.202477932 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.202662945 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.202733994 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.202819109 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.202860117 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.202897072 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.202917099 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.203193903 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.203200102 CEST	443	49823	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.203246117 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.203258038 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.203550100 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.203604937 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.203615904 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.204003096 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.204071999 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.204078913 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.204154968 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.204209089 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.204216003 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.204308987 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.204425097 CEST	443	49825	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.204484940 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.204493046 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.205003977 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.205063105 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.205070019 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.205141068 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.205188990 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.205195904 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.205287933 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.205744028 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.205801010 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.205809116 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.206583023 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.208112001 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.208203077 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.208249092 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.208272934 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.208288908 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.208343029 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.208400965 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.208416939 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.208478928 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.209022045 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.209036112 CEST	443	49824	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.209180117 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.210398912 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.210432053 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.210457087 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.210519075 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.210546017 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.210591078 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.210612059 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.210655928 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.210665941 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.210674047 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.210727930 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.211329937 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.211422920 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.211464882 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.211539984 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.211561918 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.211571932 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.211604118 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.212280035 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.212337017 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.212342978 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.212400913 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.244554043 CEST	49823	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.244582891 CEST	49825	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.248421907 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.248902082 CEST	49824	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.265850067 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.265889883 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.265917063 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.265940905 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.265959024 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.265964031 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.265993118 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.266017914 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.266041994 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.266463041 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.266500950 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.266526937 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.266547918 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.266556978 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.266618013 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.267277956 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.290873051 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.290921926 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.290945053 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.290966034 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.290981054 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.291028023 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.291049004 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.291147947 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.291155100 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.291178942 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.291261911 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.317642927 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.317661047 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.356504917 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.356581926 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.356597900 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.356609106 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.356621981 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.356659889 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.356671095 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.356708050 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.356720924 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.357486010 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.357526064 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.357527018 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.357537031 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.357575893 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.357594013 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.357600927 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.357630014 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.357666016 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.357671976 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.357703924 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.358366966 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.358426094 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.358453989 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.358500957 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.358508110 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.358546019 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.359026909 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.359077930 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.359129906 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.359137058 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.407352924 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.407370090 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.447218895 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.447249889 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.447273016 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.447297096 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.447318077 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.447333097 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.447408915 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.447472095 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.447472095 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.447743893 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.447776079 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.447809935 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.447828054 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.447886944 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.448381901 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.448394060 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.448427916 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.448448896 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.448450089 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.448465109 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.448481083 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.448504925 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.449176073 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.449249983 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.449253082 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.449265003 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.449325085 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.450267076 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.450299978 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.450347900 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.450365067 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.450390100 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.451056004 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.451126099 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.451139927 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.451178074 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.451199055 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.451212883 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.451236010 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.451240063 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.451296091 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.451307058 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.451360941 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.452083111 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.452174902 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.461498976 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.461544037 CEST	443	49835	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.461718082 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.462897062 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.462914944 CEST	443	49835	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.464600086 CEST	49836	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.464642048 CEST	443	49836	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.464715004 CEST	49836	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.465226889 CEST	49836	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.465249062 CEST	443	49836	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.466332912 CEST	49837	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.466367006 CEST	443	49837	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.466438055 CEST	49837	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.467410088 CEST	49838	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.467421055 CEST	443	49838	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.467586994 CEST	49838	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.468269110 CEST	49837	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.468282938 CEST	443	49837	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.470834970 CEST	49838	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.470844984 CEST	443	49838	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.472513914 CEST	49840	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.472529888 CEST	443	49840	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.472903967 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.472929001 CEST	49840	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.473467112 CEST	49840	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.473479986 CEST	443	49840	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.484168053 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.486893892 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.486912012 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.487137079 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.487639904 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.487665892 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.487751007 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.488008022 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.489166975 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.489249945 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.489599943 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.489814043 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.489886045 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.490092993 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.497185946 CEST	49805	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.497234106 CEST	443	49805	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.504122019 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.504905939 CEST	49824	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.504949093 CEST	443	49824	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.506006002 CEST	49824	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.506011963 CEST	443	49824	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.507142067 CEST	49825	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.507158995 CEST	443	49825	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.510862112 CEST	49825	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.510868073 CEST	443	49825	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.511316061 CEST	49816	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.511343956 CEST	443	49816	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.511359930 CEST	49816	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.511368036 CEST	443	49816	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.512386084 CEST	49842	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.512440920 CEST	443	49842	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.512654066 CEST	49818	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.512679100 CEST	443	49818	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.512698889 CEST	49842	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.513492107 CEST	49842	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.513520956 CEST	443	49842	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.513741970 CEST	49820	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.513758898 CEST	443	49820	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.514273882 CEST	49819	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.514288902 CEST	443	49819	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.521289110 CEST	49843	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.521313906 CEST	443	49843	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.521394014 CEST	49843	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.522124052 CEST	49843	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.522139072 CEST	443	49843	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.524240971 CEST	49844	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.524264097 CEST	443	49844	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.524307966 CEST	49844	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.524795055 CEST	49844	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.524806023 CEST	443	49844	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.527101040 CEST	49845	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.527123928 CEST	443	49845	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.527200937 CEST	49845	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.527450085 CEST	49845	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.527458906 CEST	443	49845	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.531393051 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.531400919 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.534902096 CEST	49846	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.534926891 CEST	443	49846	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.535007954 CEST	49815	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.535012007 CEST	49846	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.535007954 CEST	49815	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.535044909 CEST	443	49815	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.535069942 CEST	443	49815	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.535222054 CEST	49846	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.535233974 CEST	443	49846	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.537996054 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538055897 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538063049 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538083076 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538096905 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538130999 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538131952 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538135052 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538177013 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538183928 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538218021 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538218975 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538232088 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538255930 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538295031 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538332939 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538337946 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538371086 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538552999 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538598061 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538625956 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538669109 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538676977 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538712978 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538842916 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538887024 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.538938999 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538980007 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.538985968 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539000034 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539022923 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539036989 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539124012 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539151907 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539170980 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539175987 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539199114 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539216042 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539658070 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539699078 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539721012 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539726019 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539752960 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539771080 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539860964 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539906025 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539910078 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539917946 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539943933 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539947987 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539962053 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.539967060 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.539988995 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.542896986 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.542933941 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.542968988 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.542974949 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.543010950 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.543131113 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.543170929 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.543174982 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.543190956 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.543210030 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.544181108 CEST	49847	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.544205904 CEST	443	49847	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.544312954 CEST	49847	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.544568062 CEST	49847	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.544579029 CEST	443	49847	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.544650078 CEST	49823	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.544663906 CEST	443	49823	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.545212984 CEST	49823	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.545217037 CEST	443	49823	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.555072069 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.555107117 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.555285931 CEST	443	49817	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.555294037 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.555322886 CEST	49817	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.603684902 CEST	443	49824	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.603889942 CEST	443	49824	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.603951931 CEST	49824	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.608221054 CEST	443	49825	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.608333111 CEST	443	49825	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.608480930 CEST	49825	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.623955965 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.623996973 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.624017000 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.624037981 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.624078035 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.624073982 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.624115944 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.624125004 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.624126911 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.624154091 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.624772072 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.624800920 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.624823093 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.624852896 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625000954 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.625236988 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625274897 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625327110 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.625350952 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625399113 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625435114 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625454903 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.625468016 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625505924 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.625514030 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625829935 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625857115 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625874043 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.625885010 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.625937939 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.625986099 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.629096031 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.629143000 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.629183054 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.629189968 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.642329931 CEST	443	49823	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.642494917 CEST	443	49823	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.642559052 CEST	49823	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.646907091 CEST	49848	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:56.646934032 CEST	443	49848	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:56.647106886 CEST	49848	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:56.651335955 CEST	49848	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:56.651386023 CEST	443	49848	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:56.653033018 CEST	443	49826	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.677324057 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.677341938 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.677413940 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.692578077 CEST	49826	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.712771893 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.713053942 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.713150024 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.713212013 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.713213921 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.713239908 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.713260889 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.713388920 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.713433981 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.713447094 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.713937044 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.713996887 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.714013100 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.714106083 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.714157104 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.714169025 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.714278936 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.714329004 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.714339972 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.714747906 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.714798927 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.714811087 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.714947939 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.715018988 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.715029001 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.715117931 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.715207100 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.715219021 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.715559959 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.715620041 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.715650082 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.715975046 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.716028929 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.716048002 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.716141939 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.716187954 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.716196060 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.716332912 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.716376066 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.716382980 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.716502905 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.716548920 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.716556072 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.716674089 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.716734886 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.747782946 CEST	49824	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.747808933 CEST	443	49824	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.747822046 CEST	49824	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.747828007 CEST	443	49824	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.750421047 CEST	49825	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.750443935 CEST	443	49825	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.754249096 CEST	49823	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.754261971 CEST	443	49823	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.754304886 CEST	49823	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:56.754308939 CEST	443	49823	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:56.756750107 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.756810904 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.756812096 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.756841898 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.756895065 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.757049084 CEST	49826	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.757056952 CEST	443	49826	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.758390903 CEST	443	49826	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.759812117 CEST	49826	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.759998083 CEST	443	49826	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.759999990 CEST	49826	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.801960945 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.802160978 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.802221060 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.802231073 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.802284956 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.802344084 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.802361012 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.802412033 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.802467108 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.802479982 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.802501917 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.802531958 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.802548885 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.802582026 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.802970886 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.803033113 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.803045034 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.803066969 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.803123951 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.803134918 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.803189039 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.803675890 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.803792953 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.803818941 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.803879976 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.804596901 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.804658890 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.804694891 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.804744959 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.804778099 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.804841042 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.805458069 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.805524111 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.805569887 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.805627108 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.807408094 CEST	443	49826	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.814970970 CEST	49826	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.845966101 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.846086979 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.846170902 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.846170902 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.846237898 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.846295118 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.875902891 CEST	49849	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.875938892 CEST	443	49849	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.875991106 CEST	49849	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.880141973 CEST	49849	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:56.880160093 CEST	443	49849	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:56.890604973 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.890659094 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.890676022 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.890708923 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.890742064 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.890763044 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.890821934 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.891004086 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.891099930 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.891160011 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.891206980 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.891262054 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.891303062 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.891365051 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.891421080 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.891480923 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.892045975 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.892117023 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.892163992 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.892220020 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.892246962 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.892306089 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.892790079 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.892851114 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.892925978 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.892982006 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.893021107 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.893074036 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.893107891 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.893166065 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.893673897 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.893735886 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.893790007 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.893846989 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.893884897 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.893980980 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.894000053 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.894036055 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.894069910 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.894072056 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.894089937 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.894100904 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.894130945 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.894644022 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.894702911 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.894716024 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.894759893 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.894763947 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.894782066 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.894809961 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.894876957 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.894937992 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.894949913 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.894995928 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.929203987 CEST	443	49836	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.934356928 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.934416056 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.934426069 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.934456110 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.934488058 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.934508085 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.934658051 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.934719086 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.937973976 CEST	443	49835	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.943101883 CEST	443	49837	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.945058107 CEST	443	49838	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.947734118 CEST	443	49830	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.956058979 CEST	443	49828	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.966435909 CEST	443	49840	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.966630936 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.966742039 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:56.971709013 CEST	49836	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.979563951 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.979665995 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.980052948 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.980094910 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.980125904 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.980139017 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.980170012 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.980463982 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.980531931 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.980544090 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.980613947 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.980624914 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.980675936 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.983455896 CEST	443	49842	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.987296104 CEST	49837	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.987307072 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.987365961 CEST	49838	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:56.987366915 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:56.994410992 CEST	443	49843	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.997860909 CEST	443	49845	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:56.999871969 CEST	49828	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.014271021 CEST	49836	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.014302969 CEST	443	49836	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.014797926 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.014817953 CEST	443	49835	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.014978886 CEST	49837	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.014996052 CEST	443	49837	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.015398026 CEST	49838	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.015408993 CEST	443	49838	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.015661001 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.015669107 CEST	443	49830	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.016144037 CEST	49828	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.016181946 CEST	443	49828	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.016568899 CEST	49840	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.016597033 CEST	443	49840	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.016784906 CEST	443	49828	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.016818047 CEST	443	49830	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.016855955 CEST	49831	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.016875982 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.016880989 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.017290115 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.017307043 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.017601013 CEST	49842	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.017659903 CEST	443	49842	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.017808914 CEST	49843	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.017831087 CEST	443	49843	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.017990112 CEST	49845	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.018028975 CEST	443	49845	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.018090963 CEST	443	49836	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.018167973 CEST	49836	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.018342018 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.018362045 CEST	443	49840	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.018373966 CEST	443	49840	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.018393040 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.018425941 CEST	49840	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.018441916 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.018460035 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.018500090 CEST	49831	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.018524885 CEST	443	49835	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.018591881 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.018791914 CEST	443	49842	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.018861055 CEST	49842	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.018872023 CEST	443	49837	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.018881083 CEST	443	49843	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.018934965 CEST	49843	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.019013882 CEST	49837	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.019013882 CEST	443	49838	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.019073963 CEST	49838	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.019524097 CEST	443	49845	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.019584894 CEST	49845	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.023485899 CEST	443	49844	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.036412001 CEST	49828	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.036741018 CEST	443	49828	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.036973000 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.037122011 CEST	443	49830	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.037673950 CEST	49836	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.037730932 CEST	49836	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.037892103 CEST	443	49836	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.037910938 CEST	49836	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.037952900 CEST	49836	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.038788080 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.038851976 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.038929939 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.039705992 CEST	49831	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.039848089 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.041054964 CEST	49840	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.041081905 CEST	49840	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.041110992 CEST	49840	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.041163921 CEST	443	49840	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.041207075 CEST	49840	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.041713953 CEST	49851	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.041750908 CEST	443	49851	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.041821003 CEST	49851	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.042978048 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.043091059 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.044260979 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.044469118 CEST	443	49835	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.044631004 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.044650078 CEST	443	49835	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.045080900 CEST	443	49835	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.045134068 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.053699017 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.053715944 CEST	443	49835	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.053745985 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.053764105 CEST	49835	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.054490089 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.054522991 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.054582119 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.055723906 CEST	49838	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.055738926 CEST	49838	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.055772066 CEST	49838	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.056020975 CEST	443	49838	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.056077003 CEST	49838	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.056174040 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.056195974 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.056255102 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.057517052 CEST	49837	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.057575941 CEST	49837	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.057615042 CEST	49837	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.057641983 CEST	443	49837	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.057687044 CEST	49837	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.060467958 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.060477018 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.060532093 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.061445951 CEST	49843	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.061517954 CEST	49843	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.061546087 CEST	49843	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.061701059 CEST	443	49843	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.061758995 CEST	49843	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.062014103 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.062031031 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.062180042 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.064306021 CEST	49844	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.065473080 CEST	49842	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.065473080 CEST	49842	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.065556049 CEST	49842	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.065747976 CEST	443	49842	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.065812111 CEST	49842	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.066116095 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.066133022 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.066180944 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.067018032 CEST	49845	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.067092896 CEST	49845	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.067158937 CEST	443	49845	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.067361116 CEST	49845	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.067430973 CEST	443	49845	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.067481041 CEST	49845	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.067481995 CEST	49845	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.067656994 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.067668915 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.067718029 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.070096970 CEST	49844	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.070106030 CEST	443	49844	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.071125031 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.071146965 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.071970940 CEST	49851	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.071985006 CEST	443	49851	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.072443962 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.072459936 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.072834015 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.072851896 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.073365927 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.073379040 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.073698997 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.073709965 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.074273109 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.074281931 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.074692965 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.074718952 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.074861050 CEST	443	49844	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.074932098 CEST	49844	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.075546980 CEST	49828	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.075917959 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.075925112 CEST	443	49830	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.076076984 CEST	49831	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.076106071 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.076229095 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.076242924 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.080801964 CEST	49844	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.080821037 CEST	49844	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.080853939 CEST	49844	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.080899000 CEST	443	49844	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.080950975 CEST	49844	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.081162930 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.081196070 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.081259966 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.082192898 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.082215071 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.119440079 CEST	443	49828	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.124972105 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.124985933 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.124985933 CEST	49831	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.125639915 CEST	443	49848	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.165750980 CEST	49859	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.165781975 CEST	443	49859	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.165847063 CEST	49859	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.168554068 CEST	49848	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.168617964 CEST	443	49848	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.169559956 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.170306921 CEST	443	49848	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.170372963 CEST	49848	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.178781986 CEST	49848	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.178905010 CEST	443	49848	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.179419041 CEST	49848	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.179440022 CEST	443	49848	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.199173927 CEST	443	49846	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.216567039 CEST	49859	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.216583014 CEST	443	49859	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.219120979 CEST	49846	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.219136000 CEST	443	49846	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.220678091 CEST	49848	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.221255064 CEST	49846	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.221260071 CEST	443	49846	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.234568119 CEST	49832	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.234601021 CEST	443	49832	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.237757921 CEST	443	49847	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.238095999 CEST	49847	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.238114119 CEST	443	49847	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.239615917 CEST	49847	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.239622116 CEST	443	49847	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.247965097 CEST	49860	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.247992039 CEST	443	49860	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.248051882 CEST	49860	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.248239040 CEST	49860	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.248255014 CEST	443	49860	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.294626951 CEST	443	49826	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.294987917 CEST	443	49826	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.295130014 CEST	49826	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.304141045 CEST	443	49848	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.304892063 CEST	443	49848	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.305072069 CEST	49848	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.319880009 CEST	443	49846	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.319958925 CEST	443	49846	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.320010900 CEST	49846	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.325696945 CEST	49861	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.325721979 CEST	443	49861	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.325774908 CEST	49861	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.335395098 CEST	49848	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.335422039 CEST	443	49848	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.336647034 CEST	49862	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.336671114 CEST	443	49862	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.336724997 CEST	49862	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.339116096 CEST	49863	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.339145899 CEST	443	49863	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.339221001 CEST	49863	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.339494944 CEST	49826	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.339507103 CEST	443	49826	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.341515064 CEST	49862	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.341531038 CEST	443	49862	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.343553066 CEST	49863	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.343566895 CEST	443	49863	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.344022989 CEST	49827	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.344046116 CEST	443	49827	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.344429970 CEST	443	49847	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.344482899 CEST	443	49847	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.344517946 CEST	49847	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.346760035 CEST	49846	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.346786022 CEST	443	49846	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.346797943 CEST	49846	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.346803904 CEST	443	49846	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.351052046 CEST	443	49849	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.356915951 CEST	49849	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.356930017 CEST	443	49849	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.358210087 CEST	49865	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.358232021 CEST	443	49865	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.358283997 CEST	49865	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.358361959 CEST	443	49849	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.358452082 CEST	49849	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.362560987 CEST	49865	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.362567902 CEST	443	49865	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.363261938 CEST	49849	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.363261938 CEST	49849	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.363328934 CEST	49849	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.363379955 CEST	443	49849	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.363430977 CEST	49849	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.363782883 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.363823891 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.363878965 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.364355087 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.364373922 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.368155956 CEST	49861	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.368166924 CEST	443	49861	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.371902943 CEST	49867	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.371927023 CEST	443	49867	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.372061968 CEST	49867	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.372678041 CEST	49867	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.372698069 CEST	443	49867	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.376991034 CEST	49847	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.377008915 CEST	443	49847	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.377019882 CEST	49847	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.377024889 CEST	443	49847	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.498392105 CEST	49868	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.498437881 CEST	443	49868	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.498495102 CEST	49868	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.539840937 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.540152073 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.541909933 CEST	49868	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.541929960 CEST	443	49868	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.545501947 CEST	443	49851	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.552931070 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.566231966 CEST	443	49830	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.568154097 CEST	443	49830	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.568201065 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.569777012 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.572503090 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.573190928 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.576411009 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.583483934 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.584142923 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.584160089 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.584418058 CEST	49851	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.584420919 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.584434032 CEST	443	49851	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.584454060 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.584737062 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.584752083 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.585119009 CEST	49830	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.585139036 CEST	443	49830	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.585266113 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.585390091 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.585748911 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.585757971 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.585897923 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.585913897 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.586011887 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.586056948 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.586209059 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.586218119 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.586477995 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.586488008 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.586858034 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.586954117 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.586982965 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.587146997 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.587167025 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.587220907 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.587224007 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.587564945 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.587712049 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.588093042 CEST	443	49851	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.588130951 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.588169098 CEST	49851	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.588284016 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.588331938 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.588534117 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.588937998 CEST	443	49828	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.589507103 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.589577913 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.589628935 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.589749098 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.593224049 CEST	443	49828	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.593928099 CEST	49828	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.607758999 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.607808113 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.607888937 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.607909918 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.607955933 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.608166933 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.612612009 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.614716053 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.615044117 CEST	49831	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.627433062 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.634568930 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.634582996 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.649400949 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.649498940 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.650496960 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.650649071 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.652218103 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.652376890 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.654869080 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.654977083 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.656946898 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.657124043 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.657994986 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.658328056 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.659249067 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.659353018 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.666476965 CEST	49851	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.666776896 CEST	443	49851	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.668510914 CEST	49831	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.668523073 CEST	443	49831	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.669338942 CEST	49828	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.669342995 CEST	443	49828	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.669382095 CEST	49829	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:57.669399023 CEST	443	49829	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:57.677551985 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.689194918 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.689207077 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.689234972 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.689238071 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.689698935 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.689727068 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.689826012 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.689831972 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.689841986 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.689858913 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.690017939 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.690021992 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.690027952 CEST	49851	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.690032959 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.690042019 CEST	443	49851	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.690042973 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.694905996 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.695049047 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.695082903 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.695113897 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.695122957 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.695153952 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.695182085 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.695209026 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.695219994 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.695346117 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.695653915 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.695817947 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.695826054 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.696629047 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 13, 2024 17:58:57.696784973 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 13, 2024 17:58:57.696902037 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 13, 2024 17:58:57.699167967 CEST	49869	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.699203968 CEST	443	49869	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.699789047 CEST	49869	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.700090885 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.700138092 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.700167894 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.700176954 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.700229883 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.700237989 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.701555967 CEST	49869	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.701576948 CEST	443	49869	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.735696077 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.735697031 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.735698938 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.735735893 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.735740900 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.735742092 CEST	49851	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.735744953 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.735744953 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.751498938 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.783607960 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.783782005 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784055948 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784090996 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784120083 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784146070 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.784147978 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784158945 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784173965 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.784255981 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.784270048 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784406900 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.784768105 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784823895 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784854889 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784881115 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.784909010 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.784919024 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.785054922 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.785479069 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.785545111 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.785559893 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.785617113 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.785649061 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.785670996 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.785680056 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.785706997 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.785727978 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.785737038 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.786463976 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.786472082 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.786504984 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.786530972 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.786622047 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.786633015 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.786982059 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.797842979 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.797884941 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.797904015 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.797938108 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.797972918 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.797997952 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.797997952 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.798023939 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.798264027 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.799304962 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799356937 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799500942 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799527884 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799552917 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799607038 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.799607038 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.799618006 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799777031 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799822092 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799849033 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.799849987 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799875021 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799882889 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.799899101 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799947023 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.799981117 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.800010920 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.800013065 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.800025940 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.800066948 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.800098896 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.800101995 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.800137043 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.800151110 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.800254107 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.800354958 CEST	443	49851	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.800614119 CEST	443	49851	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.801585913 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.801706076 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.801724911 CEST	49851	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.801798105 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.801877975 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.801887035 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.801913977 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802074909 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802086115 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.802103043 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802144051 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.802191019 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802206993 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802270889 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802313089 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.802326918 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802336931 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802395105 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.802397966 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.802409887 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802428007 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802520037 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802638054 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802644014 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802797079 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802818060 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802835941 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.802850962 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802864075 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.802879095 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.802889109 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802948952 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802969933 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.802994967 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803030968 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.803040028 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803049088 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803064108 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803069115 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803119898 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.803119898 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.803134918 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803145885 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803147078 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803159952 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.803169966 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803282022 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803312063 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.803318977 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803344011 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.803353071 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803359985 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.803489923 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.805310965 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.805447102 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.805536985 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.805574894 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.805600882 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.805687904 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.805723906 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.805746078 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.805829048 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.805869102 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.805891037 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.805983067 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.806020975 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.806036949 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.806385040 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.806461096 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.806461096 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.806478977 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.806479931 CEST	49851	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.806494951 CEST	443	49851	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.806504965 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.807146072 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.807190895 CEST	49855	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.807204962 CEST	443	49855	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.807236910 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.807245970 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.807327032 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.807589054 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.807658911 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.807658911 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.807668924 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.807687044 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.807753086 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.808157921 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.808166027 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.810229063 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 13, 2024 17:58:57.810245991 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 13, 2024 17:58:57.812568903 CEST	49871	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.812593937 CEST	443	49871	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.813874960 CEST	443	49862	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.814122915 CEST	49871	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.814209938 CEST	49862	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.814229012 CEST	443	49862	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.814568043 CEST	443	49862	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.814601898 CEST	49871	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.814619064 CEST	443	49871	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.814914942 CEST	49862	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.814975023 CEST	443	49862	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.815278053 CEST	49862	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.818720102 CEST	443	49863	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.821738005 CEST	49863	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.821760893 CEST	443	49863	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.822771072 CEST	443	49863	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.822952032 CEST	49863	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.823204041 CEST	49863	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.823204041 CEST	49863	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.823270082 CEST	443	49863	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.823297024 CEST	49863	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.823527098 CEST	49873	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.823560953 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.823586941 CEST	49863	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.823589087 CEST	443	49863	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.823620081 CEST	49873	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.823811054 CEST	49863	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.824584007 CEST	49873	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.824598074 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.844913960 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.846528053 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.846626997 CEST	443	49865	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.846776962 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.846786022 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.846959114 CEST	49865	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.847018957 CEST	443	49865	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.847914934 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.848432064 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.848598003 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.848629951 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.848953009 CEST	443	49865	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.849106073 CEST	49865	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.849308014 CEST	49865	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.849308968 CEST	49865	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.849456072 CEST	443	49865	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.849490881 CEST	49865	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.849750042 CEST	443	49865	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.849782944 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.849797010 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.849827051 CEST	49865	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.849827051 CEST	49865	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.850053072 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.850053072 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.850079060 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.859392881 CEST	443	49862	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.860372066 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.860372066 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.860372066 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.860372066 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.860379934 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.860424995 CEST	49862	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.866235971 CEST	443	49859	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.867046118 CEST	49859	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.867080927 CEST	443	49859	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.869569063 CEST	49859	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.869575977 CEST	443	49859	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.872687101 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.872755051 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.872793913 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.872811079 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.872819901 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.872833014 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.872865915 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.873441935 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.873521090 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.873550892 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.878770113 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.878770113 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.887145042 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.887219906 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.887240887 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.887389898 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.887403965 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.887608051 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.887615919 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.887639999 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.887677908 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888231039 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.888240099 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888273954 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888336897 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888370991 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888370991 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.888392925 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888401985 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.888417006 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888451099 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888479948 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888483047 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.888498068 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888498068 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888515949 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.888524055 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888549089 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888566971 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.888578892 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888605118 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888605118 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.888617039 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.888771057 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.889183044 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.889208078 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.889226913 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.889383078 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.889383078 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.889383078 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.889390945 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.889408112 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.889448881 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.889477015 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.889492035 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.889605045 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.890024900 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890058994 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890083075 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890099049 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890101910 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890122890 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.890122890 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.890130997 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890160084 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890197039 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.890228033 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890252113 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.890265942 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890315056 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890467882 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.890482903 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.890549898 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.891112089 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.891124010 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.891161919 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891216993 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891227961 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891259909 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891273975 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891283989 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891287088 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.891302109 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891333103 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.891333103 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.891340017 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891350031 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891371012 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891398907 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.891411066 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891628981 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891657114 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.891712904 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891777992 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891778946 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.891791105 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.891891956 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.892330885 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.892414093 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.892441988 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.892455101 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.892481089 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.892513037 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.892649889 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.892983913 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.893616915 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.893667936 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.893729925 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.893732071 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.893748045 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.893748045 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.893820047 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.893853903 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.893898964 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.893915892 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.893919945 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.893950939 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.893963099 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894010067 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894076109 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894083023 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894134998 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.894144058 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.894145012 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894160986 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894196987 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.894205093 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894207954 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894237995 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.894251108 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894336939 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894665956 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894714117 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.894720078 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.894722939 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894845963 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894866943 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.894876003 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.894958973 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.894967079 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895061016 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895112991 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895226002 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.895236015 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895312071 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895355940 CEST	49858	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.895380974 CEST	443	49858	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895431995 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.895445108 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895541906 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895637035 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895664930 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.895685911 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895783901 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895785093 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895828962 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.895843983 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895875931 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.895884037 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.895910025 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.895982027 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.896065950 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.896099091 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.896107912 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.896255016 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.896291971 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.896321058 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.896389008 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.896469116 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.896526098 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.896528006 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.896529913 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.896547079 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.896555901 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.897196054 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.897332907 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.897347927 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.897574902 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.898508072 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.899686098 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.899686098 CEST	49854	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.899712086 CEST	443	49875	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.899727106 CEST	443	49854	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.899797916 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.901410103 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.901426077 CEST	443	49875	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.905355930 CEST	443	49860	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.906351089 CEST	49860	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.906351089 CEST	49860	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.906372070 CEST	443	49860	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.906383038 CEST	443	49860	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.936604977 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.936614037 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.941556931 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.943428040 CEST	443	49862	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.943598986 CEST	443	49862	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.943756104 CEST	49862	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.944571972 CEST	49862	443	192.168.2.6	35.190.80.1
Oct 13, 2024 17:58:57.944582939 CEST	443	49862	35.190.80.1	192.168.2.6
Oct 13, 2024 17:58:57.968472958 CEST	443	49859	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.968518019 CEST	443	49859	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.968585968 CEST	49859	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.968983889 CEST	49859	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.969002008 CEST	443	49859	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.969033957 CEST	49859	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.969042063 CEST	443	49859	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.969873905 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.970030069 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.970114946 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.970199108 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.970308065 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.970347881 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.970360994 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.970458031 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.970542908 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.971549988 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.971558094 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.972337008 CEST	49876	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.972393036 CEST	443	49876	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.972522020 CEST	49876	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.974560976 CEST	49876	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:57.974574089 CEST	443	49876	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:57.974708080 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.974793911 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.974828005 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.974834919 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.974893093 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:57.974899054 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:57.976507902 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.976548910 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.976598024 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.976625919 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.976654053 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.976655006 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.976672888 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.976684093 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.976728916 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.976764917 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.976871967 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.977221012 CEST	49856	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.977233887 CEST	443	49856	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977298021 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977371931 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977408886 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977441072 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.977452040 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977464914 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977581978 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977616072 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.977638960 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977751017 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977771044 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977782965 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.977797031 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.977828979 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.978055954 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.978569984 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.978614092 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.978641987 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.978650093 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.978676081 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.978682041 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.978682041 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.978703976 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.978745937 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.978760004 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.978780985 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.978914976 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.979389906 CEST	49877	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.979418039 CEST	443	49877	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.979600906 CEST	49850	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.979644060 CEST	443	49850	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.979686022 CEST	49877	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.980139971 CEST	49877	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.980154991 CEST	443	49877	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.982331991 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.982506990 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.982614040 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.982825041 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.982825041 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.982844114 CEST	443	49857	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.983488083 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.983524084 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.983553886 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.983555079 CEST	49857	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.983581066 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.983596087 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.983623028 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.983726025 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.983732939 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.983822107 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.983830929 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.983839035 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.983895063 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.983937979 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.983959913 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.984309912 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.984345913 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.984368086 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.984376907 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.984399080 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.984438896 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.984462023 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.984961987 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.985207081 CEST	49878	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.985255957 CEST	443	49878	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.985532999 CEST	49853	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.985543013 CEST	443	49853	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:57.985681057 CEST	49878	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.986469984 CEST	49878	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:57.986490965 CEST	443	49878	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.007882118 CEST	443	49860	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.007945061 CEST	443	49860	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.008028030 CEST	49860	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.008280039 CEST	49860	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.008280993 CEST	49860	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.008294106 CEST	443	49860	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.008306026 CEST	443	49860	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.011018038 CEST	49879	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.011044025 CEST	443	49879	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.011672974 CEST	49879	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.011749983 CEST	49879	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.011766911 CEST	443	49879	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.016869068 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.020277023 CEST	443	49861	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.020855904 CEST	49861	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.020893097 CEST	443	49861	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.022546053 CEST	49861	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.022559881 CEST	443	49861	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.033838034 CEST	443	49867	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.034542084 CEST	49867	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.034557104 CEST	443	49867	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.035455942 CEST	49867	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.035461903 CEST	443	49867	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.058512926 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.058717966 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.058805943 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.058844090 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.058873892 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.059036016 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.059071064 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.059079885 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.059195042 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.059279919 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.059355974 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.059360027 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.059402943 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.059889078 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.059974909 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.060080051 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.060164928 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.060183048 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.060190916 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.060219049 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.060312033 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.060405970 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.060412884 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.060817003 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.060904980 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.060991049 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.061008930 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.061017036 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.061043024 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.061144114 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.061294079 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.061400890 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.061547995 CEST	49866	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.061563969 CEST	443	49866	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.121542931 CEST	443	49861	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.121603012 CEST	443	49861	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.121752977 CEST	49861	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.135296106 CEST	443	49867	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.135468006 CEST	443	49867	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.135685921 CEST	49867	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.175061941 CEST	443	49869	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.187475920 CEST	49861	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.187480927 CEST	49869	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.187517881 CEST	443	49869	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.187521935 CEST	443	49861	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.187632084 CEST	49861	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.187648058 CEST	443	49861	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.191142082 CEST	443	49869	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.191289902 CEST	49869	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.193191051 CEST	49869	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.193191051 CEST	49869	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.193367958 CEST	443	49869	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.193551064 CEST	49869	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.193696022 CEST	49869	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.194241047 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.194283009 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.194883108 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.195070028 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.195101976 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.198082924 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.198127985 CEST	443	49884	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.198478937 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.198478937 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.198517084 CEST	443	49884	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.200010061 CEST	49867	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.200028896 CEST	443	49867	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.200287104 CEST	49867	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.200304031 CEST	443	49867	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.207576990 CEST	49885	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.207576990 CEST	49886	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.207601070 CEST	443	49885	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.207612991 CEST	443	49886	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.207670927 CEST	49885	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.207672119 CEST	49886	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.209275961 CEST	49885	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.209275961 CEST	49886	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.209290981 CEST	443	49885	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.209302902 CEST	443	49886	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.216432095 CEST	443	49868	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.217511892 CEST	49868	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.217541933 CEST	443	49868	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.218189001 CEST	49887	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.218221903 CEST	443	49887	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.218252897 CEST	49868	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.218257904 CEST	443	49868	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.218606949 CEST	49887	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.219732046 CEST	49887	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.219747066 CEST	443	49887	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.221226931 CEST	49888	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.221237898 CEST	443	49888	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.221393108 CEST	49888	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.222023010 CEST	49888	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.222035885 CEST	443	49888	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.223380089 CEST	49889	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.223417044 CEST	443	49889	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.223681927 CEST	49889	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.224423885 CEST	49889	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.224441051 CEST	443	49889	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.229312897 CEST	49893	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.229326963 CEST	443	49893	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.229551077 CEST	49893	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.230545998 CEST	49893	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.230561018 CEST	443	49893	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.231686115 CEST	49894	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.231697083 CEST	443	49894	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.231735945 CEST	49895	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.231797934 CEST	443	49895	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.231872082 CEST	49894	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.231879950 CEST	49895	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.232831001 CEST	49894	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.232845068 CEST	443	49894	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.236954927 CEST	49895	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.236965895 CEST	443	49895	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.241991997 CEST	49897	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.242002010 CEST	49896	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.242023945 CEST	443	49897	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.242033958 CEST	443	49896	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.242542982 CEST	49897	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.242554903 CEST	49896	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.243832111 CEST	49896	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.243858099 CEST	443	49896	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.244035006 CEST	49897	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.244059086 CEST	443	49897	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.244430065 CEST	49898	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.244446993 CEST	443	49898	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.244590044 CEST	49898	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.245031118 CEST	49898	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.245038033 CEST	49899	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.245049000 CEST	443	49898	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.245058060 CEST	443	49899	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.245116949 CEST	49899	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.245577097 CEST	49900	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.245584965 CEST	443	49900	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.245901108 CEST	49900	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.246463060 CEST	49900	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.246469975 CEST	443	49900	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.246484041 CEST	49899	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.246504068 CEST	443	49899	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.247117043 CEST	49901	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.247126102 CEST	443	49901	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.248224974 CEST	49901	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.248404980 CEST	49901	443	192.168.2.6	8.219.197.25
Oct 13, 2024 17:58:58.248414993 CEST	443	49901	8.219.197.25	192.168.2.6
Oct 13, 2024 17:58:58.283309937 CEST	443	49871	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.301424980 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.310242891 CEST	49873	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.310252905 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.310286999 CEST	49852	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.310300112 CEST	443	49852	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.310743093 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.311860085 CEST	49871	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.311882019 CEST	443	49871	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.312974930 CEST	443	49871	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.313548088 CEST	49871	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.314660072 CEST	49871	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.314661026 CEST	49873	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.314759016 CEST	443	49871	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.314857960 CEST	49871	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.314879894 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.314928055 CEST	49871	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.314928055 CEST	49871	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.314944983 CEST	443	49871	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.315455914 CEST	49873	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.315455914 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.315488100 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.315514088 CEST	49871	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.315574884 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.315820932 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.315843105 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.317317963 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.318062067 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.318070889 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.319557905 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.319731951 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.320118904 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.320208073 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.320231915 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.321250916 CEST	443	49868	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.321315050 CEST	443	49868	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.321481943 CEST	49868	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.321790934 CEST	49868	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.321790934 CEST	49868	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.321805000 CEST	443	49868	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.321813107 CEST	443	49868	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.325562000 CEST	49903	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.325586081 CEST	443	49903	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.325666904 CEST	49903	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.326891899 CEST	49903	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.326905966 CEST	443	49903	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.359433889 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.367413044 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.386732101 CEST	443	49875	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.387274981 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.387290001 CEST	443	49875	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.388189077 CEST	443	49875	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.388288975 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.388803005 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.388803005 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.388861895 CEST	443	49875	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.389015913 CEST	443	49875	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.389045954 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.389054060 CEST	443	49875	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.389082909 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.389082909 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.389137030 CEST	49875	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.389487028 CEST	49905	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.389565945 CEST	443	49905	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.390477896 CEST	49905	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.391015053 CEST	49905	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.391047955 CEST	443	49905	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.420391083 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.420411110 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.440411091 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.440525055 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.440623045 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.440668106 CEST	49873	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.440680027 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.440774918 CEST	49873	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.440782070 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.440859079 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.440965891 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.441085100 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.441137075 CEST	49873	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.449163914 CEST	49873	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.449172974 CEST	443	49873	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.453147888 CEST	49906	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.453181982 CEST	443	49906	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.453300953 CEST	49906	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.454612017 CEST	49906	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.454624891 CEST	443	49906	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.475693941 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.475766897 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.475804090 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.475835085 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.475847006 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.475869894 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.475872040 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.477875948 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.479351044 CEST	49874	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.479362965 CEST	443	49874	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.484602928 CEST	443	49877	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.485687017 CEST	49877	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.485716105 CEST	443	49877	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.486804008 CEST	443	49877	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.487232924 CEST	49877	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.489440918 CEST	49877	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.489474058 CEST	49877	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.489474058 CEST	49877	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.489543915 CEST	443	49877	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.489726067 CEST	443	49877	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.489846945 CEST	49877	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.490051031 CEST	49877	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.491137981 CEST	443	49878	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.493186951 CEST	49907	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.493253946 CEST	443	49907	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.493782997 CEST	49907	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.494030952 CEST	49907	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.494050980 CEST	443	49907	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.494072914 CEST	49878	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.494088888 CEST	443	49878	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.495587111 CEST	443	49878	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.496051073 CEST	49878	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.496140003 CEST	49878	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.496140957 CEST	49878	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.496140957 CEST	49878	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.496246099 CEST	443	49878	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.496457100 CEST	443	49878	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.496490002 CEST	49908	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.496534109 CEST	443	49908	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.496591091 CEST	49878	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.496591091 CEST	49878	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.496654987 CEST	49908	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.496898890 CEST	49908	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.496912003 CEST	443	49908	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.505112886 CEST	49909	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.505212069 CEST	443	49909	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.505635977 CEST	49909	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.505636930 CEST	49909	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.505707979 CEST	443	49909	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.664218903 CEST	443	49876	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.664458036 CEST	443	49884	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.675945044 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.702246904 CEST	443	49894	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.704334021 CEST	443	49889	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.705157042 CEST	443	49895	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.708439112 CEST	443	49893	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.711343050 CEST	443	49879	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.711998940 CEST	443	49887	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.722666979 CEST	49876	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.722682953 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.722701073 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.723357916 CEST	443	49888	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.784568071 CEST	49888	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.784584045 CEST	443	49888	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.784904003 CEST	49887	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.784917116 CEST	443	49887	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.785021067 CEST	49893	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.785044909 CEST	443	49893	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.785125971 CEST	49895	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.785149097 CEST	443	49895	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.785422087 CEST	49889	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.785454035 CEST	443	49889	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.785630941 CEST	443	49888	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.785643101 CEST	443	49888	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.785660982 CEST	49894	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.785670042 CEST	443	49894	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.785691023 CEST	49888	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.785836935 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.785849094 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.786107063 CEST	443	49893	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.786120892 CEST	443	49893	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.786156893 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.786156893 CEST	49893	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.786165953 CEST	443	49884	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.786392927 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.786525011 CEST	443	49887	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.786540985 CEST	443	49887	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.786592960 CEST	49887	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.786714077 CEST	443	49894	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.786731005 CEST	443	49894	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.786760092 CEST	49894	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.786909103 CEST	49888	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.786942005 CEST	49888	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.786964893 CEST	49888	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.786971092 CEST	443	49889	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.786983967 CEST	443	49889	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.786984921 CEST	443	49888	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.787040949 CEST	49888	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.787050009 CEST	49889	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.787205935 CEST	443	49884	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.787216902 CEST	443	49884	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.787250996 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.787467957 CEST	49910	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.787528992 CEST	443	49910	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.787611961 CEST	49910	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.787955999 CEST	49893	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.788007975 CEST	443	49893	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.788047075 CEST	49893	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.788048029 CEST	49893	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.788064003 CEST	443	49893	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.788106918 CEST	49893	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.788140059 CEST	49893	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.788471937 CEST	49911	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.788541079 CEST	443	49911	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.788600922 CEST	49911	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.788921118 CEST	443	49895	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.788957119 CEST	443	49895	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.788973093 CEST	49895	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.789238930 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.791290998 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.791379929 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.791610956 CEST	49887	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.791610956 CEST	49887	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.791657925 CEST	49887	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.791779995 CEST	443	49887	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.791838884 CEST	49887	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.795205116 CEST	49912	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.795243979 CEST	443	49912	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.795412064 CEST	49912	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.795463085 CEST	49894	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.795463085 CEST	49894	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.795511007 CEST	49894	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.795538902 CEST	443	49894	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.795598030 CEST	49894	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.798890114 CEST	49913	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.798928976 CEST	443	49913	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.798991919 CEST	49913	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.799182892 CEST	49889	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.799199104 CEST	49889	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.799232960 CEST	49889	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.799269915 CEST	443	49889	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.799321890 CEST	49889	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.799424887 CEST	49914	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.799433947 CEST	443	49914	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.799479008 CEST	49914	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.808157921 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.808157921 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.808265924 CEST	443	49884	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.808353901 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.808425903 CEST	443	49884	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.808449030 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.809200048 CEST	49884	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.809817076 CEST	49915	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.809848070 CEST	443	49915	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.809892893 CEST	49915	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.810329914 CEST	49910	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.810343981 CEST	443	49910	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.810492992 CEST	49911	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.810506105 CEST	443	49911	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.810890913 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.810908079 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.811367035 CEST	49895	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.811392069 CEST	49895	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.811424017 CEST	49895	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.811593056 CEST	443	49895	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.811640024 CEST	49895	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.812100887 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.830063105 CEST	49916	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.830096006 CEST	443	49916	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.830152988 CEST	49916	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.830678940 CEST	49912	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.830703974 CEST	443	49912	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.831016064 CEST	49913	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.831037045 CEST	443	49913	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.831139088 CEST	49914	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.831152916 CEST	443	49914	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.831264973 CEST	49915	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.831285954 CEST	443	49915	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.831552982 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.831684113 CEST	49916	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.831692934 CEST	443	49916	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.831764936 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.831779957 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.832427979 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.842550039 CEST	49876	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.842561007 CEST	443	49876	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.843347073 CEST	49876	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.843352079 CEST	443	49876	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.843622923 CEST	49879	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.852770090 CEST	49879	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.852777958 CEST	443	49879	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.853220940 CEST	49879	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.853228092 CEST	443	49879	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.875406027 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.875406027 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.885126114 CEST	443	49885	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.895410061 CEST	49885	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.895422935 CEST	443	49885	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.896130085 CEST	49885	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.896135092 CEST	443	49885	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.896239996 CEST	443	49905	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.899415016 CEST	49905	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.899422884 CEST	443	49905	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.899785042 CEST	443	49905	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.909107924 CEST	443	49886	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.909773111 CEST	49886	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.909805059 CEST	443	49886	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.910460949 CEST	49886	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.910479069 CEST	443	49886	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.912414074 CEST	49905	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.912478924 CEST	443	49905	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.912626028 CEST	49905	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.923695087 CEST	443	49906	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.935008049 CEST	49906	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.935015917 CEST	443	49906	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.936496019 CEST	443	49906	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.936547995 CEST	49906	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.939675093 CEST	443	49876	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.940079927 CEST	443	49876	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.940116882 CEST	49876	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.941318989 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.941381931 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.941416979 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.941428900 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.941485882 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.941519022 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.941529036 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.941544056 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.941574097 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.941586971 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.941693068 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.941725969 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.941791058 CEST	49876	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.941803932 CEST	443	49876	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.941813946 CEST	49876	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.941818953 CEST	443	49876	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.942962885 CEST	49906	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.942975044 CEST	49906	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.943017960 CEST	49906	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.943073034 CEST	443	49906	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.943207026 CEST	49906	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.943438053 CEST	49917	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.943459988 CEST	443	49917	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.943514109 CEST	49917	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.944189072 CEST	49917	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.944200993 CEST	443	49917	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949029922 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949146032 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949187994 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949192047 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.949204922 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949265003 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.949275017 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949290037 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949330091 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.949372053 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949827909 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949867964 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949872017 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.949889898 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949892044 CEST	49918	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.949911118 CEST	443	49918	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.949956894 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.949965954 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.949980974 CEST	49918	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.950464010 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.950509071 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.950529099 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.950541019 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.950579882 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.950932026 CEST	49918	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.950939894 CEST	443	49918	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.953393936 CEST	49881	443	192.168.2.6	104.21.52.99
Oct 13, 2024 17:58:58.953404903 CEST	443	49881	104.21.52.99	192.168.2.6
Oct 13, 2024 17:58:58.953901052 CEST	443	49879	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.953948021 CEST	443	49879	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.953986883 CEST	49879	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.954274893 CEST	49879	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.954279900 CEST	443	49879	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.954289913 CEST	49879	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.954293966 CEST	443	49879	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.959392071 CEST	443	49905	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.961641073 CEST	49919	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.961668015 CEST	443	49919	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.961889982 CEST	49919	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.961889982 CEST	49919	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:58.961919069 CEST	443	49919	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.962299109 CEST	443	49907	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.962733030 CEST	49907	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.962743044 CEST	443	49907	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.963057041 CEST	49902	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.963077068 CEST	443	49902	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.963737011 CEST	443	49907	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.964741945 CEST	49907	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.964741945 CEST	49907	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.964798927 CEST	443	49907	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.966027975 CEST	49920	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.966052055 CEST	443	49920	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.966099977 CEST	49920	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.966530085 CEST	49907	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.966538906 CEST	443	49907	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.966902971 CEST	49920	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:58.966914892 CEST	443	49920	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.979573011 CEST	443	49909	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.988807917 CEST	443	49903	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.990866899 CEST	443	49908	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:58.993668079 CEST	443	49885	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.993786097 CEST	443	49885	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:58.993860006 CEST	49885	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:59.013056040 CEST	443	49886	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:59.013164043 CEST	443	49886	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:59.013252974 CEST	49886	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:59.014240026 CEST	49909	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:59.014296055 CEST	443	49909	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:59.014566898 CEST	49908	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:59.014597893 CEST	443	49908	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:59.015033007 CEST	49903	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:59.015059948 CEST	443	49903	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:59.015925884 CEST	443	49909	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:59.015990019 CEST	49909	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:59.016045094 CEST	443	49908	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:59.016093969 CEST	49908	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:59.017309904 CEST	49903	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:59.017321110 CEST	443	49903	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:59.018023968 CEST	49885	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:59.018049002 CEST	443	49885	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:59.018156052 CEST	49885	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:59.018165112 CEST	443	49885	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:59.018512964 CEST	49886	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:59.018528938 CEST	443	49886	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:59.018898964 CEST	49886	443	192.168.2.6	13.107.246.51
Oct 13, 2024 17:58:59.018904924 CEST	443	49886	13.107.246.51	192.168.2.6
Oct 13, 2024 17:58:59.022460938 CEST	49908	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:59.022535086 CEST	443	49908	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:59.023269892 CEST	49909	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:59.023292065 CEST	49909	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:59.023339033 CEST	49909	443	192.168.2.6	104.21.44.152
Oct 13, 2024 17:58:59.023416042 CEST	443	49909	104.21.44.152	192.168.2.6
Oct 13, 2024 17:58:59.023459911 CEST	49909	443	192.168.2.6	104.21.44.152

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 17:58:44.563134909 CEST	192.168.2.6	1.1.1.1	0xbd34	Standard query (0)	server.h74w.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:44.563429117 CEST	192.168.2.6	1.1.1.1	0xfd7d	Standard query (0)	server.h74w.com	65	IN (0x0001)	false
Oct 13, 2024 17:58:46.500420094 CEST	192.168.2.6	1.1.1.1	0xf7c4	Standard query (0)	h5.g7or.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:46.500672102 CEST	192.168.2.6	1.1.1.1	0x7063	Standard query (0)	h5.g7or.com	65	IN (0x0001)	false
Oct 13, 2024 17:58:47.142245054 CEST	192.168.2.6	1.1.1.1	0x9d87	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:47.142569065 CEST	192.168.2.6	1.1.1.1	0xd31b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 13, 2024 17:58:50.275440931 CEST	192.168.2.6	1.1.1.1	0x3edb	Standard query (0)	h5.g7or.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:50.275649071 CEST	192.168.2.6	1.1.1.1	0xa31e	Standard query (0)	h5.g7or.com	65	IN (0x0001)	false
Oct 13, 2024 17:58:50.821300983 CEST	192.168.2.6	1.1.1.1	0xc2e0	Standard query (0)	server.e9sg.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:50.911407948 CEST	192.168.2.6	1.1.1.1	0x1d94	Standard query (0)	server.e9sg.com	65	IN (0x0001)	false
Oct 13, 2024 17:58:54.561628103 CEST	192.168.2.6	1.1.1.1	0x686d	Standard query (0)	cdn.shippinghero.vip	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:54.561772108 CEST	192.168.2.6	1.1.1.1	0x4b7b	Standard query (0)	cdn.shippinghero.vip	65	IN (0x0001)	false
Oct 13, 2024 17:58:56.619667053 CEST	192.168.2.6	1.1.1.1	0xffcc	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:56.620851040 CEST	192.168.2.6	1.1.1.1	0x900	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 13, 2024 17:58:58.228905916 CEST	192.168.2.6	1.1.1.1	0x9310	Standard query (0)	server.e9sg.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:58.228905916 CEST	192.168.2.6	1.1.1.1	0x3ce4	Standard query (0)	server.e9sg.com	65	IN (0x0001)	false
Oct 13, 2024 17:58:59.085455894 CEST	192.168.2.6	1.1.1.1	0xdc25	Standard query (0)	cdn.shippinghero.vip	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:59.085552931 CEST	192.168.2.6	1.1.1.1	0x9fd6	Standard query (0)	cdn.shippinghero.vip	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 17:58:44.573724985 CEST	1.1.1.1	192.168.2.6	0xbd34	No error (0)	server.h74w.com		104.21.19.103	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:44.573724985 CEST	1.1.1.1	192.168.2.6	0xbd34	No error (0)	server.h74w.com		172.67.185.195	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:44.596759081 CEST	1.1.1.1	192.168.2.6	0xfd7d	No error (0)	server.h74w.com			65	IN (0x0001)	false
Oct 13, 2024 17:58:46.512036085 CEST	1.1.1.1	192.168.2.6	0x7063	No error (0)	h5.g7or.com			65	IN (0x0001)	false
Oct 13, 2024 17:58:46.534271955 CEST	1.1.1.1	192.168.2.6	0xf7c4	No error (0)	h5.g7or.com		104.21.44.152	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:46.534271955 CEST	1.1.1.1	192.168.2.6	0xf7c4	No error (0)	h5.g7or.com		172.67.200.231	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:47.149204016 CEST	1.1.1.1	192.168.2.6	0xd31b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 17:58:47.149404049 CEST	1.1.1.1	192.168.2.6	0x9d87	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:50.285103083 CEST	1.1.1.1	192.168.2.6	0xa31e	No error (0)	h5.g7or.com			65	IN (0x0001)	false
Oct 13, 2024 17:58:50.287853003 CEST	1.1.1.1	192.168.2.6	0x3edb	No error (0)	h5.g7or.com		104.21.44.152	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:50.287853003 CEST	1.1.1.1	192.168.2.6	0x3edb	No error (0)	h5.g7or.com		172.67.200.231	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:50.829695940 CEST	1.1.1.1	192.168.2.6	0xc2e0	No error (0)	server.e9sg.com		8.219.197.25	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:54.571691990 CEST	1.1.1.1	192.168.2.6	0x4b7b	No error (0)	cdn.shippinghero.vip			65	IN (0x0001)	false
Oct 13, 2024 17:58:54.572542906 CEST	1.1.1.1	192.168.2.6	0x686d	No error (0)	cdn.shippinghero.vip		104.21.52.99	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:54.572542906 CEST	1.1.1.1	192.168.2.6	0x686d	No error (0)	cdn.shippinghero.vip		172.67.198.15	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:56.626351118 CEST	1.1.1.1	192.168.2.6	0xffcc	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:57.801683903 CEST	1.1.1.1	192.168.2.6	0xed4d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 17:58:57.801683903 CEST	1.1.1.1	192.168.2.6	0xed4d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:58.240906000 CEST	1.1.1.1	192.168.2.6	0x9310	No error (0)	server.e9sg.com		8.219.197.25	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:59.095283985 CEST	1.1.1.1	192.168.2.6	0xdc25	No error (0)	cdn.shippinghero.vip		104.21.52.99	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:59.095283985 CEST	1.1.1.1	192.168.2.6	0xdc25	No error (0)	cdn.shippinghero.vip		172.67.198.15	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:58:59.097356081 CEST	1.1.1.1	192.168.2.6	0x9fd6	No error (0)	cdn.shippinghero.vip			65	IN (0x0001)	false
Oct 13, 2024 17:59:16.154731989 CEST	1.1.1.1	192.168.2.6	0x3ddc	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:59:16.154731989 CEST	1.1.1.1	192.168.2.6	0x3ddc	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:59:35.810987949 CEST	1.1.1.1	192.168.2.6	0xa77d	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:59:35.810987949 CEST	1.1.1.1	192.168.2.6	0xa77d	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49715	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 53 5a 77 55 4a 4d 4d 42 57 45 36 6a 4d 78 49 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 38 65 63 32 34 36 33 33 32 35 62 36 61 34 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: SZwUJMMBWE6jMxIn.1Context: 28ec2463325b6a47
2024-10-13 15:58:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-13 15:58:44 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 53 5a 77 55 4a 4d 4d 42 57 45 36 6a 4d 78 49 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 38 65 63 32 34 36 33 33 32 35 62 36 61 34 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 67 44 48 4c 7a 61 69 43 76 54 6a 6b 63 61 57 46 6e 4b 67 32 75 44 50 38 6f 6f 69 55 34 7a 71 47 4c 41 39 76 68 76 61 45 7a 73 74 49 57 73 2f 43 32 64 6d 33 68 30 69 58 4a 54 54 71 36 6c 45 6e 67 52 64 6e 78 79 50 72 76 4d 39 4d 37 4b 65 6c 65 56 59 4e 79 58 52 5a 75 4c 35 76 5a 43 42 74 6e 66 72 37 37 2f 59 47 57 62 6f 6b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: SZwUJMMBWE6jMxIn.2Context: 28ec2463325b6a47<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZgDHLzaiCvTjkcaWFnKg2uDP8ooiU4zqGLA9vhvaEzstIWs/C2dm3h0iXJTTq6lEngRdnxyPrvM9M7KeleVYNyXRZuL5vZCBtnfr77/YGWbok
2024-10-13 15:58:44 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 53 5a 77 55 4a 4d 4d 42 57 45 36 6a 4d 78 49 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 38 65 63 32 34 36 33 33 32 35 62 36 61 34 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: SZwUJMMBWE6jMxIn.3Context: 28ec2463325b6a47<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-13 15:58:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-13 15:58:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 78 79 58 4d 77 74 63 34 46 45 57 6a 32 43 51 45 51 45 75 78 5a 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: xyXMwtc4FEWj2CQEQEuxZA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49716	104.21.19.103	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:45 UTC	673	OUT	GET /invite/12536668 HTTP/1.1 Host: server.h74w.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:46 UTC	1232	IN	HTTP/1.1 302 Found Date: Sun, 13 Oct 2024 15:58:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Location: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com Set-Cookie: wa_session=eyJpdiI6InlSaFBsWSs2c29mTzlLRFRkTGFJWEE9PSIsInZhbHVlIjoickNpUWEwOEpNR1JTSUZlUUJod291Y29hankrcDlFb1VlVVVCcmxHTUhObTlOcHg0N3RDQnFiYnp0UTI2dGpWRS9PWDVaK3UzTUMvbGoxa1dMSEJyajM4TGR2ZnJ3bXlPQzRpVnRsRWNTSkd4ejFZbUpNSFlkenV4NUpsMFo4TlIiLCJtYWMiOiJhMTY3NjllNWIyZmUyZTI2YjYxMjY0NDMzNzg4OTVkOWRiMGI1NzZkY2M0ZTQ3NTk5ZjRhZDVmMTg3MzlkMTc4IiwidGFnIjoiIn0%3D; expires=Mon, 14-Oct-2024 15:58:46 GMT; Max-Age=86400; path=/; httponly; samesite=lax cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WqS4OpRmD%2B35GUPWnYHna4wo2xkMgkDY6gy7Xh4jYYyrQkjAi%2FRzMXcuN7OtaIJcz7ISNF%2F4QE12j2iP69Y1mDGE3PBf%2F8lQ4PJP%2BbN%2FMflPSiGEEagKqPJOZ0qHLD32klc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d20886c7cd38c3b-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:46 UTC	137	IN	Data Raw: 32 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 68 35 2e 67 37 6f Data Ascii: 2c2<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://h5.g7o
2024-10-13 15:58:46 UTC	576	IN	Data Raw: 72 2e 63 6f 6d 2f 69 6e 64 65 78 2e 68 74 6d 6c 23 2f 70 61 67 65 73 2f 61 63 74 69 76 65 2f 61 63 74 69 76 65 3f 69 6e 76 69 74 65 72 3d 31 32 35 33 36 36 36 38 26 61 6d 70 3b 64 6f 6d 61 69 6e 3d 68 35 2e 67 37 6f 72 2e 63 6f 6d 26 61 6d 70 3b 6c 61 6e 64 69 6e 67 3d 68 35 2e 73 37 67 78 2e 63 6f 6d 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 68 35 2e 67 37 6f 72 2e 63 6f 6d 2f 69 6e 64 65 78 2e 68 74 6d 6c 23 2f 70 61 67 65 73 2f 61 63 74 69 76 65 2f 61 63 74 69 76 65 3f 69 6e 76 69 74 65 72 3d 31 32 35 33 36 36 36 38 26 61 6d 70 3b 64 6f 6d 61 69 6e 3d 68 35 2e 67 37 6f 72 2e 63 6f 6d 26 61 6d 70 3b 6c 61 6e 64 69 6e 67 3d 68 35 2e 73 37 67 78 2e 63 6f 6d 3c 2f Data Ascii: r.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com'" /> <title>Redirecting to https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com</
2024-10-13 15:58:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:47 UTC	664	OUT	GET /index.html HTTP/1.1 Host: h5.g7or.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:48 UTC	883	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close x-oss-request-id: 670BEE387C0F423433FEACF6 Accept-Ranges: bytes Last-Modified: Tue, 20 Aug 2024 09:33:12 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 16857245365741889785 x-oss-storage-class: Standard Content-MD5: 5pqTtOgiAkAb1JQZB0DZBA== x-oss-server-time: 1 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fO%2BgzbGwL8qgPKkGBuRwhEcCBNJwhN9Ac2vr%2BJM10EtFS8ZapQ2ZytziTbDXuQkYOhIw2Q%2B3rzNlhZd6L0%2FOh4P%2BrsgsRid5%2Fgut4qBYeMMtRN%2BzbDsXRFclQGMr2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d20887b89647c96-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:48 UTC	486	IN	Data Raw: 33 34 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 74 69 74 6c 65 3e 57 68 61 74 73 20 41 50 50 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 63 6f 76 65 72 53 75 70 70 6f 72 74 20 3d 20 27 43 53 53 27 20 69 6e 20 77 69 6e 64 6f 77 20 26 26 20 74 79 70 65 6f 66 20 43 53 53 2e 73 75 70 70 6f 72 74 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 28 0d 0a 09 09 09 09 43 53 53 2e 73 75 70 70 6f 72 74 73 28 27 74 6f 70 3a 20 65 6e 76 28 61 29 27 29 20 7c Data Ascii: 34b<!DOCTYPE html><html lang=en><head><meta charset=utf-8><meta http-equiv=X-UA-Compatible content="IE=edge"><title>Whats APP</title><script>var coverSupport = 'CSS' in window && typeof CSS.supports === 'function' && (CSS.supports('top: env(a)') \|
2024-10-13 15:58:48 UTC	364	IN	Data Raw: 72 27 20 3a 20 27 27 29 20 2b 20 27 22 20 2f 3e 27 29 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 20 68 72 65 66 3d 2f 73 74 61 74 69 63 2f 69 6e 64 65 78 2e 39 37 34 36 35 65 37 62 2e 63 73 73 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 3a 3a 61 66 74 65 72 20 7b 0d 0a 09 09 09 09 63 6f 6e 74 65 6e 74 3a 20 6e 6f 6e 65 3b 0d 0a 09 09 09 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 73 74 72 6f 6e 67 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 74 6f 20 63 6f 6e 74 69 6e 75 65 2e 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 20 69 64 3d 61 70 70 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 2f 73 74 Data Ascii: r' : '') + '" />')</script><link rel=stylesheet href=/static/index.97465e7b.css><style>body::after {content: none;}</style></head><body><noscript><strong>Please enable JavaScript to continue.</strong></noscript><div id=app></div><script src=/st
2024-10-13 15:58:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49721	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:47 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:47 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:47 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 12 Oct 2024 04:31:01 GMT ETag: "0x8DCEA76AD821850" x-ms-request-id: 5e3cf53f-d01e-007a-3ba0-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155847Z-17db6f7c8cfvtw4hh2496wp8p800000003p00000000004hd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:47 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 15:58:47 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-13 15:58:47 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-13 15:58:47 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-13 15:58:47 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-13 15:58:47 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-13 15:58:47 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-13 15:58:48 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-13 15:58:48 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-13 15:58:48 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:47 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 15:58:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=175607 Date: Sun, 13 Oct 2024 15:58:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49725	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:48 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:48 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: a65062bf-401e-00ac-0ea3-1b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155848Z-17db6f7c8cfq2j6f03aq9y8dns00000004b0000000005yyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:48 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49727	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:48 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:48 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155848Z-17db6f7c8cfq2j6f03aq9y8dns00000004d0000000001evk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:48 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49728	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:48 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:48 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d08e5818-a01e-003d-3417-1c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155848Z-17db6f7c8cf9c22xp43k2gbqvn00000002vg0000000006qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:48 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49729	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:48 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:48 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 6472af2a-e01e-00aa-15e5-1cceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155848Z-17db6f7c8cf9wwz8ehu7c5p33g000000028g00000000erbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:48 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49726	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:48 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:48 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9229949d-801e-008c-498a-1b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155848Z-17db6f7c8cfq2j6f03aq9y8dns00000004d0000000001evm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:48 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49730	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 15:58:49 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=175547 Date: Sun, 13 Oct 2024 15:58:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 15:58:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49736	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:49 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:49 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 52965a57-601e-000d-5970-1c2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155849Z-17db6f7c8cffhvbz3mt0ydz7x400000003cg000000001x8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49734	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:49 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155849Z-17db6f7c8cfspvtq2pgqb2w5k000000004wg00000000f68t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49735	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:49 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 6c20420a-501e-008f-0947-1c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155849Z-17db6f7c8cfpm9w8b1ybgtytds000000031g000000008042 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49737	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:49 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:49 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0e59abf9-f01e-003c-2b47-1c8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155849Z-17db6f7c8cf5mtxmr1c51513n0000000056000000000fsf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:49 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49738	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:49 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:49 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbc5b3b7-c01e-00a2-28e5-1a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155849Z-17db6f7c8cf6qp7g7r97wxgbqc00000004a000000000fvke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:49 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49739	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:49 UTC	556	OUT	GET /static/index.97465e7b.css HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:49 UTC	870	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C46FD14005843934B56D1C Last-Modified: Tue, 20 Aug 2024 09:32:58 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2038204530194273107 x-oss-storage-class: Standard Content-MD5: l6KXZKHfka8vKH5WQbHv6w== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1694 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t6sw2831DT68I2u5fJiIlKOypVWjgY8rGwMRXG1QCc%2BukzJJBeNjRFJRMw3KXu6eSpxQRztxC%2BbC4wfrtbzUkT9%2BhPrT119DvfQtP04NTwPQNPud9gg%2BjLp5xwOd2g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d208888ec308c4e-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:49 UTC	499	IN	Data Raw: 37 63 34 61 0d 0a 75 6e 69 2d 74 61 62 62 61 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 39 39 38 7d 75 6e 69 2d 74 61 62 62 61 72 20 2e 75 6e 69 2d 74 61 62 62 61 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 38 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 75 6e 69 2d 74 61 62 62 61 72 2e 75 6e 69 2d 74 61 62 62 61 72 2d 62 6f 74 74 6f 6d 2c 75 6e 69 2d 74 61 62 62 61 72 2e 75 6e 69 2d 74 61 62 62 61 72 2d 62 6f 74 74 6f 6d 20 2e 75 6e 69 2d 74 61 62 62 61 Data Ascii: 7c4auni-tabbar{display:block;box-sizing:border-box;width:100%;z-index:998}uni-tabbar .uni-tabbar{display:-webkit-box;display:-webkit-flex;display:flex;z-index:998;box-sizing:border-box}uni-tabbar.uni-tabbar-bottom,uni-tabbar.uni-tabbar-bottom .uni-tabba
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 75 6e 69 2d 61 70 70 2d 2d 73 68 6f 77 6c 61 79 6f 75 74 2b 75 6e 69 2d 74 61 62 62 61 72 2e 75 6e 69 2d 74 61 62 62 61 72 2d 74 6f 70 2c 2e 75 6e 69 2d 61 70 70 2d 2d 73 68 6f 77 6c 61 79 6f 75 74 2b 75 6e 69 2d 74 61 62 62 61 72 2e 75 6e 69 2d 74 61 62 62 61 72 2d 74 6f 70 20 2e 75 6e 69 2d 74 61 62 62 61 72 7b 6c 65 66 74 3a 76 61 72 28 2d 2d 77 69 6e 64 6f 77 2d 6d 61 72 67 69 6e 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 77 69 6e 64 6f 77 2d 6d 61 72 67 69 6e 29 7d 75 6e 69 2d 74 61 62 62 61 72 2e 75 6e 69 2d 74 61 62 62 61 72 2d 62 6f 74 74 6f 6d 20 2e 75 6e 69 2d 74 61 62 62 61 72 7b 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 63 6f 6e 73 74 61 6e 74 28 73 61 66 65 2d 61 Data Ascii: uni-app--showlayout+uni-tabbar.uni-tabbar-top,.uni-app--showlayout+uni-tabbar.uni-tabbar-top .uni-tabbar{left:var(--window-margin);right:var(--window-margin)}uni-tabbar.uni-tabbar-bottom .uni-tabbar{bottom:0;padding-bottom:0;padding-bottom:constant(safe-a
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 6e 69 2d 74 61 62 62 61 72 20 2e 75 6e 69 2d 74 61 62 62 61 72 5f 5f 69 63 6f 6e 66 6f 6e 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 55 6e 69 54 61 62 62 61 72 49 63 6f 6e 46 6f 6e 74 7d 75 6e 69 2d 74 61 62 62 61 72 20 2e 75 6e 69 2d 74 61 62 62 61 72 5f 5f 6c 61 62 65 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 7d 75 6e 69 2d 74 61 62 62 61 72 20 2e 75 6e 69 2d 74 61 62 62 61 72 2d 62 6f 72 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2e 35 29 3b Data Ascii: ni-tabbar .uni-tabbar__iconfont{font-family:UniTabbarIconFont}uni-tabbar .uni-tabbar__label{position:relative;text-align:center;font-size:10px}uni-tabbar .uni-tabbar-border{position:absolute;left:0;top:0;width:100%;height:1px;-webkit-transform:scaleY(.5);
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 68 6f 77 5d 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 75 6e 69 2d 72 69 67 68 74 2d 77 69 6e 64 6f 77 5b 64 61 74 61 2d 73 68 6f 77 5d 7b 72 69 67 68 74 3a 30 7d 2e 75 6e 69 2d 6c 65 66 74 2d 77 69 6e 64 6f 77 2c 2e 75 6e 69 2d 72 69 67 68 74 2d 77 69 6e 64 6f 77 2c 75 6e 69 2d 63 6f 6e 74 65 6e 74 20 2e 75 6e 69 2d 6d 61 73 6b 7b 7a 2d 69 6e 64 65 78 3a 39 39 37 7d 2e 75 6e 69 2d 6d 61 73 6b 2b 2e 75 6e 69 2d 6c 65 66 74 2d 77 69 6e 64 6f 77 2c 2e 75 6e 69 2d 6d 61 73 6b 2b 2e 75 6e 69 2d 72 69 67 68 74 2d 77 69 6e 64 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 2e 75 6e 69 2d 74 6f 70 2d 77 69 6e 64 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 76 61 72 28 2d 2d 77 69 6e 64 6f 77 2d 6d 61 72 67 69 6e 29 3b Data Ascii: how]{position:absolute}uni-right-window[data-show]{right:0}.uni-left-window,.uni-right-window,uni-content .uni-mask{z-index:997}.uni-mask+.uni-left-window,.uni-mask+.uni-right-window{position:fixed}.uni-top-window{position:fixed;left:var(--window-margin);
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 35 35 70 78 7d 75 6e 69 2d 74 6f 61 73 74 20 2e 75 6e 69 2d 69 63 6f 6e 5f 74 6f 61 73 74 2e 75 6e 69 2d 69 63 6f 6e 2d 65 72 72 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 35 30 70 78 7d 75 6e 69 2d 74 6f 61 73 74 20 2e 75 6e 69 2d 69 63 6f 6e 5f 74 6f 61 73 74 2e 75 6e 69 2d 6c 6f 61 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 32 30 70 78 20 30 20 30 3b 77 69 64 74 68 3a 33 38 70 78 3b 68 65 69 67 68 74 3a 33 38 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 75 6e 69 2d 74 6f 61 73 74 20 2e 75 6e 69 2d 74 6f 61 73 74 5f 5f 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 35 70 78 7d 75 6e 69 Data Ascii: fore{color:#fff;font-size:55px}uni-toast .uni-icon_toast.uni-icon-error:before{color:#fff;font-size:50px}uni-toast .uni-icon_toast.uni-loading{margin:20px 0 0;width:38px;height:38px;vertical-align:baseline}uni-toast .uni-toast__content{margin:0 0 15px}uni
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 75 6e 69 2d 6d 6f 64 61 6c 20 2e 75 6e 69 2d 6d 6f 64 61 6c 5f 5f 66 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 31 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 35 64 35 64 36 3b 63 6f 6c 6f 72 3a 23 64 35 64 35 64 36 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: x;display:-webkit-box;display:-webkit-flex;display:flex}uni-modal .uni-modal__ft:after{content:" ";position:absolute;left:0;top:0;right:0;height:1px;border-top:1px solid #d5d5d6;color:#d5d5d6;-webkit-transform-origin:0 0;transform-origin:0 0;-webkit-trans
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 20 2e 33 73 2c 76 69 73 69 62 69 6c 69 74 79 20 2e 33 73 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 7d 75 6e 69 2d 61 63 74 69 6f 6e 73 68 65 65 74 20 2e 75 6e 69 2d 61 63 74 69 6f 6e 73 68 65 65 74 2e 75 6e 69 2d 61 63 74 69 6f 6e 73 68 65 65 74 5f 74 6f 67 67 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 29 7d 75 6e 69 2d 61 63 74 69 6f 6e 73 68 65 65 74 20 2e 75 6e 69 2d 61 63 74 69 6f 6e 73 68 65 65 74 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 75 6e 69 2d 61 63 74 69 6f 6e 73 68 65 65 74 20 2e 75 6e Data Ascii: ransform .3s,visibility .3s,-webkit-transform .3s}uni-actionsheet .uni-actionsheet.uni-actionsheet_toggle{visibility:visible;-webkit-transform:translate(0);transform:translate(0)}uni-actionsheet .uni-actionsheet *{box-sizing:border-box}uni-actionsheet .un
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 74 6f 70 3a 35 30 25 3b 62 6f 74 74 6f 6d 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 3b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 2c 76 69 73 69 62 69 6c 69 74 79 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 2c 76 69 73 69 62 69 6c 69 74 79 20 2e 33 73 7d 75 6e 69 2d 61 63 74 69 6f 6e 73 68 65 65 74 20 2e 75 6e 69 2d 61 63 74 69 6f 6e 73 68 65 65 74 2e 75 6e 69 2d 61 63 74 69 6f 6e 73 68 65 65 74 5f 74 6f 67 67 6c 65 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b Data Ascii: top:50%;bottom:auto;-webkit-transform:translate(-50%,-50%);transform:translate(-50%,-50%);opacity:0;-webkit-transition:opacity .3s,visibility .3s;transition:opacity .3s,visibility .3s}uni-actionsheet .uni-actionsheet.uni-actionsheet_toggle{opacity:1;-webk
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 41 41 4b 74 47 68 6c 59 57 51 4c 4b 49 4e 39 41 41 41 41 34 41 41 41 41 44 5a 6f 61 47 56 68 43 43 77 44 2b 67 41 41 41 4c 77 41 41 41 41 6b 61 47 31 30 65 45 4a 6f 2f 2f 38 41 41 41 48 55 41 41 41 41 53 47 78 76 59 32 45 59 71 68 57 36 41 41 41 45 62 41 41 41 41 43 5a 74 59 58 68 77 41 53 45 41 56 51 41 41 41 52 67 41 41 41 41 67 62 6d 46 74 5a 65 4e 63 48 74 67 41 41 41 39 49 41 41 41 42 35 6e 42 76 63 33 54 36 62 4c 68 4c 41 41 41 52 4d 41 41 41 41 4f 59 41 41 51 41 41 41 2b 67 41 41 41 42 61 41 2b 6a 2f 2f 2f 2f 2f 41 2b 6b 41 41 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 49 41 41 51 41 41 41 41 45 41 41 43 6b 43 6a 33 64 66 44 7a 7a 31 41 41 73 44 36 41 41 41 41 41 44 55 45 52 39 58 41 41 41 41 41 4e 51 52 48 31 66 2f 2f 77 41 41 Data Ascii: AAKtGhlYWQLKIN9AAAA4AAAADZoaGVhCCwD+gAAALwAAAAkaG10eEJo//8AAAHUAAAASGxvY2EYqhW6AAAEbAAAACZtYXhwASEAVQAAARgAAAAgbmFtZeNcHtgAAA9IAAAB5nBvc3T6bLhLAAARMAAAAOYAAQAAA+gAAABaA+j/////A+kAAQAAAAAAAAAAAAAAAAAAABIAAQAAAAEAACkCj3dfDzz1AAsD6AAAAADUER9XAAAAANQRH1f//wAA
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 38 41 41 4f 6f 50 41 41 41 41 44 77 41 41 36 68 41 41 41 4f 6f 51 41 41 41 41 45 41 41 41 36 68 45 41 41 4f 6f 52 41 41 41 41 45 51 41 41 41 41 41 41 52 67 43 4d 41 4e 49 42 4a 67 46 34 41 63 51 43 4d 67 4a 67 41 71 67 43 2f 41 4e 49 41 36 59 44 2f 67 52 4f 42 4b 41 45 39 41 56 61 41 41 41 41 41 67 41 41 41 41 41 44 72 77 4f 74 41 42 51 41 4b 51 41 41 41 53 49 48 42 67 63 47 46 42 63 57 46 78 59 79 4e 7a 59 33 4e 6a 51 6e 4a 69 63 6d 41 79 49 6e 4a 69 63 6d 4e 44 63 32 4e 7a 59 79 46 78 59 58 46 68 51 48 42 67 63 47 41 66 56 34 5a 32 51 37 50 44 77 37 5a 47 66 77 5a 6d 51 37 50 44 77 37 5a 47 5a 34 62 6c 35 62 4e 6a 63 33 4e 6c 74 65 32 31 35 62 4e 6a 63 33 4e 6c 74 65 41 36 30 38 4f 32 52 6e 38 47 64 6a 4f 7a 77 38 4f 32 4e 6e 38 47 64 6b 4f 7a 7a 38 72 Data Ascii: 8AAOoPAAAADwAA6hAAAOoQAAAAEAAA6hEAAOoRAAAAEQAAAAAARgCMANIBJgF4AcQCMgJgAqgC/ANIA6YD/gROBKAE9AVaAAAAAgAAAAADrwOtABQAKQAAASIHBgcGFBcWFxYyNzY3NjQnJicmAyInJicmNDc2NzYyFxYXFhQHBgcGAfV4Z2Q7PDw7ZGfwZmQ7PDw7ZGZ4bl5bNjc3Nlte215bNjc3NlteA608O2Rn8GdjOzw8O2Nn8GdkOzz8r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49740	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:49 UTC	552	OUT	GET /static/js/chunk-vendors.c519f2ef.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:49 UTC	886	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C47C163D643B333346A9E2 Last-Modified: Tue, 20 Aug 2024 09:32:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 7348483613613035465 x-oss-storage-class: Standard Content-MD5: K92g7FKgxIfJfSonp3CT0A== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4802 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J0ZYEhptLrxlYy%2B6ErpZuxfLVFbp8bFpSxxUpGSXpd%2BimeGol5e9UGUu5SvMtfyzrDgNjazWUQaBsYKWKiUM56D%2FRqJDUEQJEz8DFkQJcNC%2FqWfVaylze401vy%2Bc8Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d208888e9c96a5b-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:49 UTC	483	IN	Data Raw: 37 63 33 61 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 76 65 6e 64 6f 72 73 22 5d 2c 7b 22 30 30 62 34 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 22 61 63 31 66 22 29 3b 76 61 72 20 69 3d 6e 28 22 32 33 65 37 22 29 2c 72 3d 6e 28 22 63 36 35 62 22 29 2c 6f 3d 6e 28 22 31 36 32 36 22 29 2c 61 3d 6e 28 22 38 32 35 61 22 29 2c 73 3d 6e 28 22 35 37 37 65 22 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 31 2c 65 3d 2f 5b 61 63 5d 2f 3b 72 65 74 75 72 6e 20 65 2e 65 78 65 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: 7c3a(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-vendors"],{"00b4":function(t,e,n){"use strict";n("ac1f");var i=n("23e7"),r=n("c65b"),o=n("1626"),a=n("825a"),s=n("577e"),c=function(){var t=!1,e=/[ac]/;return e.exec=function(){return
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 7d 29 7d 2c 22 30 30 65 65 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 22 62 36 32 32 22 29 2c 72 3d 69 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 6f 3d 7b 7d 3b 6f 5b 72 5d 3d 22 7a 22 2c 74 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 6f 29 7d 2c 22 30 31 62 34 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 61 69 6c 3d 6e 75 6c 6c 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 69 74 65 6d 3a 74 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 3b 74 68 69 73 2e 68 65 61 64 3f 74 68 69 73 2e 74 61 69 6c 2e Data Ascii: })},"00ee":function(t,e,n){var i=n("b622"),r=i("toStringTag"),o={};o[r]="z",t.exports="[object z]"===String(o)},"01b4":function(t,e){var n=function(){this.head=null,this.tail=null};n.prototype={add:function(t){var e={item:t,next:null};this.head?this.tail.
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 22 63 36 62 36 22 29 2c 72 3d 6e 28 22 66 63 36 61 22 29 2c 6f 3d 6e 28 22 32 34 31 63 22 29 2e 66 2c 61 3d 6e 28 22 34 64 61 65 22 29 2c 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 3b 74 2e 65 78 70 6f 72 74 73 2e 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 26 26 22 57 69 6e 64 6f 77 22 3d 3d 69 28 74 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6f 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 Data Ascii: t,e,n){var i=n("c6b6"),r=n("fc6a"),o=n("241c").f,a=n("4dae"),s="object"==typeof window&&window&&Object.getOwnPropertyNames?Object.getOwnPropertyNames(window):[];t.exports.f=function(t){return s&&"Window"==i(t)?function(t){try{return o(t)}catch(e){return a
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 28 6e 28 22 36 62 37 35 22 29 29 7d 2c 22 30 36 63 66 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 22 38 33 61 62 22 29 2c 72 3d 6e 28 22 63 36 35 62 22 29 2c 6f 3d 6e 28 22 64 31 65 37 22 29 2c 61 3d 6e 28 22 35 63 36 63 22 29 2c 73 3d 6e 28 22 66 63 36 61 22 29 2c 63 3d 6e 28 22 61 30 34 62 22 29 2c 75 3d 6e 28 22 31 61 32 64 22 29 2c 6c 3d 6e 28 22 30 63 66 62 22 29 2c 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 65 2e 66 3d 69 3f 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 3d 73 28 74 29 2c 65 3d 63 28 65 29 2c 6c 29 74 72 79 7b 72 65 74 75 72 6e 20 66 28 74 2c 65 29 7d 63 61 74 Data Ascii: esModule?t:{default:t}}(n("6b75"))},"06cf":function(t,e,n){var i=n("83ab"),r=n("c65b"),o=n("d1e7"),a=n("5c6c"),s=n("fc6a"),c=n("a04b"),u=n("1a2d"),l=n("0cfb"),f=Object.getOwnPropertyDescriptor;e.f=i?f:function(t,e){if(t=s(t),e=c(e),l)try{return f(t,e)}cat
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 3b 6e 28 22 37 61 38 32 22 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 76 6f 69 64 20 30 2c 65 3d 74 68 69 73 2e 24 70 61 72 65 6e 74 3b 77 68 69 6c 65 28 65 29 7b 69 66 28 21 65 2e 24 6f 70 74 69 6f 6e 73 7c 7c 65 2e 24 6f 70 74 69 6f 6e 73 2e 6e 61 6d 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 3b 65 3d 65 2e 24 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 22 30 62 32 35 22 3a 66 75 6e 63 74 69 6f Data Ascii: ;n("7a82"),Object.defineProperty(e,"__esModule",{value:!0}),e.default=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:void 0,e=this.$parent;while(e){if(!e.$options\|\|e.$options.name===t)return e;e=e.$parent}return!1}},"0b25":functio
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 75 3f 22 22 3a 75 7d 29 29 7d 7d 2c 22 30 63 63 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 22 37 61 38 32 22 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 2c 6e 28 22 34 65 38 32 22 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 3b 72 65 74 75 72 6e 20 74 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: urn void 0===u?"":u}))}},"0cc0":function(t,e,n){"use strict";n("7a82"),Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,n("4e82");var i=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[];return t.sort((function(){r
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 35 39 32 65 33 29 2b 22 e4 b8 aa e6 9c 88 e5 89 8d 22 3a 70 61 72 73 65 49 6e 74 28 69 2f 33 31 35 33 36 65 33 29 2b 22 e5 b9 b4 e5 89 8d 22 3a 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 6e 2c 65 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 65 2e 64 65 66 61 75 6c 74 3d 6f 7d 2c 22 30 63 66 62 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 22 38 33 61 62 22 29 2c 72 3d 6e 28 22 64 30 33 39 22 29 2c 6f 3d 6e 28 22 63 63 31 32 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 69 26 26 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e Data Ascii: 592e3)+"":parseInt(i/31536e3)+"":(0,r.default)(n,e)}return o};e.default=o},"0cfb":function(t,e,n){var i=n("83ab"),r=n("d039"),o=n("cc12");t.exports=!i&&!r((function(){return 7!=Object.defineProperty(o("div"),"a",{get:function(){return 7}}).
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 64 28 6d 2c 74 29 26 26 6d 5b 74 5d 2e 6d 3f 6d 5b 74 5d 2e 63 3a 30 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 68 28 74 68 69 73 2c 4d 29 3b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 67 28 74 3c 31 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 2c 6e 3d 67 28 74 3c 32 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 22 45 72 72 6f 72 22 29 2c 69 3d 45 28 6e 29 3b 69 66 28 54 28 74 68 69 73 2c 7b 74 79 70 65 3a 22 44 4f 4d 45 78 63 65 70 74 69 6f 6e 22 2c 6e 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 65 2c 63 6f 64 65 3a 69 7d 29 2c 5f 7c 7c 28 74 68 69 73 2e 6e 61 6d 65 3d 6e 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 63 6f 64 65 3d 69 29 2c 41 29 7b Data Ascii: return d(m,t)&&m[t].m?m[t].c:0},j=function(){h(this,M);var t=arguments.length,e=g(t<1?void 0:arguments[0]),n=g(t<2?void 0:arguments[1],"Error"),i=E(n);if(T(this,{type:"DOMException",name:n,message:e,code:i}),_\|\|(this.name=n,this.message=e,this.code=i),A){
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 28 6f 28 74 68 69 73 29 29 2c 6e 3d 22 22 2c 73 3d 69 28 74 29 3b 69 66 28 73 3c 30 7c 7c 73 3d 3d 31 2f 30 29 74 68 72 6f 77 20 61 28 22 57 72 6f 6e 67 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 70 65 74 69 74 69 6f 6e 73 22 29 3b 66 6f 72 28 3b 73 3e 30 3b 28 73 3e 3e 3e 3d 31 29 26 26 28 65 2b 3d 65 29 29 31 26 73 26 26 28 6e 2b 3d 65 29 3b 72 65 74 75 72 6e 20 6e 7d 7d 2c 31 32 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6e 28 22 32 62 61 34 22 29 2c 72 3d 6e 28 22 63 36 35 62 22 29 2c 6f 3d 6e 28 22 65 33 33 30 22 29 2c 61 3d 6e 28 22 64 37 38 34 22 29 2c 73 3d 6e 28 22 38 32 35 61 22 29 2c 63 Data Ascii: r;t.exports=function(t){var e=r(o(this)),n="",s=i(t);if(s<0\|\|s==1/0)throw a("Wrong number of repetitions");for(;s>0;(s>>>=1)&&(e+=e))1&s&&(n+=e);return n}},1276:function(t,e,n){"use strict";var i=n("2ba4"),r=n("c65b"),o=n("e330"),a=n("d784"),s=n("825a"),c
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 2c 30 2c 61 29 3a 64 7d 3a 22 30 22 2e 73 70 6c 69 74 28 76 6f 69 64 20 30 2c 30 29 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 30 3d 3d 3d 6e 3f 5b 5d 3a 72 28 65 2c 74 68 69 73 2c 74 2c 6e 29 7d 3a 65 2c 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 6c 28 74 68 69 73 29 2c 61 3d 63 28 65 29 3f 76 6f 69 64 20 30 3a 76 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 61 3f 72 28 61 2c 65 2c 69 2c 6e 29 3a 72 28 6f 2c 70 28 69 29 2c 65 2c 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 3d 73 28 74 68 69 73 29 2c 61 3d 70 28 74 29 2c 63 3d 6e 28 6f 2c 72 2c 61 2c 69 2c 6f 21 3d 3d 65 29 3b 69 66 28 63 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 63 2e 76 61 Data Ascii: ,0,a):d}:"0".split(void 0,0).length?function(t,n){return void 0===t&&0===n?[]:r(e,this,t,n)}:e,[function(e,n){var i=l(this),a=c(e)?void 0:v(e,t);return a?r(a,e,i,n):r(o,p(i),e,n)},function(t,i){var r=s(this),a=p(t),c=n(o,r,a,i,o!==e);if(c.done)return c.va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49741	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:49 UTC	544	OUT	GET /static/js/index.21ba2144.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:49 UTC	881	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C462DA423FC330346A4865 Last-Modified: Tue, 20 Aug 2024 09:32:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 16936979080171938079 x-oss-storage-class: Standard Content-MD5: mF0F9gLxcaxlJYsN76rZuQ== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6903 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ho2VzXmeUAzfZohTtdDW4tBkDR0kTE4x0I2lNqXYH%2B2jI8UJkVtz2ptD9c4JWnXMZiJYnxxBrsvHuwqzfFVIEBRVyq0BXPaDvdQmqT%2BbwQEELRHzVWm9HaWsbYrejw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d208888fad641f5-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:49 UTC	488	IN	Data Raw: 37 63 34 30 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 2c 73 3d 74 5b 30 5d 2c 75 3d 74 5b 31 5d 2c 64 3d 74 5b 32 5d 2c 6d 3d 30 2c 6c 3d 5b 5d 3b 6d 3c 73 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 72 3d 73 5b 6d 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 72 29 26 26 69 5b 72 5d 26 26 6c 2e 70 75 73 68 28 69 5b 72 5d 5b 30 5d 29 2c 69 5b 72 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 75 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 75 2c 6e 29 26 26 28 61 5b 6e 5d 3d 75 5b 6e 5d 29 3b 70 26 26 70 28 74 29 3b 77 68 69 6c 65 28 6c 2e 6c 65 6e 67 Data Ascii: 7c40(function(a){function t(t){for(var n,r,s=t[0],u=t[1],d=t[2],m=0,l=[];m<s.length;m++)r=s[m],Object.prototype.hasOwnProperty.call(i,r)&&i[r]&&l.push(i[r][0]),i[r]=0;for(n in u)Object.prototype.hasOwnProperty.call(u,n)&&(a[n]=u[n]);p&&p(t);while(l.leng
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 72 28 74 29 7b 69 66 28 6e 5b 74 5d 29 72 65 74 75 72 6e 20 6e 5b 74 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 65 3d 6e 5b 74 5d 3d 7b 69 3a 74 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 7d 72 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 74 3d 5b 5d 2c 65 3d 69 5b 61 5d 3b 69 66 28 30 21 3d 3d 65 29 69 66 28 65 29 74 2e 70 75 73 68 28 65 5b 32 5d 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 3d 69 5b 61 5d 3d 5b 74 2c 6e 5d 7d 29 29 3b 74 2e 70 75 73 68 28 65 5b 32 5d 3d Data Ascii: tion r(t){if(n[t])return n[t].exports;var e=n[t]={i:t,l:!1,exports:{}};return a[t].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.e=function(a){var t=[],e=i[a];if(0!==e)if(e)t.push(e[2]);else{var n=new Promise((function(t,n){e=i[a]=[t,n]}));t.push(e[2]=
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 74 68 64 72 61 77 42 6f 6e 75 73 22 2c 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 61 70 70 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 7e 70 61 67 65 73 2d 61 63 7e 63 62 35 32 33 37 61 62 22 3a 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 61 70 70 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 7e 70 61 67 65 73 2d 61 63 7e 63 62 35 32 33 37 61 62 22 2c 22 70 61 67 65 73 2d 61 63 74 69 76 69 74 79 2d 61 63 Data Ascii: thdrawBonus","pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab":"pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab","pages-activity-ac
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 22 2c 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 22 3a 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 22 2c 22 70 61 67 65 73 2d 73 74 61 74 65 2d 73 74 61 74 65 22 3a 22 70 61 67 65 73 2d 73 74 61 74 65 2d 73 74 61 74 65 22 2c 22 70 61 67 65 73 2d 73 74 61 74 65 5f 6e 65 77 2d 73 74 61 74 65 5f 6e 65 77 22 3a 22 70 61 67 65 73 2d 73 74 61 74 65 5f 6e 65 77 2d 73 74 61 74 65 5f 6e 65 77 22 2c 22 70 61 67 65 73 2d 74 75 74 6f 72 69 61 6c 2d 74 75 74 6f 72 69 61 6c 22 3a 22 70 61 67 65 73 2d 74 75 74 6f 72 69 61 6c 2d 74 75 74 6f 72 69 61 6c 22 2c 22 70 61 67 65 73 2d 69 6e 76 74 6f 72 65 67 2d 69 6e 76 74 6f 72 65 67 22 3a 22 70 61 67 65 73 2d Data Ascii: es-active-active_new","pages-active-active-web":"pages-active-active-web","pages-state-state":"pages-state-state","pages-state_new-state_new":"pages-state_new-state_new","pages-tutorial-tutorial":"pages-tutorial-tutorial","pages-invtoreg-invtoreg":"pages-
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 73 2d 6c 6f 67 5f 63 6f 64 65 2d 6c 6f 67 5f 63 6f 64 65 22 2c 22 70 61 67 65 73 2d 6c 6f 67 69 6e 2d 6c 6f 67 69 6e 22 3a 22 70 61 67 65 73 2d 6c 6f 67 69 6e 2d 6c 6f 67 69 6e 22 2c 22 70 61 67 65 73 2d 6c 6f 67 69 6e 5f 74 65 6c 50 73 64 2d 6c 6f 67 69 6e 5f 74 65 6c 50 73 64 22 3a 22 70 61 67 65 73 2d 6c 6f 67 69 6e 5f 74 65 6c 50 73 64 2d 6c 6f 67 69 6e 5f 74 65 6c 50 73 64 22 2c 22 70 61 67 65 73 2d 6d 65 5f 6e 65 77 2d 6d 65 5f 6e 65 77 22 3a 22 70 61 67 65 73 2d 6d 65 5f 6e 65 77 2d 6d 65 5f 6e 65 77 22 2c 22 70 61 67 65 73 2d 6d 6f 6e 65 79 73 74 65 70 73 2d 6d 6f 6e 65 79 73 74 65 70 73 22 3a 22 70 61 67 65 73 2d 6d 6f 6e 65 79 73 74 65 70 73 2d 6d 6f 6e 65 79 73 74 65 70 73 22 2c 22 70 61 67 65 73 2d 6d 79 5f 74 65 61 6d 2d 6d 79 5f 74 65 61 6d Data Ascii: s-log_code-log_code","pages-login-login":"pages-login-login","pages-login_telPsd-login_telPsd":"pages-login_telPsd-login_telPsd","pages-me_new-me_new":"pages-me_new-me_new","pages-moneysteps-moneysteps":"pages-moneysteps-moneysteps","pages-my_team-my_team
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 73 2d 44 6f 77 6e 6c 6f 61 64 41 50 50 2d 44 6f 77 6e 6c 6f 61 64 41 50 50 22 3a 22 64 31 38 64 62 65 30 30 22 2c 22 70 61 67 65 73 2d 46 6f 72 67 65 74 50 61 73 73 77 6f 72 64 2d 46 6f 72 67 65 74 50 61 73 73 77 6f 72 64 7e 70 61 67 65 73 2d 4d 6f 64 69 66 79 50 61 73 73 77 6f 72 64 2d 4d 6f 64 69 66 79 50 61 73 73 77 6f 72 64 22 3a 22 62 63 37 63 31 36 62 30 22 2c 22 70 61 67 65 73 2d 46 6f 72 67 65 74 50 61 73 73 77 6f 72 64 2d 46 6f 72 67 65 74 50 61 73 73 77 6f 72 64 22 3a 22 34 65 64 35 31 36 36 64 22 2c 22 70 61 67 65 73 2d 4d 6f 64 69 66 79 50 61 73 73 77 6f 72 64 2d 4d 6f 64 69 66 79 50 61 73 73 77 6f 72 64 22 3a 22 34 34 62 65 66 36 66 62 22 2c 22 70 61 67 65 73 2d 4d 61 6e 75 61 6c 54 61 73 6b 73 2d 4d 61 6e 75 61 6c 54 61 73 6b 73 22 3a 22 34 Data Ascii: s-DownloadAPP-DownloadAPP":"d18dbe00","pages-ForgetPassword-ForgetPassword~pages-ModifyPassword-ModifyPassword":"bc7c16b0","pages-ForgetPassword-ForgetPassword":"4ed5166d","pages-ModifyPassword-ModifyPassword":"44bef6fb","pages-ManualTasks-ManualTasks":"4
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 6e 65 77 22 3a 22 36 63 35 32 32 30 64 33 22 2c 22 70 61 67 65 73 2d 74 75 74 6f 72 69 61 6c 2d 74 75 74 6f 72 69 61 6c 22 3a 22 39 39 32 30 34 62 62 62 22 2c 22 70 61 67 65 73 2d 69 6e 76 74 6f 72 65 67 2d 69 6e 76 74 6f 72 65 67 22 3a 22 39 34 31 39 33 36 31 30 22 2c 22 70 61 67 65 73 2d 6d 79 5f 74 65 61 6d 2d 6d 79 5f 74 65 61 6d 7e 70 61 67 65 73 2d 6d 79 5f 74 65 61 6d 5f 6f 6e 65 2d 6d 79 5f 74 65 61 6d 5f 6f 6e 65 22 3a 22 62 62 32 66 39 30 38 66 22 2c 22 70 61 67 65 73 2d 6d 79 5f 74 65 61 6d 5f 6f 6e 65 2d 6d 79 5f 74 65 61 6d 5f 6f 6e 65 22 3a 22 62 34 34 65 34 34 63 63 22 2c 22 70 61 67 65 73 2d 77 69 74 68 64 72 61 77 2d 77 69 74 68 64 72 61 77 22 3a 22 64 65 39 64 61 34 66 63 22 2c 22 70 61 67 65 73 2d 77 69 74 68 64 72 61 77 41 63 63 6f 75 Data Ascii: new":"6c5220d3","pages-tutorial-tutorial":"99204bbb","pages-invtoreg-invtoreg":"94193610","pages-my_team-my_team~pages-my_team_one-my_team_one":"bb2f908f","pages-my_team_one-my_team_one":"b44e44cc","pages-withdraw-withdraw":"de9da4fc","pages-withdrawAccou
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 67 65 73 2d 73 68 6f 77 71 72 2d 73 68 6f 77 71 72 22 3a 22 35 61 66 31 65 37 30 37 22 2c 22 70 61 67 65 73 2d 73 79 73 74 65 6d 55 70 67 72 61 64 65 2d 73 79 73 74 65 6d 55 70 67 72 61 64 65 22 3a 22 38 37 66 31 34 34 63 34 22 2c 22 70 61 67 65 73 2d 74 65 61 6d 2d 61 63 74 69 76 69 74 79 22 3a 22 37 32 31 38 61 65 64 64 22 2c 22 70 61 67 65 73 2d 74 65 61 6d 5f 6e 65 77 2d 74 65 61 6d 5f 6e 65 77 22 3a 22 33 33 39 66 30 64 31 37 22 2c 22 70 61 67 65 73 2d 74 65 73 74 5f 6c 6f 67 69 6e 2d 74 65 73 74 5f 6c 6f 67 69 6e 22 3a 22 37 37 66 34 37 62 38 33 22 2c 22 70 61 67 65 73 2d 74 69 63 6b 65 74 53 79 73 74 65 6d 2d 74 69 63 6b 65 74 53 79 73 74 65 6d 22 3a 22 61 31 36 66 65 36 63 34 22 2c 22 70 61 67 65 73 2d 74 72 61 6e 73 69 74 53 68 69 70 6d 65 6e 74 Data Ascii: ges-showqr-showqr":"5af1e707","pages-systemUpgrade-systemUpgrade":"87f144c4","pages-team-activity":"7218aedd","pages-team_new-team_new":"339f0d17","pages-test_login-test_login":"77f47b83","pages-ticketSystem-ticketSystem":"a16fe6c4","pages-transitShipment
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 61 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 72 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 74 29 7d 2c 72 2e 70 3d 22 2f 22 2c 72 2e 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 29 2c 61 7d 3b 76 61 72 20 73 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 2c 75 3d 73 2e 70 75 73 68 2e 62 69 6e 64 28 73 29 3b 73 2e 70 75 73 68 3d 74 2c 73 3d 73 2e 73 6c 69 63 65 28 29 3b 66 6f 72 28 76 61 72 Data Ascii: ){return a};return r.d(t,"a",t),t},r.o=function(a,t){return Object.prototype.hasOwnProperty.call(a,t)},r.p="/",r.oe=function(a){throw console.error(a),a};var s=window["webpackJsonp"]=window["webpackJsonp"]\|\|[],u=s.push.bind(s);s.push=t,s=s.slice();for(var
2024-10-13 15:58:49 UTC	1369	IN	Data Raw: 31 33 30 30 33 22 3a 22 e8 af b7 e5 a1 ab e5 86 99 e6 ad a3 e7 a1 ae e7 9a 84 e6 89 8b e6 9c ba e5 8f b7 e5 92 8c e5 9b bd e5 ae b6 e5 8c ba e5 8f b7 22 2c 22 72 65 67 69 73 74 65 72 2e 65 72 72 2e 31 33 30 30 34 22 3a 22 e6 89 8b e6 9c ba e5 8f b7 e5 b7 b2 e8 a2 ab e6 b3 a8 e5 86 8c 22 2c 22 72 65 67 69 73 74 65 72 2e 65 72 72 2e 31 33 30 30 35 22 3a 22 e9 82 ae e7 ae b1 e5 b7 b2 e8 a2 ab e6 b3 a8 e5 86 8c 22 2c 22 72 65 67 69 73 74 65 72 2e 6e 69 63 6b 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 e8 af b7 e8 be 93 e5 85 a5 e7 94 a8 e6 88 b7 e5 90 8d 22 2c 22 72 65 67 69 73 74 65 72 2e 72 65 63 6f 6d 6d 65 6e 64 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 e8 af b7 e8 be 93 e5 85 a5 e9 82 80 e8 af b7 e7 a0 81 22 2c 22 72 65 67 69 73 74 65 72 2e 74 6f 4c 6f 67 Data Ascii: 13003":"","register.err.13004":"","register.err.13005":"","register.nickPlaceholder":"","register.recommendPlaceholder":"","register.toLog

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49742	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:50 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:50 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155850Z-17db6f7c8cf4g2pjavqhm24vp4000000056g00000000fnhw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:50 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49744	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:50 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c03f5215-301e-005d-4a1d-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155850Z-17db6f7c8cf9c22xp43k2gbqvn00000002s0000000007qng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49743	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:50 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:50 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: b3ad5e0b-501e-000a-1fe3-1a0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155850Z-17db6f7c8cfhzb2znbk0zyvf6n00000004rg00000000bdza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:50 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49745	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:50 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:50 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: cbdfa3b4-e01e-0051-2293-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155850Z-17db6f7c8cfcrfgzd01a8emnyg00000002mg000000008mp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:50 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49746	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:50 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:50 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 6fbaa347-101e-0034-2f47-1c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155850Z-17db6f7c8cfvq8pt2ak3arkg6n000000035g0000000033yn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:50 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49748	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 3826920f-501e-0078-42aa-1b06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155851Z-17db6f7c8cf96l6t7bwyfgbkhw0000000460000000004bqd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:51 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49749	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155851Z-17db6f7c8cf5mtxmr1c51513n0000000058000000000beyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49750	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0c32318b-701e-0098-6762-1c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155851Z-17db6f7c8cfcrfgzd01a8emnyg00000002p00000000060d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49751	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155851Z-17db6f7c8cfqkqk8bn4ck6f72000000004wg0000000075cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:51 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49752	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155851Z-17db6f7c8cfbr2wt66emzt78g400000004k000000000dqdr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:51 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49754	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	362	OUT	GET /static/js/index.21ba2144.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:51 UTC	889	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C462DA423FC330346A4865 Last-Modified: Tue, 20 Aug 2024 09:32:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 16936979080171938079 x-oss-storage-class: Standard Content-MD5: mF0F9gLxcaxlJYsN76rZuQ== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6905 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2BmqwnVBAZ1oi1reax5iqQCs%2FpS92q3X49ixw6cy3GW1AzSv6RvZhx14h2BTgFogkMu%2FTE1CS2fclowJ2oADv7%2Fs%2BQOFu%2FNpPIjs7mRD9hn4ViDJ0oFbdOqxJxXLUQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d208893aeca4381-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:51 UTC	480	IN	Data Raw: 37 63 33 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 2c 73 3d 74 5b 30 5d 2c 75 3d 74 5b 31 5d 2c 64 3d 74 5b 32 5d 2c 6d 3d 30 2c 6c 3d 5b 5d 3b 6d 3c 73 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 72 3d 73 5b 6d 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 72 29 26 26 69 5b 72 5d 26 26 6c 2e 70 75 73 68 28 69 5b 72 5d 5b 30 5d 29 2c 69 5b 72 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 75 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 75 2c 6e 29 26 26 28 61 5b 6e 5d 3d 75 5b 6e 5d 29 3b 70 26 26 70 28 74 29 3b 77 68 69 6c 65 28 6c 2e 6c 65 6e 67 Data Ascii: 7c37(function(a){function t(t){for(var n,r,s=t[0],u=t[1],d=t[2],m=0,l=[];m<s.length;m++)r=s[m],Object.prototype.hasOwnProperty.call(i,r)&&i[r]&&l.push(i[r][0]),i[r]=0;for(n in u)Object.prototype.hasOwnProperty.call(u,n)&&(a[n]=u[n]);p&&p(t);while(l.leng
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 69 66 28 6e 5b 74 5d 29 72 65 74 75 72 6e 20 6e 5b 74 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 65 3d 6e 5b 74 5d 3d 7b 69 3a 74 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 7d 72 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 74 3d 5b 5d 2c 65 3d 69 5b 61 5d 3b 69 66 28 30 21 3d 3d 65 29 69 66 28 65 29 74 2e 70 75 73 68 28 65 5b 32 5d 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 3d 69 5b 61 5d 3d 5b 74 2c 6e 5d 7d 29 29 3b 74 2e 70 75 Data Ascii: =[];function r(t){if(n[t])return n[t].exports;var e=n[t]={i:t,l:!1,exports:{}};return a[t].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.e=function(a){var t=[],e=i[a];if(0!==e)if(e)t.push(e[2]);else{var n=new Promise((function(t,n){e=i[a]=[t,n]}));t.pu
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 42 6f 6e 75 73 2d 57 69 74 68 64 72 61 77 42 6f 6e 75 73 22 2c 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 61 70 70 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 7e 70 61 67 65 73 2d 61 63 7e 63 62 35 32 33 37 61 62 22 3a 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 61 70 70 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 7e 70 61 67 65 73 2d 61 63 7e 63 62 35 32 33 37 61 62 22 2c 22 70 61 67 65 73 2d 61 63 74 Data Ascii: Bonus-WithdrawBonus","pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab":"pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab","pages-act
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 65 77 22 3a 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 22 2c 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 22 3a 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 22 2c 22 70 61 67 65 73 2d 73 74 61 74 65 2d 73 74 61 74 65 22 3a 22 70 61 67 65 73 2d 73 74 61 74 65 2d 73 74 61 74 65 22 2c 22 70 61 67 65 73 2d 73 74 61 74 65 5f 6e 65 77 2d 73 74 61 74 65 5f 6e 65 77 22 3a 22 70 61 67 65 73 2d 73 74 61 74 65 5f 6e 65 77 2d 73 74 61 74 65 5f 6e 65 77 22 2c 22 70 61 67 65 73 2d 74 75 74 6f 72 69 61 6c 2d 74 75 74 6f 72 69 61 6c 22 3a 22 70 61 67 65 73 2d 74 75 74 6f 72 69 61 6c 2d 74 75 74 6f 72 69 61 6c 22 2c 22 70 61 67 65 73 2d 69 6e 76 74 6f 72 65 67 2d 69 6e 76 74 6f 72 65 67 22 Data Ascii: ew":"pages-active-active_new","pages-active-active-web":"pages-active-active-web","pages-state-state":"pages-state-state","pages-state_new-state_new":"pages-state_new-state_new","pages-tutorial-tutorial":"pages-tutorial-tutorial","pages-invtoreg-invtoreg"
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 65 22 3a 22 70 61 67 65 73 2d 6c 6f 67 5f 63 6f 64 65 2d 6c 6f 67 5f 63 6f 64 65 22 2c 22 70 61 67 65 73 2d 6c 6f 67 69 6e 2d 6c 6f 67 69 6e 22 3a 22 70 61 67 65 73 2d 6c 6f 67 69 6e 2d 6c 6f 67 69 6e 22 2c 22 70 61 67 65 73 2d 6c 6f 67 69 6e 5f 74 65 6c 50 73 64 2d 6c 6f 67 69 6e 5f 74 65 6c 50 73 64 22 3a 22 70 61 67 65 73 2d 6c 6f 67 69 6e 5f 74 65 6c 50 73 64 2d 6c 6f 67 69 6e 5f 74 65 6c 50 73 64 22 2c 22 70 61 67 65 73 2d 6d 65 5f 6e 65 77 2d 6d 65 5f 6e 65 77 22 3a 22 70 61 67 65 73 2d 6d 65 5f 6e 65 77 2d 6d 65 5f 6e 65 77 22 2c 22 70 61 67 65 73 2d 6d 6f 6e 65 79 73 74 65 70 73 2d 6d 6f 6e 65 79 73 74 65 70 73 22 3a 22 70 61 67 65 73 2d 6d 6f 6e 65 79 73 74 65 70 73 2d 6d 6f 6e 65 79 73 74 65 70 73 22 2c 22 70 61 67 65 73 2d 6d 79 5f 74 65 61 6d Data Ascii: e":"pages-log_code-log_code","pages-login-login":"pages-login-login","pages-login_telPsd-login_telPsd":"pages-login_telPsd-login_telPsd","pages-me_new-me_new":"pages-me_new-me_new","pages-moneysteps-moneysteps":"pages-moneysteps-moneysteps","pages-my_team
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 30 22 2c 22 70 61 67 65 73 2d 44 6f 77 6e 6c 6f 61 64 41 50 50 2d 44 6f 77 6e 6c 6f 61 64 41 50 50 22 3a 22 64 31 38 64 62 65 30 30 22 2c 22 70 61 67 65 73 2d 46 6f 72 67 65 74 50 61 73 73 77 6f 72 64 2d 46 6f 72 67 65 74 50 61 73 73 77 6f 72 64 7e 70 61 67 65 73 2d 4d 6f 64 69 66 79 50 61 73 73 77 6f 72 64 2d 4d 6f 64 69 66 79 50 61 73 73 77 6f 72 64 22 3a 22 62 63 37 63 31 36 62 30 22 2c 22 70 61 67 65 73 2d 46 6f 72 67 65 74 50 61 73 73 77 6f 72 64 2d 46 6f 72 67 65 74 50 61 73 73 77 6f 72 64 22 3a 22 34 65 64 35 31 36 36 64 22 2c 22 70 61 67 65 73 2d 4d 6f 64 69 66 79 50 61 73 73 77 6f 72 64 2d 4d 6f 64 69 66 79 50 61 73 73 77 6f 72 64 22 3a 22 34 34 62 65 66 36 66 62 22 2c 22 70 61 67 65 73 2d 4d 61 6e 75 61 6c 54 61 73 6b 73 2d 4d 61 6e 75 61 6c 54 Data Ascii: 0","pages-DownloadAPP-DownloadAPP":"d18dbe00","pages-ForgetPassword-ForgetPassword~pages-ModifyPassword-ModifyPassword":"bc7c16b0","pages-ForgetPassword-ForgetPassword":"4ed5166d","pages-ModifyPassword-ModifyPassword":"44bef6fb","pages-ManualTasks-ManualT
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 77 2d 73 74 61 74 65 5f 6e 65 77 22 3a 22 36 63 35 32 32 30 64 33 22 2c 22 70 61 67 65 73 2d 74 75 74 6f 72 69 61 6c 2d 74 75 74 6f 72 69 61 6c 22 3a 22 39 39 32 30 34 62 62 62 22 2c 22 70 61 67 65 73 2d 69 6e 76 74 6f 72 65 67 2d 69 6e 76 74 6f 72 65 67 22 3a 22 39 34 31 39 33 36 31 30 22 2c 22 70 61 67 65 73 2d 6d 79 5f 74 65 61 6d 2d 6d 79 5f 74 65 61 6d 7e 70 61 67 65 73 2d 6d 79 5f 74 65 61 6d 5f 6f 6e 65 2d 6d 79 5f 74 65 61 6d 5f 6f 6e 65 22 3a 22 62 62 32 66 39 30 38 66 22 2c 22 70 61 67 65 73 2d 6d 79 5f 74 65 61 6d 5f 6f 6e 65 2d 6d 79 5f 74 65 61 6d 5f 6f 6e 65 22 3a 22 62 34 34 65 34 34 63 63 22 2c 22 70 61 67 65 73 2d 77 69 74 68 64 72 61 77 2d 77 69 74 68 64 72 61 77 22 3a 22 64 65 39 64 61 34 66 63 22 2c 22 70 61 67 65 73 2d 77 69 74 68 64 Data Ascii: w-state_new":"6c5220d3","pages-tutorial-tutorial":"99204bbb","pages-invtoreg-invtoreg":"94193610","pages-my_team-my_team~pages-my_team_one-my_team_one":"bb2f908f","pages-my_team_one-my_team_one":"b44e44cc","pages-withdraw-withdraw":"de9da4fc","pages-withd
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 35 32 36 22 2c 22 70 61 67 65 73 2d 73 68 6f 77 71 72 2d 73 68 6f 77 71 72 22 3a 22 35 61 66 31 65 37 30 37 22 2c 22 70 61 67 65 73 2d 73 79 73 74 65 6d 55 70 67 72 61 64 65 2d 73 79 73 74 65 6d 55 70 67 72 61 64 65 22 3a 22 38 37 66 31 34 34 63 34 22 2c 22 70 61 67 65 73 2d 74 65 61 6d 2d 61 63 74 69 76 69 74 79 22 3a 22 37 32 31 38 61 65 64 64 22 2c 22 70 61 67 65 73 2d 74 65 61 6d 5f 6e 65 77 2d 74 65 61 6d 5f 6e 65 77 22 3a 22 33 33 39 66 30 64 31 37 22 2c 22 70 61 67 65 73 2d 74 65 73 74 5f 6c 6f 67 69 6e 2d 74 65 73 74 5f 6c 6f 67 69 6e 22 3a 22 37 37 66 34 37 62 38 33 22 2c 22 70 61 67 65 73 2d 74 69 63 6b 65 74 53 79 73 74 65 6d 2d 74 69 63 6b 65 74 53 79 73 74 65 6d 22 3a 22 61 31 36 66 65 36 63 34 22 2c 22 70 61 67 65 73 2d 74 72 61 6e 73 69 74 Data Ascii: 526","pages-showqr-showqr":"5af1e707","pages-systemUpgrade-systemUpgrade":"87f144c4","pages-team-activity":"7218aedd","pages-team_new-team_new":"339f0d17","pages-test_login-test_login":"77f47b83","pages-ticketSystem-ticketSystem":"a16fe6c4","pages-transit
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 72 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 74 29 7d 2c 72 2e 70 3d 22 2f 22 2c 72 2e 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 29 2c 61 7d 3b 76 61 72 20 73 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 2c 75 3d 73 2e 70 75 73 68 2e 62 69 6e 64 28 73 29 3b 73 2e 70 75 73 68 3d 74 2c 73 3d 73 2e 73 6c 69 63 65 28 29 Data Ascii: unction(){return a};return r.d(t,"a",t),t},r.o=function(a,t){return Object.prototype.hasOwnProperty.call(a,t)},r.p="/",r.oe=function(a){throw console.error(a),a};var s=window["webpackJsonp"]=window["webpackJsonp"]\|\|[],u=s.push.bind(s);s.push=t,s=s.slice()
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 74 65 72 2e 65 72 72 2e 31 33 30 30 33 22 3a 22 e8 af b7 e5 a1 ab e5 86 99 e6 ad a3 e7 a1 ae e7 9a 84 e6 89 8b e6 9c ba e5 8f b7 e5 92 8c e5 9b bd e5 ae b6 e5 8c ba e5 8f b7 22 2c 22 72 65 67 69 73 74 65 72 2e 65 72 72 2e 31 33 30 30 34 22 3a 22 e6 89 8b e6 9c ba e5 8f b7 e5 b7 b2 e8 a2 ab e6 b3 a8 e5 86 8c 22 2c 22 72 65 67 69 73 74 65 72 2e 65 72 72 2e 31 33 30 30 35 22 3a 22 e9 82 ae e7 ae b1 e5 b7 b2 e8 a2 ab e6 b3 a8 e5 86 8c 22 2c 22 72 65 67 69 73 74 65 72 2e 6e 69 63 6b 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 e8 af b7 e8 be 93 e5 85 a5 e7 94 a8 e6 88 b7 e5 90 8d 22 2c 22 72 65 67 69 73 74 65 72 2e 72 65 63 6f 6d 6d 65 6e 64 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 e8 af b7 e8 be 93 e5 85 a5 e9 82 80 e8 af b7 e7 a0 81 22 2c 22 72 65 67 69 73 74 Data Ascii: ter.err.13003":"","register.err.13004":"","register.err.13005":"","register.nickPlaceholder":"","register.recommendPlaceholder":"","regist

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49763	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	370	OUT	GET /static/js/chunk-vendors.c519f2ef.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:51 UTC	882	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C47C163D643B333346A9E2 Last-Modified: Tue, 20 Aug 2024 09:32:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 7348483613613035465 x-oss-storage-class: Standard Content-MD5: K92g7FKgxIfJfSonp3CT0A== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4804 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ekgMVPGLfaNJTTQhVVaiskqIqWhtPmyZ%2BuEKFUurMleXfkxTxlRoYG1T7ViFGocxWoLcR%2B4foKloEhpdibV%2FVRoXpKtyivdI2HR2yKOcoXzt6zz7aAGEmftz5H9YVg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d208894c96d1819-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:51 UTC	487	IN	Data Raw: 37 63 33 65 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 76 65 6e 64 6f 72 73 22 5d 2c 7b 22 30 30 62 34 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 22 61 63 31 66 22 29 3b 76 61 72 20 69 3d 6e 28 22 32 33 65 37 22 29 2c 72 3d 6e 28 22 63 36 35 62 22 29 2c 6f 3d 6e 28 22 31 36 32 36 22 29 2c 61 3d 6e 28 22 38 32 35 61 22 29 2c 73 3d 6e 28 22 35 37 37 65 22 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 31 2c 65 3d 2f 5b 61 63 5d 2f 3b 72 65 74 75 72 6e 20 65 2e 65 78 65 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: 7c3e(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-vendors"],{"00b4":function(t,e,n){"use strict";n("ac1f");var i=n("23e7"),r=n("c65b"),o=n("1626"),a=n("825a"),s=n("577e"),c=function(){var t=!1,e=/[ac]/;return e.exec=function(){return
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 22 30 30 65 65 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 22 62 36 32 32 22 29 2c 72 3d 69 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 6f 3d 7b 7d 3b 6f 5b 72 5d 3d 22 7a 22 2c 74 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 6f 29 7d 2c 22 30 31 62 34 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 61 69 6c 3d 6e 75 6c 6c 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 69 74 65 6d 3a 74 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 3b 74 68 69 73 2e 68 65 61 64 3f 74 68 69 73 2e 74 61 69 6c 2e 6e 65 78 74 Data Ascii: "00ee":function(t,e,n){var i=n("b622"),r=i("toStringTag"),o={};o[r]="z",t.exports="[object z]"===String(o)},"01b4":function(t,e){var n=function(){this.head=null,this.tail=null};n.prototype={add:function(t){var e={item:t,next:null};this.head?this.tail.next
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 6e 29 7b 76 61 72 20 69 3d 6e 28 22 63 36 62 36 22 29 2c 72 3d 6e 28 22 66 63 36 61 22 29 2c 6f 3d 6e 28 22 32 34 31 63 22 29 2e 66 2c 61 3d 6e 28 22 34 64 61 65 22 29 2c 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 3b 74 2e 65 78 70 6f 72 74 73 2e 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 26 26 22 57 69 6e 64 6f 77 22 3d 3d 69 28 74 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6f 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 28 73 29 7d Data Ascii: n){var i=n("c6b6"),r=n("fc6a"),o=n("241c").f,a=n("4dae"),s="object"==typeof window&&window&&Object.getOwnPropertyNames?Object.getOwnPropertyNames(window):[];t.exports.f=function(t){return s&&"Window"==i(t)?function(t){try{return o(t)}catch(e){return a(s)}
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 28 6e 28 22 36 62 37 35 22 29 29 7d 2c 22 30 36 63 66 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 22 38 33 61 62 22 29 2c 72 3d 6e 28 22 63 36 35 62 22 29 2c 6f 3d 6e 28 22 64 31 65 37 22 29 2c 61 3d 6e 28 22 35 63 36 63 22 29 2c 73 3d 6e 28 22 66 63 36 61 22 29 2c 63 3d 6e 28 22 61 30 34 62 22 29 2c 75 3d 6e 28 22 31 61 32 64 22 29 2c 6c 3d 6e 28 22 30 63 66 62 22 29 2c 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 65 2e 66 3d 69 3f 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 3d 73 28 74 29 2c 65 3d 63 28 65 29 2c 6c 29 74 72 79 7b 72 65 74 75 72 6e 20 66 28 74 2c 65 29 7d 63 61 74 63 68 28 6e Data Ascii: dule?t:{default:t}}(n("6b75"))},"06cf":function(t,e,n){var i=n("83ab"),r=n("c65b"),o=n("d1e7"),a=n("5c6c"),s=n("fc6a"),c=n("a04b"),u=n("1a2d"),l=n("0cfb"),f=Object.getOwnPropertyDescriptor;e.f=i?f:function(t,e){if(t=s(t),e=c(e),l)try{return f(t,e)}catch(n
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 37 61 38 32 22 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 76 6f 69 64 20 30 2c 65 3d 74 68 69 73 2e 24 70 61 72 65 6e 74 3b 77 68 69 6c 65 28 65 29 7b 69 66 28 21 65 2e 24 6f 70 74 69 6f 6e 73 7c 7c 65 2e 24 6f 70 74 69 6f 6e 73 2e 6e 61 6d 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 3b 65 3d 65 2e 24 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 22 30 62 32 35 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7a82"),Object.defineProperty(e,"__esModule",{value:!0}),e.default=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:void 0,e=this.$parent;while(e){if(!e.$options\|\|e.$options.name===t)return e;e=e.$parent}return!1}},"0b25":function(t,
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 3d 3d 3d 75 3f 22 22 3a 75 7d 29 29 7d 7d 2c 22 30 63 63 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 22 37 61 38 32 22 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 2c 6e 28 22 34 65 38 32 22 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 3b 72 65 74 75 72 6e 20 74 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: void 0===u?"":u}))}},"0cc0":function(t,e,n){"use strict";n("7a82"),Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,n("4e82");var i=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[];return t.sort((function(){retur
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 33 29 2b 22 e4 b8 aa e6 9c 88 e5 89 8d 22 3a 70 61 72 73 65 49 6e 74 28 69 2f 33 31 35 33 36 65 33 29 2b 22 e5 b9 b4 e5 89 8d 22 3a 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 6e 2c 65 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 65 2e 64 65 66 61 75 6c 74 3d 6f 7d 2c 22 30 63 66 62 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 22 38 33 61 62 22 29 2c 72 3d 6e 28 22 64 30 33 39 22 29 2c 6f 3d 6e 28 22 63 63 31 32 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 69 26 26 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 29 Data Ascii: 3)+"":parseInt(i/31536e3)+"":(0,r.default)(n,e)}return o};e.default=o},"0cfb":function(t,e,n){var i=n("83ab"),r=n("d039"),o=n("cc12");t.exports=!i&&!r((function(){return 7!=Object.defineProperty(o("div"),"a",{get:function(){return 7}}).a}))
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 72 6e 20 64 28 6d 2c 74 29 26 26 6d 5b 74 5d 2e 6d 3f 6d 5b 74 5d 2e 63 3a 30 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 68 28 74 68 69 73 2c 4d 29 3b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 67 28 74 3c 31 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 2c 6e 3d 67 28 74 3c 32 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 22 45 72 72 6f 72 22 29 2c 69 3d 45 28 6e 29 3b 69 66 28 54 28 74 68 69 73 2c 7b 74 79 70 65 3a 22 44 4f 4d 45 78 63 65 70 74 69 6f 6e 22 2c 6e 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 65 2c 63 6f 64 65 3a 69 7d 29 2c 5f 7c 7c 28 74 68 69 73 2e 6e 61 6d 65 3d 6e 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 63 6f 64 65 3d 69 29 2c 41 29 7b 76 61 72 20 Data Ascii: rn d(m,t)&&m[t].m?m[t].c:0},j=function(){h(this,M);var t=arguments.length,e=g(t<1?void 0:arguments[0]),n=g(t<2?void 0:arguments[1],"Error"),i=E(n);if(T(this,{type:"DOMException",name:n,message:e,code:i}),_\|\|(this.name=n,this.message=e,this.code=i),A){var
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 28 6f 28 74 68 69 73 29 29 2c 6e 3d 22 22 2c 73 3d 69 28 74 29 3b 69 66 28 73 3c 30 7c 7c 73 3d 3d 31 2f 30 29 74 68 72 6f 77 20 61 28 22 57 72 6f 6e 67 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 70 65 74 69 74 69 6f 6e 73 22 29 3b 66 6f 72 28 3b 73 3e 30 3b 28 73 3e 3e 3e 3d 31 29 26 26 28 65 2b 3d 65 29 29 31 26 73 26 26 28 6e 2b 3d 65 29 3b 72 65 74 75 72 6e 20 6e 7d 7d 2c 31 32 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6e 28 22 32 62 61 34 22 29 2c 72 3d 6e 28 22 63 36 35 62 22 29 2c 6f 3d 6e 28 22 65 33 33 30 22 29 2c 61 3d 6e 28 22 64 37 38 34 22 29 2c 73 3d 6e 28 22 38 32 35 61 22 29 2c 63 3d 6e 28 22 Data Ascii: exports=function(t){var e=r(o(this)),n="",s=i(t);if(s<0\|\|s==1/0)throw a("Wrong number of repetitions");for(;s>0;(s>>>=1)&&(e+=e))1&s&&(n+=e);return n}},1276:function(t,e,n){"use strict";var i=n("2ba4"),r=n("c65b"),o=n("e330"),a=n("d784"),s=n("825a"),c=n("
2024-10-13 15:58:51 UTC	1369	IN	Data Raw: 29 3a 64 7d 3a 22 30 22 2e 73 70 6c 69 74 28 76 6f 69 64 20 30 2c 30 29 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 30 3d 3d 3d 6e 3f 5b 5d 3a 72 28 65 2c 74 68 69 73 2c 74 2c 6e 29 7d 3a 65 2c 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 6c 28 74 68 69 73 29 2c 61 3d 63 28 65 29 3f 76 6f 69 64 20 30 3a 76 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 61 3f 72 28 61 2c 65 2c 69 2c 6e 29 3a 72 28 6f 2c 70 28 69 29 2c 65 2c 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 3d 73 28 74 68 69 73 29 2c 61 3d 70 28 74 29 2c 63 3d 6e 28 6f 2c 72 2c 61 2c 69 2c 6f 21 3d 3d 65 29 3b 69 66 28 63 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 63 2e 76 61 6c 75 65 3b Data Ascii: ):d}:"0".split(void 0,0).length?function(t,n){return void 0===t&&0===n?[]:r(e,this,t,n)}:e,[function(e,n){var i=l(this),a=c(e)?void 0:v(e,t);return a?r(a,e,i,n):r(o,p(i),e,n)},function(t,i){var r=s(this),a=p(t),c=n(o,r,a,i,o!==e);if(c.done)return c.value;

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49764	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155851Z-17db6f7c8cfmhggkx889x958tc000000026g00000000ef9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49765	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: a5b27f46-b01e-003d-5a47-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155851Z-17db6f7c8cfmhggkx889x958tc00000002d00000000000hn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:51 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49768	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155851Z-17db6f7c8cfwtn5x6ye8p8q9m000000003qg00000000767h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:52 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49767	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b910d997-a01e-0002-0816-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155851Z-17db6f7c8cfvtw4hh2496wp8p800000003p00000000004r0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:52 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49766	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:51 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:51 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 9a785c76-f01e-0071-7218-1c431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155851Z-17db6f7c8cf8rgvlb86c9c00980000000370000000007h35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:52 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49769	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:52 UTC	648	OUT	GET /static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-in~2ace6e53.e328c61f.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:52 UTC	888	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C467B9C05EDB3830DD8489 Last-Modified: Tue, 20 Aug 2024 09:33:00 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 7196093106936787015 x-oss-storage-class: Standard Content-MD5: YEtO/nuBNEyQasob94seqw== x-oss-server-time: 1 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6904 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lhuw9CzoFBrZ01E4%2FVIjkZ2EueFTuaOa2zRUl6Zh7WTTwdvW%2FOhIDxU97xBniD0ZE0WP3s%2BLBLab5OUu65NuyAd3bn%2BYX3zoY8f3w1%2Fb3sIasSmnOomqNFNuE%2BYjOA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d20889859577cf3-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:52 UTC	481	IN	Data Raw: 34 33 35 33 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 61 70 70 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 7e 70 61 67 65 73 2d 69 6e 7e 32 61 63 65 36 65 35 33 22 5d 2c 7b 22 31 64 65 35 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 7b 7d 29 Data Ascii: 4353(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-in~2ace6e53"],{"1de5":function(t,e,i){"use strict";t.exports=function(t,e){return e\|\|(e={})
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 28 22 37 61 38 32 22 29 3b 76 61 72 20 6e 3d 69 28 22 34 65 61 34 22 29 2e 64 65 66 61 75 6c 74 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 2c 69 28 22 63 39 37 35 22 29 3b 76 61 72 20 6f 3d 6e 28 69 28 22 63 38 66 64 22 29 29 2c 61 3d 7b 6e 61 6d 65 3a 22 75 6e 69 50 6f 70 75 70 22 2c 63 6f 6d 70 6f 6e 65 6e 74 73 3a 7b 6b 65 79 70 72 65 73 73 3a 6f 2e 64 65 66 61 75 6c 74 7d 2c 65 6d 69 74 73 3a 5b 22 63 68 61 6e 67 65 22 2c 22 6d 61 73 6b 43 6c 69 63 6b 22 5d 2c 70 72 6f 70 73 3a 7b 61 6e 69 6d 61 74 69 6f 6e 3a 7b 74 79 Data Ascii: ction(t,e,i){"use strict";i("7a82");var n=i("4ea4").default;Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,i("c975");var o=n(i("c8fd")),a={name:"uniPopup",components:{keypress:o.default},emits:["change","maskClick"],props:{animation:{ty
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 74 6f 70 22 7d 7d 2c 63 6f 6d 70 75 74 65 64 3a 7b 69 73 44 65 73 6b 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 70 75 70 57 69 64 74 68 3e 3d 35 30 30 26 26 74 68 69 73 2e 70 6f 70 75 70 48 65 69 67 68 74 3e 3d 35 30 30 7d 2c 62 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 22 3d 3d 3d 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 7c 7c 22 6e 6f 6e 65 22 3d 3d 3d 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3f 22 74 72 61 6e 73 70 61 72 65 6e 74 22 3a 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 7d 7d 2c 6d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 6e 69 Data Ascii: top"}},computed:{isDesktop:function(){return this.popupWidth>=500&&this.popupHeight>=500},bg:function(){return""===this.backgroundColor\|\|"none"===this.backgroundColor?"transparent":this.backgroundColor}},mounted:function(){var t=this;(function(){var e=uni
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 73 68 6f 77 54 72 61 6e 73 3d 21 31 2c 74 68 69 73 2e 24 65 6d 69 74 28 22 63 68 61 6e 67 65 22 2c 7b 73 68 6f 77 3a 21 31 2c 74 79 70 65 3a 74 68 69 73 2e 74 79 70 65 7d 29 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 72 29 2c 74 68 69 73 2e 74 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 73 68 6f 77 50 6f 70 75 70 3d 21 31 7d 29 2c 33 30 30 29 7d 2c 74 6f 75 63 68 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6c 65 61 72 50 72 6f 70 61 67 61 74 69 6f 6e 3d 21 31 7d 2c 6f 6e 54 61 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6c 65 61 72 50 72 6f 70 61 67 61 74 69 6f 6e 3f 74 68 69 73 Data Ascii: ion(t){var e=this;this.showTrans=!1,this.$emit("change",{show:!1,type:this.type}),clearTimeout(this.timer),this.timer=setTimeout((function(){e.showPopup=!1}),300)},touchstart:function(){this.clearPropagation=!1},onTap:function(){this.clearPropagation?this
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 70 6f 70 75 70 73 74 79 6c 65 3d 22 72 69 67 68 74 22 2c 74 68 69 73 2e 61 6e 69 3d 5b 22 73 6c 69 64 65 2d 72 69 67 68 74 22 5d 2c 74 68 69 73 2e 74 72 61 6e 73 43 6c 61 73 73 3d 7b 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 62 6f 74 74 6f 6d 3a 30 2c 72 69 67 68 74 3a 30 2c 74 6f 70 3a 30 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 74 68 69 73 2e 62 67 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 22 63 6f 6c 75 6d 6e 22 7d 2c 74 7c 7c 28 74 68 69 73 2e 73 68 6f 77 50 6f 70 75 70 3d 21 30 2c 74 68 69 73 2e 73 68 6f 77 54 72 61 6e 73 3d 21 30 29 7d 7d 7d 3b 65 2e 64 65 66 61 75 6c 74 3d 61 7d 2c 32 39 30 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 Data Ascii: function(t){this.popupstyle="right",this.ani=["slide-right"],this.transClass={position:"fixed",bottom:0,right:0,top:0,backgroundColor:this.bg,display:"flex",flexDirection:"column"},t\|\|(this.showPopup=!0,this.showTrans=!0)}}};e.default=a},2909:function(t,e
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 5b 69 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 6f 6e 3a 7b 74 6f 75 63 68 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3d 65 3d 74 2e 24 68 61 6e 64 6c 65 45 76 65 6e 74 28 65 29 2c 74 2e 74 6f 75 63 68 73 74 61 72 74 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 5b 74 2e 6d 61 73 6b 53 68 6f 77 3f 69 28 22 75 6e 69 2d 74 72 61 6e 73 69 74 69 6f 6e 22 2c 7b 6b 65 79 3a 22 31 22 2c 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 6d 61 73 6b 22 2c 22 6d 6f 64 65 2d 63 6c 61 73 73 22 3a 22 66 61 64 65 22 2c 73 74 79 6c 65 73 3a 74 2e 6d 61 73 6b 43 6c 61 73 73 2c 64 75 72 61 74 69 6f 6e 3a 74 2e 64 75 72 61 74 69 6f 6e 2c 73 68 6f 77 3a 74 2e 73 68 6f 77 54 72 61 6e 73 7d 2c 6f 6e Data Ascii: [i("v-uni-view",{on:{touchstart:function(e){arguments[0]=e=t.$handleEvent(e),t.touchstart.apply(void 0,arguments)}}},[t.maskShow?i("uni-transition",{key:"1",attrs:{name:"mask","mode-class":"fade",styles:t.maskClass,duration:t.duration,show:t.showTrans},on
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 3b 76 61 72 20 6e 3d 69 28 22 62 38 37 63 22 29 2c 6f 3d 69 2e 6e 28 6e 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 29 5b 22 64 65 66 61 75 6c 74 22 5d 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 2e 64 28 65 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 74 5d 7d 29 29 7d 28 61 29 3b 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 6f 2e 61 7d 2c 22 38 61 61 38 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 6e 3d 69 28 22 32 34 66 62 22 29 3b 65 3d 6e 28 21 31 29 2c 65 2e 70 75 73 68 28 5b 74 2e 69 2c 27 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 5c 72 5c 6e 2f 2a 2a Data Ascii: function(t,e,i){"use strict";i.r(e);var n=i("b87c"),o=i.n(n);for(var a in n)["default"].indexOf(a)<0&&function(t){i.d(e,t,(function(){return n[t]}))}(a);e["default"]=o.a},"8aa8":function(t,e,i){var n=i("24fb");e=n(!1),e.push([t.i,'@charset "UTF-8";\r\n/**
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 37 31 36 35 5d 2c 20 2e 75 6e 69 2d 70 6f 70 75 70 2e 6c 65 66 74 5b 64 61 74 61 2d 76 2d 37 39 31 37 37 31 36 35 5d 2c 20 2e 75 6e 69 2d 70 6f 70 75 70 2e 72 69 67 68 74 5b 64 61 74 61 2d 76 2d 37 39 31 37 37 31 36 35 5d 7b 74 6f 70 3a 76 61 72 28 2d 2d 77 69 6e 64 6f 77 2d 74 6f 70 29 7d 2e 75 6e 69 2d 70 6f 70 75 70 20 2e 75 6e 69 2d 70 6f 70 75 70 5f 5f 77 72 61 70 70 65 72 5b 64 61 74 61 2d 76 2d 37 39 31 37 37 31 36 35 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 5c 72 5c 6e 20 20 2f 2a 20 69 70 68 6f 6e 65 78 20 e7 ad 89 e5 ae 89 e5 85 a8 e5 8c ba e8 ae be e7 bd ae ef bc 8c e5 ba 95 e9 83 a8 e5 ae 89 e5 85 a8 e5 8c ba e9 80 82 e9 85 8d 20 2a 2f 7d 2e 75 6e 69 2d 70 6f 70 75 70 20 2e 75 6e 69 2d Data Ascii: 7165], .uni-popup.left[data-v-79177165], .uni-popup.right[data-v-79177165]{top:var(--window-top)}.uni-popup .uni-popup__wrapper[data-v-79177165]{display:block;position:relative\r\n /* iphonex */}.uni-popup .uni-
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 3a 22 22 7d 7d 2c 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 69 73 53 68 6f 77 3a 21 31 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 22 2c 6f 70 61 63 69 74 79 3a 31 2c 61 6e 69 6d 61 74 69 6f 6e 44 61 74 61 3a 7b 7d 2c 64 75 72 61 74 69 6f 6e 54 69 6d 65 3a 33 30 30 2c 63 6f 6e 66 69 67 3a 7b 7d 7d 7d 2c 77 61 74 63 68 3a 7b 73 68 6f 77 3a 7b 68 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3f 74 68 69 73 2e 6f 70 65 6e 28 29 3a 74 68 69 73 2e 69 73 53 68 6f 77 26 26 74 68 69 73 2e 63 6c 6f 73 65 28 29 7d 2c 69 6d 6d 65 64 69 61 74 65 3a 21 30 7d 7d 2c 63 6f 6d 70 75 74 65 64 3a 7b 73 74 79 6c 65 73 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 28 30 2c 73 Data Ascii: :""}},data:function(){return{isShow:!1,transform:"",opacity:1,animationData:{},durationTime:300,config:{}}},watch:{show:{handler:function(t){t?this.open():this.isShow&&this.close()},immediate:!0}},computed:{stylesObject:function(){var t=(0,s.default)((0,s
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 61 6e 73 66 6f 72 6d 3d 22 22 2c 74 68 69 73 2e 69 73 53 68 6f 77 3d 21 30 3b 76 61 72 20 65 3d 74 68 69 73 2e 73 74 79 6c 65 49 6e 69 74 28 21 31 29 2c 69 3d 65 2e 6f 70 61 63 69 74 79 2c 6e 3d 65 2e 74 72 61 6e 73 66 6f 72 6d 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 69 26 26 28 74 68 69 73 2e 6f 70 61 63 69 74 79 3d 69 29 2c 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 3d 6e 2c 74 68 69 73 2e 24 6e 65 78 74 54 69 63 6b 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 74 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 61 6e 69 6d 61 74 69 6f 6e 3d 28 30 2c 72 2e 63 72 65 61 74 65 41 6e 69 6d 61 74 69 6f 6e 29 28 74 2e 63 6f 6e 66 69 67 2c 74 29 2c 74 2e 74 72 61 6e 66 72 6f 6d 49 6e 69 74 28 21 Data Ascii: ansform="",this.isShow=!0;var e=this.styleInit(!1),i=e.opacity,n=e.transform;"undefined"!==typeof i&&(this.opacity=i),this.transform=n,this.$nextTick((function(){t.timer=setTimeout((function(){t.animation=(0,r.createAnimation)(t.config,t),t.tranfromInit(!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49774	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:52 UTC	648	OUT	GET /static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab.ed0a5c28.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:52 UTC	886	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 67061AA0E2619A3036EB7770 Last-Modified: Tue, 20 Aug 2024 09:33:00 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8466350487063375608 x-oss-storage-class: Standard Content-MD5: l9mCe1ogEKv59PLPZBpUbQ== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6894 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oeftw3aADJeqFONGvfYhKVIkgtTF2I6NgVhNLOMH%2BrZ%2FDzloBwlwLylkpz4tJ2BiQJgpE2xmhwenMugkeMwvLHgaUWBpRCzGvkqn9kBskgBzWjXlY%2B%2B2ui9AtY%2BXPA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088985bf8c47f-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:52 UTC	483	IN	Data Raw: 37 63 33 61 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 61 70 70 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 7e 70 61 67 65 73 2d 61 63 7e 63 62 35 32 33 37 61 62 22 5d 2c 7b 22 30 36 33 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 2c 6e 2e 64 28 74 2c Data Ascii: 7c3a(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab"],{"0633":function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 43 6c 61 73 73 3a 22 75 2d 6e 6f 74 69 63 65 2d 62 61 72 2d 77 72 61 70 22 2c 73 74 79 6c 65 3a 7b 62 6f 72 64 65 72 52 61 64 69 75 73 3a 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 2b 22 72 70 78 22 7d 7d 2c 5b 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 65 2e 6d 6f 64 65 26 26 65 2e 69 73 43 69 72 63 75 6c 61 72 3f 5b 6e 28 22 75 2d 72 6f 77 2d 6e 6f 74 69 63 65 22 2c 7b 61 74 74 72 73 3a 7b 74 79 70 65 3a 65 2e 74 79 70 65 2c 63 6f 6c 6f 72 3a 65 2e 63 6f 6c 6f 72 2c 62 67 43 6f 6c 6f 72 3a 65 2e 62 67 43 6f 6c 6f 72 2c 6c 69 73 74 3a 65 2e 6c 69 73 74 2c 76 6f 6c 75 6d 65 49 63 6f 6e 3a 65 2e 76 6f 6c 75 6d 65 49 63 6f 6e 2c 6d 6f 72 65 49 63 6f 6e 3a 65 2e 6d 6f 72 65 49 63 6f 6e 2c 76 6f 6c 75 6d 65 53 69 7a 65 3a 65 2e 76 6f 6c 75 6d 65 53 69 7a 65 2c Data Ascii: Class:"u-notice-bar-wrap",style:{borderRadius:e.borderRadius+"rpx"}},["horizontal"==e.mode&&e.isCircular?[n("u-row-notice",{attrs:{type:e.type,color:e.color,bgColor:e.bgColor,list:e.list,volumeIcon:e.volumeIcon,moreIcon:e.moreIcon,volumeSize:e.volumeSize,
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 22 66 31 39 38 22 29 2c 69 3d 6e 2e 6e 28 6f 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6f 29 5b 22 64 65 66 61 75 6c 74 22 5d 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 64 28 74 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 7d 29 29 7d 28 61 29 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 69 2e 61 7d 2c 32 32 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 22 32 34 66 62 22 29 3b 74 3d 6f 28 21 31 29 2c 74 2e 70 75 73 68 28 5b 65 2e 69 2c 27 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 5c 72 5c 6e 2f 2a 2a 5c 72 5c 6e 20 Data Ascii: ction(e,t,n){"use strict";n.r(t);var o=n("f198"),i=n.n(o);for(var a in o)["default"].indexOf(a)<0&&function(e){n.d(t,e,(function(){return o[e]}))}(a);t["default"]=i.a},2242:function(e,t,n){var o=n("24fb");t=o(!1),t.push([e.i,'@charset "UTF-8";\r\n/**\r\n
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 25 3f 31 38 3f 25 20 25 3f 32 34 3f 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 75 2d 64 69 72 65 63 74 69 6f 6e 2d 72 6f 77 5b 64 61 74 61 2d 76 2d 31 66 34 38 66 62 31 61 5d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 75 2d 6c 65 66 74 2d 69 63 6f 6e 5b 64 61 74 61 2d 76 2d 31 66 34 38 66 62 31 61 5d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 75 2d 6e 6f 74 69 63 65 2d 62 6f 78 5b 64 61 74 61 2d 76 2d 31 66 Data Ascii: dding:%?18?% %?24?%;overflow:hidden}.u-direction-row[data-v-1f48fb1a]{display:flex;flex-direction:row;align-items:center;justify-content:space-between}.u-left-icon[data-v-1f48fb1a]{display:flex;flex-direction:row;align-items:center}.u-notice-box[data-v-1f
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 69 6e 67 5d 2c 64 65 66 61 75 6c 74 3a 22 69 6e 68 65 72 69 74 22 7d 2c 62 6f 6c 64 3a 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 2c 64 65 66 61 75 6c 74 3a 21 31 7d 2c 69 6e 64 65 78 3a 7b 74 79 70 65 3a 5b 4e 75 6d 62 65 72 2c 53 74 72 69 6e 67 5d 2c 64 65 66 61 75 6c 74 3a 22 22 7d 2c 68 6f 76 65 72 43 6c 61 73 73 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 6c 74 3a 22 22 7d 2c 63 75 73 74 6f 6d 50 72 65 66 69 78 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 6c 74 3a 22 75 69 63 6f 6e 22 7d 2c 6c 61 62 65 6c 3a 7b 74 79 70 65 3a 5b 53 74 72 69 6e 67 2c 4e 75 6d 62 65 72 5d 2c 64 65 66 61 75 6c 74 3a 22 22 7d 2c 6c 61 62 65 6c 50 6f 73 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 6c 74 3a 22 72 69 67 68 74 22 7d 2c 6c 61 Data Ascii: ing],default:"inherit"},bold:{type:Boolean,default:!1},index:{type:[Number,String],default:""},hoverClass:{type:String,default:""},customPrefix:{type:String,default:"uicon"},label:{type:[String,Number],default:""},labelPos:{type:String,default:"right"},la
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 7a 65 29 2c 66 6f 6e 74 57 65 69 67 68 74 3a 74 68 69 73 2e 62 6f 6c 64 3f 22 62 6f 6c 64 22 3a 22 6e 6f 72 6d 61 6c 22 2c 74 6f 70 3a 74 68 69 73 2e 24 75 2e 61 64 64 55 6e 69 74 28 74 68 69 73 2e 74 6f 70 29 7d 2c 74 68 69 73 2e 73 68 6f 77 44 65 63 69 6d 61 6c 49 63 6f 6e 26 26 74 68 69 73 2e 69 6e 61 63 74 69 76 65 43 6f 6c 6f 72 26 26 21 74 68 69 73 2e 24 75 2e 63 6f 6e 66 69 67 2e 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 69 6e 61 63 74 69 76 65 43 6f 6c 6f 72 29 3f 65 2e 63 6f 6c 6f 72 3d 74 68 69 73 2e 69 6e 61 63 74 69 76 65 43 6f 6c 6f 72 3a 74 68 69 73 2e 63 6f 6c 6f 72 26 26 21 74 68 69 73 2e 24 75 2e 63 6f 6e 66 69 67 2e 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 63 6f 6c 6f 72 29 26 26 28 65 2e 63 6f 6c 6f 72 3d Data Ascii: ze),fontWeight:this.bold?"bold":"normal",top:this.$u.addUnit(this.top)},this.showDecimalIcon&&this.inactiveColor&&!this.$u.config.type.includes(this.inactiveColor)?e.color=this.inactiveColor:this.color&&!this.$u.config.type.includes(this.color)&&(e.color=
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 74 3b 69 28 22 33 35 38 62 36 39 66 61 22 2c 6f 2c 21 30 2c 7b 73 6f 75 72 63 65 4d 61 70 3a 21 31 2c 73 68 61 64 6f 77 4d 6f 64 65 3a 21 31 7d 29 7d 2c 34 33 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 22 37 61 38 32 22 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 2c 6e 28 22 61 39 65 33 22 29 3b 76 61 72 20 6f 3d 7b 70 72 6f 70 73 3a 7b 6c 69 73 74 3a 7b 74 79 70 65 3a 41 72 72 61 79 2c 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 5d 7d 7d 2c 74 79 70 65 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 Data Ascii: t;i("358b69fa",o,!0,{sourceMap:!1,shadowMode:!1})},4332:function(e,t,n){"use strict";n("7a82"),Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0,n("a9e3");var o={props:{list:{type:Array,default:function(){return[]}},type:{type:String,defau
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 24 65 6d 69 74 28 22 63 6c 69 63 6b 22 2c 65 29 7d 2c 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 65 6d 69 74 28 22 63 6c 6f 73 65 22 29 7d 2c 67 65 74 4d 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 65 6d 69 74 28 22 67 65 74 4d 6f 72 65 22 29 7d 2c 63 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 65 74 61 69 6c 2e 63 75 72 72 65 6e 74 3b 74 3d 3d 74 68 69 73 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 2d 31 26 26 74 68 69 73 2e 24 65 6d 69 74 28 22 65 6e 64 22 29 7d 7d 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 6f 7d 2c 22 34 61 38 32 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 22 63 33 30 34 22 29 Data Ascii: $emit("click",e)},close:function(){this.$emit("close")},getMore:function(){this.$emit("getMore")},change:function(e){var t=e.detail.current;t==this.list.length-1&&this.$emit("end")}}};t.default=o},"4a82":function(e,t,n){"use strict";n.r(t);var o=n("c304")
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 74 72 69 6e 67 5d 2c 64 65 66 61 75 6c 74 3a 22 31 38 72 70 78 20 32 34 72 70 78 22 7d 2c 6e 6f 4c 69 73 74 48 69 64 64 65 6e 3a 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 2c 64 65 66 61 75 6c 74 3a 21 30 7d 7d 2c 63 6f 6d 70 75 74 65 64 3a 7b 69 73 53 68 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 21 3d 74 68 69 73 2e 73 68 6f 77 26 26 28 31 21 3d 74 68 69 73 2e 6e 6f 4c 69 73 74 48 69 64 64 65 6e 7c 7c 30 21 3d 74 68 69 73 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 29 7d 7d 2c 6d 65 74 68 6f 64 73 3a 7b 63 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 24 65 6d 69 74 28 22 63 6c 69 63 6b 22 2c 65 29 7d 2c 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 65 6d 69 74 28 22 63 6c 6f 73 65 22 29 7d 2c 67 65 Data Ascii: tring],default:"18rpx 24rpx"},noListHidden:{type:Boolean,default:!0}},computed:{isShow:function(){return 0!=this.show&&(1!=this.noListHidden\|\|0!=this.list.length)}},methods:{click:function(e){this.$emit("click",e)},close:function(){this.$emit("close")},ge
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 2c 38 35 38 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 22 34 33 33 32 22 29 2c 69 3d 6e 2e 6e 28 6f 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6f 29 5b 22 64 65 66 61 75 6c 74 22 5d 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 64 28 74 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 7d 29 29 7d 28 61 29 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 69 2e 61 7d 2c 22 38 66 65 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 22 62 31 32 64 22 29 2c 69 3d 6e 28 22 31 64 39 30 22 29 3b 66 6f 72 28 76 61 72 Data Ascii: ,8583:function(e,t,n){"use strict";n.r(t);var o=n("4332"),i=n.n(o);for(var a in o)["default"].indexOf(a)<0&&function(e){n.d(t,e,(function(){return o[e]}))}(a);t["default"]=i.a},"8fe3":function(e,t,n){"use strict";n.r(t);var o=n("b12d"),i=n("1d90");for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49773	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:52 UTC	630	OUT	GET /static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new.16acf52e.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:52 UTC	884	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C471377C0F42393100E297 Last-Modified: Tue, 20 Aug 2024 09:33:00 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8778536173228367285 x-oss-storage-class: Standard Content-MD5: Es1EdJ7klT72ZAqQTjpx1Q== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kVqo9E2mku0NjOyD0oI%2FIEiNkodDhpkcbqIz8wFO8IWgJw%2BvC89%2BHsIpbDnRA1F1hJirIk1cN6UoBLdncFk%2BhrW6fIoyrnWZDbGQwvM1EohkFDyLPDQ9QRwpteGALw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088985cf94263-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:52 UTC	485	IN	Data Raw: 37 63 33 64 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 61 70 70 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 22 5d 2c 7b 22 30 32 33 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 45 49 41 41 41 42 43 43 41 59 41 41 41 44 6a Data Ascii: 7c3d(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new"],{"0230":function(t,e){t.exports="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEIAAABCCAYAAADj
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 6d 46 73 70 67 61 76 5a 30 61 30 2f 64 7a 42 58 6e 5a 4b 66 42 4b 71 67 6c 38 42 34 42 68 59 41 78 6c 51 72 39 67 4c 59 77 4f 41 4f 63 59 2b 41 42 4d 66 2f 57 52 62 66 4c 38 6b 67 50 31 39 39 43 70 33 76 41 36 50 63 71 49 71 51 31 63 58 75 4c 35 4e 51 41 39 52 49 53 78 59 42 42 7a 66 46 76 42 49 58 58 63 2f 70 6f 42 4a 73 5a 68 67 48 63 79 65 64 73 62 70 39 47 2f 65 67 71 55 48 67 46 43 52 4e 38 72 38 56 63 42 4e 42 64 41 76 38 6a 6d 35 4b 62 46 6e 63 56 4f 77 34 39 79 6a 2b 71 59 33 72 41 46 55 6f 63 50 33 74 49 4a 37 37 6d 33 65 6f 41 6c 71 51 49 78 64 68 4f 58 6c 64 2f 71 4c 77 58 6f 65 32 41 4d 73 4b 4f 6e 4e 2b 52 73 50 49 45 46 44 68 44 52 37 77 4f 4b 6f 49 31 39 2f 6b 48 62 52 39 36 50 44 79 2b 6b 7a 72 51 59 6b 68 6f 51 58 7a 37 41 56 62 37 50 50 Data Ascii: mFspgavZ0a0/dzBXnZKfBKqgl8B4BhYAxlQr9gLYwOAOcY+ABMf/WRbfL8kgP199Cp3vA6PcqIqQ1cXuL5NQA9RISxYBBzfFvBIXXc/poBJsZhgHcyedsbp9G/egqUHgFCRN8r8VcBNBdAv8jm5KbFncVOw49yj+qY3rAFUocP3tIJ77m3eoAlqQIxdhOXld/qLwXoe2AMsKOnN+RsPIEFDhDR7wOKoI19/kHbR96PDy+kzrQYkhoQXz7AVb7PP
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 73 69 4a 67 54 52 51 4a 62 43 47 74 68 33 50 77 6c 77 71 67 68 37 76 4a 62 57 68 6e 7a 47 34 45 32 4e 5a 66 4b 42 61 4c 44 55 4f 44 45 68 33 4f 39 71 6c 53 41 75 50 73 4e 2f 77 4c 37 47 47 52 45 4d 73 6b 48 4d 46 44 69 41 52 75 2f 43 48 7a 68 4d 34 54 7a 56 34 41 6e 33 6d 49 63 4f 57 66 6c 72 31 31 4f 6c 65 6a 70 36 5a 58 2b 53 67 6a 6a 4b 34 6b 67 41 50 4d 61 47 4f 30 52 45 48 4b 6d 6c 70 6c 6f 30 63 57 50 35 74 48 67 56 49 41 59 73 34 73 37 6d 62 6b 30 56 71 37 73 54 70 43 42 36 70 75 42 7a 5a 4e 44 4b 6f 74 46 4c 2f 6f 6a 63 4f 53 63 45 69 37 58 38 43 6a 4a 6c 30 41 4a 55 67 7a 73 51 39 67 79 56 61 52 44 6c 41 6e 41 33 48 6f 4a 67 69 32 75 4d 63 38 68 68 69 4b 42 53 49 62 73 5a 43 42 37 63 72 34 58 72 4c 32 72 76 37 79 71 78 75 68 66 63 4b 63 76 67 4d Data Ascii: siJgTRQJbCGth3Pwlwqgh7vJbWhnzG4E2NZfKBaLDUODEh3O9qlSAuPsN/wL7GGREMskHMFDiARu/CHzhM4TzV4An3mIcOWflr11Olejp6ZX+SgjjK4kgAPMaGO0REHKmlplo0cWP5tHgVIAYs4s7mbk0Vq7sTpCB6puBzZNDKotFL/ojcOScEi7X8CjJl0AJUgzsQ9gyVaRDlAnA3HoJgi2uMc8hhiKBSIbsZCB7cr4XrL2rv7yqxuhfcKcvgM
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 6a 41 6a 31 68 49 48 76 64 6a 77 64 50 6f 54 4b 68 78 55 46 4d 53 4b 34 34 43 59 75 75 35 6e 6c 49 7a 38 42 67 71 6b 58 68 71 4b 52 4b 71 4a 5a 59 76 45 39 30 68 32 71 31 48 4b 70 62 61 69 65 59 4a 73 4e 6b 45 70 4d 51 37 30 4b 55 75 54 50 48 57 32 6f 78 76 66 4a 36 6c 43 75 44 55 58 68 51 41 43 34 61 54 32 50 4b 43 33 42 49 51 59 50 69 43 37 59 4c 61 57 57 67 4e 6c 70 45 33 31 75 71 66 50 66 69 49 30 57 46 77 72 65 4a 70 4d 36 6f 4b 71 45 71 56 4c 52 61 68 4a 49 64 72 76 66 53 64 56 58 56 2f 66 43 51 32 43 4e 62 66 6d 4c 66 42 2b 41 58 52 41 76 69 4a 68 53 5a 74 50 61 46 74 50 49 63 61 75 42 30 69 58 50 62 4e 62 34 61 74 6c 6b 68 58 56 49 2b 77 6a 4c 51 5a 6e 72 42 4b 76 4b 2b 6f 52 76 58 46 33 65 69 36 38 46 47 44 44 57 63 5a 33 76 59 51 4d 78 4f 36 38 Data Ascii: jAj1hIHvdjwdPoTKhxUFMSK44CYuu5nlIz8BgqkXhqKRKqJZYvE90h2q1HKpbaieYJsNkEpMQ70KUuTPHW2oxvfJ6lCuDUXhQAC4aT2PKC3BIQYPiC7YLaWWgNlpE31uqfPfiI0WFwreJpM6oKqEqVLRahJIdrvfSdVXV/fCQ2CNbfmLfB+AXRAviJhSZtPaFtPIcauB0iXPbNb4atlkhXVI+wjLQZnrBKvK+oRvXF3ei68FGDDWcZ3vYQMxO68
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 65 2e 67 74 61 67 3d 6e 3b 76 61 72 20 69 3d 6e 3b 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 69 7d 2c 22 30 63 63 33 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 61 28 22 62 30 61 63 22 29 2c 69 3d 61 2e 6e 28 6e 29 3b 69 2e 61 7d 2c 31 33 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 74 2e 65 78 70 6f 72 74 73 3d 61 2e 70 2b 22 73 74 61 74 69 63 2f 69 6d 67 2f 6c 6f 67 6f 2e 39 35 65 30 63 34 38 61 2e 70 6e 67 22 7d 2c 22 31 38 35 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 Data Ascii: indow.dataLayer.push(arguments)};e.gtag=n;var i=n;e["default"]=i},"0cc3":function(t,e,a){"use strict";var n=a("b0ac"),i=a.n(n);i.a},1311:function(t,e,a){t.exports=a.p+"static/img/logo.95e0c48a.png"},"185a":function(t,e){t.exports="data:image/png;base64,iV
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 73 75 63 63 65 73 73 6f 6b 2e 62 74 6e 22 29 29 29 5d 29 2c 6e 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 74 65 78 74 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 73 75 63 63 65 73 73 6f 6b 2e 76 61 6c 75 65 22 29 29 29 5d 29 5d 2c 31 29 5d 2c 31 29 2c 6e 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6c 69 73 74 73 2d 62 6f 78 22 7d 2c 5b 6e 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6c 69 73 74 73 5f 74 6f 70 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 6f 6e 6c 69 6e 65 2e 73 74 65 70 Data Ascii: "},[t._v(t._s(t.$t("active.successok.btn")))]),n("v-uni-view",{staticClass:"text"},[t._v(t._s(t.$t("active.successok.value")))])],1)],1),n("v-uni-view",{staticClass:"lists-box"},[n("v-uni-view",{staticClass:"lists_top"},[t._v(t._s(t.$t("active.online.step
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 2b 36 61 41 4f 68 46 76 4f 43 49 38 76 6c 34 50 4a 6f 58 59 75 72 33 73 6b 2f 58 6e 45 2b 61 57 42 75 70 76 4f 43 54 6d 70 2b 39 73 39 50 54 76 6f 4c 59 31 62 61 2f 74 63 61 6a 72 4f 5a 6a 4e 47 73 72 5a 37 4f 48 31 71 36 4f 4e 54 4e 51 48 33 51 73 42 2f 34 61 43 46 67 76 39 38 2f 6e 42 44 79 57 36 6c 77 70 64 69 35 58 78 52 59 61 38 52 68 6c 33 57 61 61 47 63 63 37 45 38 49 54 4e 6d 76 33 76 4b 66 4e 50 75 71 6a 77 2b 2b 41 2f 37 71 79 4c 50 44 66 79 38 6f 4f 37 47 56 77 2f 6d 41 36 55 7a 6e 4c 58 62 5a 43 42 61 51 32 49 47 4f 4e 78 73 75 61 5a 37 57 71 78 39 4f 6c 67 30 73 35 7a 57 4e 30 64 6e 54 33 30 2f 6c 36 67 4c 2b 2b 30 4f 59 2b 30 66 6b 74 72 58 75 5a 52 78 72 43 74 4c 52 55 51 4e 68 4b 6a 52 43 50 70 43 70 42 77 62 4b 55 55 4c 64 6a 6f 35 36 46 Data Ascii: +6aAOhFvOCI8vl4PJoXYur3sk/XnE+aWBupvOCTmp+9s9PTvoLY1ba/tcajrOZjNGsrZ7OH1q6ONTNQH3QsB/4aCFgv98/nBDyW6lwpdi5XxRYa8Rhl3WaaGcc7E8ITNmv3vKfNPuqjw++A/7qyLPDfy8oO7GVw/mA6UznLXbZCBaQ2IGONxsuaZ7Wqx9Olg0s5zWN0dnT30/l6gL++0OY+0fktrXuZRxrCtLRUQNhKjRCPpCpBwbKUULdjo56F
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 48 6a 55 53 5a 2b 62 78 32 75 31 36 7a 2f 47 33 79 38 66 33 48 53 6c 41 57 78 39 37 31 59 31 75 4f 66 31 54 4e 65 6f 71 38 51 56 39 69 45 2f 4d 31 49 4d 71 62 43 61 6b 78 2b 63 49 74 34 36 69 42 69 2f 43 74 70 5a 77 7a 65 4f 34 74 49 55 7a 58 74 41 4e 42 42 4f 6e 46 38 6a 5a 7a 42 52 32 65 51 59 39 76 68 45 39 55 45 48 53 4f 36 45 7a 41 4d 30 4b 61 41 64 72 51 31 77 31 67 70 55 74 5a 50 6d 39 75 43 51 6c 66 74 45 56 75 4f 62 64 69 44 71 47 69 79 33 5a 76 45 4f 6e 36 39 45 6a 51 34 36 56 39 74 33 5a 72 66 4e 76 6a 74 35 39 2b 37 31 64 52 64 39 2f 79 58 36 71 2b 55 58 52 46 74 48 42 72 2f 65 64 4b 68 51 4c 57 6a 41 74 52 37 49 30 52 37 6a 4b 59 46 76 72 63 54 5a 45 4a 41 48 6e 6b 4a 34 52 70 44 52 49 73 4f 5a 30 52 50 75 4b 37 6c 34 75 37 30 44 79 4e 47 54 Data Ascii: HjUSZ+bx2u16z/G3y8f3HSlAWx971Y1uOf1TNeoq8QV9iE/M1IMqbCakx+cIt46iBi/CtpZwzeO4tIUzXtANBBOnF8jZzBR2eQY9vhE9UEHSO6EzAM0KaAdrQ1w1gpUtZPm9uCQlftEVuObdiDqGiy3ZvEOn69EjQ46V9t3ZrfNvjt59+71dRd9/yX6q+UXRFtHBr/edKhQLWjAtR7I0R7jKYFvrcTZEJAHnkJ4RpDRIsOZ0RPuK7l4u70DyNGT
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 64 53 71 67 62 6e 30 41 38 66 66 46 4c 31 33 37 31 34 66 32 79 37 6f 5a 36 34 63 44 59 4c 67 37 35 31 78 31 39 69 44 79 32 57 56 4c 46 4c 32 71 6e 72 49 74 69 6f 4f 74 75 49 4b 42 2f 44 46 5a 57 6f 64 73 72 6b 57 74 70 45 53 62 64 31 4a 36 5a 7a 64 53 4b 6e 50 6a 31 4b 51 50 77 48 35 67 31 31 49 2f 32 34 66 6d 55 54 68 61 6f 73 49 4a 64 43 62 6f 44 35 44 6b 65 79 72 53 39 69 6a 6c 75 53 42 47 72 4c 56 45 46 52 47 30 58 6f 59 47 65 74 78 4c 6f 30 4f 35 48 75 71 62 34 6a 65 64 66 76 39 50 35 69 65 33 43 31 58 36 31 5a 6b 72 78 43 6c 50 32 4b 50 31 39 66 6e 64 38 35 54 76 71 78 4f 74 44 4f 41 46 56 57 6f 36 72 77 44 57 4d 47 37 43 4b 45 71 6a 44 6c 66 36 6d 43 71 6e 61 4b 77 34 72 4e 65 53 72 54 70 33 46 4e 44 64 62 56 51 46 7a 65 4c 38 39 4e 52 58 6b 5a 57 Data Ascii: dSqgbn0A8ffFL13714f2y7oZ64cDYLg751x19iDy2WVLFL2qnrItioOtuIKB/DFZWodsrkWtpESbd1J6ZzdSKnPj1KQPwH5g11I/24fmUThaosIJdCboD5DkeyrS9ijluSBGrLVEFRG0XoYGetxLo0O5Huqb4jedfv9P5ie3C1X61ZkrxClP2KP19fnd85TvqxOtDOAFVWo6rwDWMG7CKEqjDlf6mCqnaKw4rNeSrTp3FNDdbVQFzeL89NRXkZW
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 34 62 35 48 4f 43 6e 6b 71 44 55 74 49 63 65 56 6d 57 75 72 39 51 7a 66 59 6c 39 72 47 56 66 6a 4f 31 6a 4a 51 37 6c 48 36 7a 51 37 67 7a 52 53 4c 56 44 61 6b 66 59 6a 4b 48 79 77 7a 69 2f 4b 4d 55 7a 36 6e 38 75 46 61 34 42 61 4d 5a 54 69 6e 4d 4e 30 65 52 38 6b 43 75 4e 6f 52 48 7a 4f 66 4d 70 38 78 74 36 61 64 4c 52 2b 35 35 36 72 6b 67 6e 78 66 30 47 59 39 4e 6c 4e 32 63 4e 5a 70 2f 72 45 34 32 66 74 2f 4e 4e 54 66 6d 78 7a 4e 74 46 7a 4c 30 57 49 66 77 6a 4a 78 77 61 34 59 61 74 30 68 6f 45 4f 57 58 4b 61 2b 67 67 72 4b 43 6e 73 4b 43 63 53 64 4b 32 44 76 47 63 70 6d 49 56 39 77 73 39 39 67 37 31 4d 32 52 74 4c 38 69 58 33 72 41 6a 39 54 50 65 7a 33 76 30 37 78 6e 37 72 42 30 30 32 38 4d 6c 4f 72 4a 62 74 74 75 58 2b 76 53 66 4a 64 55 62 57 39 57 64 Data Ascii: 4b5HOCnkqDUtIceVmWur9QzfYl9rGVfjO1jJQ7lH6zQ7gzRSLVDakfYjKHywzi/KMUz6n8uFa4BaMZTinMN0eR8kCuNoRHzOfMp8xt6adLR+556rkgnxf0GY9NlN2cNZp/rE42ft/NNTfmxzNtFzL0WIfwjJxwa4Yat0hoEOWXKa+ggrKCnsKCcSdK2DvGcpmIV9ws99g71M2RtL8iX3rAj9TPez3v07xn7rB0028MlOrJbttuX+vSfJdUbW9Wd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49771	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:52 UTC	558	OUT	GET /static/js/pages-active-active.d55d2611.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:52 UTC	884	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C47E18A05E3637355FD296 Last-Modified: Tue, 20 Aug 2024 09:32:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3992696518855324102 x-oss-storage-class: Standard Content-MD5: cqWWT+SV7imLBmpTuuNPNw== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6319 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MVct%2BC55mq12MTzFzA4eowESDeLT4oVcmE7EbbU7vI9DrL1I%2F6rTFvN5XEhJ%2FJrBA52cCdVkX12a5dmO0g9CjFUGVBD3F0sXKg0negWgtXTdzo7brM4%2F1DNkRow99Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088985b8e431b-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:52 UTC	485	IN	Data Raw: 37 63 33 63 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 22 5d 2c 7b 22 30 32 37 38 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 74 2e 65 78 70 6f 72 74 73 3d 69 2e 70 2b 22 73 74 61 74 69 63 2f 69 6d 67 2f 6e 6f 5f 69 6e 76 65 73 74 6d 65 6e 74 2e 63 30 35 66 62 62 64 37 2e 70 6e 67 22 7d 2c 22 30 37 30 66 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 3b 76 61 72 20 61 3d 69 28 22 31 64 64 66 22 29 2c 6e 3d 69 28 22 66 37 37 39 22 29 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 5b 22 Data Ascii: 7c3c(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active"],{"0278":function(t,e,i){t.exports=i.p+"static/img/no_investment.c05fbbd7.png"},"070f":function(t,e,i){"use strict";i.r(e);var a=i("1ddf"),n=i("f779");for(var o in n)["
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 69 28 22 62 30 32 65 22 29 2c 6e 3d 69 2e 6e 28 61 29 3b 6e 2e 61 7d 2c 31 31 35 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 74 2e 65 78 70 6f 72 74 73 3d 69 2e 70 2b 22 73 74 61 74 69 63 2f 69 6d 67 2f 67 6f 6f 64 5f 74 65 78 74 5f 74 77 6f 2e 62 33 63 38 33 64 32 61 2e 70 6e 67 22 7d 2c 22 31 37 37 62 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 61 3d 69 28 22 34 64 30 32 22 29 3b 61 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 61 3d 61 2e 64 65 66 61 75 6c 74 29 2c 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 61 3d 5b 5b 74 2e 69 2c 61 2c 22 22 5d 5d 29 2c 61 2e 6c 6f 63 61 6c 73 26 26 28 74 2e 65 78 70 6f 72 74 73 3d 61 2e 6c 6f 63 61 Data Ascii: ,i){"use strict";var a=i("b02e"),n=i.n(a);n.a},1150:function(t,e,i){t.exports=i.p+"static/img/good_text_two.b3c83d2a.png"},"177b":function(t,e,i){var a=i("4d02");a.__esModule&&(a=a.default),"string"===typeof a&&(a=[[t.i,a,""]]),a.locals&&(t.exports=a.loca
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 22 76 61 6c 75 65 5f 6f 6e 65 5f 62 6f 78 22 7d 2c 5b 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 74 65 78 74 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 74 75 74 6f 72 69 61 6c 2e 62 6f 74 74 6f 6d 2e 76 61 6c 75 65 2e 31 22 29 29 29 5d 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 74 65 78 74 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 74 75 74 6f 72 69 61 6c 2e 62 6f 74 74 6f 6d 2e 76 61 6c 75 65 2e 32 22 29 29 29 5d 29 5d 2c 31 29 2c 61 28 22 76 2d 75 6e 69 2d 69 6d 61 67 65 22 2c 7b 73 74 61 74 69 63 53 74 79 6c 65 3a 7b 77 69 64 74 68 3a 22 35 30 32 72 70 78 22 2c 68 65 69 67 68 74 3a 22 33 34 30 72 70 78 22 7d 2c 61 74 74 72 73 Data Ascii: "value_one_box"},[a("v-uni-view",{staticClass:"text"},[t._v(t._s(t.$t("tutorial.bottom.value.1")))]),a("v-uni-view",{staticClass:"text"},[t._v(t._s(t.$t("tutorial.bottom.value.2")))])],1),a("v-uni-image",{staticStyle:{width:"502rpx",height:"340rpx"},attrs
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 7b 73 72 63 3a 69 28 22 64 62 30 32 22 29 7d 7d 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 61 64 76 61 6e 74 61 67 65 2d 62 6f 64 79 2d 74 69 74 6c 65 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 61 64 76 61 6e 74 61 67 65 2e 63 6f 6d 6d 69 74 6d 65 6e 74 22 29 29 29 5d 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 61 64 76 61 6e 74 61 67 65 2d 62 6f 64 79 2d 74 65 78 74 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 61 64 76 61 6e 74 61 67 65 2e 63 6f 6d 6d 69 74 6d 65 6e 74 2e 74 65 78 74 22 29 29 29 5d 29 5d 2c 31 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 Data Ascii: {src:i("db02")}}),a("v-uni-view",{staticClass:"advantage-body-title"},[t._v(t._s(t.$t("active.advantage.commitment")))]),a("v-uni-view",{staticClass:"advantage-body-text"},[t._v(t._s(t.$t("active.advantage.commitment.text")))])],1),a("v-uni-view",{staticC
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 22 29 7d 7d 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6e 61 6d 65 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 67 6f 6f 64 2e 74 77 6f 2e 6e 61 6d 65 22 29 29 29 5d 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 67 6f 6f 64 2d 74 65 78 74 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 67 6f 6f 64 2e 74 77 6f 2e 74 65 78 74 22 29 29 29 5d 29 5d 2c 31 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 67 6f 6f 64 2d 74 68 72 65 65 22 7d 2c 5b 61 28 22 76 2d 75 6e 69 2d 69 6d 61 67 65 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 68 65 61 64 22 2c 61 Data Ascii: ")}}),a("v-uni-view",{staticClass:"name"},[t._v(t._s(t.$t("active.good.two.name")))]),a("v-uni-view",{staticClass:"good-text"},[t._v(t._s(t.$t("active.good.two.text")))])],1),a("v-uni-view",{staticClass:"good-three"},[a("v-uni-image",{staticClass:"head",a
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 6f 2e 72 65 67 69 73 74 65 72 2e 72 65 6e 64 61 2e 77 68 61 74 73 61 70 70 22 29 29 29 5d 29 2c 61 28 22 76 2d 75 6e 69 2d 74 65 78 74 22 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 69 6e 76 69 74 61 74 69 6f 6e 2e 74 6f 2e 72 65 67 69 73 74 65 72 2e 72 65 6e 64 61 2e 72 65 6e 64 61 2e 6e 65 77 22 29 29 29 5d 29 5d 2c 31 29 2c 61 28 22 76 75 65 2d 73 65 61 6d 6c 65 73 73 2d 73 63 72 6f 6c 6c 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 72 65 6e 64 61 5f 6d 61 69 6e 5f 6c 69 73 74 22 2c 61 74 74 72 73 3a 7b 64 61 74 61 3a 74 2e 72 65 6e 64 61 4c 69 73 74 2c 22 63 6c 61 73 73 2d 6f 70 74 69 6f 6e 22 3a 74 2e 6f 70 74 69 6f 6e 53 65 74 74 69 6e 67 7d 7d 2c 74 2e 5f 6c 28 74 2e 72 65 6e 64 61 4c 69 73 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 Data Ascii: o.register.renda.whatsapp")))]),a("v-uni-text",[t._v(t._s(t.$t("invitation.to.register.renda.renda.new")))])],1),a("vue-seamless-scroll",{staticClass:"renda_main_list",attrs:{data:t.rendaList,"class-option":t.optionSetting}},t._l(t.rendaList,(function(e,i
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 9a 84 e5 b8 b8 e7 94 a8 e6 a0 b7 e5 bc 8f e5 8f 98 e9 87 8f 5c 72 5c 6e 20 2a 5c 72 5c 6e 20 2a 20 75 6e 69 2d 61 70 70 20 e5 ae 98 e6 96 b9 e6 89 a9 e5 b1 95 e6 8f 92 e4 bb b6 e5 8f 8a e6 8f 92 e4 bb b6 e5 b8 82 e5 9c ba ef bc 88 68 74 74 70 73 3a 2f 2f 65 78 74 2e 64 63 6c 6f 75 64 2e 6e 65 74 2e 63 6e ef bc 89 e4 b8 8a e5 be 88 e5 a4 9a e4 b8 89 e6 96 b9 e6 8f 92 e4 bb b6 e5 9d 87 e4 bd bf e7 94 a8 e4 ba 86 e8 bf 99 e4 ba 9b e6 a0 b7 e5 bc 8f e5 8f 98 e9 87 8f 5c 72 5c 6e 20 2a 20 e5 a6 82 e6 9e 9c e4 bd a0 e6 98 af e6 8f 92 e4 bb b6 e5 bc 80 e5 8f 91 e8 80 85 ef bc 8c e5 bb ba e8 ae ae e4 bd a0 e4 bd bf e7 94 a8 73 63 73 73 e9 a2 84 e5 a4 84 e7 90 86 ef bc 8c e5 b9 b6 e5 9c a8 e6 8f 92 e4 bb b6 e4 bb a3 e7 a0 81 e4 b8 ad e7 9b b4 e6 8e a5 e4 bd bf e7 Data Ascii: \r\n \r\n uni-app https://ext.dcloud.net.cn\r\n * scss
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 38 2c 2e 34 29 7d 2e 63 6f 6e 74 65 6e 74 20 2e 74 6f 70 62 61 6e 6e 65 72 2d 6c 69 73 74 5b 64 61 74 61 2d 76 2d 63 65 66 32 30 32 38 65 5d 7b 77 69 64 74 68 3a 25 3f 35 38 30 3f 25 3b 68 65 69 67 68 74 3a 25 3f 34 38 3f 25 3b 70 61 64 64 69 6e 67 3a 30 20 25 3f 32 30 3f 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 25 3f 32 34 3f 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 6f 70 3a 25 3f 34 30 3f 25 3b 7a 2d 69 6e 64 65 78 3a 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 25 3f 32 30 3f 25 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 36 2c 32 36 2c 32 38 2c 2e 34 Data Ascii: 8,.4)}.content .topbanner-list[data-v-cef2028e]{width:%?580?%;height:%?48?%;padding:0 %?20?%;font-size:%?24?%;overflow:hidden;position:absolute;color:#fff;top:%?40?%;z-index:2;border-radius:%?20?%;border-top-left-radius:0;background-color:rgba(26,26,28,.4
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 3f 38 30 3f 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 33 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 25 3f 32 34 3f 25 3b 63 6f 6c 6f 72 3a 23 37 63 36 32 35 39 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 63 6f 6e 74 65 6e 74 20 2e 61 63 74 69 76 65 2d 74 6f 70 2d 62 6f 78 20 2e 67 69 66 74 2d 62 6f 78 20 2e 70 72 6f 6d 65 73 73 61 2d 62 6f 78 5b 64 61 74 61 2d 76 2d 63 65 66 32 30 32 38 65 5d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 74 61 72 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 25 3f 36 30 3f 25 3b 66 6f 6e 74 2d Data Ascii: ?80?%;position:absolute;top:30%;font-size:%?24?%;color:#7c6259;font-weight:700}.content .active-top-box .gift-box .promessa-box[data-v-cef2028e]{display:flex;flex-direction:row;align-items:center;justify-content:start;position:absolute;bottom:%?60?%;font-
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 3f 37 30 3f 25 20 25 3f 34 30 3f 25 20 25 3f 34 30 3f 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 25 3f 32 34 3f 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2b 6c 2b 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 25 3f 34 30 3f 25 7d 2e 63 6f 6e 74 65 6e 74 20 2e 6d 61 69 6e 2d 62 6f 78 5b 64 61 74 61 2d 76 2d 63 65 66 32 30 32 38 65 5d 7b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 25 3f 34 30 3f 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 25 3f 2d 34 30 3f 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: ?70?% %?40?% %?40?%;font-size:%?24?%;background-image:url("+l+");background-size:100% 100%;background-repeat:no-repeat;border-radius:%?40?%}.content .main-box[data-v-cef2028e]{width:100%;border-radius:%?40?%;position:relative;top:%?-40?%;background-color:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49770	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:52 UTC	621	OUT	GET /static/images/common/icon_state_selected.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:52 UTC	908	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:52 GMT Content-Type: image/png Content-Length: 6707 Connection: close x-oss-request-id: 666D324D81BDAB3636D6C5E4 ETag: "AE83FA2525A1F48BA4DE503330A9EB42" Last-Modified: Mon, 20 May 2024 05:15:02 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4525457612215618941 x-oss-storage-class: Standard Content-MD5: roP6JSWh9Iuk3lAzMKnrQg== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6904 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jk91YpQbwi6PRoILES0yAJL0iEiKFpcQVhwjwY0NQyv%2BRzaX3XT5Q2D%2B3%2BCBdwd4fdO01xn2FshaULdssR1wgyfqYr8bZyiVNVEseDxofJxXFSPdv%2BG%2F41Wmbxr0MA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088985d69de93-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:52 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 19 ed 49 44 41 54 78 5e ed 5d 0b b8 55 55 b5 fe c7 da 07 34 33 ae 96 86 e0 a3 34 6f 48 2f 41 20 3b 7b 6d fc b0 ab 66 3e 6e 5a 8a d7 14 05 f6 da 1c c9 f2 de 1e f4 b0 ba e8 d5 ea 96 99 65 50 71 f6 da 90 52 56 9a 85 15 58 3e 6e 04 7b 6d a2 24 af 88 3d b0 87 05 e9 05 7b 78 7d 25 70 ce 1a f7 9b e7 c0 85 e4 1c d6 5c 6b cd f5 da 7b cc ef e3 03 be 33 e6 78 fc 73 fd 67 ac b9 e6 9c 63 12 a4 09 02 82 c0 b0 08 90 60 23 08 08 02 c3 23 20 04 91 a7 43 10 d8 07 02 42 10 79 3c 04 01 21 88 3c 03 82 40 34 04 24 83 44 c3 2d 5c af 1b a6 1d 84 03 fb 26 a0 44 87 a0 bf ff 50 10 1d 0a c2 21 60 3a 14 f0 d5 ff 0f 01 e3 50 60 e0 cf 33 00 3f Data Ascii: PNGIHDRXsRGBIDATx^]UU434oH/A ;{mf>nZePqRVX>n{m$={x}%p\k{3xsgc`## CBy<!<@4$D-\&DP!`:P`3?
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 29 7c 5e 81 91 b4 18 97 7a 7f 08 d3 b5 d3 64 85 20 43 8d b8 db fd 62 50 69 16 98 15 39 5e dd c6 0f c5 5f c0 bc 04 a5 d2 62 cc 5e fd f3 36 8e 33 72 68 42 90 3d a1 bb c9 3e 0a db 79 36 40 b3 40 38 2a 32 aa c5 eb b8 1d c0 12 f4 d3 12 f4 34 d7 16 cf fd e4 3c 16 82 28 6c 17 4f 7d 15 fa fb 67 83 48 65 8c 17 27 07 77 01 34 33 be 0a f2 97 c0 59 73 6f 01 bc 4d dc c5 ce 26 88 5b 7e 19 40 1f 02 a0 88 31 32 71 b4 8b 65 e0 0e 58 d6 0d 98 bd fa 47 c5 72 db ac b7 9d 4b 90 7a f9 62 10 5d 0d e0 18 b3 90 b6 95 36 1f a0 f9 70 9a d7 b6 55 54 21 82 e9 3c 82 2c 9a 3a 06 25 be 1a e0 5a 08 9c 3a 5d f4 6e 10 cf 47 b5 b5 a6 d3 80 e8 2c 82 34 ec e9 00 ae 06 e3 b8 4e 1b 68 03 f1 3e 07 f0 7c 38 ad 4f 19 d0 55 18 15 9d 41 10 f5 d9 16 96 7a 9d 7a 67 61 46 26 b7 8e d2 72 30 e6 a3 d6 5c Data Ascii: )\|^zd CbPi9^_b^63rhB=>y6@@8*24<(lO}gHe'w43YsoM&[~@12qeXGrKzb]6pUT!<,:%Z:]nG,4Nh>\|8OUAzzgaF&r0\
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: d3 af 01 5a 80 4d 5d 0b 71 f5 ca be 48 1a dc ca 42 80 df 11 a9 6f 70 a7 47 d0 6f 95 d1 93 cf 2b e5 f2 49 10 b5 77 c8 ef ff e9 c0 67 4f f3 ed 49 58 56 77 a4 6a e6 f5 ca 24 10 2f 02 30 c9 bc 5b 09 6b 1c b8 aa cd 7a 2f 6a 4d f5 c1 23 7c 73 2b 5f 4b 6e e5 9d 3e 9a d7 ea 8d f9 24 88 6b ab f3 e4 ea 5c b9 e9 d6 0f c2 5b 51 f5 be 13 5a 71 bd fc 46 10 a9 55 fc 24 48 1b da 9d 48 1d 18 7f 03 e1 0a 38 9e 1b ba ff c0 95 10 d6 8a 84 be ca fd 1e cf ed 98 84 77 e6 ef b8 6e fe 08 f2 e5 f2 2b d0 47 2a 7b 98 df 9e 4d 98 8b aa a7 16 1c c3 35 77 ea 39 80 5f 98 d5 df e0 e0 e8 53 70 9a 1f 08 96 7b 9e 44 6f 77 19 96 f5 03 00 07 86 ee 1b d8 81 3f 90 c7 aa 8d f9 23 48 52 9f 75 19 5f 42 cd 53 5f 9b c2 35 d7 be 14 c0 97 c3 75 2a 84 f4 b7 e0 78 6f 0b ed 69 c3 be 0c 8c 2f 86 ee 17 d8 Data Ascii: ZM]qHBopGo+IwgOIXVwj$/0[kz/jM#\|s+_Kn>$k\[QZqFU$HH8wn+G{M5w9_Sp{Dow?#HRu_BS_5uxoi/
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: 27 1c ef 0c ad e8 93 78 bd 0a f3 7a a7 e5 64 4c a1 ba 7d 01 08 a6 ab 16 ea bf 66 d5 ed 8f 81 70 65 cc 28 76 75 df 8e 51 63 0f 08 b5 23 db 90 61 a5 26 4b 82 fc 11 c0 58 43 b1 5c 09 c7 fb 84 96 2e d7 56 c5 a1 4d be 5e 79 70 bc ac ae 81 1b 3e e4 24 ee 8b df d1 7f 34 e6 6a 14 a3 33 7d 56 c4 b2 26 61 f6 ea 9f 69 8d af 61 a1 6c 08 52 9f 76 04 68 87 b9 9b 9a 74 37 d7 d5 6d b5 0a 6d f6 4a 03 b5 0b 20 4a 95 14 c3 03 b9 97 ba c1 d2 49 6a 2b ba b9 ab b1 7d cc c5 1c 8d a2 17 83 45 ff b6 01 28 19 09 d3 a2 d9 98 dd 5c 62 44 57 48 25 d9 10 64 71 e5 2c f8 fc dd 90 be 0e 2f ee 78 7a 71 b8 e5 85 00 19 2c 80 96 f3 ab c5 5c 5b ad b6 7f de 18 ce a0 65 70 9a 7a f7 88 18 ad ed 9b dd ed 54 7a 0f 96 39 84 07 35 99 ad 9a b8 11 8e 37 4e cb 45 b3 af 57 7f 02 a1 82 aa a7 b6 ca e4 b7 Data Ascii: 'xzdL}fpe(vuQc#a&KXC\.VM^yp>$4j3}V&aialRvht7mmJ JIj+}E(\bDWH%dq,/xzq,\[epzTz957NEW
2024-10-13 15:58:52 UTC	1369	IN	Data Raw: db 64 c3 a7 f8 a1 40 ba b9 fc 52 ec a0 3a 18 3a 65 2d 57 83 68 26 aa cd df c6 c2 7b f0 36 26 55 6e 28 7e f3 69 1c e6 34 d5 95 11 d1 9b ee 75 ce 4c 0f c2 47 0d 3d cd b5 d1 8d ed ec a9 fb e5 ce a4 cd 98 4e e7 83 20 2a 08 b7 3c 03 a0 d3 01 9e 08 d0 9e 6b 24 eb 01 dc 0f c6 6a d4 3c 13 9f 29 77 43 36 68 f3 e2 61 6e b3 bd 0b e0 af c0 69 2d 8d 89 f1 60 77 93 e5 86 4c dd 9d d1 db 5d 86 65 5d b2 73 0d 66 22 08 5d 3b 63 7d 04 44 f7 0d 94 11 35 5d ca 68 f8 b5 9f c7 c0 f8 31 c0 eb 8d db 8c 31 80 f9 21 c8 9e 41 2c 99 76 10 fa fa 26 c0 ff db fd e8 59 17 bc 8d 24 06 00 03 5d d5 e4 f9 d9 be c3 80 ae d1 b0 f8 31 6c a3 ad b1 e6 1a 43 f9 63 f2 98 71 12 af 1e f3 a7 75 e1 a8 1d 13 30 d2 fa 63 aa 57 0e a8 dd 03 a0 1d 91 e6 36 71 c7 5d a3 7f 3e 09 a2 e1 78 e1 44 f2 4e 90 c2 01 Data Ascii: d@R::e-Wh&{6&Un(~i4uLG=N *<k$j<)wC6hani-`wL]e]sf"];c}D5]h11!A,v&Y$]1lCcqu0cW6q]>xDN
2024-10-13 15:58:52 UTC	770	IN	Data Raw: 81 8c 08 f2 04 1c ef 60 23 c8 b8 e5 f7 03 f4 c9 60 5d b4 0c 4e f3 dc 60 39 0d 09 99 ac 6b 80 d4 26 22 19 11 64 c8 a2 c0 91 20 d5 9d 87 68 5c ad a5 6d 5f ee 67 d4 86 aa f0 82 19 11 44 32 48 e1 9f 9c 0e 09 20 23 82 00 32 07 e9 90 27 ac e0 61 66 46 10 90 7c c5 2a f8 b3 d3 11 ee 67 48 90 f8 eb 20 bd dd 65 58 96 17 62 a0 64 1d 24 04 58 22 9a 7d 75 f7 78 0f 6c 94 af 49 b2 92 2e cf 7d 18 04 b2 cb 20 3b bd 8c ba 17 ab 51 7e 17 98 6e 0c 13 eb 4e 59 d9 8b 15 01 b4 8e ed 92 39 41 a2 ec e6 75 ed 0f 01 f8 78 e4 41 8b b2 9b b7 5e be 05 44 17 46 b6 29 1d 8b 89 40 e6 04 d9 0d 5b f0 79 90 7a f9 3c 80 ae 01 e1 38 03 68 eb 9d 07 a9 db f3 40 b8 06 c0 7e 06 6c 8a 8a a2 21 90 23 82 28 e8 b2 3f 51 d8 67 f1 e0 29 46 6b 0a c0 53 00 9c 56 b4 31 15 7f 0d 22 90 33 82 18 8c 4c 54 09 Data Ascii: `#`]N`9k&"d h\m_gD2H #2'afF\|*gH eXbd$X"}uxlI.} ;Q~nNY9AuxA^DF)@[yz<8h@~l!#(?Qg)FkSV1"3LT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49772	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:52 UTC	615	OUT	GET /static/images/common/icon_tutorial.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:52 UTC	901	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:52 GMT Content-Type: image/png Content-Length: 580 Connection: close x-oss-request-id: 666D324DCB36F930377B1A97 ETag: "7427E0A7A90B982D0D7EDB662054C40C" Last-Modified: Mon, 20 May 2024 05:15:02 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4084357108615782039 x-oss-storage-class: Standard Content-MD5: dCfgp6kLmC0NfttmIFTEDA== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2341 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xukki8psqaJTqrBk7uYRG4OovM0sKnHYcLQ4mjJcCKwRoI0injLkuQvkOgkgisNJxnxe4hn5k%2BEWJQhe6co3lRLgCeE1s82AMCJyRuP7DSNrr0U6%2FEwx3Bltked10Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d20889878a84387-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:52 UTC	468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 03 00 00 00 f3 37 75 51 00 00 00 db 50 4c 54 45 00 00 00 9a 9d ad 9a 9d ae 9a 9d ae 99 9d ae 99 9d ad 99 9c ad 9a 9d ae 9a 9c ae 99 9c ad 99 9d ae 9a 9d ae 9a 9d ae 9a 9d ae 9a 9d ad 99 9c ad 99 9c ad 99 9c ae 99 9c ad 99 9d ae 9a 9d ae 9a 9d ad 80 80 ff aa aa aa 9a 9d ae ff ff ff 9a 9c ae 9d 9d b1 99 9d ab 9a 9d ae 9a 9a ad 9a 9d ae 9a 9c ae 96 96 a5 99 9e ae 9a 9b ae 99 9d ad 9a 9c ad 80 80 80 bf bf bf 95 9c b1 92 92 b6 9a 9c ae 99 99 ac 8b a2 a2 99 9c ad 95 95 aa 99 99 a6 99 9c ac 98 98 ae 92 92 a4 98 9c ae 99 9c ac 99 99 ad 94 9c ad 97 9b af 99 9c ae 99 99 a8 9d 9d b1 99 99 aa 9a 9d af 95 9b ae 9a 9c ad 99 9c ae 9a 9a ac 9a 9d ae 96 9b af 9c 9c aa 99 9c ad 9a 9e ae 97 9c af 9a Data Ascii: PNGIHDR7uQPLTE
2024-10-13 15:58:52 UTC	112	IN	Data Raw: f5 c8 25 06 c4 3a 0d 96 db e0 a2 5e f6 81 13 0e d2 da ee 7e 13 62 36 72 80 6e 12 26 95 73 80 4a 92 06 f9 4d a1 36 d5 0a 61 66 78 03 80 8a 12 62 18 ee 79 92 a1 1f 62 b2 14 7e 32 e9 88 86 e6 09 b3 70 b7 6e 72 09 1c 44 63 14 91 85 75 c7 28 46 dc cc d7 5c c3 22 7d 4c 1c 18 35 3f ec ec 0e b1 d5 32 4c 24 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: %:^~b6rn&sJM6afxbyb~2pnrDcu(F\"}L5?2L$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49755	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:52 UTC	707	OUT	OPTIONS /api/v1/h5/version?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Origin: https://h5.g7or.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:52 UTC	549	IN	HTTP/1.1 204 No Content Date: Sun, 13 Oct 2024 15:58:52 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: * Vary: Access-Control-Request-Method, Access-Control-Request-Headers Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Access-Control-Max-Age: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49775	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:52 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:52 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: b009cb16-301e-0051-17aa-1b38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155852Z-17db6f7c8cfgqlr45m385mnngs00000003ng00000000a2xz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:52 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49776	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:52 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 1f04dcaf-901e-00ac-4307-1cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155852Z-17db6f7c8cf6qp7g7r97wxgbqc00000004fg0000000055pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49780	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:53 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:53 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155853Z-17db6f7c8cfhzb2znbk0zyvf6n00000004vg000000003c1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:53 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49778	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:53 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9dc98f41-601e-0097-4647-1cf33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155853Z-17db6f7c8cfqxt4wrzg7st2fm800000005ag000000000etp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49779	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:53 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 6ec52d65-901e-0083-299c-1bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155853Z-17db6f7c8cfgqlr45m385mnngs00000003m000000000dbhd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49777	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 37 68 62 59 38 32 55 74 37 55 79 43 31 55 56 43 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 62 35 63 35 62 37 33 32 36 34 64 62 63 32 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 7hbY82Ut7UyC1UVC.1Context: 2b5c5b73264dbc24
2024-10-13 15:58:53 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-13 15:58:53 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 37 68 62 59 38 32 55 74 37 55 79 43 31 55 56 43 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 62 35 63 35 62 37 33 32 36 34 64 62 63 32 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 67 44 48 4c 7a 61 69 43 76 54 6a 6b 63 61 57 46 6e 4b 67 32 75 44 50 38 6f 6f 69 55 34 7a 71 47 4c 41 39 76 68 76 61 45 7a 73 74 49 57 73 2f 43 32 64 6d 33 68 30 69 58 4a 54 54 71 36 6c 45 6e 67 52 64 6e 78 79 50 72 76 4d 39 4d 37 4b 65 6c 65 56 59 4e 79 58 52 5a 75 4c 35 76 5a 43 42 74 6e 66 72 37 37 2f 59 47 57 62 6f 6b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 7hbY82Ut7UyC1UVC.2Context: 2b5c5b73264dbc24<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZgDHLzaiCvTjkcaWFnKg2uDP8ooiU4zqGLA9vhvaEzstIWs/C2dm3h0iXJTTq6lEngRdnxyPrvM9M7KeleVYNyXRZuL5vZCBtnfr77/YGWbok
2024-10-13 15:58:53 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 37 68 62 59 38 32 55 74 37 55 79 43 31 55 56 43 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 62 35 63 35 62 37 33 32 36 34 64 62 63 32 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 7hbY82Ut7UyC1UVC.3Context: 2b5c5b73264dbc24<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-13 15:58:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-13 15:58:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 58 6b 7a 70 6a 73 45 58 32 6b 65 38 57 48 4a 73 51 44 4b 70 62 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: XkzpjsEX2ke8WHJsQDKpbw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49797	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 0a475807-001e-00a2-0116-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155854Z-17db6f7c8cf9wwz8ehu7c5p33g00000002dg000000005qfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49786	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	613	OUT	GET /static/images/common/icon_invite.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:54 UTC	904	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:54 GMT Content-Type: image/png Content-Length: 667 Connection: close x-oss-request-id: 666D31CB81BDAB34345910E0 ETag: "96C29F5BF4139617BE6F27AE20B2D299" Last-Modified: Mon, 20 May 2024 05:14:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 15225301273166933759 x-oss-storage-class: Standard Content-MD5: lsKfW/QTlhe+byeuILLSmQ== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2337 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tAflUpq38GTCT12aKnJO6vcxwSnq0wFOJKX9lMF2kNRKM%2BslosGnNPr7WvR4YvRL%2FcvzameIu8dL3yoOqZ2Amz1rOWfjMnzOEA7xy5U6s9c806YgsIxrtpD9l%2B1ZKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088a5fc2d431a-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:54 UTC	465	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 03 00 00 00 f3 37 75 51 00 00 01 02 50 4c 54 45 00 00 00 9a 9d ae 99 9d ae 9a 9d ae 9a 9d ae 9a 9d ae 9a 9d ae 9a 9d ae 9a 9c ae 9a 9c ae 9a 9d ae ff ff ff aa aa aa 9a 9e ad 99 99 b3 9a 9c ae 98 9c ad 9b 9e ae 9a 9d ae 9a 9d ae 96 9e ad 9a 9c ad 99 9e ae 9a 9f ae 9a 9e ae 9a 9d ad 9b 9b ae 9a 9c ad 99 9e af 9a 9c af 9b 9b ad 9a 9f ad 99 a2 aa 99 9d ad 9b 9e ad 99 9c af 98 9e af 9a 9d ae 9c 9c ad 99 9c ac 95 9b ae 80 80 bf 9f 9f bf 99 9c ad 9e 9e a7 99 9d ae 98 9c ad 99 99 99 99 9e ac 8b a2 b9 99 9d ad 92 92 a4 8e 8e aa 98 9c aa 99 99 b3 97 9c aa 92 a4 a4 99 99 ad 90 9b a6 99 aa bb 96 9d b1 92 92 b6 9a 9c af 9c a1 b1 99 99 a6 9b 9b ad 9f 9f 9f 98 9d a8 99 a3 ad 95 9e b0 97 97 ae 9f Data Ascii: PNGIHDR7uQPLTE
2024-10-13 15:58:54 UTC	202	IN	Data Raw: 5a 4d 92 ed 82 b1 8c 4e 12 2d 2b 49 5e 0b 58 d7 eb d7 07 15 68 18 35 42 ee 2d cc fa 81 8d 20 d2 b7 4f 52 96 11 0f e7 f5 37 13 32 bb 7b 9e 7b e4 3c ef ca 53 5a b9 0a fa 06 64 a3 f8 a3 44 87 9a 65 6d 67 9d d1 4f 99 df 03 f1 2f 0d 44 98 d5 53 e2 3c da 95 29 74 37 28 16 7f 15 10 97 0a 9c b1 63 12 fc 4b 9b 20 63 87 90 12 a3 a1 59 6f 8c 5d 84 1d 0e 90 4b 8d fe a1 4a 86 48 c3 33 f0 dd b0 53 06 64 4a 0f d2 40 f5 c6 10 db ee ba 67 c8 81 f3 e2 1a 70 50 8c bd 43 04 40 cd 9d 3b 25 40 bd 0e 69 9a 8b 7b b9 b7 43 91 23 df f7 f9 7d df 5b b6 f6 e4 06 62 02 b3 da 12 21 5f e6 5a 14 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ZMN-+I^Xh5B- OR72{{<SZdDemgO/DS<)t7(cK cYo]KJH3SdJ@gpPC@;%@i{C#}[b!_ZIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49785	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	609	OUT	GET /static/images/common/icon_me.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:54 UTC	899	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:54 GMT Content-Type: image/png Content-Length: 633 Connection: close x-oss-request-id: 668DCED943F9F83730FD7C1C ETag: "A989B6777314B48946C9EA85957C102A" Last-Modified: Tue, 09 Jul 2024 07:12:10 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9903885363814163686 x-oss-storage-class: Standard Content-MD5: qYm2d3MUtIlGyeqFlXwQKg== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4524 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D9eHi1ph6DpKyFkO7%2FvSYsMeqEk70QcGy3MpxhKxaGhIIjjh2hO3xzvrqZL0aCZXYJ0qVXaaMQj3XDiGMNF5wixntChvIotYVX5pmIwDeznktzBMpGJLmDQXe02z8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088a64ee1727d-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:54 UTC	470	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 03 00 00 00 f3 37 75 51 00 00 00 de 50 4c 54 45 00 00 00 9a 9d ae 9a 9d ae 99 9d ae 99 9c ae 9a 9d ae 99 9d ad 9a 9c ad 99 9c ae 99 9d ad 99 9d ae 9a 9d ad 9b 9d ae 9a 9d ae 99 9c ae 98 9b ae 99 9c ad 99 9d ae 98 9d ae 99 9c ae 9a 9d ae 9a 9d ae 9a 9d ae 80 80 80 9a 9d ae 9a 9d ad 98 98 ac 99 9d ad 9a 9d ad 9f 9f 9f 99 9d ad 8e 8e aa aa aa aa 99 9c ad 99 9c ac 96 96 a5 99 9d ae 98 9b ad 94 94 ae 95 9f aa 99 99 b3 99 9b ae 98 9c ac 9a 9c ad 99 99 ac aa aa aa 9a 9b ae 9b 9d ae 9a 9c ae 99 9c ae 92 92 b6 89 9d 9d 99 9d ad 99 9d ae 9b 9b ad 97 97 aa 7f aa aa 9f 9f af 99 9d ad 90 9b a6 96 9b ab 98 9b ac 95 9e b0 98 9d ad 97 a2 ae 9b 9f b0 9a 9b ad 9b 9e ae 9a 9d ae 9a 9f ad 99 9d ae 99 Data Ascii: PNGIHDR7uQPLTE
2024-10-13 15:58:54 UTC	163	IN	Data Raw: 6e 86 be 60 7a 11 bf e4 c2 ae 8a 63 af 75 98 13 ba 4e 4c e8 17 a2 20 64 a0 42 ed 84 1d 9a 03 59 b4 0d 87 bd 9b b3 39 13 c5 83 0d f8 8b 66 d2 54 7c 20 ba 3a 88 c7 14 d9 f7 b4 c0 e9 f3 25 d4 f7 bd f8 b5 b0 b8 e5 c7 ce df 90 b2 47 bc 3e c5 4f 4f 68 5d 0d 91 df 17 a4 a1 d5 96 c6 b9 f9 80 b9 5b 9f 2c ac e5 41 49 8c 74 f7 b3 06 ee 8e 04 21 01 0c 9a 4a 91 72 6d a0 d0 b4 f1 5a 32 5f b0 69 fa 68 94 4c 03 3e cd 30 58 95 cc 2a 30 c9 1f 80 28 10 c2 9c a5 a3 bb 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: n`zcuNL dBY9fT\| :%G>OOh][,AIt!JrmZ2_ihL>0X*0(IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49787	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	613	OUT	GET /static/images/team/activity_icon.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:54 UTC	906	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:54 GMT Content-Type: image/png Content-Length: 2053 Connection: close x-oss-request-id: 666D324D4005843232CFDA2C ETag: "19056E8DCEC69218C3CB0C675C093794" Last-Modified: Mon, 20 May 2024 05:15:34 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8580686725633497525 x-oss-storage-class: Standard Content-MD5: GQVujc7GkhjDywxnXAk3lA== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2542 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LeywqTrtxvVhKToXtDaAzC9jB3CEXPyB6BEyI3%2B1bnCNGCoQz84H%2Fi7hd5chDsNZLx20502ZEjChssp7BFtZMf35Ws%2Bjg2IEkhYBauhpmX60qolBk%2Fi6vTC6LANjBw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088a64e1341d9-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:54 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 03 00 00 00 9a 86 5e ac 00 00 01 98 50 4c 54 45 00 00 00 9a 9d ae 9a 9e ae 99 9b ad 97 9b ab 9b 9b b1 9a 9d ad 9a 9d af 9a 9d ae 9b 9d ae 9a 9d ae 9a 9d ad 9b 9e ae 9a 9d ae 9b 9d ae 9a 9e ae 9a 9e ae 9b 9f b0 9c 9c aa 9a 9d ae 9a 9d ae 9a 9d ae 9a 9d ae 99 9d ae 9b 9d af 9a 9d ae 9b 9d ae 99 9d ae 9a 9d ae 9a 9c ad 9a 9d af 9a 9a af 9a 9e ae 9a 9c ad 9a 9d ae 9b 9e af 9a 9d ae 9a 9d ad 9a 9d ae 9a 9d af 9a 9d ae 9e 9e aa 9a 9e ae 92 92 b6 99 9d ad 9a 9c ae 99 9d ad 9b 9c ae 98 9d ae 9b 9d ae 9b 9e b0 9b 9b af 9a 9c ae 9b 9d ae 9a 9e ae 9c 9f b0 9a 9d ae 9b 9d af 9a 9e af 9a 9d ae 9a 9d ae 99 9d ab 99 9c ae 9b 9c ac a2 a2 ae 9a 9d ae 9b 9b ad 99 a3 ad 9a 9c ad 9a 9e ae 99 9f b0 9a Data Ascii: PNGIHDR^PLTE
2024-10-13 15:58:54 UTC	1369	IN	Data Raw: bf 80 40 17 60 9f f0 c6 b1 c4 aa a1 75 d4 4c 4a 12 d6 f7 ec 8e 5b e5 d3 dd 8a f4 6a b8 30 ca b5 f1 b2 bd 9c c2 cf a4 15 e3 07 99 62 8c 84 2f bc 57 33 58 6f 9d 4d a7 8b 89 b6 72 46 55 4a 16 65 1c 19 d1 90 2d df cc 44 7d 78 6b 6e d8 09 7b 51 5f db 1b 0f 29 e8 59 03 36 28 0a 24 a8 14 3c 6e 22 76 3b 56 42 4e 53 25 4f 89 1e 61 20 3c 48 2c 37 59 06 a5 52 62 9a 96 86 18 95 13 1d 0d 0c 32 14 99 69 37 34 31 89 88 fc 95 00 00 05 94 49 44 41 54 78 9c ed 9d f5 7b d4 4a 14 86 93 6e bb 75 d9 ba 3b 55 a8 41 1d 28 50 a4 d4 70 77 77 f7 eb 7e ff ed bb 2d 97 a7 e4 cc 9c e4 64 26 4f 93 85 ef fd 91 9d f3 cd bc 2d 91 99 4d 3a 0e 00 00 00 00 be 6b 1e bd 4f d5 ef 28 6b 6f 2f db 51 9f 9a 18 1b 8e 2a 76 78 6c 62 2b f7 fd a3 a8 62 f5 14 4c cf 76 d6 ba 5e 9a 4b 56 ee 57 db c5 fe b1 Data Ascii: @`uLJ[j0b/W3XoMrFUJe-D}xkn{Q_)Y6($<n"v;VBNS%Oa <H,7YRb2i741IDATx{Jnu;UA(Ppww~-d&O-M:kO(ko/Q*vxlb+bLv^KVW
2024-10-13 15:58:54 UTC	221	IN	Data Raw: 20 02 11 2f 10 a1 40 04 22 5e 20 42 81 08 44 bc 40 84 02 11 88 78 81 08 05 22 10 f1 02 11 4a 54 22 82 0d 43 b4 cc 52 91 59 d3 a4 88 44 12 87 54 24 e1 fb a8 b8 6e 97 50 24 f1 6f 83 07 6e 3e f2 3f ca be 90 49 23 68 af cc 2f bc 89 7b a0 41 bc 11 8a 08 b6 cf 8b 97 43 42 91 a4 bf ac 2b 7d 55 37 f1 1b aa b0 1b a8 a8 a8 fb de 25 88 19 b9 87 d3 e1 b3 c5 59 dc 14 75 84 10 71 9e c5 3d 5c 9e 67 61 3c 12 fc 67 06 42 ef ed 98 af dd b5 38 6e 1a 0d ee c4 5f e9 b7 c0 8b 95 f2 57 e1 3d b2 bc 2c 1f 8a 7b e4 5f 33 54 fe d2 48 63 93 8e 74 4b 97 ed 2e 24 35 43 43 35 b6 3b 8f 74 b5 a4 43 9d ac 00 00 00 00 90 db fc 07 d7 3b a1 67 cb 57 59 f8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: /@"^ BD@x"JT"CRYDT$nP$on>?I#h/{ACB+}U7%Yuq=\ga<gB8n_W=,{_3THctK.$5CC5;tC;gWYIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49784	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	1057	OUT	POST /api/v1/h5/version?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Security-Policy: upgrade-insecure-requests Device-Type: windows Language: en Authorization: Bearer X User-Language: en Sdk-Version: 0.0.0 Request-Time: 1728835130325 Device-Id: 0290d5b2-0a42-4e89-882f-f80b3eb11bff X-Sign: 17609047d0a353b55ffd8cfd95f016d2 Network-Type: unknown sec-ch-ua-platform: "Windows" Anonymous-Uid: 1728835130325HsPXFAEeW5D21Ftrqgmlb5whaIYvMxPd Wgt-Version: 0.0.0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Device-Model: PC Sdk-Type: h5 version: 5.0.3 Accept: / Origin: https://h5.g7or.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:54 UTC	2	OUT	Data Raw: 7b 7d Data Ascii: {}
2024-10-13 15:58:54 UTC	201	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:54 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:54 UTC	76	IN	Data Raw: 34 36 0d 0a 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 63 6f 64 65 22 3a 32 30 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 7b 22 68 35 22 3a 22 35 2e 30 2e 33 22 2c 22 61 70 70 22 3a 22 35 2e 30 2e 33 22 7d 7d 0d 0a Data Ascii: 46{"status":1,"code":200,"msg":"ok","data":{"h5":"5.0.3","app":"5.0.3"}}
2024-10-13 15:58:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49795	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155854Z-17db6f7c8cfnqpbkckdefmqa44000000050g00000000dx3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49792	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:54 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a0484e99-b01e-00ab-3354-1cdafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155854Z-17db6f7c8cfpm9w8b1ybgtytds00000002yg00000000dfsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:54 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49804	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	581	OUT	GET /static/fonts/Axis_extrabold.ee4dbb45.otf HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://h5.g7or.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:55 UTC	900	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: font/otf Content-Length: 24532 Connection: close x-oss-request-id: 66FF9CA458A49D3430F41281 ETag: "EE4DBB451D934F8C1805DA54D7223F04" Last-Modified: Tue, 20 Aug 2024 09:31:05 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6944689029579758694 x-oss-storage-class: Standard Content-MD5: 7k27RR2TT4wYBdpU1yI/BA== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6805 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L3vORz783lSMvv9iU4O77V5Sh0VZQDNBmGJPgMv8lw98ZDgxXGV9k4ovBleBWjIMHijA6YyEf3Qo6uFaC5dVJAUJKvdeeA53dLtuvjQJFmILfC0RTqAMzg%2B7bBPnJA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088a9e91378d9-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:55 UTC	469	IN	Data Raw: 4f 54 54 4f 00 0b 00 80 00 03 00 30 43 46 46 20 7b 6e 13 c4 00 00 10 2c 00 00 3c 48 47 50 4f 53 9b 81 91 c3 00 00 4c 74 00 00 0d 76 47 53 55 42 bf 1e b8 75 00 00 59 ec 00 00 05 e6 4f 53 2f 32 6a 49 8e 24 00 00 06 c0 00 00 00 60 63 6d 61 70 30 d9 5a 55 00 00 0a 2c 00 00 05 e0 68 65 61 64 07 a0 92 e0 00 00 00 c4 00 00 00 36 68 68 65 61 07 6a 05 14 00 00 06 9c 00 00 00 24 68 6d 74 78 c4 bc 3b d0 00 00 00 fc 00 00 05 a0 6d 61 78 70 01 68 50 00 00 00 00 bc 00 00 00 06 6e 61 6d 65 bc c8 b0 fc 00 00 07 20 00 00 03 0b 70 6f 73 74 ff b8 00 32 00 00 10 0c 00 00 00 20 00 00 50 00 01 68 00 00 00 01 00 00 00 01 00 00 52 72 cd 45 5f 0f 3c f5 00 03 03 e8 00 00 00 00 d2 85 27 dc 00 00 00 00 d2 85 27 dc fe d6 fe 5c 04 a9 03 ec 00 00 00 03 00 02 00 00 00 00 00 00 03 2e 00 Data Ascii: OTTO0CFF {n,<HGPOSLtvGSUBuYOS/2jI$`cmap0ZU,head6hheaj$hmtx;maxphPname post2 PhRrE_<''\.
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 7e 00 4c 02 7e ff f3 02 7e 00 4c 02 7e 00 4c 02 7e 00 4c 02 7e ff f7 03 dd 00 4c 03 27 00 42 03 27 00 42 03 27 00 42 03 27 00 42 03 3a 00 4c 03 27 00 42 02 fe 00 20 02 fe 00 20 02 fe 00 20 02 fe 00 20 02 fe 00 20 02 fe 00 20 02 fe 00 20 02 fe 00 20 03 32 00 2a 03 32 00 2a 02 fe 00 20 04 94 00 2a 02 b5 00 47 02 a8 00 4c 03 1d 00 2a 02 c3 00 4c 02 c3 00 4c 02 c3 00 4c 02 c3 00 4c 02 98 00 2d 02 98 00 2d 02 9f 00 2d 02 9f 00 2d 02 98 00 2d 02 d0 00 24 02 d0 00 24 02 d0 00 24 02 d0 00 24 02 d0 00 24 02 e4 00 2a 02 e4 00 2a 02 e4 00 2a 02 e4 00 2a 02 e4 00 2a 02 e4 00 2a 02 e4 00 2a 02 e4 00 2a 03 06 00 2a 02 e4 00 2a 03 52 00 22 04 ad 00 26 04 ad 00 26 04 ad 00 26 04 ad 00 26 04 ad 00 26 02 fb 00 24 03 3f 00 2b 03 3f 00 2b 03 3f 00 2b 03 3f 00 2b 03 3f 00 2b Data Ascii: ~L~~L~L~L~L'B'B'B'B:L'B 22 GLLLLL-----$$$$$**********R"&&&&&$?+?+?+?+?+
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 00 12 00 00 00 01 00 00 00 00 00 01 00 04 00 12 00 01 00 00 00 00 00 02 00 0a 00 16 00 01 00 00 00 00 00 03 00 19 00 20 00 01 00 00 00 00 00 04 00 0f 00 39 00 01 00 00 00 00 00 05 00 3c 00 48 00 01 00 00 00 00 00 06 00 0e 00 84 00 01 00 00 00 00 00 08 00 12 00 00 00 01 00 00 00 00 00 09 00 12 00 00 00 01 00 00 00 00 00 0b 00 0b 00 92 00 01 00 00 00 00 00 0c 00 0b 00 92 00 03 00 01 04 09 00 00 00 24 00 9d 00 03 00 01 04 09 00 01 00 1e 00 c1 00 03 00 01 04 09 00 02 00 0e 00 df 00 03 00 01 04 09 00 03 00 32 00 ed 00 03 00 01 04 09 00 04 00 1e 00 c1 00 03 00 01 04 09 00 05 00 78 01 1f 00 03 00 01 04 09 00 06 00 1c 01 97 00 03 00 01 04 09 00 08 00 24 00 9d 00 03 00 01 04 09 00 09 00 24 00 9d 00 03 00 01 04 09 00 0b 00 16 01 b3 00 03 00 01 04 09 00 0c 00 16 01 Data Ascii: 9<H$2x$$
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 19 20 1e 20 22 20 26 20 30 20 3a 20 ac 21 22 21 91 21 93 22 12 22 48 22 60 ff ff 00 00 00 20 00 30 00 3a 00 a1 00 ab 00 b4 00 b6 00 bb 00 bf 00 e0 01 0a 01 1e 01 26 01 2a 01 36 01 39 01 4a 01 5e 01 6a 01 fa 02 18 02 c6 02 d8 03 26 03 bc 1e 80 1e f2 20 13 20 18 20 1c 20 20 20 26 20 30 20 39 20 ac 21 22 21 91 21 93 22 12 22 48 22 60 ff ff 00 00 00 c5 00 00 00 00 00 00 00 a6 00 00 00 62 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe 33 fd 38 00 00 00 00 00 00 e1 0b 00 00 00 00 e0 e0 e1 06 e0 e5 e0 7c e0 2e df b3 df b3 df 20 de e3 de d4 00 01 00 54 00 00 00 70 00 f8 01 08 00 00 01 12 00 00 01 14 01 52 01 a0 01 c2 01 cc 01 ce 01 da 01 dc 01 fa 02 1c 02 2e 02 56 02 60 02 66 02 68 00 00 00 00 02 6e 02 78 02 7a 00 00 Data Ascii: " & 0 : !"!!""H"` 0:&*69J^j& & 0 9 !"!!""H"`b38\|. TpR.V`fhnxz
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 72 6f 61 74 45 62 72 65 76 65 45 63 61 72 6f 6e 45 64 6f 74 61 63 63 65 6e 74 45 6d 61 63 72 6f 6e 45 6f 67 6f 6e 65 6b 47 62 72 65 76 65 47 63 6f 6d 6d 61 61 63 63 65 6e 74 47 64 6f 74 61 63 63 65 6e 74 48 62 61 72 49 62 72 65 76 65 49 64 6f 74 61 63 63 65 6e 74 49 6d 61 63 72 6f 6e 49 6f 67 6f 6e 65 6b 4b 63 6f 6d 6d 61 61 63 63 65 6e 74 4c 61 63 75 74 65 4c 63 61 72 6f 6e 4c 63 6f 6d 6d 61 61 63 63 65 6e 74 4c 64 6f 74 4e 61 63 75 74 65 4e 63 61 72 6f 6e 4e 63 6f 6d 6d 61 61 63 63 65 6e 74 45 6e 67 4f 62 72 65 76 65 4f 68 75 6e 67 61 72 75 6d 6c 61 75 74 4f 6d 61 63 72 6f 6e 4f 73 6c 61 73 68 61 63 75 74 65 52 61 63 75 74 65 52 63 61 72 6f 6e 52 63 6f 6d 6d 61 61 63 63 65 6e 74 53 61 63 75 74 65 53 63 65 64 69 6c 6c 61 53 63 6f 6d 6d 61 61 63 63 65 6e Data Ascii: roatEbreveEcaronEdotaccentEmacronEogonekGbreveGcommaaccentGdotaccentHbarIbreveIdotaccentImacronIogonekKcommaaccentLacuteLcaronLcommaaccentLdotNacuteNcaronNcommaaccentEngObreveOhungarumlautOmacronOslashacuteRacuteRcaronRcommaaccentSacuteScedillaScommaaccen
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 0f 08 1a 08 43 08 4a 08 52 08 76 08 7e 08 85 08 94 08 99 08 9e 08 a2 08 bd 08 c7 08 cf 08 e1 08 fc 09 01 09 05 09 27 09 34 09 3d 09 4b 09 51 09 60 09 73 09 7e 09 83 09 87 09 96 09 9a 09 a1 09 a6 09 bd 09 c2 09 c6 09 d5 09 db 09 df 09 e2 09 e6 09 ed 09 f1 09 f5 0a 05 0a 08 0a 0f 0a 15 0a 1a 0a 1f 0a 2b 0a 36 0a 3a 0a 3e 0a 43 0a 48 0a 4c 0a 50 0a 55 0a 60 0a 6b 0a 72 0a 7c 0a 83 0a 8d 0a 90 0a 94 0a 9d 0a a6 0a ab 0a b0 0a b5 0a ba 0a be 0a c3 0a c8 0a cc 15 2b 1d f7 55 f7 32 f7 32 f7 56 f7 55 fb 32 f7 33 fb 55 1f fb 2d 04 34 0a 34 1d 1f 0e 15 4f 6a 4d 60 37 1b fb 0b 38 ea f7 00 f7 04 de e2 f7 0b e1 ca 62 4d ab ba 0a dc 05 f1 4e fb 06 cf fb 25 1b fb 69 fb 2f fb 32 fb 51 fb 5d f7 2f fb 30 f7 69 f7 24 f7 05 d6 f1 c8 1f 0b 90 1d f9 3c 2e 0a fb a3 f7 1a 41 0a Data Ascii: CJRv~'4=KQ`s~+6:>CHLPU`kr\|+U22VU23U-44OjM`78bMN%i/2Q]/0i$<.A
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 7b 1d f9 40 f9 3c 6f 1d 0b fb 2f fb 0e 2f fb 10 fb 2b f7 47 65 f1 73 0b 59 60 60 56 59 b6 60 bd 0b fb 38 77 0a 0b 3c 0a f8 13 f9 48 20 1d fb 67 f8 3c f7 94 01 ba f8 4b 03 f7 71 f9 3c 68 0a b9 0a 01 f8 cf f7 23 03 f9 5e 37 15 c4 e5 a6 8b 1e 56 f7 0c fb 85 f8 c4 2e 0a b2 2c 05 6e 68 75 64 63 1a 49 ca 58 c4 1e d9 df 05 8a 55 9a b0 1f fc 26 f7 d8 41 0a 33 0a e2 f7 51 ce 0a 8c f7 50 13 00 13 f4 f7 e2 36 1d 13 e8 fb 96 fb a8 25 0a 9e 7f 69 0a 0e f8 06 6f 0a f8 b3 7a 1d f9 59 f8 a4 37 0a dd ff ff 5a a1 48 ff 00 75 cf 5c 3e 1d f7 ec 7a 1d f9 82 ab 0a 77 1d 60 1d 76 0a 8b 97 71 72 79 1e 76 7d 51 a8 8b 1a 6f 20 05 8b f7 19 5f d6 9e 1e ce 9d 96 d2 d3 1a 0e aa 97 1d ff 00 97 80 00 c5 1d f8 0d 8c 0a fb c1 8a 05 fd 3b f7 c1 07 70 0a f7 24 fb 74 8a a3 1d 45 1d f8 29 f9 Data Ascii: {@<o//+GesY``VY`8w<H g<Kq<h#^7V.,nhudcIXU&A3QP6%iozY7ZHu\>zw`vqryv}Qo _;p$tE)
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 9e 7f 8e 0a 0b 7f 15 fb 38 06 fc 2e a8 0a ac 1d 0b fb a9 ce 1d c4 f7 f5 03 f8 2e 0b 7b 77 78 0b f9 3c 05 0b a6 1d f7 84 0b f7 16 c5 0a 0b f7 3a 06 0e f7 2b 01 0b 85 0a f9 40 0b f5 05 f7 70 f7 2b fb 49 06 a1 0b 07 fb 50 f7 16 f7 50 f7 16 05 0b fb 2a fb 2c f7 2a 0b 15 fb 38 06 70 22 05 fb 70 0b 3e 1d f7 de 7a 1d 0b f8 64 01 b1 f8 64 03 f8 1f 0b bb 0a 0e 15 8f 0a 0b f9 05 01 ab f8 12 03 ab 0b fb 33 fb 59 fb 58 f7 3b 0b 1e 13 df 80 0b f7 51 13 00 0b f7 f9 f7 2c 0b 8b f9 3c 01 0b 12 a4 0a 0b 01 b6 f7 3a 0b f7 11 f7 11 0b f8 a4 15 0b 00 00 01 00 22 00 ab 01 87 00 ac 00 ad 00 ae 01 88 01 89 00 af 01 8a 00 b0 00 8a 01 8b 00 23 00 24 01 8c 01 8d 00 b1 01 8e 00 25 00 9a 01 8f 01 90 00 26 00 b2 01 91 01 92 00 b3 00 b4 01 93 00 b5 01 94 01 95 00 27 00 28 01 96 01 97 Data Ascii: 8..{wx<:+@p+IPP,8p"p>zdd3YX;Q,<:"#$%&'(
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: fb 02 fd 02 ff 03 01 03 03 03 05 03 07 03 09 03 0b 03 0d 03 0f 03 77 03 c6 03 ea 04 35 04 82 04 b3 05 12 05 7b 05 9d 06 25 06 90 07 0f 07 53 07 62 07 84 07 a6 07 c4 07 d4 08 08 08 31 08 71 08 c8 08 da 09 2e 09 95 09 97 09 99 09 b1 09 c0 09 d7 09 f5 0a 10 0a 26 0a 40 0a 73 0a ab 0a bf 0a d3 0a d7 0a db 0b 09 0b 23 0b 3f 0b 48 0b 59 0b 5b 0b 5d 0b 5f 0b 61 0b d9 0c 51 0c aa 0d 22 0d 81 0d c9 0e 17 0e 44 0e 60 0e 77 0e 9e 0e b3 0e c5 0e d1 0e da 0f 06 0f 54 0f a2 0f c8 0f d1 10 2a 10 4b 10 64 10 8b 10 a0 10 b2 10 c6 10 d0 10 fb 11 22 11 2b 11 4d 11 77 11 98 11 c3 11 d2 11 f0 12 82 13 17 13 44 13 9e 13 f9 14 a4 14 f4 15 2d 15 4e 15 71 15 a2 15 b1 15 cf 16 63 16 ee 16 ff 17 10 17 22 17 34 17 52 17 64 17 75 17 87 17 98 17 a9 17 bb 17 e7 17 fb 18 18 18 43 d1 8b Data Ascii: w5{%Sb1q.&@s#?HY[]_aQ"D`wT*Kd"+MwD-Nqc"4RduC
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 5f 72 54 53 59 aa cb 1f fb 3a 06 fb 13 ee fb 0c f7 41 f7 46 e3 f4 f7 0a f7 00 38 c9 21 9e 1e f7 3a f7 24 05 0e 58 f7 0d f7 2c 01 f8 02 7a 1d f8 a8 ab 0a 06 fb e4 fc 2b c1 fb 2c 05 f7 ae fb 0d f7 3a f7 0d f7 0d f7 2c fb 0d 06 fb 3a f7 63 15 fb 63 fb 3e 07 0e 23 7f f7 2b f7 6f f7 0f bc f7 2a 12 bc f7 3a fb 26 f7 3a f7 5e f7 39 13 ec f8 c4 8c 0a fc 7f fc 0b f7 26 06 a6 a5 ad a5 c8 1b bf bc 68 3d 3e 4f 6e 59 47 5f be cd 1f 13 f4 fb 3a 06 fb 1a f6 fb 1a f7 3f f7 33 f7 08 e6 f7 3a f7 00 44 f7 14 fb 3a 1e 13 ec 51 60 76 76 6e 1f e6 f7 d9 07 0e fb 17 a2 1d f7 53 f7 1b db f7 27 01 a9 f7 41 f7 5f f7 3b 03 f7 e0 f9 49 15 fb 79 42 fb 59 fb 45 fb 6d f7 10 fb 06 f7 34 f7 22 f7 09 e6 f7 31 f7 2f fb 10 d6 fb 00 34 65 63 70 72 1f d5 9f a8 d4 f0 1b d7 c8 62 81 97 1f d4 f7 Data Ascii: _rTSY:AF8!:$X,z+,:,:cc>#+o*:&:^9&h=>OnYG_:?3:D:Q`vvnS'A_;IyBYEm4"1/4ecprb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49806	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	582	OUT	GET /static/fonts/Archive_regular.a51a0e27.otf HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://h5.g7or.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:55 UTC	909	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: font/otf Content-Length: 47560 Connection: close x-oss-request-id: 670A47707732EB313961FA51 ETag: "A51A0E278C95C61A3A4BF2A46E7407A4" Last-Modified: Tue, 20 Aug 2024 09:31:06 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6504203712604814745 x-oss-storage-class: Standard Content-MD5: pRoOJ4yVxho6S/KkbnQHpA== x-oss-server-time: 12 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 56 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SG1640qItaTaoh6tgWEMJD2kUkA2uGRJIc%2Fu4HqX7Dl5oN4CYdYN0xqVDP4j8Z%2B5tB7xi%2BKrlpAnQ9jWES9TDSAYp3lO8F1RJlt%2F4gWrk1tGqQ2%2B89Tzilcila%2FpBQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088a9eb3ac45c-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:55 UTC	460	IN	Data Raw: 4f 54 54 4f 00 0c 00 80 00 03 00 40 43 46 46 20 10 de 3e 0c 00 00 0e e8 00 00 9f 9b 47 44 45 46 00 0f 00 00 00 00 ae 84 00 00 00 10 47 50 4f 53 c3 74 d1 23 00 00 ae 94 00 00 0b 28 47 53 55 42 00 01 00 00 00 00 b9 bc 00 00 00 0a 4f 53 2f 32 6c 25 04 04 00 00 06 88 00 00 00 60 63 6d 61 70 5e 3e 56 95 00 00 0b d8 00 00 02 ee 68 65 61 64 14 02 90 d5 00 00 00 d4 00 00 00 36 68 68 65 61 08 3f 04 cd 00 00 06 64 00 00 00 24 68 6d 74 78 43 eb 43 5d 00 00 01 0c 00 00 05 58 6d 61 78 70 01 56 50 00 00 00 00 cc 00 00 00 06 6e 61 6d 65 dc c1 a1 04 00 00 06 e8 00 00 04 ef 70 6f 73 74 ff b8 00 32 00 00 0e c8 00 00 00 20 00 00 50 00 01 56 00 00 00 01 00 00 00 01 00 00 57 67 8d c0 5f 0f 3c f5 00 03 03 e8 00 00 00 00 d8 24 26 bd 00 00 00 00 d8 24 26 bd 00 00 fe e2 04 a3 03 Data Ascii: OTTO@CFF >GDEFGPOSt#(GSUBOS/2l%`cmap^>Vhead6hhea?d$hmtxCC]XmaxpVPnamepost2 PVWg_<$&$&
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 02 3e 00 1a 02 95 00 42 02 7c 00 08 03 82 00 10 02 4a 00 12 02 5c 00 0a 02 37 00 24 01 9e 00 4a 01 51 00 64 01 b8 00 17 01 f4 00 58 01 f4 00 21 01 d9 00 1e 02 52 00 02 02 a2 00 63 02 8b 00 23 02 92 00 4a 03 9b 00 30 01 dc 00 52 02 2c 00 2b 02 18 00 39 01 f4 00 39 02 fd 00 31 02 2c 00 46 02 1a 00 2a 02 af 00 23 01 65 00 33 01 9e 00 28 01 91 00 08 02 2c 00 60 02 39 00 31 01 2d 00 42 02 22 00 42 02 22 00 42 02 22 00 42 01 31 00 42 01 2d 00 42 01 51 00 64 02 4e 00 00 01 f4 00 70 02 8f 00 10 02 2c 00 cb 02 8f 00 10 02 8f 00 10 02 8f 00 10 02 8f 00 10 02 8f 00 10 03 ca 00 0d 02 73 00 4a 02 73 00 4a 02 73 00 4a 02 73 00 4a 01 e8 00 38 01 e4 00 38 01 ee 00 38 02 0f 00 38 02 aa 00 4a 02 85 00 37 02 85 00 37 02 85 00 37 02 85 00 37 02 85 00 37 02 95 00 42 02 95 00 Data Ascii: >B\|J\7$JQdX!Rc#J0R,+991,F*#e3(,`91-B"B"B"B1B-BQdNp,sJsJsJsJ8888J77777B
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 04 00 0f 00 56 00 01 00 00 00 00 00 05 00 3c 00 65 00 01 00 00 00 00 00 06 00 0f 00 a1 00 01 00 00 00 00 00 07 00 2a 00 b0 00 01 00 00 00 00 00 08 00 0f 00 da 00 01 00 00 00 00 00 09 00 0f 00 da 00 01 00 00 00 00 00 0a 00 2c 00 e9 00 01 00 00 00 00 00 0b 00 26 01 15 00 01 00 00 00 00 00 0c 00 26 01 15 00 03 00 01 04 09 00 00 00 5c 01 3b 00 03 00 01 04 09 00 01 00 0e 01 97 00 03 00 01 04 09 00 02 00 0e 01 a5 00 03 00 01 04 09 00 03 00 34 01 b3 00 03 00 01 04 09 00 04 00 1e 01 e7 00 03 00 01 04 09 00 05 00 78 02 05 00 03 00 01 04 09 00 06 00 1e 02 7d 00 03 00 01 04 09 00 07 00 54 02 9b 00 03 00 01 04 09 00 08 00 1e 02 ef 00 03 00 01 04 09 00 09 00 1e 02 ef 00 03 00 01 04 09 00 0a 00 58 03 0d 00 03 00 01 04 09 00 0b 00 4c 03 65 00 03 00 01 04 09 00 0c 00 4c Data Ascii: V<e*,&&\;4x}TXLeL
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 00 4a 00 4b 00 5c 00 61 00 7b 00 a1 00 a3 00 ab 00 b0 00 b4 00 bb 00 bf 00 c1 00 c7 00 c8 00 d0 00 d1 00 d7 00 d9 00 de 00 e3 00 f0 00 f7 00 f9 00 fe 01 52 01 60 01 78 01 7d 02 c6 02 d8 02 dc 03 84 03 86 03 88 03 8c 03 8e 03 a3 03 b1 03 bc 03 bd 03 c2 04 10 20 13 20 18 20 1c 20 22 20 26 20 30 20 39 20 ac 21 26 22 06 22 12 ff ff 00 00 ff f7 ff d9 00 00 ff bf 00 00 ff dc 00 00 00 28 00 00 00 09 00 00 ff 91 ff c7 00 00 ff c6 00 00 ff 99 00 00 ff 98 00 00 ff 97 00 00 ff 95 00 00 ff cc ff cd 00 00 ff cd 00 00 00 00 00 00 ff 0b 00 00 00 00 00 00 00 00 fd 97 fd 96 fd 95 fd 94 00 00 00 00 fd 78 00 00 fd 77 00 00 fc bd 00 00 00 00 00 00 e0 59 e0 4d e0 52 e0 6f df 9d e0 29 df 1d de 62 00 01 00 78 00 00 00 00 00 86 00 00 00 86 00 00 00 84 00 00 00 8a 00 00 00 8e 00 Data Ascii: JK\a{R`x} " & 0 9 !&""(xwYMRo)bx
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 30 34 34 34 75 6e 69 30 34 34 39 75 6e 69 30 34 34 41 75 6e 69 30 34 34 42 75 6e 69 30 34 34 43 75 6e 69 30 34 34 44 75 6e 69 30 34 34 45 75 6e 69 30 34 34 46 41 6c 70 68 61 42 65 74 61 49 6f 74 61 45 74 61 45 70 73 69 6c 6f 6e 4d 75 54 61 75 52 68 6f 4f 6d 69 63 72 6f 6e 55 70 73 69 6c 6f 6e 5a 65 74 61 75 6e 69 30 30 42 35 4e 75 4b 61 70 70 61 74 6f 6e 6f 73 41 6c 70 68 61 74 6f 6e 6f 73 45 70 73 69 6c 6f 6e 74 6f 6e 6f 73 45 74 61 74 6f 6e 6f 73 49 6f 74 61 74 6f 6e 6f 73 4f 6d 69 63 72 6f 6e 74 6f 6e 6f 73 55 70 73 69 6c 6f 6e 74 6f 6e 6f 73 47 61 6d 6d 61 75 6e 69 32 32 30 36 58 69 4c 61 6d 62 64 61 54 68 65 74 61 50 69 43 68 69 61 6c 70 68 61 62 65 74 61 67 61 6d 6d 61 64 65 6c 74 61 65 70 73 69 6c 6f 6e 7a 65 74 61 65 74 61 74 68 65 74 61 6c 61 6d Data Ascii: 0444uni0449uni044Auni044Buni044Cuni044Duni044Euni044FAlphaBetaIotaEtaEpsilonMuTauRhoOmicronUpsilonZetauni00B5NuKappatonosAlphatonosEpsilontonosEtatonosIotatonosOmicrontonosUpsilontonosGammauni2206XiLambdaThetaPiChialphabetagammadeltaepsilonzetaetathetalam
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: fa 25 87 26 14 26 b1 27 57 27 d8 28 59 28 ed 29 87 2a 39 2a be 2b 43 2b d9 2c 86 2d 25 2d a3 2e 21 2e b3 2f 4b 2f cc 30 3e 30 68 30 97 31 25 31 5d 31 c6 31 e7 32 33 32 52 32 55 33 22 33 88 33 8b 34 36 34 bf 35 c8 36 6f 36 c7 37 18 37 c8 38 77 39 5b 39 b3 3a 28 3a a1 3a f5 3b 51 3b a2 3c 19 3c 76 3c cb 3d 21 3d 89 3d c3 3e 36 3e 93 3e eb 3f 3f 3f af 40 24 40 b8 40 fc 41 4e 41 99 42 09 42 71 42 c6 43 1c 43 ee 44 82 45 54 45 e8 46 67 46 b1 46 f5 47 52 48 03 48 a0 49 26 49 ac 4a 5b 4b 03 4b 8a 4c 19 4c c7 4d 50 4d d9 4e 78 4f 26 4f a7 50 28 50 be 51 62 51 db 52 54 53 06 53 8b 54 10 54 ab 55 58 56 02 56 ac 57 56 57 d4 58 52 58 e7 59 8c 5a 0d 5a 68 5a c3 5b 1b 5b 7d 5b fb 5c 33 5c b7 5d 13 5d b6 5e 52 5e ac 5f 50 5f b8 60 17 60 8a 60 e7 61 3f 61 87 61 db 62 54 Data Ascii: %&&'W'(Y()9+C+,-%-.!./K/0>0h01%1]11232R2U3"3346456o6778w9[9:(::;Q;<<v<=!==>6>>???@$@@ANABBqBCCDETEFgFFGRHHI&IJ[KKLLMPMNxO&OP(PQbQRTSSTTUXVVWVWXRXYZZhZ[[}[\3\]]^R^_P_```a?aabT
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: c8 c8 b6 5e 4b 1e 0e 33 8b f7 20 f7 a0 f7 1f f7 02 77 01 f7 48 f7 2f 03 f8 29 f7 20 15 45 f8 7c 06 8e 07 a0 8a 80 90 7a 1b 2a 06 7a 80 86 76 8a 1f 40 5f 82 78 1e 75 06 74 85 81 78 1f 3a 07 78 91 81 a2 1e e0 fb a0 36 06 74 85 80 79 1f 39 07 79 91 80 a2 1e f7 ca 06 a2 91 96 9d 1f dd 07 9d 85 96 74 1e 0e 76 8b f7 20 f8 21 f7 1b 01 b6 f7 21 f7 4e f7 2c 03 f8 78 f7 20 15 fb 67 06 8b d4 ca c6 c0 1e c3 be c8 c2 f1 1a f7 0f fb 0a e0 fb 0c fb 14 fb 05 46 fb 3a 75 92 83 9f 1e e3 06 a0 90 96 9c c5 ba b7 c1 bb b0 75 57 57 4c 55 4b 54 1f 2a 39 36 40 8b 1a 82 84 82 7e 75 1a 41 07 74 8f 85 a2 1e f8 32 06 a2 91 96 9d 1f dd 07 9d 85 96 74 1e 0e 79 7c f7 1e f8 1f f7 1f 01 f8 04 f7 29 03 f8 01 f8 15 15 f7 11 f7 19 05 93 95 8e 91 98 1a dc 07 9d 85 96 74 1e fc 12 06 74 85 80 Data Ascii: ^K3 wH/) E\|zzv@_xutx:x6ty9ytv !!N,x gF:uuWWLUKT96@~uAt2ty\|)tt
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: f7 93 2e fb 93 2e 05 7f 86 79 86 71 1a 32 07 73 9f 8d 97 90 1e f8 2a f7 34 05 9a 91 92 97 a2 1a cf 07 a2 84 97 7c 91 1e 0e 69 8b f7 3d f8 05 f7 1a 01 f7 53 f7 3d 03 f7 b1 f9 34 15 fb 40 57 fb 0a 3c 83 1f 75 8c 82 9b 1e ef 06 a3 8f 9a 9b 8e 1f a6 92 a6 af be 1b b0 ab 74 6b 5d 4d 80 68 67 1f 67 66 7a 64 44 1a 77 91 7f a5 1e de 06 a5 91 93 a3 c4 b5 a8 ae a3 1f b1 a6 bc b2 d1 1a f7 12 fb 05 c4 fb 0a 1e b9 fc 8b 15 fb 03 06 79 80 85 74 1f fb 03 07 74 96 85 9d 1e f7 03 06 9d 96 91 a2 1f f7 03 07 a2 80 91 79 1e 0e 8b 8b f7 1f fb 1f f7 87 f7 b6 f7 21 12 a9 f7 2f f7 3f f7 31 13 78 f8 78 f9 36 15 fb c3 06 73 86 80 79 1f 38 07 79 90 80 a3 1e f7 43 fb bc 06 13 b8 4d 72 67 49 5e 6b a3 c6 88 1e 13 78 90 89 9b 74 1e 21 06 74 8a 75 86 fb 21 f1 40 f7 19 f7 0b f7 15 c6 f7 Data Ascii: ..yq2s*4\|i=S=4@W<utk]MhggfzdDwytty!/?1xx6sy8yCMrgI^kxt!tu!@
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 7e 84 8f 7c 98 1b cb 06 98 92 91 97 92 1f c4 f7 08 05 91 9b 8c 94 a1 1a e5 07 a2 80 91 79 1e 0e fb 26 f7 5b f7 1c 01 f7 f5 f7 e3 15 fb a4 06 79 80 85 74 1f 3d 07 74 96 85 9d 1e f7 a4 06 9d 96 91 a2 1f d9 07 a2 80 91 79 1e 0e fb bd 8b f7 3d 01 c4 f7 3d 03 f7 59 f7 3d 15 fb 03 06 79 80 85 74 1f fb 03 07 74 96 85 9d 1e f7 03 06 9d 96 91 a2 1f f7 03 07 a2 80 91 79 1e 0e fb 47 a0 76 f9 49 77 01 f8 05 f9 49 15 36 06 78 84 7c 7f 86 1f fb 84 fd 12 05 81 88 8c 79 a4 1b e1 06 9e 92 9a 97 90 1f f7 83 f9 12 05 95 8e 8a 9d 72 1b 0e d5 a0 76 f9 26 77 01 d5 f7 30 03 f9 02 f9 26 15 fb 1b 06 74 84 89 75 77 1f fb 63 fb 78 05 f7 73 07 a2 80 91 7a 1e 28 06 78 81 85 74 1f fc ec 07 74 95 85 9e 1e ee 06 9c 96 91 a2 1f f7 46 07 c9 cc 05 c1 31 e4 fb 2a 8b 1a 76 98 98 80 a3 1b f7 Data Ascii: ~\|y&[yt=ty==Y=yttyGvIwI6x\|yrv&w0&tuwcxsz(xttF1*v
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 87 85 9f 6d 1b fb 02 06 79 88 7a 7f 8e 1f f7 4d fc f4 05 8b 90 76 a1 1e e3 06 a5 91 a2 8b 1f ef f7 d3 ef fb d3 05 8b 91 74 a5 1e df 06 a1 90 a0 8b 1f f7 4c f8 f4 05 97 8f 88 9c 79 1b 0e 91 a0 76 f9 26 77 01 f8 c7 aa 15 fb 45 f7 c6 f7 48 f7 b9 05 96 92 86 9c 7a 1b fb 09 06 77 84 83 76 7d 1f 28 fb 35 27 f7 35 05 a0 7e 83 93 78 1b fb 0a 06 7a 87 7a 80 91 1f f7 49 fb b9 fb 46 fb c6 05 7f 83 90 78 9a 1b f7 06 06 a1 94 8d a5 98 1f ef f7 46 ee fb 46 05 71 99 93 89 a1 1b f7 06 06 9a 90 9e 97 83 1f 0e a3 a0 76 f9 26 77 01 f7 77 f7 32 03 f8 d3 f9 26 15 fb 00 06 74 81 88 70 7e 1f fb 05 fb 6b fb 09 f7 6b 05 a6 7d 81 8e 74 1b fb 07 06 78 89 7a 80 90 1f f7 6a fc 13 05 fb 6e 07 74 95 85 9e 1e ef 06 9d 96 91 a2 1f f7 6e 07 f7 62 f8 13 05 96 90 89 9c 78 1b 0e 7e 8b f7 20 Data Ascii: myzMvtLyv&wEHzwv}(5'5~xzzIFxFFqv&ww2&tp~kk}txzjntnbx~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49803	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	379	OUT	GET /static/images/common/icon_state_selected.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:55 UTC	906	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: image/png Content-Length: 6707 Connection: close x-oss-request-id: 666D324D81BDAB3636D6C5E4 ETag: "AE83FA2525A1F48BA4DE503330A9EB42" Last-Modified: Mon, 20 May 2024 05:15:02 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4525457612215618941 x-oss-storage-class: Standard Content-MD5: roP6JSWh9Iuk3lAzMKnrQg== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6907 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gobvBTZ9x3%2FHuzyRggGTtrq3oWJFDqQISzQ6O4Dp0WAqCT5bUFQ%2BFnXKZU2fxxO1knZdXCqPjcfx4%2By7bw%2B4DbKtQAR39dEc1HJ08GCizmAfPrkJYGaq7u8VfAuobA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088a9e8604319-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:55 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 19 ed 49 44 41 54 78 5e ed 5d 0b b8 55 55 b5 fe c7 da 07 34 33 ae 96 86 e0 a3 34 6f 48 2f 41 20 3b 7b 6d fc b0 ab 66 3e 6e 5a 8a d7 14 05 f6 da 1c c9 f2 de 1e f4 b0 ba e8 d5 ea 96 99 65 50 71 f6 da 90 52 56 9a 85 15 58 3e 6e 04 7b 6d a2 24 af 88 3d b0 87 05 e9 05 7b 78 7d 25 70 ce 1a f7 9b e7 c0 85 e4 1c d6 5c 6b cd f5 da 7b cc ef e3 03 be 33 e6 78 fc 73 fd 67 ac b9 e6 9c 63 12 a4 09 02 82 c0 b0 08 90 60 23 08 08 02 c3 23 20 04 91 a7 43 10 d8 07 02 42 10 79 3c 04 01 21 88 3c 03 82 40 34 04 24 83 44 c3 2d 5c af 1b a6 1d 84 03 fb 26 a0 44 87 a0 bf ff 50 10 1d 0a c2 21 60 3a 14 f0 d5 ff 0f 01 e3 50 60 e0 cf 33 00 3f Data Ascii: PNGIHDRXsRGBIDATx^]UU434oH/A ;{mf>nZePqRVX>n{m$={x}%p\k{3xsgc`## CBy<!<@4$D-\&DP!`:P`3?
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 5e 81 91 b4 18 97 7a 7f 08 d3 b5 d3 64 85 20 43 8d b8 db fd 62 50 69 16 98 15 39 5e dd c6 0f c5 5f c0 bc 04 a5 d2 62 cc 5e fd f3 36 8e 33 72 68 42 90 3d a1 bb c9 3e 0a db 79 36 40 b3 40 38 2a 32 aa c5 eb b8 1d c0 12 f4 d3 12 f4 34 d7 16 cf fd e4 3c 16 82 28 6c 17 4f 7d 15 fa fb 67 83 48 65 8c 17 27 07 77 01 34 33 be 0a f2 97 c0 59 73 6f 01 bc 4d dc c5 ce 26 88 5b 7e 19 40 1f 02 a0 88 31 32 71 b4 8b 65 e0 0e 58 d6 0d 98 bd fa 47 c5 72 db ac b7 9d 4b 90 7a f9 62 10 5d 0d e0 18 b3 90 b6 95 36 1f a0 f9 70 9a d7 b6 55 54 21 82 e9 3c 82 2c 9a 3a 06 25 be 1a e0 5a 08 9c 3a 5d f4 6e 10 cf 47 b5 b5 a6 d3 80 e8 2c 82 34 ec e9 00 ae 06 e3 b8 4e 1b 68 03 f1 3e 07 f0 7c 38 ad 4f 19 d0 55 18 15 9d 41 10 f5 d9 16 96 7a 9d 7a 67 61 46 26 b7 8e d2 72 30 e6 a3 d6 5c 97 5b Data Ascii: ^zd CbPi9^_b^63rhB=>y6@@8*24<(lO}gHe'w43YsoM&[~@12qeXGrKzb]6pUT!<,:%Z:]nG,4Nh>\|8OUAzzgaF&r0\[
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 01 5a 80 4d 5d 0b 71 f5 ca be 48 1a dc ca 42 80 df 11 a9 6f 70 a7 47 d0 6f 95 d1 93 cf 2b e5 f2 49 10 b5 77 c8 ef ff e9 c0 67 4f f3 ed 49 58 56 77 a4 6a e6 f5 ca 24 10 2f 02 30 c9 bc 5b 09 6b 1c b8 aa cd 7a 2f 6a 4d f5 c1 23 7c 73 2b 5f 4b 6e e5 9d 3e 9a d7 ea 8d f9 24 88 6b ab f3 e4 ea 5c b9 e9 d6 0f c2 5b 51 f5 be 13 5a 71 bd fc 46 10 a9 55 fc 24 48 1b da 9d 48 1d 18 7f 03 e1 0a 38 9e 1b ba ff c0 95 10 d6 8a 84 be ca fd 1e cf ed 98 84 77 e6 ef b8 6e fe 08 f2 e5 f2 2b d0 47 2a 7b 98 df 9e 4d 98 8b aa a7 16 1c c3 35 77 ea 39 80 5f 98 d5 df e0 e0 e8 53 70 9a 1f 08 96 7b 9e 44 6f 77 19 96 f5 03 00 07 86 ee 1b d8 81 3f 90 c7 aa 8d f9 23 48 52 9f 75 19 5f 42 cd 53 5f 9b c2 35 d7 be 14 c0 97 c3 75 2a 84 f4 b7 e0 78 6f 0b ed 69 c3 be 0c 8c 2f 86 ee 17 d8 81 1f Data Ascii: ZM]qHBopGo+IwgOIXVwj$/0[kz/jM#\|s+_Kn>$k\[QZqFU$HH8wn+G{M5w9_Sp{Dow?#HRu_BS_5uxoi/
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: ef 0c ad e8 93 78 bd 0a f3 7a a7 e5 64 4c a1 ba 7d 01 08 a6 ab 16 ea bf 66 d5 ed 8f 81 70 65 cc 28 76 75 df 8e 51 63 0f 08 b5 23 db 90 61 a5 26 4b 82 fc 11 c0 58 43 b1 5c 09 c7 fb 84 96 2e d7 56 c5 a1 4d be 5e 79 70 bc ac ae 81 1b 3e e4 24 ee 8b df d1 7f 34 e6 6a 14 a3 33 7d 56 c4 b2 26 61 f6 ea 9f 69 8d af 61 a1 6c 08 52 9f 76 04 68 87 b9 9b 9a 74 37 d7 d5 6d b5 0a 6d f6 4a 03 b5 0b 20 4a 95 14 c3 03 b9 97 ba c1 d2 49 6a 2b ba b9 ab b1 7d cc c5 1c 8d a2 17 83 45 ff b6 01 28 19 09 d3 a2 d9 98 dd 5c 62 44 57 48 25 d9 10 64 71 e5 2c f8 fc dd 90 be 0e 2f ee 78 7a 71 b8 e5 85 00 19 2c 80 96 f3 ab c5 5c 5b ad b6 7f de 18 ce a0 65 70 9a 7a f7 88 18 ad ed 9b dd ed 54 7a 0f 96 39 84 07 35 99 ad 9a b8 11 8e 37 4e cb 45 b3 af 57 7f 02 a1 82 aa a7 b6 ca e4 b7 b9 b6 Data Ascii: xzdL}fpe(vuQc#a&KXC\.VM^yp>$4j3}V&aialRvht7mmJ JIj+}E(\bDWH%dq,/xzq,\[epzTz957NEW
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: c3 a7 f8 a1 40 ba b9 fc 52 ec a0 3a 18 3a 65 2d 57 83 68 26 aa cd df c6 c2 7b f0 36 26 55 6e 28 7e f3 69 1c e6 34 d5 95 11 d1 9b ee 75 ce 4c 0f c2 47 0d 3d cd b5 d1 8d ed ec a9 fb e5 ce a4 cd 98 4e e7 83 20 2a 08 b7 3c 03 a0 d3 01 9e 08 d0 9e 6b 24 eb 01 dc 0f c6 6a d4 3c 13 9f 29 77 43 36 68 f3 e2 61 6e b3 bd 0b e0 af c0 69 2d 8d 89 f1 60 77 93 e5 86 4c dd 9d d1 db 5d 86 65 5d b2 73 0d 66 22 08 5d 3b 63 7d 04 44 f7 0d 94 11 35 5d ca 68 f8 b5 9f c7 c0 f8 31 c0 eb 8d db 8c 31 80 f9 21 c8 9e 41 2c 99 76 10 fa fa 26 c0 ff db fd e8 59 17 bc 8d 24 06 00 03 5d d5 e4 f9 d9 be c3 80 ae d1 b0 f8 31 6c a3 ad b1 e6 1a 43 f9 63 f2 98 71 12 af 1e f3 a7 75 e1 a8 1d 13 30 d2 fa 63 aa 57 0e a8 dd 03 a0 1d 91 e6 36 71 c7 5d a3 7f 3e 09 a2 e1 78 e1 44 f2 4e 90 c2 01 9a 8e Data Ascii: @R::e-Wh&{6&Un(~i4uLG=N *<k$j<)wC6hani-`wL]e]sf"];c}D5]h11!A,v&Y$]1lCcqu0cW6q]>xDN
2024-10-13 15:58:55 UTC	768	IN	Data Raw: 08 f2 04 1c ef 60 23 c8 b8 e5 f7 03 f4 c9 60 5d b4 0c 4e f3 dc 60 39 0d 09 99 ac 6b 80 d4 26 22 19 11 64 c8 a2 c0 91 20 d5 9d 87 68 5c ad a5 6d 5f ee 67 d4 86 aa f0 82 19 11 44 32 48 e1 9f 9c 0e 09 20 23 82 00 32 07 e9 90 27 ac e0 61 66 46 10 90 7c c5 2a f8 b3 d3 11 ee 67 48 90 f8 eb 20 bd dd 65 58 96 17 62 a0 64 1d 24 04 58 22 9a 7d 75 f7 78 0f 6c 94 af 49 b2 92 2e cf 7d 18 04 b2 cb 20 3b bd 8c ba 17 ab 51 7e 17 98 6e 0c 13 eb 4e 59 d9 8b 15 01 b4 8e ed 92 39 41 a2 ec e6 75 ed 0f 01 f8 78 e4 41 8b b2 9b b7 5e be 05 44 17 46 b6 29 1d 8b 89 40 e6 04 d9 0d 5b f0 79 90 7a f9 3c 80 ae 01 e1 38 03 68 eb 9d 07 a9 db f3 40 b8 06 c0 7e 06 6c 8a 8a a2 21 90 23 82 28 e8 b2 3f 51 d8 67 f1 e0 29 46 6b 0a c0 53 00 9c 56 b4 31 15 7f 0d 22 90 33 82 18 8c 4c 54 09 02 06 Data Ascii: `#`]N`9k&"d h\m_gD2H #2'afF\|*gH eXbd$X"}uxlI.} ;Q~nNY9AuxA^DF)@[yz<8h@~l!#(?Qg)FkSV1"3LT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49805	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:54 UTC	606	OUT	GET /static/img/bg-in.9e70ec73.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:55 UTC	900	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: image/png Content-Length: 632380 Connection: close x-oss-request-id: 666D31CE108AF539344A6A35 ETag: "9E70EC7342C1C175D50E90E7A6ADCF00" Last-Modified: Mon, 20 May 2024 05:15:42 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2525262883575623331 x-oss-storage-class: Standard Content-MD5: nnDsc0LBwXXVDpDnpq3PAA== x-oss-server-time: 3 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4168 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cv4wkg3FHIyanR3sHVlQLFXMFrczQPjtm04tsWd1T0zPf94oJbbeCfRURCzL6bSgv6JZplUdZNrUEH2Ymstm9adW1jQ6JWCfo2yfIMLIccqF2IptGhhu6SQrI3aMUw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088a9ee55c44d-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:55 UTC	469	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 05 00 08 06 00 00 00 18 f4 d7 b6 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e cc bd f9 af 2d 49 72 1e f6 d5 59 ef 7e df eb 7e 4b 6f d3 b3 48 33 a4 2c d2 86 c1 a1 29 db b2 21 d8 fe 7b 6d d9 b2 00 fd 22 80 16 40 0b b0 3d 06 4d 13 1c 49 1c 0e 39 5b 77 bf fd dd 77 b7 b3 55 95 f1 45 66 e4 89 8a ca ac 3a b7 87 a4 7c 1b b7 df b9 a7 b2 72 89 88 8c f8 32 32 32 b2 fa c3 7f 5e ef ea 1a 93 b6 05 d0 02 55 05 b4 0d d2 0f ff de ff 11 9e c9 77 fc e5 3b e6 b9 bc cb ef be e5 cf e0 bb 5a af ed 8f b6 a3 7d b1 65 e2 e7 5c f1 5c f7 7c b9 ce b8 4b 2f 90 5e 07 8c b5 6a 80 76 b2 2f 38 a9 5a 4c da 1a 53 fe a2 c6 a2 da 61 31 d9 a6 df a3 c9 0e b3 49 8d 19 76 98 a1 c1 ac d2 5f fe 5d 63 8e 1d 26 Data Ascii: PNGIHDRsRGB IDATx^-IrY~~KoH3,)!{m"@=MI9[wwUEf:\|r222^Uw;Z}e\\\|K/^jv/8ZLSa1Iv_]c&
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 5d 61 f5 90 d5 8f b6 0e 2f 74 63 42 78 88 7e 31 f4 49 3a 34 f2 de 37 3d a6 9e 0f d1 67 56 50 12 6f 4c c5 a5 a1 a7 a1 e8 dc 8c 76 24 d9 1b b5 2b 43 63 d6 ca 33 65 ac fd 60 77 9a 16 a8 9b c8 26 15 b0 0c 01 e4 3d 6d 3b a7 37 a2 5e d1 26 4b 34 fc 6d 6c 5f 6e c8 bd 76 e2 d8 6d 3b 6a 73 8b 7c 75 36 d9 db e8 ec 7b 19 79 4d 6d 52 77 1b bd 7d 50 bf 23 fd 12 9d 1d 3d 55 cf 77 74 ff 88 dc 97 68 3d 26 df 07 f3 2e 83 25 54 ee 45 ef a9 6e d5 b1 c4 89 23 af e5 1a 89 74 b3 c3 2a f6 65 80 a8 43 e3 b3 cf 2c 86 13 f5 10 e5 20 d9 e0 11 99 3e b4 9d 6c 57 ad 2e 68 db bd ae 4e 8a 23 60 16 e2 9a b3 d9 06 97 b3 35 1e c7 7f 2f e7 6b 5c cc d6 b8 98 6e 70 3e df e2 64 da 60 3a c9 29 50 4e 70 4e d6 da 75 c1 6a 9f 92 10 59 20 61 2d 53 8b a6 ad b0 6b ab 88 91 f8 ef 04 db 76 8a ad fc 3b Data Ascii: ]a/tcBx~1I:47=gVPoLv$+Cc3e`w&=m;7^&K4ml_nvm;js\|u6{yMmRw}P#=Uwth=&.%TEn#t*eC, >lW.hN#`5/k\np>d`:)PNpNujY a-Skv;
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: ae a9 91 77 a9 7e 40 4e a4 ac 9d 63 91 bf f2 fd 90 7c 1b 5b de 59 98 ba 9d 91 51 1e 17 f8 e2 79 5c dc 35 89 7c a6 ba 4c b6 c5 8c 37 d5 13 3f f4 64 c7 d1 e6 d0 fe f6 ea c9 08 65 4e 4e 4b e3 b2 32 d7 29 53 e8 77 69 0e 14 a6 4c a2 b2 38 f8 92 97 4f 6d 6b f0 41 53 72 e8 6d 3f a7 97 7d be 16 8f 3b 7f 2f e6 9b 00 da a7 6b 9c cf 76 38 9b 05 6f bb b7 07 41 ee 08 da 47 b6 d5 8b 16 3d 0a 5d c1 2b 25 40 ba 21 80 a7 a7 9d 9f 89 9f 02 98 16 50 ad 40 5a fe 56 50 4d 9c 05 f1 be 07 d1 ae d0 46 26 4b 84 05 41 bb ec 30 70 5c 04 ed 2c 4b 0c 14 3c f6 e2 61 8f 9f 83 17 9f 80 1d 02 d4 03 70 e7 df a1 0c a6 d5 00 70 e7 d8 e8 f3 77 02 97 05 ee e3 aa ff 41 25 ac 42 c8 1a 31 a3 b1 c9 3f 61 83 6e 85 53 3f 68 bf bd c7 31 c3 e7 2c 48 30 20 2b 01 f4 08 98 b4 3f 09 28 a9 f2 ca 2d 5e 04 Data Ascii: w~@Nc\|[YQy\5\|L7?deNNK2)SwiL8OmkASrm?};/kv8oAG=]+%@!P@ZVPMF&KA0p\,K<appwA%B1?anS?h1,H0 +?(-^
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: a7 74 68 d2 21 69 f4 4e 1a bc 28 48 f1 4a 8a 60 e6 76 8f 06 f7 6d 3b e1 12 b9 01 31 e4 85 e0 9a 0e cf 0a 5b c6 3b 68 88 8c 7c 0e e1 2c 04 d6 12 d3 2e e1 31 21 4c 26 78 da 03 06 9b 54 95 44 44 2c 26 dc 5d d8 e2 78 ba 93 21 04 6f ba 7a d8 43 88 4d 8a 69 97 76 f7 a1 31 2c 47 af 3f 81 7c 88 a3 af d0 4e a7 d1 e3 1e 3c f7 e1 a7 c0 31 51 10 46 31 4a d9 9c d5 3b 40 c1 3d b4 48 f2 54 c4 fe 49 17 75 41 67 e3 f0 cc 64 50 00 d1 9b c0 0a 26 47 3a 91 70 aa 1f a3 31 b0 71 11 b9 57 6a 26 de cf 1a 4a b2 93 9b 2a 0b c2 e5 7a 83 a3 66 85 63 10 b8 af c5 b3 3e 9f 12 b0 d7 e2 75 e7 41 d5 f9 94 9e f7 6d 00 f6 04 e9 72 a4 34 00 f5 09 63 dd 59 46 80 fb 56 de 99 4c ea 70 80 83 c2 12 44 39 b0 47 56 a7 53 b4 8c 71 97 ed 1e 02 e4 0a 4d cd cf 0b ec aa 85 78 df d7 75 f4 ba 83 f1 ee 47 Data Ascii: th!iN(HJ`vm;1[;h\|,.1!L&xTDD,&]x!ozCMiv1,G?\|N<1QF1J;@=HTIuAgdP&G:p1qWj&J*zfc>uAmr4cYFVLpD9GVSqMxuG
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: b4 94 f4 45 ec 63 02 4b 1e e4 99 03 93 a3 dd 30 a1 05 9d d0 a0 08 be 12 06 4b 02 bb af 71 d2 36 f4 65 e3 a4 bd c7 72 b7 c2 82 c0 7d c2 5f 82 f7 b5 80 f4 f0 db 04 00 cf f4 90 fc 9b c0 bd 5d 07 f0 3e 65 5c 3b 0f a3 ee 24 2b 0d 81 7c f0 ba 47 2f fc 94 9e 77 1e 62 0d 83 de 1f 91 90 f3 db 68 ab 63 59 21 ee ea 1d 9a 76 17 84 91 7b 00 ed 12 db 66 81 0d c1 7b cd ac 32 4b 89 79 e7 21 d5 ab fa 1c ef 56 67 78 bd 79 84 ab c9 39 36 11 bc 97 48 af 22 41 f0 a4 73 4e c4 63 20 a6 5b 74 31 41 7b 5c fd 4b f9 b8 2d a9 db b3 52 9d 1a 03 53 97 ef 47 b6 5f 76 22 97 40 63 81 f9 25 e0 ee 23 15 8a a2 98 b1 d8 22 8b b1 bd e4 50 f0 f4 31 88 a6 57 b7 39 cb 21 d5 78 cf a3 91 79 3f ac 8e 4e b3 f2 6c 36 da b4 bd 0c 0e 0b 3c f5 95 2a af 23 51 7c 76 9c 1e 38 3b 90 07 de 10 8f cd 4f 0b dc Data Ascii: EcK0Kq6er}_]>e\;$+\|G/wbhcY!v{f{2Ky!Vgxy96H"AsNc [t1A{\K-RSG_v"@c%#"P1W9!xy?Nl6<*#Q\|v8;O
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 0a e9 94 d1 af 7a ea 46 fb 54 30 04 63 a1 5c 9d b3 27 56 63 95 f5 5a 5a 1b e4 e6 4a 5a 7c 2a fd 6d 3d 66 67 40 9b 92 c7 9a 39 29 d3 e6 48 37 1e ac 21 ac 37 47 eb d6 85 e3 2c c6 b9 2b 1f a5 6b 9e be 07 b6 58 5a 48 25 8f 7b a9 1e 0b 22 73 e0 29 12 2e 85 8f 18 9e 0d a9 d7 a4 8e 62 9d 36 cc 21 f5 d5 b7 37 56 a1 1f 43 a6 bf 29 ee de 94 f5 34 ed 80 8f ac 50 99 fb 1f b4 ff b1 5c 3a cb 60 de cb e9 56 d1 09 63 a0 2b 3e 17 a3 28 f1 a2 7b 8f 7b 69 b3 37 91 c8 87 32 a9 de 30 7a 6b 7f 38 ce 2d de dc 2e b0 86 1d 68 26 a9 12 c0 2c 85 4d 14 54 41 51 72 b3 74 c9 c9 5e ac c1 92 d1 8a 6b 1a b2 ca a8 03 a2 07 81 37 d7 cb 34 76 e5 8d a9 a4 c8 4e 13 93 af c3 20 2f 75 0e a8 ce 89 50 a5 7b 68 dc c8 40 16 0b 8c c9 90 09 7d 12 e0 5e 3a 1c 6c 2b 3f 70 4c 69 d7 d8 ce a5 42 7f be 15 Data Ascii: zFT0c\'VcZZJZ\|*m=fg@9)H7!7G,+kXZH%{"s).b6!7VC)4P\:`Vc+>({{i720zk8-.h&,MTAQrt^k74vN /uP{h@}^:l+?pLiB
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 95 39 fe ba 9d ff 62 f8 45 1a 6f 09 ad 79 8f bc f2 db 81 53 4f b7 4e 75 46 3e c7 f8 31 f6 bc 34 a5 b4 09 df 2d a5 e9 d8 7b fa bc 08 5a 49 72 33 f6 dc f0 3b a6 dc 8e b9 50 79 11 b8 3b 7b 5f ea 53 8e 56 3a 87 04 b8 3b 63 f0 5b 03 77 33 8e d4 27 cd 6c 68 54 4d e2 45 a1 e3 c5 f1 14 84 e8 d0 f2 76 7c d6 b9 29 51 2a 71 a2 da 32 89 45 ba 05 98 cc 85 f1 b6 a3 15 40 ce ac 31 17 b3 95 5c b0 c4 18 f7 b3 29 e3 db 43 6e 73 7a db 8f 27 21 4c 46 3d d7 69 4b 5f c6 74 40 98 4c 54 5c e9 ee 99 92 e0 76 bc b7 de 98 aa c1 33 4a ba 68 83 a2 62 52 20 d8 d3 53 d6 13 e7 88 d7 29 1b 52 48 6a 6a 49 bd 25 35 84 cf c4 6c 80 fa b9 9a cb cd 56 09 b8 27 a0 11 2b 4c 8c 7e 88 41 f6 86 66 68 06 e7 88 e1 0d 56 09 0d e7 de 8d 56 a0 03 24 ac 55 8f e0 47 78 e6 f6 4d 85 45 a6 af de e8 5b a5 6f Data Ascii: 9bEoySONuF>14-{ZIr3;Py;{_SV:;c[w3'lhTMEv\|)Q*q2E@1\)Cnsz'!LF=iK_t@LT\v3JhbR S)RHjjI%5lV'+L~AfhVV$UGxME[o
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: c0 96 ac 50 01 a0 f7 0c e6 90 b6 2a 5b 38 a1 9c c4 b8 c7 43 ab 3c c5 28 a0 1d d8 d6 35 d6 6d 3c 9c 5a ef dc 01 58 af 78 0f b1 c4 43 52 ee 01 96 55 84 2e ef 69 aa e6 10 37 a6 69 b3 43 06 0f fc 6d da 47 33 71 e5 9d f8 77 8a 95 77 a0 5e b7 6e f9 b5 8d f9 3c 04 58 30 6f 29 0f a6 32 ae fd bc b9 c6 a3 fa 3d ce 9a 1b 9c 54 f7 38 9d dd e2 74 b1 4a e1 32 27 0c 97 61 5e 77 89 67 0f 17 2b 85 f0 17 de a4 ba 93 18 f7 45 b5 92 8c ec b3 c5 12 f3 e3 25 66 cc dd de 6e 31 6d b7 98 b4 35 2a de 9e ca 00 df 29 c3 63 76 a8 9a 0f 68 b7 77 40 b5 44 35 bb 10 a1 6e 25 d5 c2 0c 68 e7 00 af e3 ac b6 00 6e d0 b6 04 f0 f4 c0 33 65 24 63 dd 4f b1 a2 e7 3d e6 77 97 0c 33 ed 05 de 6e 2e f1 eb 9b e7 f8 77 f7 3f c0 af 27 9f 61 3b e5 c1 d7 01 6a 44 4d 6f 59 2e 5f 99 9b 6f 15 64 89 92 8d db Data Ascii: P[8C<(5m<ZXxCRU.i7iCmG3qww^n<X0o)2=T8tJ2'a^wg+E%fn1m5)cvhw@D5n%hn3e$cO=w3n.w?'a;jDMoY._od
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: f2 18 98 b5 a8 b6 ef d0 ae af 82 d7 fd e8 63 60 7a 24 68 b8 dd 71 40 04 ef d4 56 3c c8 fa 01 68 af 81 76 13 0f 82 2c d0 34 c7 d8 ed 18 f3 3e c7 7d 3d 93 f4 90 04 ef 6f ea 47 f8 f5 ed 73 fc d9 bb 1f e1 67 f8 07 b8 5d 9c a0 55 24 9e 31 f2 9a 2b 3f a5 3f 8b 61 32 c2 1b f5 bc 3b 7e 08 a9 e3 ed c6 cc 09 9f 48 6f 81 ac e1 65 27 75 a4 95 39 bb 50 b3 c2 42 1d e1 d6 8a 49 74 0a 21 6c 43 22 a0 75 75 e6 e7 00 30 1d d5 11 6e de 64 a7 83 dd 3d f2 87 53 f9 be 0d 2f 52 dd e0 64 58 ea 3d 14 0d 5a 8f bc ea 83 91 77 c7 aa 1e 7b ee bb dd a3 9b c9 38 41 c3 9b 4b 09 29 75 c4 86 92 3e b0 17 61 65 80 91 f6 ab 64 60 e5 15 db f9 4e 3c 56 a8 50 a6 96 bf 6e 3e 77 d9 d6 18 70 37 75 1f 42 af cc 70 fe ce be b2 f4 29 60 94 d1 b6 3b a0 6e a0 b4 e5 9d cc d5 8c 3e e6 77 f4 4b f0 e6 54 0b Data Ascii: c`z$hq@V<hv,4>}=oGsg]U$1+??a2;~Hoe'u9PBIt!lC"uu0nd=S/RdX=Zw{8AK)u>aed`N<VPn>wp7uBp)`;n>wKT
2024-10-13 15:58:55 UTC	1369	IN	Data Raw: 49 ab b0 bb 07 39 65 1e 85 aa 07 60 5d c8 8f bc 2a 07 32 0c 71 73 b7 c5 fa 7e 65 34 75 f2 3e 95 d0 b7 01 ee b9 4b ad 4a 53 de 0e af ab 78 0e 54 29 05 9a f2 6b 05 ef b2 7b 6a 68 a0 9e 6f ab e7 3c 90 8f e2 d0 55 d7 fe cc 4b 97 ac f9 0e db ad 19 a3 cb 34 05 6a 31 4e dd ea f3 0c 78 4a 0e 8f 43 ac 6a 89 94 39 40 3a 46 76 a7 63 a5 b8 7a 84 6d 9f 73 f5 58 63 c5 cf 76 b1 92 59 0c 8d 01 1c 21 67 e4 49 02 f8 51 c7 90 3e 0c ad a3 e6 d2 c3 a9 63 43 93 e7 39 1b 94 e9 48 0f fc 15 3a db f1 58 fb fa 87 36 6e 23 9d 8b ec 55 a0 ab 05 72 72 a6 f5 0f 81 e2 dc 7c 2e ed 50 18 02 da f1 7b 31 f2 6c 2e 8a 5f 89 66 f1 05 1b ff 9e 21 5d aa 76 14 c8 3b 0c d1 03 a6 ea 34 32 a1 31 a2 ef 8c 6e 11 53 1a 5f 4c e9 8b 15 54 17 06 98 6b 27 bb 5b e3 de cf 92 c5 f0 b0 97 8a d1 29 af ec ee d2 Data Ascii: I9e`]*2qs~e4u>KJSxT)k{jho<UK4j1NxJCj9@:FvczmsXcvY!gIQ>cC9H:X6n#Urr\|.P{1l._f!]v;421nS_LTk'[)

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49810	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: d28b635f-001e-0079-686d-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155855Z-17db6f7c8cffhvbz3mt0ydz7x4000000037g00000000ca58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:55 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49807	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155855Z-17db6f7c8cfhzb2znbk0zyvf6n00000004wg000000001bwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:55 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49811	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155855Z-17db6f7c8cfwtn5x6ye8p8q9m000000003s0000000003x5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:55 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49800	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	714	OUT	OPTIONS /api/v1/member/phone_code?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Origin: https://h5.g7or.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:55 UTC	549	IN	HTTP/1.1 204 No Content Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: * Vary: Access-Control-Request-Method, Access-Control-Request-Headers Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Access-Control-Max-Age: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49802	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	719	OUT	OPTIONS /api/v1/customer-service/lists?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Origin: https://h5.g7or.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:55 UTC	549	IN	HTTP/1.1 204 No Content Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: * Vary: Access-Control-Request-Method, Access-Control-Request-Headers Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Access-Control-Max-Age: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49799	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	720	OUT	OPTIONS /api/v1/static/invite_page_rank?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Origin: https://h5.g7or.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:55 UTC	549	IN	HTTP/1.1 204 No Content Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: * Vary: Access-Control-Request-Method, Access-Control-Request-Headers Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Access-Control-Max-Age: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49801	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	724	OUT	OPTIONS /api/v1/static/invitePageRewardLogs?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Origin: https://h5.g7or.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:55 UTC	549	IN	HTTP/1.1 204 No Content Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: * Vary: Access-Control-Request-Method, Access-Control-Request-Headers Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Access-Control-Max-Age: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49798	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	732	OUT	OPTIONS /api/v1/test-page-view-count-log/invitePage?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Origin: https://h5.g7or.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:55 UTC	549	IN	HTTP/1.1 204 No Content Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: * Vary: Access-Control-Request-Method, Access-Control-Request-Headers Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: anonymous-uid,authorization,content-security-policy,content-type,device-id,device-model,device-type,language,network-type,request-time,sdk-type,sdk-version,user-language,version,wgt-version,x-sign Access-Control-Max-Age: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49816	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7c051060-401e-008c-630d-1c86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155855Z-17db6f7c8cfmhggkx889x958tc000000026000000000etfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49815	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:55 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e8d3a0af-c01e-0014-0c1c-1ca6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155855Z-17db6f7c8cffhvbz3mt0ydz7x400000003b0000000005bv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:55 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49819	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	606	OUT	GET /static/img/qipao.ed43cd4f.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:56 UTC	904	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:56 GMT Content-Type: image/png Content-Length: 55074 Connection: close x-oss-request-id: 666D31CE4562B7343434AC88 ETag: "ED43CD4FAEC430DEA22831297A7035CE" Last-Modified: Mon, 20 May 2024 05:15:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13645825189673648035 x-oss-storage-class: Standard Content-MD5: 7UPNT67EMN6iKDEpenA1zg== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6330 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wrXQ7tB31fi96ybvtrnVuf293ARDQUWdjdVq8GwA%2FOhuxuZRqDvIukuBAkmb8IZP4wFeIzst6ecr9wLGD83r9vKbDeCLw8U4XybFBzlWjdeIvUh%2BMLG4WfIwbWifMg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088b05db2421c-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:56 UTC	465	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9e 00 00 00 c6 08 06 00 00 00 7b 34 80 20 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 5b ac 6e 4b 76 1e 54 73 5d f6 de 67 9f ee f4 25 1d df ba dd ed b6 db 17 88 14 09 01 b1 93 a0 20 c8 cd 21 3c 80 21 04 14 de 50 b8 df a4 24 3c 84 04 12 12 84 20 11 c4 98 20 20 10 01 0a 42 11 12 e1 25 41 28 5c 04 02 c5 96 fc 80 40 bc 21 02 6e db 9d b8 db ed b6 cf 75 ef b5 d6 3f d1 a8 aa 51 f5 8d 51 63 54 d5 9c ff bf f6 39 67 9f b9 fa b2 d7 fa ff aa 51 63 7c e3 3a eb 36 97 70 fc 1c 08 7c 08 11 58 d7 f5 93 21 84 df 1d 42 f8 b1 10 c2 0f 87 10 de 08 21 fc 3b cb b2 fc 91 0f 21 bb 07 4b 07 02 07 02 07 02 07 02 07 02 07 02 13 08 2c 13 6d 8e 26 07 02 af 0c 81 75 5d bf 33 84 f0 07 42 08 ff 58 08 Data Ascii: PNGIHDR{4 sRGB IDATx^[nKvTs]g% !<!P$< B%A(\@!nu?QQcT9gQc\|:6p\|X!B!;!K,m&u]3BX
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 78 7e c4 14 f6 3a b0 9b f7 71 fe 78 08 e1 1f 0c 81 6b ca 10 5e ac 6b f8 da fd 1a de 3a a5 0f 69 43 e7 a7 ae 42 f8 e2 ed 15 8b fd 57 97 65 f9 8d af 03 06 87 0c 07 02 07 02 07 02 07 02 07 02 1f 47 04 8e c2 f3 e3 a8 f5 0f 48 e6 75 5d c9 de 7e 5f 08 e1 df c4 65 f5 87 35 84 af 3f 9c c2 37 1e 12 63 54 70 b2 61 7e e1 66 09 9f be 2e 66 fa 27 8e 53 ed 1f 90 f2 8e 61 0f 04 0e 04 0e 04 0e 04 0e 04 2e 80 c0 51 78 5e 00 c4 83 c4 18 81 75 5d 7f 28 84 f0 1f 86 10 7e 33 b6 fe d6 c3 1a fe fa fd 1a ee 55 c1 49 6d c8 38 7f e8 c9 55 a8 75 67 f8 91 65 59 7e 6a 3c da d1 e2 40 e0 40 e0 40 e0 40 e0 40 e0 40 e0 c3 88 c0 51 78 7e 18 b5 f2 1a f1 b4 ae 2b 6d d3 fc fd 21 84 3f 16 42 78 c6 a2 f1 b2 3a ed e3 c4 1f 5e 62 a7 cf 3e 71 15 c2 f7 d4 65 f6 9f 0d 21 7c 71 59 16 9a 10 3d 7e 0e Data Ascii: x~:qxk^k:iCBWeGHu]~_e5?7cTpa~f.f'Sa.Qx^u](~3UIm8UugeY~j<@@@@@@Qx~+m!?Bx:^b>qe!\|qY=~
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 7f 97 65 f9 f2 6b 04 ef 21 ca 81 c0 81 c0 81 c0 81 c0 81 c0 81 40 46 e0 28 3c 3f e6 a6 b0 ae eb df 17 42 f8 0f 42 08 df ce 50 d0 65 f0 74 62 fd bd 93 01 0e 57 9c 7c 7a 5d ed db c4 3b 95 b0 08 d5 94 68 c9 9e 0a 56 6a 43 af c8 fc 6c 5d 66 ff f1 65 59 fe c5 8f b9 5a 0e f1 0f 04 0e 04 0e 04 0e 04 0e 04 5e 4b 04 8e c2 f3 b5 54 eb 58 a8 3c cb f9 a7 43 08 bf 17 5b 7f eb e1 14 7e c1 bc 0c 9e 2a 45 6a 99 cb 49 ae 2a f1 5f 3d ac b5 1f 54 b5 a1 02 f4 7b 6f af c2 d3 ba cc fe 5b 97 65 f9 1f c6 12 1c 2d 0e 04 0e 04 0e 04 0e 04 0e 04 0e 04 3e 6a 08 1c 85 e7 47 4d 63 17 e0 77 5d d7 df 13 42 f8 77 43 08 df c6 e4 ee d6 35 fc f5 fb 53 78 a7 79 fd 50 36 91 38 b3 a9 4e 14 c1 ec 67 a4 a3 0f 1c e9 cf 90 f7 dc 97 5e 52 f4 03 4f ca 69 f6 f7 43 08 9f 59 96 85 fe 3d 7e 0e 04 0e 04 Data Ascii: ek!@F(<?BBPetbW\|z];hVjCl]feYZ^KTX<C[~EjI_=T{o[e->jGMcw]BwC5SxyP68Ng^ROiCY=~
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: ee 7c 72 fa c7 43 08 74 90 a5 fc 90 bc ef ad 0f e1 ed d3 43 78 67 7d 08 54 22 e3 8f 97 d8 13 4c de cf 24 8b 06 81 fa 91 54 00 8f 84 fc 68 47 9f 71 fc 6c d2 9b 0e d6 68 29 65 6d 52 f9 b4 da 0d cd d0 c0 20 c9 28 31 4c 9f d1 a7 76 71 38 e3 80 e3 36 68 ee 3e e7 ba 36 b3 1c c5 fb 6c 26 21 72 e8 a9 d0 ec 2f 3c 7a 89 c8 fa ce 4d 2a e9 0e fe f2 13 e3 40 fc 0c f5 54 f9 dc 93 00 c7 fa d9 f6 30 e6 f9 43 cf 87 86 f6 aa 92 46 2f 3e 70 8c b0 fc 14 03 ac 8e 25 2d 7f 35 20 c3 ed b3 05 f9 51 f2 98 c1 55 cb 3d 1b 5b 9a 04 01 f7 e3 62 82 f5 da cd 8c 6b ad 85 78 49 74 93 4d e7 c1 ad 42 40 eb 40 d8 be 13 fb 47 38 f7 ec b1 9f 4f 7c ab d4 63 6a 6f 9c 89 37 16 0d af 38 e2 b8 b6 97 5f 8b 1f 1d 75 35 d6 d6 58 5e 7c 71 e3 17 e8 5a e7 52 2b ea 5f ca a7 50 e7 eb 5a a3 25 e3 4b df 53 Data Ascii: \|rCtCxg}T"L$ThGqlh)emR (1Lvq86h>6l&!r/<zM*@T0CF/>p%-5 QU=[bkxItMB@@G8O\|cjo78_u5X^\|qZR+_PZ%KS
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 8e d6 1f 77 56 85 e2 79 31 a0 cb a8 a9 ee 79 93 ec 9a c5 4e 46 cd 9f 33 e2 b9 91 76 b7 57 9b b0 76 c3 68 62 e5 f1 54 c7 e5 bd 7d 36 ce e8 94 18 3c 4c 94 c1 7a f4 b8 d6 c9 b7 51 a0 9c 75 5e 4d a7 86 8c 44 a1 87 01 07 17 1d 18 75 40 d0 89 d0 0b fa 56 bf 5a be f5 f6 10 aa a7 41 e7 44 a3 87 89 eb 1b c6 65 57 5a a7 b1 2f cc a0 cb 72 93 83 82 6f dd 35 42 4b 1b c2 53 99 a5 b7 91 f0 b7 ea b9 97 70 8b 5d aa 71 50 cf 28 89 29 15 14 14 25 f9 c0 e3 a3 8d 0f 2e 09 59 65 a8 e5 67 f5 e0 9d 65 5f 9a 4f c6 09 65 e4 c4 e9 45 3d cf 2e 3c 3b 45 5d 58 c9 5f fb 93 4e da 16 1f 96 bd a1 2c 98 74 2c fd 69 fb 40 74 87 d1 de c8 b4 22 c9 e5 dc 61 d9 e0 08 3b 4b 06 c4 d5 a3 d9 e8 51 35 b4 72 82 b6 f9 9e 37 7a f6 6d c5 72 3b 76 fa 1e 39 8a 33 96 ae b4 4d 51 fd c1 45 3f 7e 67 f1 3d 93 Data Ascii: wVy1yNF3vWvhbT}6<LzQu^MDu@VZADeWZ/ro5BKSp]qP()%.Yege_OeE=.<;E]X_N,t,i@t"a;KQ5r7zmr;v93MQE?~g=
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 85 91 87 bf e5 7e 5e 8e 43 d9 74 ec d4 3e 62 15 32 66 71 63 e8 4d f0 4e be c6 0f a1 93 b1 5c f8 73 66 4c c4 c6 fc 87 e0 07 3e b3 ec 3d 96 6b 86 92 08 ff 38 cb 99 89 45 32 6c 27 da c7 d4 7e d4 d2 2e 83 59 c6 05 9e ad fc 51 b0 66 6c 50 19 7c ff e5 42 6f 03 4a ff 3b ad a7 b8 24 4d 4c c6 7f e3 7f eb 0e 49 91 c7 01 3c 5e a6 a6 19 43 fa 0f c9 b9 84 ab 7c 42 ff 2a a4 cf 59 e0 ca 44 2f 67 75 73 ae 3a 43 e0 d9 90 ce 73 a8 16 d2 d3 c3 a9 c6 3c 5d 07 94 19 69 15 ff bf f3 26 84 4f d6 03 47 74 cf e7 af d5 97 cc 37 55 c6 ba ae 74 1b fd df 4f b4 e8 ca a4 9f 7d 78 6f e2 e4 7a 43 46 62 e2 26 c4 41 3f 8d ac fb f7 98 8e 08 16 e8 8d 4d 04 30 9e b4 ac 71 67 93 3c 3f 73 e8 f6 18 5d 34 3f 53 72 8f 65 9e 21 23 5e eb 8e 86 ef f1 34 23 37 b2 d6 95 cd 33 7b 3e 55 e3 c8 38 8b a5 c7 Data Ascii: ~^Ct>b2fqcMN\sfL>=k8E2l'~.YQflP\|BoJ;$MLI<^C\|B*YD/gus:Cs<]i&OGt7UtO}xozCFb&A?M0qg<?s]4?Sre!#^4#73{>U8
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 48 2c 26 fe 75 9e c2 82 bc f8 f0 60 ff 54 79 40 c9 b6 c2 cc 14 36 58 56 e5 8a 3a d1 26 0c 65 01 27 1e a8 d9 07 a0 58 29 96 a1 b0 8b 7f f6 f6 86 3a 7b 49 b9 38 90 be 84 11 28 c7 22 6b 4f 5c b1 c7 24 b9 c0 16 79 06 dd b3 dd 95 1a 96 31 04 ac 74 91 26 8a 81 ce de c8 1a 83 73 0c 85 a4 80 0f 2a 3a 6f eb 88 c9 31 cc 2b 02 45 ff 26 86 d7 f8 dd 0b 5d 45 cf 68 af ca 47 d8 3e b0 c0 d5 f7 da 62 a1 17 bb 83 d3 37 51 d1 7c 30 4b f6 87 66 88 b1 09 17 0d 04 ab 19 04 9d 43 30 e3 08 7f c0 c0 93 15 15 bf 57 3e 59 c2 ab 55 b4 aa 14 86 36 6f e5 57 ce 67 ed 76 2a 25 2f 28 0a f7 aa eb bc 16 65 b3 ee fa 54 be 21 ed 2b ef 83 64 df cc 5f c6 b9 bb bc bf bf 84 50 8c af 86 bf a1 7d 5b 21 9f f1 88 7c 37 89 77 8d cb e6 34 b3 79 bf de c7 d9 cd d8 0c fc 0f cb 4e b4 dd 26 bf c3 1c 1f 0e Data Ascii: H,&u`Ty@6XV:&e'X):{I8("kO\$y1t&s:o1+E&]EhG>b7Q\|0KfC0W>YU6oWgv%/(eT!+d_P}[!\|7w4yN&
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 69 3c 70 c2 38 7f d7 ec 4f 56 93 ca 28 9b 70 e7 78 f5 90 5c 8f 8e 77 73 c2 d5 79 68 1f 4d 4c b1 e2 0a fb 20 c7 57 0b 3b ba fe 27 9c e2 52 3a cd 72 c6 e5 74 43 4e d3 36 8d bd c7 b1 1d f8 0c 6e 15 72 c3 1d c7 f5 93 b1 0f 49 c5 29 2b 3f 16 f3 89 74 e4 86 67 cc 69 c5 7c b8 c4 82 7a 85 0a cf 5b 2e 40 63 15 88 46 ea ef 09 b5 64 b2 52 ac 76 83 32 fb c9 f3 d8 65 38 da 9b 1a 02 5d af 44 87 8d f2 cf 1f 5c 96 e5 4f 25 f1 d6 f5 7f 0d 21 fc 26 fa fd eb a7 f7 c5 6b 31 75 4c b2 6c 42 04 10 91 2d a1 f0 44 d0 b5 84 18 78 e2 00 bc 71 08 b2 a1 42 c0 f3 45 db 97 db 0b eb 75 52 47 19 ca 89 b5 fc a1 18 2b 7f 19 81 03 7d ea 71 a5 aa 8d 18 53 36 a4 19 1b 40 ac 20 69 e1 a7 71 43 5c e3 77 a9 cc 48 3f b5 10 b5 74 ca 5d 1b 55 e4 9e 9a 4e 6c 0f 13 3f a5 3f 14 e0 ec f4 f1 23 70 8c cc Data Ascii: i<p8OV(px\wsyhML W;'R:rtCN6nrI)+?tgi\|z[.@cFdRv2e8]D\O%!&k1uLlB-DxqBEuRG+}qS6@ iqC\wH?t]UNl??#p
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 31 6f 6d 0b b4 af f4 ad 24 ba c5 37 a4 26 c6 5b d6 da d1 2a 7f 96 9d ec 91 cf f3 07 1c db d2 fb 8c 2d d8 fd ca ae d9 06 49 7b 83 99 65 05 bd 8c 38 ce 34 33 bc 8f b0 bc 14 8d 2d 38 cf 8c b9 57 57 8d 6f cd 9c 59 30 40 f2 78 d4 9f a3 2f 6c 71 d3 19 0c ba 31 7e a4 d8 89 6c de e3 77 e4 e3 f1 7b 58 56 e6 e1 a8 c6 a0 e5 75 8b 76 cf da c7 e2 a4 65 75 2a 38 e3 85 ef 54 e6 c4 45 a7 4a d5 7a 8c d3 a7 d9 b9 f5 48 57 2c db 8c 1d 5a 36 31 f2 07 94 d7 b7 85 ee 59 fc 48 a2 67 47 a8 43 7a 3f 14 15 9f 34 03 4a d7 30 e9 78 7f 96 3d e6 ce 58 7c 32 ce f4 fe f6 4f 5d 17 1d fd 11 2a 3c ff cb 10 c2 3f 4c cc 7f 23 ee ef a4 99 d0 5e f8 1e 9b 06 b7 d0 4a 95 bb 0c 6b da 43 23 40 a3 ec 3f ac e5 ab 55 71 bf 9d 33 77 a8 43 77 fa 5b 9a ff c8 00 7d 4c 2c 33 9f c7 48 b7 44 de 2c be d1 c8 Data Ascii: 1om$7&[-I{e843-8WWoY0@x/lq1~lw{XVuveu8TEJzHW,Z61YHgGCz?4J0x=X\|2O]*<?L#^JkC#@?Uq3wCw[}L,3HD,
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 9b bf f6 c6 12 88 22 90 83 48 67 d1 d3 25 71 7a 46 4d 61 27 b5 df eb a3 fd 3d c5 9a 6d 3d ca e8 fb 91 0e ad 30 60 25 65 8f ce 14 f6 ea d0 4a b2 05 f4 59 7c 74 b4 ec 94 53 62 6b 2f ec b1 be 0f 49 84 7a 7b 72 f7 6a d0 4b f0 1a b3 91 2f cf c4 97 42 c3 a9 0a 66 c6 98 e5 6b 96 d6 a5 db 8d 6c 56 e3 34 1a bf f7 bd ed eb 3e 07 56 5e 6b 43 8b bc d4 9c c3 3b 9d 93 c6 9f 5e 8e 98 e1 eb b4 3e 84 97 bc b4 9e 09 6b ef 99 b1 a9 56 da 1a 15 b4 bc 16 cf d6 83 45 af 9d 8b ae ba d7 b3 67 07 9e 4e f9 e1 74 d6 27 47 b6 c6 91 87 eb 71 3a 6c 44 cb ee 4f af 9f 04 3a 84 e4 45 ab a9 18 0a 9d a9 70 3f 9d d6 f0 e5 67 e5 58 fb 03 15 9e 45 13 5c 78 8e 18 ae df 4f b1 50 8a 9a 96 ee de 70 e8 71 68 d0 1b 24 62 49 e9 b1 f8 19 85 8f 1e e2 97 e6 49 8d 25 ac f8 d2 63 cd db c7 8c cd 59 0e 57 Data Ascii: "Hg%qzFMa'=m=0`%eJY\|tSbk/Iz{rjK/BfklV4>V^kC;^>kVEgNt'Gq:lDO:Ep?gXE\xOPpqh$bII%cYW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49818	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	610	OUT	GET /static/img/buding-in.537670f0.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:56 UTC	915	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:56 GMT Content-Type: image/png Content-Length: 33006 Connection: close x-oss-request-id: 670A6B218F02F93930E725D6 ETag: "537670F0CFE6D2EEF641A50FA13D3752" Last-Modified: Tue, 20 Aug 2024 09:32:40 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8100039110384243175 x-oss-storage-class: Standard Content-MD5: U3Zw8M/m0u72QaUPoT03Ug== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5394 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PZWT2cYmYzc7cuZMG9HVc2jWM%2BMbYmibwYo%2F1Fzy9B%2FysX9ikSPFfZadpyTct9k2iOzFx0%2FwW1SkHwUM%2BK5m4cSgKxY%2BMbnW9zCX3%2Bedbflu7ubfxYY%2BFw0zQEvW3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088b05ca10f3b-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:56 UTC	454	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 8c 00 00 00 bc 08 06 00 00 00 f2 d6 ff 52 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 09 98 65 67 55 ee ff 7e fb d4 d4 73 27 21 09 09 93 0c 61 1e 03 09 01 05 82 24 c4 24 cc a1 03 46 ae a8 28 51 d4 ab 78 f5 af 32 dc cb 5f c4 e1 11 45 2f 86 21 2a ca a0 08 49 20 0c 01 12 50 86 30 25 04 19 03 84 59 42 20 64 ea b9 6b 3a 67 7f f7 79 d7 b7 d6 3e df d9 b5 4f 9d 7d aa ab d3 5d e9 75 78 8a aa ae da c3 b7 df bd 2b e7 57 ef 9a 02 0e d0 2b 9e fa 8c ad 58 3f 79 4a 89 f8 28 84 e2 41 11 b8 57 11 71 5c 0c 38 02 c0 0c 80 89 03 74 6a 3f ac 2b e0 0a b8 02 ae 80 2b e0 0a b8 02 77 54 05 ba 00 e6 42 c4 f6 32 e0 c7 01 f8 2e 62 79 6d 81 70 0d f6 2d 7e 36 7c ec d2 1d 07 e2 c2 c3 6a 1e 34 9e f9 Data Ascii: PNGIHDRRsRGB IDATx^egU~s'!a$$F(Qx2_E/!*I P0%YB dk:gy>O}]ux+W+X?yJ(AWq\8tj?++wTB2.bymp-~6\|j4
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: e8 86 71 cf 3a 36 30 76 cf 7c f6 2f 84 50 5c 80 80 2d e3 9e cc b7 77 05 5c 01 57 c0 15 70 05 5c 01 57 c0 15 38 88 0a 44 ec 8c 45 f9 9b 13 ef bf f8 5f c7 59 45 6b 60 8c 67 9e 39 5d 16 9b 5e 0b e0 d7 c6 39 81 6f eb 0a b8 02 ae 80 2b e0 0a b8 02 ae 80 2b 70 c8 29 f0 0f 45 b9 fb b7 c3 07 3f 38 df 66 65 ad 80 31 9e 7d de 11 31 76 2f 8d 01 8f 6f 73 50 df c6 15 70 05 5c 01 57 c0 15 70 05 5c 01 57 e0 d0 56 20 44 7c 22 84 89 67 84 cb fe 6d fb a8 95 8e 04 c6 f8 e4 67 1e 53 4e 4c 7c 18 21 3c 74 d4 c1 fc e7 ae 80 2b e0 0a b8 02 ae 80 2b e0 0a b8 02 6b 48 81 18 bf 5c 74 bb a7 87 2b de 7d d3 72 ab 5e 16 18 e3 19 db 8e 2c 3b f8 a8 c3 e2 1a ba f1 be 54 57 c0 15 70 05 5c 01 57 c0 15 70 05 c6 50 20 c4 f8 e5 d0 c3 13 c3 e5 17 dd 36 6c b7 a1 c0 c8 9c c5 5e d8 74 79 08 78 c2 Data Ascii: q:60v\|/P\-w\Wp\W8DE_YEk`g9]^9o++p)E?8fe1}1v/osPp\Wp\WV D\|"gmgSNL\|!<t++kH\t+}r^,;TWp\WpP 6l^tyx
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 2e 9f e0 d2 4a 37 df c8 15 70 05 5c 01 57 c0 15 70 05 5c 81 83 ad c0 a6 99 c4 71 9d 02 f1 25 17 03 db f7 b5 5b 51 c4 cb 43 ef ec 73 df 0e e0 b9 ad f6 38 ed 81 08 db 4e 42 e4 d0 eb 0b 3f de 6a 17 df c8 15 70 05 5c 01 57 c0 15 70 05 5c 01 57 e0 10 51 e0 fc 53 11 4e bc 07 e2 c5 d7 00 1f be b6 dd a2 62 7c 47 28 cf 3e f7 aa 08 9c dc 6a 8f 9f 7d 00 c2 93 1e 88 f8 ae cf 03 84 46 7f b9 02 ae 80 2b e0 0a b8 02 ae 80 2b 70 87 53 20 6b 56 68 33 f1 f8 39 34 4c 4e b6 6f 71 97 fc 23 df 74 8c de 87 07 5c ca fb 1c 03 dc 79 0b f0 a5 eb 5b 8f 70 8e 31 5e c3 90 f4 0f 10 70 b7 b1 16 38 66 e3 c7 b1 8e ed 1b bb 02 ae 80 2b e0 0a b8 02 ae 80 2b 70 40 15 88 03 0d ac a3 75 b3 16 28 d4 13 f3 73 41 46 0c a9 4b 75 11 e4 df 03 2f fe 3b 87 c4 92 ad 67 f4 d8 dc 8f 3f 93 ef d5 1a 66 1f Data Ascii: .J7p\Wp\q%[QCs8NB?jp\Wp\WQSNb\|G(>j}F++pS kVh394LNoq#t\y[p1^p8f++p@u(sAFKu/;g?f
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: e5 37 5b 1d d8 37 72 05 5c 01 57 c0 15 70 05 5c 01 57 60 7f 14 88 13 11 98 2a 93 c3 68 8d b8 ad 1a 45 18 51 2b 8b 05 16 19 ae e6 54 16 ba 8a d6 3e 47 5b e5 34 75 9c ae 7f 2f 87 b6 91 8b 1e 17 1a 5b b8 8c 03 f0 aa 39 8e ac e0 26 0c b3 8a 7a 1f 9d c6 32 35 fd 5e 25 68 1c 79 99 d9 06 ed 81 71 9c a3 fa b6 ae 80 2b e0 0a b8 02 ae 80 2b e0 0a ec 87 02 52 e0 42 58 64 28 ba 3e c3 b9 0a 43 2b 34 8a b3 88 e4 28 8a b3 68 85 2d d6 80 51 17 d2 66 54 49 6b a7 91 c7 1c 17 1c 4d 90 16 fb 59 81 8e d8 80 da f0 7b b6 44 24 34 32 af b1 ac ca ae f7 43 e5 f6 bb 3a 30 b6 d7 ca b7 74 05 5c 01 57 c0 15 70 05 5c 81 db 41 81 d8 29 25 67 31 4e 29 2c 1a 1b 99 ab 68 fd 09 09 8e fc 19 8d 44 82 a2 8d f5 b3 9c c5 81 96 39 2d 20 6d 80 01 5b 6e 2f 1d c1 57 c2 8e 2d 8e 6f d0 c8 4d 6d ac 20 Data Ascii: 7[7r\Wp\W`*hEQ+T>G[4u/[9&z25^%hyq++RBXd(>C+4(h-QfTIkMY{D$42C:0t\Wp\A)%g1N),hD9- m[n/W-oMm
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 14 76 96 1c 45 ba 89 cc 9b 9c 24 d0 85 14 42 ce 3e 57 95 d4 3c 46 5e 04 23 4b 49 10 2c c7 b1 74 47 ba 95 cc 81 ac 26 d7 14 08 d2 89 5c 1d 47 09 55 67 f9 8d 4d d0 28 fa 65 6d 7f 78 3c ba 8c 6c ee 3d af c0 38 12 aa 47 3f 9d ed 1b 77 8f 3e 96 6f e1 0a b8 02 ae 80 2b e0 0a 0c 2a 70 fc 16 e0 47 3b 5d 15 57 40 15 48 60 18 0b 86 a2 f9 b5 86 75 09 90 7c 19 db 55 8e 9c 82 16 01 51 fa 2d b2 48 c4 26 9f b4 05 c6 fc c0 0d 37 22 2f 36 e1 79 eb b0 48 48 33 a0 25 28 72 1d 3a 51 66 c0 4d ac 5a ec 64 74 96 83 5a 13 b7 f2 5c 74 2f 25 5c 6d 79 87 12 9f ef 43 a3 84 ab db 40 63 e6 46 2e 46 44 16 c0 cc 96 08 74 19 c5 c5 1c 05 ce cb 3f a4 0e 8c fe 4b ec 0a b8 02 ae 80 2b 70 60 14 d8 34 0d dc 6d 2b f0 b5 9f 1c 98 e3 fb 51 d7 9e 02 04 2f ab 8c 96 82 17 75 1b eb 2c b3 c4 5d d4 dc Data Ascii: vE$B>W<F^#KI,tG&\GUgM(emx<l=8G?w>o+*pG;]W@H`u\|UQ-H&7"/6yHH3%(r:QfMZdtZ\t/%\myC@cF.FDt?K+p`4m+Q/u,]
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: e0 0a b8 02 ae c0 4a 15 60 eb 91 df 7c 28 c2 d1 eb 07 8e 10 f7 2c 20 fe df 2f 02 fb 7c ea cb 4a a5 5d d3 fb 31 1c 4d 58 9c 4c 61 df 41 18 d3 50 b4 84 a3 75 8c 1e d9 8e b0 c8 70 f4 b4 16 bb 48 41 cc 30 15 6a 2e e2 92 cd cc b9 cb dd 45 6d 9f 23 51 5e 1d f3 c7 e7 d7 5c c8 25 c7 48 05 31 8a b3 39 0d 37 7c 6f 94 cb b8 dc dd ac 15 d2 54 11 ec 54 41 2d 15 dd 0c 3f cb 20 eb 4e 0a 4d 0f 2d be c9 7a 33 f2 94 0b 65 15 9a 0e 7f ef c0 b8 a6 7f a7 7c f1 ae 80 2b e0 0a ac 65 05 c2 d3 ef 89 f0 c8 a3 1b 2f 21 7e 67 17 e2 5b af 4b 79 6a fe 3a 7c 14 20 db 58 ee 62 5e ec 52 15 af 18 08 25 60 14 26 63 b1 cb 34 dd c5 94 4f 58 15 bb b4 79 74 ea f9 7c 96 37 a8 a1 6f 71 e9 d8 6f 51 1a 73 d3 5d a4 b3 a8 2d 74 9a 26 aa 08 8c b1 21 a3 da 74 ac 92 59 12 82 ae 2c d3 55 b8 af 0d 61 e9 Data Ascii: J`\|(, /\|J]1MXLaAPupHA0j.Em#Q^\%H197\|oTTA-? NM-z3e\|+e/!~g[Kyj:\| Xb^R%`&c4OXyt\|7oqoQs]-t&!tY,Ua
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: fe f3 36 3c 16 b6 e6 f9 19 03 e6 87 b9 91 b6 1d f5 c9 7e 79 06 60 31 4d 77 49 2f 86 bd d9 79 db 72 3b 55 d3 9e cd 5a b4 aa 69 dd fc 1e c7 22 3c ef c9 a9 e0 e7 c6 db 80 6f 5e 0f dc 70 13 70 cb 6e e0 d6 7d c0 4e 8e 0c 5c ae 65 51 3a 4e 6b 60 94 60 ff 86 29 e0 98 cd c0 3d 8f 06 1e 7c 17 84 fb dd 19 f1 53 df 06 fe d5 81 f1 00 fc aa f9 21 5d 01 57 c0 15 58 53 0a 84 47 6c 40 78 e2 d6 e5 d7 cc 37 ad cf ec 46 bc 6a b7 4f 7e 59 53 77 77 05 8b ed 28 28 12 18 ab 70 74 56 7d cc 43 6a 8b 1b 2c aa 8d 48 06 23 2c 32 1c cd fc 42 2d 88 19 fc 23 64 58 de 5f 6d 8d 59 3a a0 80 22 21 90 4c 16 58 58 63 b0 98 e7 2e ea 0e 3a a2 30 2e 76 11 69 8c 71 6d 65 a0 27 a9 61 66 86 cd a7 10 66 d6 09 3c a2 e8 20 14 1d 60 82 8b cf 42 c8 03 8e 63 be b6 1c 14 73 80 54 88 94 1c cf bc c0 27 f5 Data Ascii: 6<~y`1MwI/yr;UZi"<o^ppn}N\eQ:Nk``)=\|S!]WXSGl@x7FjO~YSww((ptV}Cj,H#,2B-#dX_mY:"!LXXc.:0.viqme'aff< `BcsT'
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: a2 d4 ea 74 56 dc a7 4e 25 db f4 44 02 e3 02 70 ff 7b 22 3c ed 89 29 f2 7d e9 7f 00 d7 fd 40 b5 53 67 b3 7e fb ec ef 36 b9 44 75 35 67 19 96 ee 01 b3 71 3e 96 c5 67 03 ca 8f 46 e0 f3 dd 32 7c 6b ba 8b 1b 71 04 f6 0c f5 73 e3 69 db b6 f4 a6 c3 39 40 7c 51 40 78 e4 d8 8f 0b a1 f1 ff 3b 2b 39 8d 5f f8 01 f0 86 8f 8e 7d 08 df c1 15 70 05 5c 01 57 60 ed 2a 10 9e d3 41 d8 1c 50 5e d4 05 76 ac dd eb f0 95 af 40 01 86 a1 09 8c fc 2c 7d dd 6b c0 28 6e 5c 02 46 c9 5f 24 50 4a c1 0b e4 b3 14 8d 18 30 66 5c d5 bc 92 1a ca 18 30 4a 27 9b ac a0 86 df cf 81 71 e8 18 3d 9e 5f 1a 41 26 67 51 e0 91 3b 5b 55 72 16 2e b6 d6 38 74 1d 4b ba 8c 1a b2 26 fc 2d 2c a2 64 e1 49 e8 a0 d8 b0 09 c5 fa 4d 29 3c 5d 15 fd e8 d5 d0 55 ec 2e a2 dc b3 33 fd 8c c5 33 13 2c a0 a1 20 7a 6d 3c Data Ascii: tVN%Dp{"<)}@Sg~6Du5gq>gF2\|kqsi9@\|Q@x;+9_}p\W`*AP^v@,}k(n\F_$PJ0f\0J'q=_A&gQ;[Ur.8tK&-,dIM)<]U.33, zm<
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 5c 44 57 56 4c f3 d8 36 d7 da 20 5d 81 91 e0 28 58 1b 3f dd 09 e5 19 e1 75 17 ed 59 c9 f3 b6 62 60 e4 c9 76 3d e9 99 47 6d 98 99 f8 0c 10 4e 68 75 f2 9f 39 01 e1 bc 53 10 3f 7e 1d f0 8e ab 5b ed e2 1b b9 02 ae 80 2b e0 0a b8 02 ae c0 1a 52 40 2a a4 d5 61 94 3e 7f 96 bb c8 bc 44 05 1f 82 19 dd 3b e9 c1 18 11 a6 a2 d4 99 c8 0c 69 42 9d 00 63 6e d3 35 5d 7f 53 75 34 b7 4b 4e 60 ea bf 98 e0 69 49 3b 9d 81 1c c6 ec 38 da 27 92 d5 d5 b2 3e 9d ee 92 e6 50 a7 06 dd a9 75 8e 42 24 43 d4 92 32 48 17 b2 00 26 39 e5 65 06 81 e3 02 c5 f0 d3 19 d3 85 b6 d4 e1 f1 1a 5b eb e8 ba 53 a5 4e 4a e0 e4 e2 a5 f7 a3 f6 7d d4 82 9a f0 9c 33 10 4e b8 07 e2 7f 5e 03 7c ee eb 35 60 b4 c6 8a da 0b 52 4a d4 e9 5e 16 df 2a 3a f3 8f 09 17 bc 7b c5 c5 24 fb 05 8c bc bc f9 33 ce 79 d0 c4 Data Ascii: \DWVL6 ](X?uYb`v=GmNhu9S?~[+R@a>D;iBcn5]Su4KN`iI;8'>PuB$C2H&9e[SNJ}3N^\|5`RJ^:{$3y
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 6e 94 bb b6 4b 93 6f a9 b8 96 0f 16 d0 4c 22 4c 4f a3 f8 5f e7 00 eb 67 d0 7b f5 5b 81 dd 7b 50 4c 11 24 19 cb 27 30 b2 e8 85 1f da 7f 11 91 41 f0 17 84 0b de fd a6 d5 7a 6a 56 15 18 e3 69 db b6 94 d3 f8 89 66 21 2c bb c6 f0 87 67 22 de b8 0b f8 f7 ab 80 f9 fd 0e ad af 96 1e 7e 1c 57 c0 15 70 05 5c 01 57 c0 15 58 a9 02 36 e5 c5 1c 46 71 d9 b2 c6 dd e6 30 b2 35 8d 85 a4 3b 06 8c 1a 92 96 d1 7c 6d 16 50 43 98 0c 18 a5 ff 22 3f f8 b2 fc 45 31 0b 15 10 97 f4 62 14 d2 d2 fe 89 93 40 b1 45 2b 8e 17 f4 7b fc b9 f5 3c 24 98 d1 65 b4 d0 6f d3 24 3b 19 c9 c2 93 eb 71 f8 d9 42 cc f9 f6 a9 aa 9a 4d bb 09 8b e5 ec 9e d4 46 47 72 18 35 3f 92 9f 39 53 fa 91 f7 45 b8 f3 91 28 3f 70 25 0a 9d f4 c2 f9 d2 72 5c 69 bd b3 a0 6b 92 30 f9 7c b1 b8 e7 d8 70 e1 47 76 b6 51 b2 cd Data Ascii: nKoL"LO_g{[{PL$'0AzjVif!,g"~Wp\WX6Fq05;\|mPC"?E1b@E+{<$eo$;qBMFGr5?9SE(?p%r\ik0\|pGvQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49820	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:55 UTC	609	OUT	GET /static/img/botton-1.93f3ca53.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:56 UTC	909	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:56 GMT Content-Type: image/png Content-Length: 26008 Connection: close x-oss-request-id: 666D31CE048FEF3431F85351 ETag: "93F3CA53871F273491D214494A0B5D43" Last-Modified: Mon, 20 May 2024 05:15:45 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5174893089628399927 x-oss-storage-class: Standard Content-MD5: k/PKU4cfJzSR0hRJSgtdQw== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1363 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PwhB4KlFX0T4YXYNZl33h%2FpZqXC1IUEEZwGsz9tRntwZ%2BCZDAwZgHu2c3hmdWWTdLXiGjZnlNqrWnpASvG7%2BQFh063P3LqmG211AwZAYm9Uf1MyiQH%2Br%2F0u9GBo4Mw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088b05c3442ad-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:56 UTC	460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 4e 00 00 00 58 08 06 00 00 00 03 49 78 5a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ed bd 7b cc ae d9 75 17 f6 bc 67 3c 73 66 c6 8e 4d 94 d8 71 e2 0c 14 21 a4 16 fa 6f 05 52 a3 a8 a2 97 54 a8 55 d5 0b 42 c8 06 13 1a 94 22 8a 8a 7a b3 02 28 72 02 98 24 0d 89 c9 5d 94 26 0d 38 6d 09 34 6a 28 0d 25 10 2a 45 a4 04 da 46 15 25 b4 b4 0a 89 6d 4e 35 f6 50 1c 5f e6 72 ce f8 9c b7 7a f6 5e 6b ed df fa ed b5 f6 de cf fb 7d 67 3c 93 79 47 3a f3 7d df fb ee 67 5f d6 e5 b7 7e 7b ef b5 f7 73 da 06 ff 9d cf e7 27 5e d8 5e 78 e6 ff db 1e dc bd bb 3d f9 96 3b db 9d 3b 77 b6 ed 34 7a e6 fa dd 55 02 57 09 5c 25 70 95 c0 55 02 57 09 5c 25 f0 46 91 c0 a3 6d 3b 3f da 1e 3d ba bf bd fa f9 2f d9 Data Ascii: PNGIHDRNXIxZsRGB IDATx^{ug<sfMq!oRTUB"z(r$]&8m4j(%*EF%mN5P_rz^k}g<yG:}g_~{s'^^x=;;w4zUW\%pUW\%Fm;?=/
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 2b 9f d2 95 a7 42 9c 24 09 fc 9d d7 ed b9 37 b2 5a af 7d bf 4a e0 2a 81 ab 04 ae 12 b8 4a e0 2a 81 c7 21 81 7d db ee 9d db 5b 5f d8 73 9e 0a 71 fa e8 f9 97 bf f8 b4 bd fa cc a8 b1 77 fd f8 4f fc 86 27 3f fe fc fb ee 7c fe d5 7f 7e 3b 9f 9f db ce e7 bb e5 7c 5d f9 77 96 9f 52 83 7d 4e 7f ef 7f ea 77 fa 3b af 7d e1 e6 e1 4d cf ef ed cf 9f a5 cd fd e7 4d ff d3 fe 60 9d d8 47 6d 23 6b 57 3f 8f fa 31 fa 6e d4 6f 7c ee d2 3a 50 07 97 ca 69 d6 f6 ec 7b b5 07 6c 7f e5 99 e8 b9 99 7c b9 de d5 76 b0 de ec 99 15 1d df c4 2e 2f 69 f7 88 7e 57 ec 09 fd 60 45 6f 51 9f dd 67 e7 ed bc 9d e4 b8 6e 35 80 ea 62 fd 83 ea 7a 3a 24 76 6f 76 47 27 6a 81 a9 c8 c4 47 c3 4e 55 5a 1a 97 1e 94 4a eb 28 da 08 aa 70 ea f3 ad a7 0b e2 a8 c3 23 19 1d 81 2f 7b f4 cc a3 5d 34 76 c6 b8 52 Data Ascii: +B$7Z}JJ!}[_sqwO'?\|~;\|]wR}Nw;}MM`Gm#kW?1no\|:Pi{l\|v./i~W`EoQgn5bz:$vovG'jGNUZJ(p#/{]4vR
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 2d 89 96 72 bb 35 f7 b5 bd 96 6d 3d ee b1 5c eb 8f 25 60 3a f6 14 c5 45 50 05 6c 5b 39 88 af f8 cf c2 ab 8f 83 1e 80 8f 10 9a 15 15 22 e0 ba d4 99 51 64 82 4e c4 3c 23 8b 36 03 56 92 06 28 8b be b9 3e 56 06 7a a3 32 40 28 2c 14 27 15 46 5c 07 83 29 8a e0 52 92 16 11 df 51 5d 9c 13 b5 d4 2e ca 7d a4 b7 fc bb 10 0e a1 5a db 5d b4 3c a7 75 25 21 f9 39 9d 85 f0 00 bb b6 ef 99 29 2c 8d 7d a2 5b 64 64 21 a3 9f 8f a3 4e 88 fc a4 06 28 62 b8 ad 8d 2b c5 4a 84 5a 28 56 19 04 6d d3 e4 c6 4a 44 00 54 08 30 ed ab 2b f9 51 db 47 32 e4 48 94 92 a5 53 25 49 4a bc 94 20 c1 cf 32 7e f7 f7 9e ef 74 de ce e5 39 99 5c ca f7 a7 47 e7 f3 fd 7f e6 9f fe 9a 7f f2 f5 bf fd e7 79 74 9f df 1e 3d 3c fd d2 f9 85 2f 8f f2 9b de f3 3d 3f f8 a1 3b f7 ef bf df af 1e 05 a4 89 49 d2 8c 34 Data Ascii: -r5m=\%`:EPl[9"QdN<#6V(>Vz2@(,'F\)RQ].}Z]<u%!9),}[dd!N(b+JZ(VmJDT0+QG2HS%IJ 2~t9\Gyt=</=?;I4
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 50 07 02 c4 a8 8f b3 d8 33 eb cf 0a 16 ac 06 86 a3 43 42 56 c1 cf ae f4 eb 06 cf a0 eb 8f 70 83 4d 25 7a ae 8b df ba 8d 20 47 b1 0b 2d 9a 04 9d 4c 14 4b 62 c8 12 27 61 60 71 3d 39 ba d5 f2 93 d6 0d 58 01 61 cb 40 16 4f 1f cd 00 9b bf 1f 05 14 45 d7 e1 71 a2 05 69 46 7a 5a 78 ac a1 30 33 46 4d 22 a3 ce 1f 20 21 53 b7 b2 00 49 09 3b 17 b6 91 1e 2e 33 4e d9 32 56 f4 0c 25 a6 f5 0e c5 75 49 9f 82 38 8d e7 cd d7 ee 04 0a a4 88 e6 8f 41 75 69 a6 9a 68 65 38 be 00 3d 70 6b eb 90 6c 48 28 23 a2 32 35 20 2a d0 c9 3b 77 3c ec 32 5e dd 51 6a 24 43 c8 ed 22 a9 9f f5 33 88 75 cd 06 e4 21 ec 98 fe ae 04 09 b7 ec f8 fa 00 22 3b 96 b7 a4 ab 4f 48 94 94 40 3d dc 13 c2 5b 8e d3 9e 20 be 3d 3c 49 92 b8 e4 40 95 6d bd 6d 6b c4 a9 12 a6 6d db 7f 6e 13 e2 c4 ab 4d 11 31 62 32 Data Ascii: P3CBVpM%z G-LKb'a`q=9Xa@OEqiFzZx03FM" !SI;.3N2V%uI8Auihe8=pklH(#25 *;w<2^Qj$C"3u!";OH@=[ =<I@mmkmnM1b2
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 48 21 61 42 d2 a4 9f 47 71 ee 8d 48 96 86 0e 91 80 7c 16 e3 97 01 e1 12 b4 5b 65 24 51 d4 5f 7c 36 eb 3f 06 1a 0e 3a ab 80 32 ea 42 14 88 d1 96 42 40 c3 71 a2 51 e6 e8 e7 30 2d c8 39 c6 d8 1d 0d 13 81 c4 5e 21 26 f3 79 9d d5 87 b8 3f 02 e4 05 d5 b8 c9 7c 91 0b 0a 6c 92 33 b3 50 7f d7 e7 a9 38 89 30 cc 74 cb df 47 c8 3e ec 27 68 26 da f2 64 91 70 20 8e 48 b6 b3 5b b6 a5 41 67 16 8a c6 e6 dc 8e 3f d5 b8 a4 17 1a 02 69 26 5f 9a b9 96 89 51 77 25 dd 99 02 66 47 28 94 c0 b9 d8 f8 55 a6 6a 0b 47 6d d8 e4 74 01 1e ad 3c b2 c2 04 32 5c 89 70 ae 1b 1f cb 2f 11 40 d0 06 df f3 ca d6 d4 6e 07 d7 95 40 5c 11 94 d7 2e 05 13 07 9c 9c a1 ba 7c 4f e5 84 b1 eb 2e 24 ce 8d 62 17 86 a5 fd f9 6a a8 ee 2a 82 f2 b8 9e 90 d3 32 fb cf f2 ba 94 fa b3 e4 31 25 ab 4e 95 20 c9 0d e1 Data Ascii: H!aBGqH\|[e$Q_\|6?:2BB@qQ0-9^!&y?\|l3P80tG>'h&dp H[Ag?i&_Qw%fG(UjGmt<2\p/@n@\.\|O.$bj*21%N
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 8a 23 5a d9 d1 85 a8 6b e5 33 06 59 13 43 e6 18 24 57 6e 78 28 c6 c5 3a 2f 52 b3 5d 62 84 46 b4 66 7d a9 6e f5 16 5d ad 26 2e d8 41 20 bc 53 1b 5d 41 45 95 b3 cf 5a 42 ef 05 6b e5 07 57 49 90 ab d8 80 77 bc d5 84 6f 94 82 91 23 f2 35 24 4d fa 3b 26 88 d3 35 04 2d df c9 6f d5 d9 d6 dd c3 f3 76 7a 28 79 51 76 b7 53 db a6 b3 bb 9f ce e7 ed b3 3f f4 03 07 89 53 b9 39 3c 49 ec 56 42 34 bb 10 53 cb d9 4f 7a d5 0a 9c a6 2b 6a df c9 c9 1e b7 e5 3d 94 1a 24 5c bc 86 b7 c3 33 06 f2 bb de eb 62 68 33 a8 f8 66 65 7e 7b 58 e0 7c 80 93 16 b8 a4 71 4f 7a 26 46 14 b8 8a d2 a4 fa 95 ef af e3 0e 6c 60 5d 5d 71 60 5a f3 ce a4 14 fb e2 1a 0b 1b 27 e2 94 6e 06 15 ad 80 ff 91 c1 d8 ca 9c 28 ea d6 eb 97 ce a4 01 89 ad 33 e8 3c ab 0c 81 9e 82 46 1f 5f fd c3 ed f5 a9 b5 dd 62 d5 Data Ascii: #Zk3YC$Wnx(:/R]bFf}n]&.A S]AEZBkWIwo#5$M;&5-ovz(yQvS?S9<IVB4SOz+j=$\3bh3fe~{X\|qOz&Fl`]]q`Z'n(3<F_b
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: ea 7c 36 31 4a c6 18 cf 6b 62 9b 37 26 02 84 57 76 73 f0 2b 77 a9 2e a5 65 15 29 48 e1 53 21 46 01 7e 60 1c 89 62 b8 7b 04 fc 43 45 ac df ef 3f ed 77 c5 44 21 49 3a de fd 63 5d 6d 92 df eb 36 1e 5c 74 29 f7 3b ed 39 4b 75 fb ae 11 28 7c c9 af ad 52 ed db 79 7a 27 54 a9 73 db 3e f7 e7 ff cc 41 e2 f4 6d df 7b 6f 5f 0d 2a c4 49 49 92 92 1c 21 40 b6 b2 b4 7f ae db 6f 46 8e da ea 92 96 73 37 84 33 61 62 e2 c4 82 e7 0b 4a f4 a2 9c 23 47 b1 8b d0 69 19 bd 28 1b cf 7b 22 dd 3d 00 fa 59 d1 d0 be 56 3c 3a 70 d8 ae ae 95 7a 26 b3 cb 21 59 5b 19 3f 9e 8c 58 88 55 e0 bb 61 a0 5b 88 1a 15 3b 2c 95 b9 65 91 06 57 11 19 16 59 ae bd ba 7c 6d c8 9a c3 3c 0f 11 eb 42 57 3c 7e 57 74 d9 6c 2b a5 7b 21 93 97 4f 5f 3f e8 73 61 5b 30 0d 16 61 c7 9b bc 34 3b c2 c9 90 2b e3 53 5f Data Ascii: \|61Jkb7&Wvs+w.e)HS!F~`b{CE?wD!I:c]m6\t);9Ku(\|Ryz'Ts>Am{o_*II!@oFs73abJ#Gi({"=YV<:pz&!Y[?XUa[;,eWY\|m<BW<~Wtl+{!O_?sa[0a4;+S_
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 9d 0b 52 de 99 1f 56 ed b3 cb bc 98 f9 1a 46 2a c7 50 06 0f 0e 45 a3 4e 42 c7 19 33 f9 6b 33 c5 40 82 20 3e 7a 4e 9f c1 4b 96 a2 ec ec 81 a9 04 11 2d f7 ce d0 75 f8 c3 7d 37 a2 9e 78 62 d7 52 53 71 2f 41 76 06 12 78 49 e4 9f 5d 31 c6 3d 02 aa 14 50 89 a9 38 9c 0f f4 5f 9a a1 25 71 7d 33 81 e8 c9 4e c8 02 36 fa e6 77 d9 4c 72 83 34 54 64 a0 d1 61 c2 80 6d 45 f8 e1 9c 0a 0c 2c c3 42 73 d8 56 b6 cb 74 91 af ec 0a 21 a7 02 7d 39 8c fa 77 bb 28 bc 33 6f 9c e0 a8 0a dc 4f b8 fb 69 ff bc fc 83 d5 27 db a2 93 cf 6c f5 48 da 84 2d 3c cb 8d d2 ed 39 2d 2b 89 e5 65 15 4a da 78 f1 2f ff d9 83 c4 e9 8f 7d d7 3d 5b 72 d6 55 24 45 40 25 40 4c 7a ca e7 a2 05 fd 5d 57 91 f4 19 5d 65 42 34 c5 7a 28 28 0b a2 5a 6a 12 db 38 9a b9 61 90 d4 57 95 53 0d b6 da a4 3f b4 8b ca cb Data Ascii: RVF*PENB3k3@ >zNK-u}7xbRSq/AvxI]1=P8_%q}3N6wLr4TdamE,BsVt!}9w(3oOi'lH-<9-+eJx/}=[rU$E@%@Lz]W]eB4z((Zj8aWS?
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 73 00 a8 17 a5 7a 6f 8f bd 57 e0 8c 2f 0a 22 6e 12 3e c3 08 e9 13 6e 43 b4 0b 8c 46 20 b1 20 73 37 18 96 e2 cc db 61 49 3e 5a 55 40 80 ea 85 26 df 06 6d cc 9a e5 7a 9d ad 0d 00 90 c5 11 a0 78 5d e1 6c b3 42 8e 99 4d af fa ba 14 04 38 56 24 91 14 08 6e 9d fe ad 9a c8 da a0 e3 29 78 92 ee 0c b1 7a 57 73 7c cf dc aa 32 d8 32 fb 0b 30 ba fb 4c 63 1c 0c b1 f6 bc 7e 50 b6 49 f0 bc 35 ea d4 8d 21 51 36 e1 7b ed 14 94 8d 1d be 05 18 1e a4 81 5b 43 7c 94 34 76 15 86 51 a7 7b 32 9e 28 c5 a9 6c 76 d0 fc c2 85 3c 1e 47 e8 07 84 53 6c df 5d 1d 03 07 71 2b ee 55 17 9c 9e ce f3 84 3a de da 48 dd fa de 5f 95 a1 bb 2d d4 56 42 0a ab b8 a5 a3 33 db 83 58 e3 2e 59 34 53 05 3f 1a 61 41 34 99 90 47 9d 6e db f0 6c 65 a4 7c 1f a6 b9 e9 24 5f 6d 59 3b 15 54 ec 1a 91 bb 85 38 76 Data Ascii: szoW/"n>nCF s7aI>ZU@&mzx]lBM8V$n)xzWs\|220Lc~PI5!Q6{[C\|4vQ{2(lv<GSl]q+U:H_-VB3X.Y4S?aA4Gnle\|$_mY;T8v
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: a4 d1 fc ce 2d a7 47 81 08 44 4e cb 96 d6 51 14 99 1b 07 84 5d b7 ca 29 00 17 af e0 60 a7 29 8e 80 be 7c 57 55 3e 7a dc 30 91 97 d3 77 02 92 d6 3c d8 a4 23 5b cd 2e 51 34 a5 a7 56 bf c7 d9 3a ce 36 2e 5d 01 74 e1 55 b6 88 1b 51 ac 44 42 57 d7 ac ee bd 1a 5c ad 72 0d 9f b6 97 ff d6 5f 3c 48 9c 3e f0 27 65 c5 49 3a c8 c9 39 8e 34 81 71 59 62 12 ac ed 81 cf 22 b1 a9 55 e0 59 97 26 90 96 03 d0 d0 11 f5 d4 29 da 65 b2 83 83 ab 00 c5 e3 f8 cd e2 5d 42 13 06 b0 5c 93 12 a1 89 a5 65 8c 8d b0 b2 48 34 2c db 02 7f ed 46 db 0a d3 e2 f6 d3 c5 98 2c 65 3a 5a 3b ed 01 a7 b4 3a e8 8f 83 cb 14 60 c9 31 2c 2f 21 42 53 da fb 51 b0 4a 3a 81 4d fa 6d 3c e8 74 e2 b7 a6 28 fc 3e d5 13 50 ac d2 a7 44 28 e8 d0 33 a4 9c 81 cb 40 3c d5 3d bc be ba 1e 21 5a 64 cc 97 1d 67 5f a6 ee Data Ascii: -GDNQ])`)\|WU>z0w<#[.Q4V:6.]tUQDBW\r_<H>'eI:94qYb"UY&)e]B\eH4,F,e:Z;:`1,/!BSQJ:Mm<t(>PD(3@<=!Zdg_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49817	104.21.52.99	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:56 UTC	579	OUT	GET /resource-files/2023-02-20/ZsIuf5QJP53BJNF2.mp4 HTTP/1.1 Host: cdn.shippinghero.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://h5.g7or.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-10-13 15:58:56 UTC	956	IN	HTTP/1.1 206 Partial Content Date: Sun, 13 Oct 2024 15:58:56 GMT Content-Type: video/mp4 Content-Length: 23442351 Connection: close x-oss-request-id: 65F28C3DEE88453134E3401E ETag: "B291CFD5EF405501F9786EB9800218CA" Last-Modified: Mon, 20 Feb 2023 11:08:31 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1085788942378088547 x-oss-storage-class: Standard Content-MD5: spHP1e9AVQH5eG65gAIYyg== x-oss-server-time: 11 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5167 Content-Range: bytes 0-23442350/23442351 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sNMwhAG3sTGYT63oEZBtO1jTllxAQvCD2DWBBIX%2B%2FahW%2FpZzlNl9AY0Zr1jn3dm3qopWaqKQVMLTFpqpemXYz0h3WxCwMIIdNC9aVGdtLeSl5zvyqABt6F1QZSlwix%2BjEu8YCqvLxw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088b14eeb1a40-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:56 UTC	413	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 01 65 75 4d 6d 64 61 74 de 04 00 4c 61 76 63 35 38 2e 31 33 34 2e 31 30 30 00 42 20 08 c1 18 38 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 Data Ascii: ftypisomisomiso2avc1mp41freeeuMmdatLavc58.134.100B 8!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 04 60 8c 1c 21 10 Data Ascii: !`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!`!
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 9d a2 25 b8 20 10 5f f2 1b 83 71 40 0d 1c 2e 00 02 0c 98 96 6e 0c 08 51 01 33 10 13 ec 32 d6 f1 79 5a d7 1a ea 2f 75 d0 d6 29 4c 8e 00 04 6f 00 c1 6c 58 80 dd f2 c2 76 a0 c4 ff d1 7e 2e eb c1 33 55 bd e1 0d ad d9 87 06 67 fb 5f 32 2c 00 77 14 c2 83 dc 88 ec 3e c1 46 b1 33 ef 61 ac 2a 56 1e a3 fe 06 98 b0 65 02 4c bd ab 40 7a 31 1c 79 c0 76 2a 7b 93 5b cc ba 8d 61 6d 0f 73 5b 2f e3 6b e4 dc 1e 97 10 aa 7d 44 1f fa bb 34 42 e6 48 e4 0a be 92 0a df be 02 46 d5 bc 1f aa bf a5 6a f7 7d a1 ad 57 cb b3 58 55 e0 96 4d 64 ef 8f fb 99 34 8d 83 a8 d8 df 1b 73 5a b3 6e 66 66 b1 a1 0f 6f 83 34 94 b7 28 a4 07 fb eb 34 28 4f 07 b6 37 31 ee ef f0 87 b3 fc b7 2b 6c 5d 94 5e 43 c6 c9 9b 53 fe 41 97 d2 7c dd 76 96 8a ec d7 dd 9c 84 de 98 ed 97 9d 2e 05 8e b8 e1 50 e2 3b 35 Data Ascii: % _q@.nQ32yZ/u)LolXv~.3Ug_2,w>F3aVeL@z1yv{[ams[/k}D4BHFj}WXUMd4sZnffo4(4(O71+l]^CSA\|v.P;5
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: ab 8f cd b1 3b fd 6d e3 b1 18 a0 85 b4 2a 11 ea 8a 78 77 25 6f 9c 27 9a 46 81 9e cf 4b 6d 3e 21 3b 31 d9 4f 3d 8c 46 17 b9 a0 88 5e 3d e1 8b f9 fc 26 77 30 f4 27 30 3a 70 f0 21 13 bd 46 4e c8 a0 e6 01 52 50 00 6c 00 e0 80 fa a2 da 63 ab e9 2b ef 52 de de 91 37 1c e7 e7 ce 39 d9 62 f7 ac ab de cb 70 52 60 af 3e 39 c9 be da f4 3c 38 aa 22 79 83 ba 02 42 db 5c e7 8b 00 04 16 a0 cd cf a6 d5 72 b4 48 03 18 0a 65 a9 4c d7 40 37 ef 16 49 cf ac 9e 0d d8 48 cf d3 c2 82 c0 de 12 7b db 22 28 d6 72 bf be 76 f6 22 2f 9e 47 9e 00 cd a9 ac 6b b4 a7 5d 5c 50 2f b2 23 fd 91 d8 06 40 30 16 a6 18 2d 25 8e a3 18 bb 13 5c 03 fb 1b de a3 66 a7 a0 83 b2 0a 0c d4 0c d0 a5 b6 3c 45 1d 83 0b 57 53 fd 73 98 da e5 7f ee e0 c0 80 dc 73 0f 61 12 f6 70 db 32 77 ec a7 a7 be 1e be 58 49 Data Ascii: ;m*xw%o'FKm>!;1O=F^=&w0'0:p!FNRPlc+R79bpR`>9<8"yB\rHeL@7IH{"(rv"/Gk]\P/#@0-%\f<EWSssap2wXI
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: f7 7d 74 bf 38 14 69 b1 8e 55 40 10 97 d7 98 41 d3 c2 fc 60 f6 7e f4 f6 83 8f 7d 24 7d 1f 3d ce f7 35 2e ff ca 3b 51 d1 0e db 4d 46 db c6 85 6f e2 b6 bf ce a0 94 44 a4 6b 82 b7 fd 8d 6a 05 5a b9 8b 19 9b b2 95 93 bb d4 a2 69 aa 3d 55 aa 1d cd a7 c3 90 b3 55 19 53 15 39 cd e2 04 7a f7 55 25 06 fe 68 34 c2 26 e9 3d 9b 06 3a 5f b0 63 c6 a9 17 eb a4 8e 9a e3 bc c7 8d 20 94 75 80 f4 af 85 75 7e 45 9d 15 07 22 1d f6 8a bb 23 79 6f 82 97 0c 1c ab f6 a0 32 dd 20 68 00 f0 d8 42 cd b3 35 39 98 fb db 1e 27 2b 61 cc c2 0e 28 11 f5 e0 df f6 37 f5 7f 0e f5 71 d5 23 36 21 be ce bb 9a c1 01 55 a7 dd 87 a7 6a 6f 7b da 17 35 ba 4c f0 56 91 4f f2 db c3 c2 ab ca 3d 52 17 13 6c 00 d0 4f 84 f1 d4 c0 60 75 9a 14 fa 6a aa ed f1 6e 28 5d dd 03 a8 03 b7 4d d9 e8 ad 60 e1 95 b4 23 Data Ascii: }t8iU@A`~}$}=5.;QMFoDkjZi=UUS9zU%h4&=:_c uu~E"#yo2 hB59'+a(7q#6!Ujo{5LVO=RlO`ujn(]M`#
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: de fc e5 80 9c 85 7e 8d af 48 bb 26 ea 85 8a aa 9b bd 93 a9 94 56 5b 0c ed df e2 3a 51 a5 1b ea 2b c4 3d e7 33 4a 98 0b 51 68 83 eb bf 5e e9 67 f1 96 83 4d db 7f c0 53 f3 66 5c d0 ad 66 97 37 c3 37 95 27 b5 b1 a0 c6 c3 71 19 ef 6d b0 45 43 01 8d fc 14 0f c0 54 b1 d3 99 fe 88 9a 34 d0 d9 89 53 b9 9b c9 6c 0f 56 59 13 05 4c 72 76 29 0f dd 21 a5 dd 61 be 74 31 b8 3d 8e 18 be 5f b2 f7 bf b6 b0 3f 5f e1 d6 e1 d8 e1 de 7f 34 0e e2 01 d0 cd 15 21 c4 cd 43 77 f7 81 5f c4 60 9e b1 4c a3 e1 35 85 50 a4 75 c9 d9 e5 b2 d3 30 af 96 b6 7a 2b 1a cc 56 15 e7 29 33 05 0e 93 ab 53 e2 b5 cb e9 7b c2 8d 20 a2 e0 9d 13 16 df d8 53 54 40 79 8c 70 57 bf 99 2f ce d2 e3 43 1c 6b a6 d1 91 7f 31 a0 ff 86 f3 49 43 58 fd 61 a8 38 e5 23 44 3b 1b 54 bc 97 84 dc 37 aa b4 fe e8 ee f5 a4 Data Ascii: ~H&V[:Q+=3JQh^gMSf\f77'qmECT4SlVYLrv)!at1=_?_4!Cw_`L5Pu0z+V)3S{ ST@ypW/Ck1ICXa8#D;T7
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 39 32 64 a5 38 57 a6 23 57 76 5e 8e 88 1b 38 74 50 e5 92 cd c8 87 5a 81 af 6b 3e b9 8b 3d 74 b3 77 2f a6 52 e1 84 4c 56 5b 9f e4 10 71 da 70 6d d3 d2 af bc 8c 04 45 24 54 c5 76 cf 44 23 1e 34 7e 7f 17 89 7c 35 fa 12 77 33 f1 b4 2f 8e fb e0 03 2f ca 90 4f c3 83 1d fc 38 e9 52 4a e2 94 b0 1f 86 f3 7c b0 f4 ab f5 4e 20 6d c8 95 3e 98 ae 98 f2 63 63 06 e5 ba a5 fd 4d e8 cc 88 d2 46 60 2b 62 b8 bd 97 8e d3 ff c4 44 89 e0 3b 2b 83 5d 95 b8 e8 2c cd e1 83 1c 9a 3d 33 bf 39 7e 2a 44 80 2c 40 18 ee 0f be 97 58 d5 2c 3e 3f 9a ac 6c d7 67 06 fa 52 00 56 02 20 80 42 f1 da 05 14 c6 e5 08 9a 54 bb 13 98 5f 31 79 a5 ec e2 a8 2f 2d 99 84 be 1a 14 d0 a2 e9 30 c6 66 e2 ce 45 87 31 e9 8c da 2e b9 b1 4a ba 64 ca 67 46 0f d6 bf 01 0b 7f 6b 10 5d 5d 5e f3 17 a8 d1 45 68 12 0a Data Ascii: 92d8W#Wv^8tPZk>=tw/RLV[qpmE$TvD#4~\|5w3//O8RJ\|N m>ccMF`+bD;+],=39~*D,@X,>?lgRV BT_1y/-0fE1.JdgFk]]^Eh
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 33 fe 7f bb 57 e5 22 22 2b 52 4f e0 01 a7 6f e0 50 e7 11 29 04 a4 fb 07 f9 67 2f fb a3 fc 18 02 63 6c 70 83 d8 a9 1a 00 bf 9b 34 30 d1 97 b3 64 d1 8e fe c7 07 86 9a c7 5f 00 22 36 0c 25 5b 7b fb ee cb ec 66 80 3f 08 f8 42 17 dd 32 3d c2 39 aa be d1 9f 90 0b 8c ab 49 17 a6 18 99 72 28 5f 31 56 b9 00 3d c9 93 ae 3f fc e1 52 00 75 a3 14 84 5f 7c 70 b9 a3 e2 4e 75 82 61 67 74 95 28 a7 e1 92 14 3b a0 31 29 8e 98 a1 53 87 53 ff b8 e8 b0 23 51 6f 3c b5 88 f3 61 24 48 7b 60 59 f2 06 e0 84 4b cf 28 60 19 61 f8 34 9e 38 73 98 05 e3 88 2a 64 cd e0 25 4c ec 32 ce b1 fb f6 f6 63 e5 0b 1f ca 1f fd b6 7c 8a 6c 24 7c 83 2b bc 92 00 04 c6 2b 2d f6 55 1d 1c 1c 57 c5 23 26 06 75 c0 d9 87 be a1 0c 93 9f 77 b7 dd 2c 02 96 0b 3a 9b be e7 7f 86 1a 06 3f 24 0a 09 4f d0 49 0f bb Data Ascii: 3W""+ROoP)g/clp40d_"6%[{f?B2=9Ir(_1V=?Ru_\|pNuagt(;1)SS#Qo<a$H{`YK(`a48s*d%L2c\|l$\|++-UW#&uw,:?$OI
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: a7 1d 76 28 77 f1 a0 76 d4 97 9b 74 18 25 73 31 4f 67 b2 66 00 bb 0d 63 34 e6 1c 92 2f f8 02 4b b2 4d 36 87 3b 00 0f 94 9c e1 b7 e0 a5 8c 65 ca 20 89 78 2f c1 94 d7 f6 70 d3 09 33 30 d1 5b a7 fb ea 32 0d 75 ff 57 13 6c 0e 57 3d 20 6f e8 ff ff aa fc 1f e8 43 99 b5 e0 5a 8c 35 21 b3 ae 30 26 4c 17 6a 03 f1 5b f8 5f 81 e8 9f 99 10 2a 1e 96 67 a8 10 af bf 90 89 9d fc 2e e3 9f 58 a0 6e 34 37 b5 2d a9 f1 e4 1a 81 f8 a7 2e f6 33 3d f0 c5 d5 7d ef 7d 22 40 58 88 e7 0b 02 db eb e8 e3 da 23 37 d0 38 01 c3 fd 32 60 9b 3e ae fb 9d 5d 54 95 45 98 0e 26 ad ad d9 9a 96 2e 94 0e 0d 71 f4 df 0d 47 4e 68 53 7f 32 d1 18 45 dd 2b 69 38 ce 19 3a 10 b4 db 79 0d 30 d1 35 9b c4 55 45 4b db 53 4c 11 f9 9c 01 d4 9e 42 2c 75 67 f6 77 21 c7 93 5a 2c 3b 06 02 10 3a e3 df 6b 7e 56 fe Data Ascii: v(wvt%s1Ogfc4/KM6;e x/p30[2uWlW= oCZ5!0&Lj[_*g.Xn47-.3=}}"@X#782`>]TE&.qGNhS2E+i8:y05UEKSLB,ugw!Z,;:k~V
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: f4 a5 a6 fe 5c c8 06 1c a7 4b 5f 79 73 8a c1 68 c0 01 6d 17 ca 53 10 07 6e 9c c6 b7 f6 f8 00 80 c7 87 44 5a 11 e7 33 b6 d6 7f 87 18 9b 59 3b 16 f2 29 ca 04 56 80 3f 3c 61 33 d8 7b 07 ce c9 fd 5d 8f a2 a2 61 cf a1 00 db 0f e5 f4 54 b3 e7 f1 c9 6b e6 ff c8 d1 88 06 16 1e f0 a0 3c 19 5d 47 53 c8 a0 6b b1 b5 c8 10 86 18 1a af e1 4d ef c1 81 88 de 0b 95 f1 5c 6a ae 28 11 27 17 e5 b8 33 ac 2d d5 51 41 37 6e 09 1e 07 e5 3e ea 83 c9 44 f5 1b d6 a6 32 f5 d5 da b8 04 b5 fe 25 08 76 0c 6b 92 11 8b fb a3 25 64 db d7 c2 e1 8c db 53 66 72 36 c9 9b 92 8d 2b 0e ea ff e4 e2 14 64 06 63 13 2b ce c1 57 a1 99 63 2f 85 8c 25 63 b4 cf b1 99 13 7b ff 0d bf f2 30 90 d2 61 cb 8a d5 9c 63 8e 08 8b b9 55 a0 b9 7e 99 61 0f d2 59 23 23 89 16 64 cd cb ec 7e 56 6a 61 04 3a 93 b0 0c 80 Data Ascii: \K_yshmSnDZ3Y;)V?<a3{]aTk<]GSkM\j('3-QA7n>D2%vk%dSfr6+dc+Wc/%c{0acU~aY##d~Vja:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49832	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:56 UTC	609	OUT	GET /static/img/button-2.1f146b37.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:56 UTC	906	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:56 GMT Content-Type: image/png Content-Length: 25026 Connection: close x-oss-request-id: 66FFB61406F3A43231077919 ETag: "1F146B37A4DF36275C83DB80263261F5" Last-Modified: Tue, 20 Aug 2024 09:32:40 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6714988187595907596 x-oss-storage-class: Standard Content-MD5: HxRrN6TfNidcg9uAJjJh9Q== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 322 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IQOCXkNy4ZwbZ998VM%2B6e%2B9fpqJ3xRglWHfg%2Fykv0JeqUIQxYpQKkISODCGgoGR4SijuRhwmvrwOKiKTSgzefq53Xw3oW%2BNpc8EPi3KFWaXCFBOElLb1xxHlTzPeqQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088b39c611a48-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:56 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 4e 00 00 00 58 08 06 00 00 00 03 49 78 5a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ed 7d fb f3 6d c9 55 d7 3e 77 32 99 99 24 12 29 0c 22 56 44 41 2d 45 4b 28 83 82 8a 94 22 e0 7f 80 8f 04 41 c4 f7 0b f1 01 46 12 22 26 11 31 e5 a3 7c a2 a2 85 86 c2 f0 b0 7c 05 d4 1f c1 68 7c 02 42 40 29 35 4a 9c 2a cc 68 85 44 26 f3 c8 dc 7b ac dd bd d6 ea cf fa f4 5a dd bd cf f7 7b 87 b9 99 73 2b 93 ef 39 fb f4 ee c7 7a 7c d6 67 77 af ee 7d da 06 ff ce e7 f3 43 4f 6c 4f 3c f6 7f b7 67 1f 79 64 7b f8 25 77 b6 3b 77 ee 6c db 69 74 cf f5 b7 ab 04 ae 12 b8 4a e0 2a 81 ab 04 ae 12 b8 4a e0 41 91 c0 bd 6d 3b df db ee dd 7b 66 fb c8 73 1f b7 bd f4 99 57 6d af 7a ea 74 3a dd cd fa 1f 92 a0 6f 3d Data Ascii: PNGIHDRNXIxZsRGB IDATx^}mU>w2$)"VDA-EK("AF"&1\|\|h\|B@)5JhD&{Z{s+9z\|gw}COlO<gyd{%w;wlitJJAm;{fsWmzt:o=
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 55 02 57 09 5c 25 70 95 c0 55 02 57 09 dc 0f 09 ec cb 76 af da 5e fe c4 9e f3 54 88 d3 ff 3c ff f8 c7 9e b6 8f 3c 36 6a ec 1d 3f fa 2d 9f fa f8 93 ef 7d dd b3 f7 9e fd 55 db 76 7e f5 b6 9d 1f d9 6f 3e 6d a7 ed ce a9 6e b5 b3 ff e4 fb 1d d9 80 77 0a 7f af 93 5d 7a 8f fb 2c f3 60 51 e6 fa 75 4b df fd 30 89 6b 9d 0f ac 04 ce e2 44 0f ec 00 7c c7 a3 e1 9c cf db b6 63 c8 fe 9b fe ab 4f 7c 25 83 b3 5d 83 ef fb e5 52 5e 2a 3c ed bf 29 c8 c0 75 bb 19 2b d7 72 d8 19 ee 58 f4 1d 87 a2 fd e2 7a ad 6e fd c1 7a 2a 77 eb 77 be ce 0a 1e 35 d0 cb b4 34 2b 7d d6 ae e3 df 91 f9 e0 7d a5 9c ab 80 b4 b2 2b cb 29 49 8a c3 70 cf a6 b4 5d b1 aa 28 f8 28 d7 9c 04 66 e2 18 0c a0 76 b7 75 ba 76 65 8f 5c 32 98 d3 69 ab dd 6e 9d 6c cd 45 0a bc 0f ce 66 72 93 60 a9 fd 41 c3 2f 46 8c Data Ascii: UW\%pUWv^T<<6j?-}Uv~o>mnw]z,`QuK0kD\|cO\|%]R^<)u+rXznzww54+}}+)Ip]((fvuve\2inlEfr`A/F
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 0e d8 d4 6e c0 03 56 64 58 e7 02 94 d4 d7 ac 1d 8d 18 32 47 28 66 25 b9 4a 6d 0a 64 5e 3d db 17 dc a1 41 dc 86 2b 1f 2c e7 2e 24 4c 41 93 17 2b 3f eb dc ba c0 23 82 99 b9 21 5a bf 96 71 3e 8b 37 96 cf 2d f9 b0 9a 8f da 96 a7 60 fa c4 60 bd 4e e4 81 e4 08 db d7 25 39 e5 a3 f5 7b 9d 2b 6c f9 4c 75 f6 69 bf be cf 38 95 cf 42 82 ca 0c 94 7e 86 65 bb 42 a2 ca 3d b5 1e 24 55 fb 1d bf e0 a7 fc c2 5f ff 45 3f ef 4b df c3 1a 7d 6e bb 77 f7 f4 3f ce 4f fc 8c 28 bf e9 cf fd f0 5b df fa f4 dd a7 bf 38 24 48 36 e3 54 97 ec 1a 51 aa 33 4f 78 4f f9 0c 65 0a 59 82 32 98 07 a5 09 7b 8e 44 91 93 5e 42 96 2e b9 67 ee 71 d7 12 57 09 dc 5c 02 2b a1 9b 71 46 bf 5f 8c c7 a3 6e 73 30 c8 ca 32 93 00 50 b5 40 6e 75 41 76 77 79 5a d4 a7 70 49 5d b5 47 f2 1a 10 6d f9 a4 3c 6d 92 84 Data Ascii: nVdX2G(f%Jmd^=A+,.$LA+?#!Zq>7-``N%9{+lLui8B~eB=$U_E?K}nw?O([8$H6TQ3OxOeY2{D^B.gqW\+qF_ns02P@nuAvwyZpI]Gm<m
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 7b d5 be 6c 4b 89 d3 9f 29 c4 e9 b4 3d 04 c9 e0 9e 44 9d b6 3d a3 5c 97 ee f6 bf 56 56 97 ea 64 59 cf 48 17 2e f3 e1 2e 3c dd 81 17 25 89 c3 11 08 3c 80 10 13 56 48 c7 0c 30 23 b2 80 56 d2 ac f5 fe 21 e2 08 90 8e f6 3f 73 ea 59 3d d1 7d 97 90 c9 8c 7c 8d ea ef da 21 c8 70 68 e7 43 98 ba a5 86 39 fe b5 35 db 6f 29 cf 9e 73 dd f5 65 b9 2d 17 7c 9e 60 37 d8 c1 96 b5 8c 71 18 e3 2b ad 04 b9 9c 07 7d 3a c7 c3 2a bb 20 a6 41 89 d1 19 76 dc d9 3d c9 c9 78 cf 87 ff 25 72 89 78 7b c4 f1 6e ae 50 26 ae 6a 4b fc 97 00 4f 49 93 76 20 e2 c3 52 05 12 a5 52 9c 1f d4 c0 7c ed e3 2a 51 3a 64 fa 2c d5 15 89 52 b0 4d 66 13 57 6a 9a 9a 93 11 51 58 fe 70 72 66 d6 70 68 f0 a1 a9 44 76 16 c5 bf fe f1 86 4a 8d b8 93 2b 1a 9c 1e ab c4 51 59 33 cf 78 9a 0b 37 1c b5 7d b9 8a 01 fe Data Ascii: {lK)=D=\VVdYH..<%<VH0#V!?sY=}\|!phC95o)se-\|`7q+}:* Av=x%rx{nP&jKOIv RR\|*Q:d,RMfWjQXprfphDvJ+QY3x7}
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 8e 42 0e 76 47 9a 0e df 57 38 c3 cd ae db 8b d4 53 ce c5 68 d5 fb c1 65 b5 64 7a 58 d3 cf 82 8c 67 45 70 f5 1e 63 06 1e 06 2f d7 f9 68 35 57 75 da e1 1e 95 54 16 28 93 96 db 04 c4 c9 c8 53 70 a8 a5 9b 71 aa 79 4c fb 0c d3 5e a7 27 4a b2 ab ae 10 a5 9d 58 9d b6 bb 7b 2e 93 e4 3e 19 d1 72 4b 75 e7 ed cd 9f d1 13 a7 e2 5a d9 71 04 7f f6 3d 5f f3 b8 5b 6a 2b 4b 71 95 f8 ec 7f 95 38 71 ae 93 5d 57 c2 25 79 52 48 b4 0a 81 b2 1d 76 72 f2 38 1d 3d a0 2f 10 56 f2 d4 fd 65 20 09 0c 63 e5 41 22 ab 26 f0 bf 70 73 d0 8c 17 45 bf b3 09 95 3e 24 15 d9 18 90 d0 cb 58 4b 1f e5 3e 37 56 e9 bc 5d a3 17 6a e3 ac 03 1e 6d af fd c0 1d 34 e5 1a 9f 6d 46 82 2d fe 04 d7 18 1c 7a 5f e2 50 84 fb 7b 63 cf 0b ee 98 6e d6 42 9b c9 f4 a9 66 a3 58 31 82 47 c4 13 0c 42 68 7a 78 ff a8 ce Data Ascii: BvGW8ShedzXgEpc/h5WuT(SpqyL^'JX{.>rKuZq=_[j+Kq8q]W%yRHvr8=/Ve cA"&psE>$XK>7V]jm4mF-z_P{cnBfX1GBhzx
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: a8 fc 6a 84 4e e4 1c a2 aa 3c ec 70 17 f6 e3 36 ba 4d 0e 83 b7 cf 4c 4f 16 59 55 04 d9 b1 1b b2 c8 06 97 ca 53 a2 5a 64 0c 09 5c b6 0e 2f a0 e1 6c 87 ed 98 83 c5 6a 1c 6b 0f 4f 00 f9 ab 23 4f cb b5 d6 35 d2 4a ff a0 5b d8 c3 fd 73 f9 af 08 4f f2 9c 2c 39 bc 2e a0 b7 77 d3 c1 6e ba 7b 6d e9 0e f3 96 f4 b4 70 24 53 e5 c0 4b 26 57 74 de 93 12 af bf f0 cb fe c6 d1 5d 75 f1 39 4e ba 14 a7 09 df 3a b3 e4 72 9e 28 a1 bc 90 24 99 99 aa 9f db 91 04 fb f7 dd 98 74 a6 69 af 4f 9d 04 67 9a d0 5f 19 c3 6f ac 5d 0c 3e eb 76 76 6b cd a2 a1 72 60 ee 7f e3 28 23 dd 10 b6 5f ef 8f 56 d5 2f ec ee 28 02 b2 87 b1 92 b0 49 94 eb 24 50 b9 9e 46 01 86 c1 15 40 71 86 e3 b5 ee 59 a4 8e 58 03 43 f7 ed 45 3e 17 88 61 f0 99 29 76 a4 4b 2a c0 60 d8 f1 05 c0 57 6b a2 13 16 f4 c4 0e bd Data Ascii: jN<p6MLOYUSZd\/ljkO#O5J[sO,9.wn{mp$SK&Wt]u9N:r($tiOg_o]>vvkr`(#_V/(I$PF@qYXCE>a)vK*`Wk
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 67 1d 4f 7c dc 05 2a 7a b2 2f b7 d0 72 af 83 16 c2 84 9b 73 81 c8 eb 32 5f 6e ad d9 18 c8 31 6d 47 60 e4 a3 60 5f 2e 55 46 c4 ec 5a f5 c6 72 68 95 2e 9c 06 84 b0 5d 88 2d bc 34 d7 ab 6f dd 93 d0 5d ea e7 9e 8a da ce 3d 98 27 aa 66 25 e4 bb ac 70 e8 7e 44 f9 ec 7c 53 e3 8a 48 07 08 a4 9d fb 21 33 88 f5 d9 a3 47 85 2e 79 7f 80 ea 08 61 b1 1c 23 db 98 c9 ac 1a b4 42 88 a9 82 01 3e fa 4e 1b 79 fd ce 4e 3f 90 22 d7 e4 18 0c 0e bd fa d8 57 af f7 ef 09 c5 65 3a c5 e1 dd b6 75 32 53 73 9b 34 71 5c 97 d3 ec 68 02 f7 12 5f 25 41 4c 9c f8 74 f1 f6 c2 5f 3d 24 b3 d6 57 cb fd 95 cf fa 5b c7 66 9c de fa 83 6f 28 07 60 2a 61 b2 23 04 94 40 e1 4c 12 bd ec 57 67 90 f0 c4 70 9c 65 d2 a4 f0 5d 67 ba 5c 57 3e 03 e9 d7 df 7a de 53 35 2d 21 0e 32 a2 18 ae 13 04 9d a2 5e 6e 90 Data Ascii: gO\|z/rs2_n1mG``_.UFZrh.]-4o]='f%p~D\|SH!3G.ya#B>NyN?"We:u2Ss4q\h_%ALt_=$W[fo(`a#@LWgpe]g\W>zS5-!2^n
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 48 db 32 57 84 3c 27 7d 50 aa 45 1d bd a0 2b 0d 40 fd c1 8d b8 45 5a 01 36 42 92 a6 be 1c 0a 16 40 37 73 2e 87 20 60 a0 60 24 ce b5 34 cf 46 ec d3 76 e5 74 1e 32 0b af 87 bd 7d fd 06 18 86 b9 11 f9 53 c7 cb 32 87 0e b7 f0 28 d4 4c 3d de f5 79 01 77 ac 7c e7 fe c8 6f 6c 82 27 8a a4 34 90 08 84 21 62 3b 08 0d 64 c0 01 26 56 42 eb 47 0b b8 99 6c 8e c9 0c 25 1d 7d 0e c3 e4 8a a0 99 13 64 7e 00 04 42 7d 5d 97 88 da e2 fc cc 34 03 9d 10 64 b0 be 5d 1c 88 60 21 15 a3 39 a6 4c 51 c9 77 8e 68 60 03 2b 89 be 4e a4 30 9c 19 01 69 92 61 5b ed 8d ad 2f 01 9b 2c 00 93 bb e0 36 32 a9 65 68 ec 42 be 7b a4 aa 7d f3 8a 70 fd 45 e8 c4 1d f6 51 df f4 20 d1 cc b9 e4 9e c8 75 6d 38 dd ce c7 3e 06 f5 cb b6 81 9d 26 a6 e9 70 01 6e 2b 7d 92 1f dd ac 24 94 29 55 5a 41 f9 01 db c1 Data Ascii: H2W<'}PE+@EZ6B@7s. ``$4Fvt2}S2(L=yw\|ol'4!b;d&VBGl%}d~B}]4d]`!9LQwh`+N0ia[/,62ehB{}pEQ um8>&pn+}$)UZA
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: ea 76 7f 7b 09 4e 64 ce b5 3e b6 62 18 48 f9 89 5a 45 75 d1 cf a8 37 fd 5c ee 86 2a 46 22 09 31 3e 98 ad 72 fa 71 a4 a7 d6 60 69 37 d1 f9 69 4a 8a 28 90 b5 3c 27 95 bd 48 07 97 f0 60 a7 5d 19 16 ec ce d3 59 a5 fd 2e bb 2e f7 d6 6b 9e 48 15 92 25 64 eb ef 7d f6 df 3d 46 9c be fa fb 5f ff b8 06 0e 3b 84 12 ce 54 da 85 ec f3 93 60 f9 4d ac c3 5e d8 ab c4 b8 2c fd b5 fb f6 fa f7 3c 28 33 21 20 52 aa 13 56 66 67 4f 23 b4 0a e6 21 d0 de cc 80 e0 a0 db d2 1e 90 15 98 6d 74 4f 95 b5 5f 19 bd 50 16 36 89 f8 60 8d 08 b4 2a 77 fd d9 83 70 dd e2 ad 4d 5b 0f 18 51 18 ec 31 d1 28 0a 04 30 94 ce 5d a5 7c 1f 63 6b c9 36 c9 5f 4b 70 16 19 96 c1 31 c5 ce 18 47 23 1b b2 17 46 9b 0d 16 a0 98 01 98 af 3d 42 d4 bc 57 ac 23 d5 93 01 90 0a 88 15 c7 10 08 07 82 76 75 86 4f 61 68 Data Ascii: v{Nd>bHZEu7\F"1>rq`i7iJ(<'H`]Y..kH%d}=F_;T`M^,<(3! RVfgO#!mtO_P6`wpM[Q1(0]\|ck6_Kp1G#F=BW#vuOah
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: ad b7 19 34 0c 15 3e 94 84 3d 66 d6 11 19 15 ca db 2d 0c d5 73 bf 64 68 92 ca a3 ee 75 99 f5 98 c9 83 ed fb 2e 36 c3 b0 97 5b aa 43 b1 20 71 39 26 78 da 8f cf 20 1b f4 9b 3b 67 fa ad 4b 28 f5 67 90 3f 3f 74 64 3e 37 8e 3c 21 c5 04 98 83 91 81 ed 9b 4c 38 dc c9 8c 5e 80 2d 1a 57 4b 2d 18 24 52 67 a0 90 e1 04 ba 16 04 22 69 37 28 47 c7 c6 d9 57 8f a5 26 3e ec 8e 16 21 fb 16 68 b5 60 70 98 fc a5 e6 d1 1c 41 fb df 26 cc eb c9 ef 16 f0 b0 8e 00 cb d4 ac b8 58 6c af 11 18 f6 3a 0f e5 4c ea b3 32 18 0b 4a f5 99 60 f5 0e d0 35 a9 dd 89 5f 7e 3b 62 19 55 16 42 74 82 d9 45 98 38 01 9b 5d 6c 21 d8 98 82 38 ca e2 69 9e 8d b9 28 b1 f3 3a a8 10 31 e9 d2 58 4b ff e2 b5 cc 91 61 8c f1 14 7b 61 a3 07 e1 b7 df eb 45 fc ae c8 e5 f3 a0 04 c7 21 74 ba 5d 79 00 35 6a 21 fa b0 Data Ascii: 4>=f-sdhu.6[C q9&x ;gK(g??td>7<!L8^-WK-$Rg"i7(GW&>!h`pA&Xl:L2J`5_~;bUBtE8]l!8i(:1XKa{aE!t]y5j!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49827	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:56 UTC	608	OUT	GET /static/img/bg2_new.2df68bf4.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:56 UTC	914	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:56 GMT Content-Type: image/png Content-Length: 235388 Connection: close x-oss-request-id: 666D31CE49824C39399D80E6 ETag: "2DF68BF46FE2CFC505D7799C988600CE" Last-Modified: Mon, 20 May 2024 05:15:42 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9691332695670020262 x-oss-storage-class: Standard Content-MD5: LfaL9G/iz8UF13mcmIYAzg== x-oss-server-time: 4 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3665 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W1HVtUWzjZ49WYlFzi6GaAOUUjkyRZI%2F3naSb1Rg1Jeu9qFlXdHqsdR0jEN3kCPTeFkLLISzz%2BWGv8RjYpZTiG1Ua%2FCSzX0Dtsz0hClxtA%2FxC%2BE2eJR%2F1%2FwnEyM6NA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088b39be04295-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:56 UTC	455	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 77 00 00 0c 2c 08 06 00 00 00 59 5e 92 0a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 3b 8c 2d 49 b3 2e 54 ab 7b ef 99 3d 8f 73 e0 9e 2b 21 10 12 16 42 02 1b 03 f0 70 c0 c1 40 98 80 87 78 09 e1 82 01 12 42 c2 01 17 21 74 41 58 08 4c c0 c0 01 07 0f 61 e0 a2 2b 21 2c 24 04 3a e7 7f cf fc 33 fb d5 bd 50 66 56 56 45 46 c5 33 2b 6b bd 3a fa bf e7 4e ef 5e 99 91 11 5f 44 7c 11 95 95 ab ea 34 75 fc 9c cf e7 a7 69 9a fe 89 69 9a fe e9 69 9a fe f1 69 9a fe 91 69 9a fe 81 69 9a fe 62 9a a6 77 1d 22 63 8a 0f 81 f3 34 4d a7 79 0a fc dd 27 a5 6f f4 a5 d7 f3 6a d9 ab 5f ef 3c af 7e 31 be 45 e0 de 70 e7 f4 1d 61 c7 d7 69 9a 7e 9a a6 e9 ff 9d a6 e9 ff 9c a6 e9 7f 9f a6 e9 7f 99 a6 e9 Data Ascii: PNGIHDRw,Y^sRGB IDATx^;-I.T{=s+!Bp@xB!tAXLa+!,$:3PfVVEF3+k:N^_D\|4uiiiiiibw"c4My'oj_<~1Epai~
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 70 3a 9d fe 5a c3 49 25 f7 f3 f9 fc 2f 4e d3 f4 9f 4e d3 f4 57 89 c4 7f 7d f9 75 fa f4 fa 29 53 79 fc 04 02 81 40 20 10 08 1c 8b c0 d3 74 9a be 7d fa 76 fa ee f9 bb 4c fa d3 34 fd 6e 9a a6 7f fb 74 3a fd b7 d2 ca 2c b9 9f cf e7 f7 e9 32 60 9a a6 7f f5 f5 fc 3a fd f9 e5 cf d3 c7 d7 4f c7 5a 11 d2 03 81 40 20 10 08 04 58 04 3e 3c 7d 3b fd f0 fc c3 f4 74 4a b7 3d a7 ff 32 6d 93 9f 4e a7 d4 d1 6f 7e 48 72 3f 9f cf df 4f d3 f4 df 4d d3 f4 cf 7e 7c f9 38 fd fc f2 e7 d8 72 89 80 0b 04 02 81 40 e0 06 10 48 5b 37 3f 3e ff 30 7d 78 fe 90 b4 f9 9f a6 69 fa 17 4e a7 d3 2f 58 b5 0d b9 cf 1d fb ff 78 3e 9f ff 99 9f 5f 7e 8e 6e fd 06 9c 19 2a 04 02 81 40 20 80 11 48 5d fc 8f cf 3f a6 fd f8 ff 79 9a a6 7f 0e 77 f0 14 b9 ff 9d f3 f9 fc af fd f1 eb 9f a6 2f 67 b2 db 0f 94 Data Ascii: p:ZI%/NNW}u)Sy@ t}vL4nt:,2`:OZ@ X><};tJ=2mNo~Hr?OM~\|8r@H[7?>0}xiN/Xx>_~n*@ H]?yw/g
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 5a a3 56 b7 ca e1 b1 ed b5 8c 9b 67 d5 68 9d bf bb 73 b7 2f 69 1f d9 5e da ae 61 d6 5e 19 c0 2b 05 4d f6 b5 ae 2a 34 bd 68 47 6a b3 b4 cf 47 87 d5 b1 1b 0d 34 f9 6a 34 64 d5 69 0c 56 db 14 4e 7f 81 97 d8 9e ce 9d d3 dd aa ab 75 1c a5 53 5f c9 e2 57 b4 e9 e2 9b 6f 93 09 48 0c b5 93 de f9 d6 7c b1 c8 85 63 2c e3 b5 b5 f7 c8 30 91 bb 67 01 cb d8 6b 51 6d 05 b2 47 47 6a 8e 27 64 25 b2 92 f4 d1 48 ae fd dc a3 51 a1 18 69 2b cd 82 93 16 9c 7c 0a b6 25 dc 26 c7 af 91 67 46 42 23 5d f1 59 3b 73 38 9e f2 13 4f fe 7a 06 c0 e2 51 64 c3 ff 7f bb ab 2f 79 de be 5d 6a a7 7e 5b 5c ca e8 fb 7c 43 ef 55 ef 5d 41 ce eb f5 53 e8 0f 5b ac c2 c8 2f 1e 68 7d ba ca de c6 9b 37 12 e9 32 3e 93 bb af de 68 21 80 a5 d5 50 4c 46 68 61 ad 05 0d 34 c3 32 16 93 5f 82 19 26 5d 4f 52 48 Data Ascii: ZVghs/i^a^+M*4hGjG4j4diVNuS_WoH\|c,0gkQmGGj'd%HQi+\|%&gFB#]Y;s8OzQd/y]j~[\\|CU]AS[/h}72>h!PLFha42_&]ORH
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 76 53 3e e2 fc ce f9 4a 8b 41 8c 09 e5 5b ce de 6d e2 b6 24 03 7d 2e c5 ab 5c 94 b7 8d 12 65 2b c6 94 8b 27 f8 77 29 46 b9 58 a1 74 e5 49 b9 52 ce 36 f7 a4 f8 a5 70 83 7e e4 f0 e2 e2 85 cb 1d 8a 5b 60 cc 62 79 38 5f 30 c6 54 9c 50 6b 53 72 30 19 c3 a2 c8 ad cb e5 95 96 5f 14 07 68 31 38 7b f2 6f 9a 6d 19 09 10 9c c8 38 48 38 e2 a0 fe 2e 25 0f 95 e0 14 f1 69 ba 7a 48 4a 1a ab 25 3a be d2 91 82 d0 4a 5e 54 a7 2b 05 19 f7 19 97 78 12 e9 52 f6 70 f8 73 05 49 f3 39 4c 44 ac bb e6 6b 8d 2c bd c9 85 09 94 d3 9d 4a 68 2d 06 3d 9f 53 84 0f e3 c0 eb 4b 4b ac 71 45 81 c2 a4 87 d0 3c f6 4b 79 cf 11 9c 85 73 a4 62 af c5 29 ce 05 58 4c 30 a1 53 c5 17 8f f7 e2 d1 3b be e8 72 2a e4 ce 25 a9 16 50 bd 8b bf a5 79 16 b2 92 82 ec d1 b1 d2 f0 d9 63 bf 55 b6 a5 b8 7b 8b 90 b5 Data Ascii: vS>JA[m$}.\e+'w)FXtIR6p~[`by8_0TPkSr0_h18{om8H8.%izHJ%:J^T+xRpsI9LDk,Jh-=SKKqE<Kysb)XL0S;r*%PycU{
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: be b4 8c 5f e3 0c 67 f4 8a 2d c5 37 85 db 28 16 e0 31 a2 fd 0e ff 5a e4 69 fe a9 3c 88 e3 1b 72 4f 1e 93 c8 1d 27 04 0c 19 0c 5c 9b 4c b4 63 e0 e2 eb fc d6 5d d5 88 b2 76 4b 5b db 20 a6 bb 4f 1c bc d0 8e 36 c0 56 37 48 c9 47 05 09 0e 10 68 0f 74 04 b6 19 93 8e f4 94 4a ca 99 92 9e 34 be 6d 31 86 e4 48 fb b7 22 bf 7e ca 05 0b 57 54 a5 e4 97 12 0e 27 0b 67 3f 4d dc 6d a9 a9 e4 50 c6 6e d3 99 8a 25 2a 4e d6 b5 b6 8d c2 6a 67 f9 ac 46 23 2e 40 14 99 f0 1a b5 31 09 13 93 6b 7c a0 8e dc a6 64 d5 15 27 ba dd b7 ad 8d 98 aa 60 01 c3 6b 6d 69 6d 4b 5c 18 7b ad 33 b6 e6 6b d5 ab ca 2f b1 00 ff b5 72 15 fc 64 1d b1 e5 18 29 2e d7 ec 81 57 38 2b 73 42 b9 38 7f 28 4e e1 f8 c2 e2 4f c8 07 70 2d 96 dc a1 f2 18 38 8e 2c 30 18 6d f2 d7 aa b4 0d 77 58 3d 71 07 44 39 a2 0d Data Ascii: _g-7(1Zi<rO'\Lc]vK[ O6V7HGhtJ4m1H"~WT'g?MmPn%*NjgF#.@1k\|d'`kmimK\{3k/rd).W8+sB8(NOp-8,0mwX=qD9
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 9e 8e c6 33 f6 9e bc 7d 84 ae 81 d5 11 a8 86 cc 40 60 37 02 c7 90 fb ad 27 fc ad eb b7 db ad 21 e0 cd 21 10 31 fd e6 5c ae 19 7c 0c b9 6b ab c6 e7 6f 0f 81 20 9f 2e 9f 53 b0 dd 05 94 50 c9 bb 50 b8 cb 3d c7 4c 1a 84 97 9f dc 07 2d 7c 0c 2a 3b a5 3e b2 6d 3b a1 d9 4c b7 62 65 1d 37 5a bf 90 77 18 02 e1 d2 c3 a0 1d 2a d8 4f ee d2 f2 1e af 7b c6 72 6b 7a bb 83 34 3e fd 9c 87 62 38 56 d8 08 5c c6 6a 14 d2 6e 19 81 5b 88 e9 88 d9 9b 8c 90 b1 e4 7e b4 89 6f 21 88 de 82 8d 47 c7 49 c8 f7 23 10 71 37 9d 4e d3 74 be e5 c6 cf e9 d5 b1 e4 7e a3 01 72 a3 6a dd fe 19 78 ef 95 91 33 f8 c8 ad 9e 4b 5e 59 dd 6c 60 ec 05 f2 06 e7 1f 8c 75 97 78 c7 24 c7 50 27 f8 07 4a fe cd e7 df 9e eb 36 05 bb 4c cf fa 3d 73 9c b0 c4 f0 9d 08 ec f1 91 67 ae 34 d6 2a c7 5b 68 1c db 15 56 Data Ascii: 3}@`7'!!1\\|ko .SPP=L-\|;>m;Lbe7ZwO{rkz4>b8V\jn[~o!GI#q7Nt~rjx3K^Yl`ux$P'J6L=sg4*[hV
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 7d fa 6d 73 14 b2 66 37 d4 0c 0b 84 ad 8a 30 ae 01 8a 4f 44 1c 98 34 21 50 e0 81 7d 83 0d 61 18 b2 68 31 ab 2b 03 19 8a e2 d6 65 8e 50 50 52 0c aa 6f a7 01 1f 51 b1 a9 e2 83 da d1 4d 7b 21 29 05 3e db 0c 13 e6 71 37 0d 1a d2 16 8c 59 44 cf bf e0 50 a4 da 5b f8 37 d3 5d 2e a4 7f b3 66 05 49 b2 1f e6 0a 60 cd 46 0f 4b 28 99 9c 8a 04 39 03 c9 e8 62 b6 49 90 ba 87 66 d3 9f c0 34 43 d9 63 23 b1 28 bb 1f 62 c0 c3 30 44 32 73 7b 64 87 11 e8 c9 13 09 70 92 9a 57 e1 a7 df 7e fa dd 19 9c 31 04 a2 a8 a0 b5 2a 6b 08 01 33 90 12 41 50 cd bd 25 48 1c 64 bb 98 c2 05 25 57 b8 7a d6 80 b2 b8 42 6b 61 06 8c 3f d4 85 20 c3 c6 c6 b6 6f 28 9b ee d4 b5 6e 2d ae b8 12 40 fc 37 55 82 0f 8c 86 9c d1 7a 62 ac 28 77 76 b9 15 b3 4c 22 56 ba 48 ae 66 19 41 f8 b5 58 71 77 35 c9 62 06 Data Ascii: }msf70OD4!P}ah1+ePPRoQM{!)>q7YDP[7].fI`FK(9bIf4Cc#(b0D2s{dpW~1*k3AP%Hd%WzBka? o(n-@7Uzb(wvL"VHfAXqw5b
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 15 53 89 64 a5 24 a0 12 87 4b 38 0f 76 de 82 83 f5 a0 12 1c 13 22 d6 c7 1a 6b 1c 59 49 3a 53 fe d2 48 48 23 6d ae 81 e0 ec f0 34 0c 12 77 30 b7 ca d8 43 56 9c 6f 2c f9 49 15 14 ca 8f d4 76 b3 85 e7 28 ac b4 86 03 ae cf 34 65 ed 9e bb a7 f2 e3 4e 42 0a 4a aa da 70 46 43 b9 54 e0 53 eb 5a 88 55 4b 1a 49 86 e4 48 ab f3 ac c4 a5 05 34 fe 5c 2a c6 52 e2 61 9c b5 fb 22 14 f9 5b 6d f7 04 af 16 47 1a 39 6b 04 cb 91 df 5e 5c 71 b2 71 85 9a 8b 03 5c 70 a9 84 95 0a 70 fa 8c 23 2a 6b 21 e0 62 af ca c6 eb e3 bc 80 57 85 1c f9 62 3d a9 7f 43 3d 38 9b b9 46 41 e3 0c ae 58 61 1b 47 c4 36 c5 29 52 23 42 f1 a4 15 8b 3a 0e e0 7e 6a f6 dc 39 72 a7 02 15 83 a4 05 16 05 9e f5 92 84 ab f6 9c e1 54 02 63 e3 a9 64 a4 6e d8 49 80 4b 44 c4 e9 a0 5d 42 42 9c a8 e4 a1 48 80 2b 4c 5c Data Ascii: Sd$K8v"kYI:SHH#m4w0CVo,Iv(4eNBJpFCTSZUKIH4\Ra"[mG9k^\qq\pp#k!bWb=C=8FAXaG6)R#B:~j9rTcdnIKD]BBH+L\
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: 64 1e fd aa 42 42 ea 50 72 e7 1c 4e 29 24 2a 09 1e 3d 03 1f 31 53 e5 7b 1c 68 59 67 6f a0 52 f3 c7 85 eb 11 da dd 86 cc 5e 8c 7a e7 f5 58 bd 77 ad bd f3 7b 74 3e 62 ce d1 79 74 2b 38 1d a5 07 27 77 d4 7a 49 ce 42 ee 16 a1 96 31 de 40 3a 42 a6 57 07 6d bc ac e3 9e 4f b5 95 fb 3f f7 e2 ea 1d af 69 a6 25 7f 9a bf 67 6f 76 84 be 9a 8e 1e fd 7a f5 e9 99 d7 33 27 e1 6d b5 b7 57 be 16 13 5a b3 b7 67 5d cb 5c 3c 86 9a 63 91 73 2f 5b 71 1b 72 87 c6 b5 86 9e a6 d3 74 36 25 a4 04 22 96 6f 49 f2 23 aa 9c c7 89 65 2c 46 63 4b 4e 92 6d 96 c0 da 9b 1c 5c 02 d7 b5 47 05 73 af 9e d4 95 96 24 4b d2 bb da aa c5 8f 66 33 1f ef 3c 19 6a 32 bd f8 f4 c4 f7 3a 87 9e bd 4f e6 6a 81 96 27 1a 16 d2 e7 9a 0d 3d 24 ea 43 83 f7 14 17 7b 5c 1e 6b 38 c1 dc dc 93 8f da dc 9a 0f 69 5c 26 Data Ascii: dBBPrN)$*=1S{hYgoR^zXw{t>byt+8'wzIB1@:BWmO?i%govz3'mWZg]\<cs/[qrt6%"oI#e,FcKNm\Gs$Kf3<j2:Oj'=$C{\k8i\&
2024-10-13 15:58:56 UTC	1369	IN	Data Raw: d6 7d eb a7 2b 90 bb 37 58 62 7c 20 10 08 04 02 81 80 17 81 20 77 2f 62 31 3e 10 08 04 02 81 3b 40 20 c8 fd 0e 9c 14 2a 06 02 81 40 20 e0 45 20 c8 dd 8b 58 8c 0f 04 02 81 40 e0 0e 10 08 72 bf 03 27 85 8a 81 40 20 10 08 78 11 08 72 f7 22 16 e3 03 81 40 20 10 b8 03 04 82 dc ef c0 49 a1 62 20 10 08 04 02 5e 04 82 dc bd 88 c5 f8 40 20 10 08 04 ee 00 81 20 f7 3b 70 52 a8 18 08 04 02 81 80 17 81 20 77 2f 62 31 3e 10 08 04 02 81 3b 40 20 c8 fd 0e 9c 14 2a 06 02 81 40 20 e0 45 20 c8 dd 8b 58 8c 0f 04 02 81 40 e0 0e 10 08 72 3f e0 9d 51 77 e0 f7 50 31 10 08 04 1e 1c 81 20 f7 07 77 70 98 17 08 04 02 6f 13 81 20 f7 b7 e9 f7 b0 3a 10 08 04 1e 1c 81 20 f7 3b 73 f0 d8 17 71 dd 99 f1 03 d4 0d fc 06 80 18 22 ee 02 81 ab 90 fb 5b 4a b0 b7 64 eb 5d 44 7c 28 29 22 10 f1 fa Data Ascii: }+7Xb\| w/b1>;@ @ E X@r'@ xr"@ Ib ^@ ;pR w/b1>;@ @ E X@r?QwP1 wpo : ;sq"[Jd]D\|()"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49824	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:56 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:56 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a3ee266e-b01e-0021-7fe2-1bcab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155856Z-17db6f7c8cfwtn5x6ye8p8q9m000000003s0000000003x7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:56 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49825	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:56 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:56 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 0fbb1da2-e01e-0085-1521-1cc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155856Z-17db6f7c8cf9c22xp43k2gbqvn00000002n000000000et6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:56 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49823	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:56 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:56 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155856Z-17db6f7c8cf96l6t7bwyfgbkhw000000042g00000000bdxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:56 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49826	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:56 UTC	1074	OUT	POST /api/v1/static/invitePageRewardLogs?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Security-Policy: upgrade-insecure-requests Device-Type: windows Language: en Authorization: Bearer X User-Language: en Sdk-Version: 0.0.0 Request-Time: 1728835133447 Device-Id: 0290d5b2-0a42-4e89-882f-f80b3eb11bff X-Sign: 50fe5fa2ca8d3fb56bf68df99f7b7316 Network-Type: unknown sec-ch-ua-platform: "Windows" Anonymous-Uid: 1728835130325HsPXFAEeW5D21Ftrqgmlb5whaIYvMxPd Wgt-Version: 0.0.0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Device-Model: PC Sdk-Type: h5 version: 5.0.3 Accept: / Origin: https://h5.g7or.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:56 UTC	2	OUT	Data Raw: 7b 7d Data Ascii: {}
2024-10-13 15:58:57 UTC	201	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:57 UTC	1360	IN	Data Raw: 35 34 39 0d 0a 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 63 6f 64 65 22 3a 32 30 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 7b 22 6c 69 73 74 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 73 22 3a 22 2b 39 31 20 39 39 35 2a 2a 2a 2a 38 31 39 20 73 75 63 63 65 73 73 66 75 6c 20 77 69 74 68 64 72 61 77 61 6c 20 52 73 20 35 30 30 2e 30 30 ef bc 81 22 7d 2c 7b 22 63 6f 6e 74 65 6e 74 73 22 3a 22 2b 39 31 20 38 32 34 2a 2a 2a 2a 32 39 34 20 73 75 63 63 65 73 73 66 75 6c 20 77 69 74 68 64 72 61 77 61 6c 20 52 73 20 35 30 30 2e 30 30 ef bc 81 22 7d 2c 7b 22 63 6f 6e 74 65 6e 74 73 22 3a 22 2b 39 31 20 37 34 31 2a 2a 2a 2a 38 38 39 20 73 75 63 63 65 73 73 66 75 6c 20 77 69 74 68 64 72 61 77 61 6c 20 52 73 20 35 30 30 2e 30 30 ef bc 81 22 7d 2c 7b 22 63 6f Data Ascii: 549{"status":1,"code":200,"msg":"ok","data":{"lists":[{"contents":"+91 995**819 successful withdrawal Rs 500.00"},{"contents":"+91 824294 successful withdrawal Rs 500.00"},{"contents":"+91 741**889 successful withdrawal Rs 500.00"},{"co
2024-10-13 15:58:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49828	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	1070	OUT	POST /api/v1/static/invite_page_rank?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Security-Policy: upgrade-insecure-requests Device-Type: windows Language: en Authorization: Bearer X User-Language: en Sdk-Version: 0.0.0 Request-Time: 1728835133444 Device-Id: 0290d5b2-0a42-4e89-882f-f80b3eb11bff X-Sign: d21dd5e9e9b378071fe89f48e886453c Network-Type: unknown sec-ch-ua-platform: "Windows" Anonymous-Uid: 1728835130325HsPXFAEeW5D21Ftrqgmlb5whaIYvMxPd Wgt-Version: 0.0.0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Device-Model: PC Sdk-Type: h5 version: 5.0.3 Accept: / Origin: https://h5.g7or.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	2	OUT	Data Raw: 7b 7d Data Ascii: {}
2024-10-13 15:58:57 UTC	201	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:57 UTC	550	IN	Data Raw: 32 31 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 63 6f 64 65 22 3a 32 30 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 7b 22 6c 69 73 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 2b 39 31 20 39 35 32 2a 2a 2a 2a 37 38 33 22 2c 22 61 6d 6f 75 6e 74 22 3a 22 2b 52 73 20 39 35 36 37 2e 38 39 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 2b 39 31 20 37 33 36 2a 2a 2a 2a 39 34 35 22 2c 22 61 6d 6f 75 6e 74 22 3a 22 2b 52 73 20 38 33 32 31 2e 34 34 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 2b 39 31 20 38 39 31 2a 2a 2a 2a 32 32 37 22 2c 22 61 6d 6f 75 6e 74 22 3a 22 2b 52 73 20 36 37 32 31 2e 33 31 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 2b 39 31 20 39 39 32 2a 2a 2a 2a 35 31 38 22 2c 22 61 6d 6f 75 6e 74 22 3a 22 2b 52 73 20 35 39 33 32 2e 37 36 22 7d 2c 7b 22 6e Data Ascii: 21f{"status":1,"code":200,"msg":"ok","data":{"lists":[{"name":"+91 952**783","amount":"+Rs 9567.89"},{"name":"+91 736945","amount":"+Rs 8321.44"},{"name":"+91 891227","amount":"+Rs 6721.31"},{"name":"+91 992**518","amount":"+Rs 5932.76"},{"n
2024-10-13 15:58:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49830	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	1083	OUT	POST /api/v1/test-page-view-count-log/invitePage?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Security-Policy: upgrade-insecure-requests Device-Type: windows Language: en Authorization: Bearer X User-Language: en Sdk-Version: 0.0.0 Request-Time: 1728835133449 Device-Id: 0290d5b2-0a42-4e89-882f-f80b3eb11bff X-Sign: 458d2ea21ec75306ae9bf4fabc55b271 Network-Type: unknown sec-ch-ua-platform: "Windows" Anonymous-Uid: 1728835130325HsPXFAEeW5D21Ftrqgmlb5whaIYvMxPd Wgt-Version: 0.0.0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Device-Model: PC Sdk-Type: h5 version: 5.0.3 Accept: / Origin: https://h5.g7or.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	73	OUT	Data Raw: 7b 22 6b 22 3a 22 33 36 65 66 35 38 65 35 2d 31 39 37 35 2d 34 37 33 62 2d 39 63 39 33 2d 62 66 65 39 32 62 30 35 32 65 63 33 22 2c 22 69 6e 76 69 74 65 72 22 3a 22 31 32 35 33 36 36 36 38 22 2c 22 76 65 72 22 3a 33 7d Data Ascii: {"k":"36ef58e5-1975-473b-9c93-bfe92b052ec3","inviter":"12536668","ver":3}
2024-10-13 15:58:57 UTC	232	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49831	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	1064	OUT	POST /api/v1/member/phone_code?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Security-Policy: upgrade-insecure-requests Device-Type: windows Language: en Authorization: Bearer X User-Language: en Sdk-Version: 0.0.0 Request-Time: 1728835133430 Device-Id: 0290d5b2-0a42-4e89-882f-f80b3eb11bff X-Sign: 0362dcf0bd67f4337854305c5852ce4b Network-Type: unknown sec-ch-ua-platform: "Windows" Anonymous-Uid: 1728835130325HsPXFAEeW5D21Ftrqgmlb5whaIYvMxPd Wgt-Version: 0.0.0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Device-Model: PC Sdk-Type: h5 version: 5.0.3 Accept: / Origin: https://h5.g7or.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	2	OUT	Data Raw: 7b 7d Data Ascii: {}
2024-10-13 15:58:57 UTC	201	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:57 UTC	55	IN	Data Raw: 33 31 0d 0a 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 63 6f 64 65 22 3a 32 30 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 5b 22 2b 39 31 22 5d 7d 0d 0a Data Ascii: 31{"status":1,"code":200,"msg":"ok","data":["+91"]}
2024-10-13 15:58:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49829	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	1069	OUT	POST /api/v1/customer-service/lists?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Security-Policy: upgrade-insecure-requests Device-Type: windows Language: en Authorization: Bearer X User-Language: en Sdk-Version: 0.0.0 Request-Time: 1728835133440 Device-Id: 0290d5b2-0a42-4e89-882f-f80b3eb11bff X-Sign: a4b3ecaf31120332b9c704de791697ef Network-Type: unknown sec-ch-ua-platform: "Windows" Anonymous-Uid: 1728835130325HsPXFAEeW5D21Ftrqgmlb5whaIYvMxPd Wgt-Version: 0.0.0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Device-Model: PC Sdk-Type: h5 version: 5.0.3 Accept: / Origin: https://h5.g7or.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	2	OUT	Data Raw: 7b 7d Data Ascii: {}
2024-10-13 15:58:57 UTC	201	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:57 UTC	1932	IN	Data Raw: 37 38 35 0d 0a 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 63 6f 64 65 22 3a 32 30 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 7b 22 6c 69 73 74 73 22 3a 5b 7b 22 69 64 22 3a 31 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 68 69 70 70 69 6e 67 68 65 72 6f 2e 76 69 70 2f 72 65 73 6f 75 72 63 65 2d 66 69 6c 65 73 2f 32 30 32 33 2d 30 34 2d 31 33 2f 6e 50 31 36 4b 41 42 74 50 51 50 67 34 32 54 69 2e 70 6e 67 22 2c 22 72 65 6d 61 72 6b 22 3a 22 52 65 67 69 73 74 72 61 74 69 6f 6e 20 6c 6f 67 69 6e 20 70 72 6f 62 6c 65 6d 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 6d 65 2f 4a 65 6e 6e 79 31 37 32 37 22 2c 22 66 6c 61 67 22 3a 22 31 22 2c 22 73 6f 72 74 22 3a 31 30 30 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 Data Ascii: 785{"status":1,"code":200,"msg":"ok","data":{"lists":[{"id":1,"icon":"https://cdn.shippinghero.vip/resource-files/2023-04-13/nP16KABtPQPg42Ti.png","remark":"Registration login problem","link":"https://t.me/Jenny1727","flag":"1","sort":100,"created_at":"
2024-10-13 15:58:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49848	35.190.80.1	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	553	OUT	OPTIONS /report/v4?s=sNMwhAG3sTGYT63oEZBtO1jTllxAQvCD2DWBBIX%2B%2FahW%2FpZzlNl9AY0Zr1jn3dm3qopWaqKQVMLTFpqpemXYz0h3WxCwMIIdNC9aVGdtLeSl5zvyqABt6F1QZSlwix%2BjEu8YCqvLxw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cdn.shippinghero.vip Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Sun, 13 Oct 2024 15:58:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49846	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b2260943-f01e-0052-0b1c-1c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155857Z-17db6f7c8cf9wwz8ehu7c5p33g00000002d0000000006nw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:57 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49847	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 355a979e-401e-0064-3e4a-1c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155857Z-17db6f7c8cf9wwz8ehu7c5p33g00000002dg000000005qk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:57 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49852	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	448	OUT	GET /static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new.16acf52e.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	894	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C471377C0F42393100E297 Last-Modified: Tue, 20 Aug 2024 09:33:00 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8778536173228367285 x-oss-storage-class: Standard Content-MD5: Es1EdJ7klT72ZAqQTjpx1Q== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5405 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=46EJpGSRhDqSPDf4hWHLsveTJuB%2F93Oknq9jWexH%2BgPlU%2B%2B3OWlRDkhLpSfPvXmmmLX9xIGoJn%2B4UnKryPeSBdqht1%2Fa8EobYjHlf%2B95YKZAlo%2FTHMadmjGFwgA7%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088ba4e8b41ed-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:57 UTC	475	IN	Data Raw: 37 63 33 33 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 61 70 70 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 22 5d 2c 7b 22 30 32 33 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 45 49 41 41 41 42 43 43 41 59 41 41 41 44 6a Data Ascii: 7c33(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new"],{"0230":function(t,e){t.exports="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEIAAABCCAYAAADj
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 46 42 6c 52 5a 45 53 52 45 59 6d 46 73 70 67 61 76 5a 30 61 30 2f 64 7a 42 58 6e 5a 4b 66 42 4b 71 67 6c 38 42 34 42 68 59 41 78 6c 51 72 39 67 4c 59 77 4f 41 4f 63 59 2b 41 42 4d 66 2f 57 52 62 66 4c 38 6b 67 50 31 39 39 43 70 33 76 41 36 50 63 71 49 71 51 31 63 58 75 4c 35 4e 51 41 39 52 49 53 78 59 42 42 7a 66 46 76 42 49 58 58 63 2f 70 6f 42 4a 73 5a 68 67 48 63 79 65 64 73 62 70 39 47 2f 65 67 71 55 48 67 46 43 52 4e 38 72 38 56 63 42 4e 42 64 41 76 38 6a 6d 35 4b 62 46 6e 63 56 4f 77 34 39 79 6a 2b 71 59 33 72 41 46 55 6f 63 50 33 74 49 4a 37 37 6d 33 65 6f 41 6c 71 51 49 78 64 68 4f 58 6c 64 2f 71 4c 77 58 6f 65 32 41 4d 73 4b 4f 6e 4e 2b 52 73 50 49 45 46 44 68 44 52 37 77 4f 4b 6f 49 31 39 2f 6b 48 62 52 39 36 50 44 79 2b 6b 7a 72 51 59 6b 68 6f Data Ascii: FBlRZESREYmFspgavZ0a0/dzBXnZKfBKqgl8B4BhYAxlQr9gLYwOAOcY+ABMf/WRbfL8kgP199Cp3vA6PcqIqQ1cXuL5NQA9RISxYBBzfFvBIXXc/poBJsZhgHcyedsbp9G/egqUHgFCRN8r8VcBNBdAv8jm5KbFncVOw49yj+qY3rAFUocP3tIJ77m3eoAlqQIxdhOXld/qLwXoe2AMsKOnN+RsPIEFDhDR7wOKoI19/kHbR96PDy+kzrQYkho
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 50 6a 6e 5a 56 47 2f 51 72 66 73 69 4a 67 54 52 51 4a 62 43 47 74 68 33 50 77 6c 77 71 67 68 37 76 4a 62 57 68 6e 7a 47 34 45 32 4e 5a 66 4b 42 61 4c 44 55 4f 44 45 68 33 4f 39 71 6c 53 41 75 50 73 4e 2f 77 4c 37 47 47 52 45 4d 73 6b 48 4d 46 44 69 41 52 75 2f 43 48 7a 68 4d 34 54 7a 56 34 41 6e 33 6d 49 63 4f 57 66 6c 72 31 31 4f 6c 65 6a 70 36 5a 58 2b 53 67 6a 6a 4b 34 6b 67 41 50 4d 61 47 4f 30 52 45 48 4b 6d 6c 70 6c 6f 30 63 57 50 35 74 48 67 56 49 41 59 73 34 73 37 6d 62 6b 30 56 71 37 73 54 70 43 42 36 70 75 42 7a 5a 4e 44 4b 6f 74 46 4c 2f 6f 6a 63 4f 53 63 45 69 37 58 38 43 6a 4a 6c 30 41 4a 55 67 7a 73 51 39 67 79 56 61 52 44 6c 41 6e 41 33 48 6f 4a 67 69 32 75 4d 63 38 68 68 69 4b 42 53 49 62 73 5a 43 42 37 63 72 34 58 72 4c 32 72 76 37 79 71 Data Ascii: PjnZVG/QrfsiJgTRQJbCGth3Pwlwqgh7vJbWhnzG4E2NZfKBaLDUODEh3O9qlSAuPsN/wL7GGREMskHMFDiARu/CHzhM4TzV4An3mIcOWflr11Olejp6ZX+SgjjK4kgAPMaGO0REHKmlplo0cWP5tHgVIAYs4s7mbk0Vq7sTpCB6puBzZNDKotFL/ojcOScEi7X8CjJl0AJUgzsQ9gyVaRDlAnA3HoJgi2uMc8hhiKBSIbsZCB7cr4XrL2rv7yq
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 4c 57 41 31 73 76 6a 4a 6e 54 6a 41 6a 31 68 49 48 76 64 6a 77 64 50 6f 54 4b 68 78 55 46 4d 53 4b 34 34 43 59 75 75 35 6e 6c 49 7a 38 42 67 71 6b 58 68 71 4b 52 4b 71 4a 5a 59 76 45 39 30 68 32 71 31 48 4b 70 62 61 69 65 59 4a 73 4e 6b 45 70 4d 51 37 30 4b 55 75 54 50 48 57 32 6f 78 76 66 4a 36 6c 43 75 44 55 58 68 51 41 43 34 61 54 32 50 4b 43 33 42 49 51 59 50 69 43 37 59 4c 61 57 57 67 4e 6c 70 45 33 31 75 71 66 50 66 69 49 30 57 46 77 72 65 4a 70 4d 36 6f 4b 71 45 71 56 4c 52 61 68 4a 49 64 72 76 66 53 64 56 58 56 2f 66 43 51 32 43 4e 62 66 6d 4c 66 42 2b 41 58 52 41 76 69 4a 68 53 5a 74 50 61 46 74 50 49 63 61 75 42 30 69 58 50 62 4e 62 34 61 74 6c 6b 68 58 56 49 2b 77 6a 4c 51 5a 6e 72 42 4b 76 4b 2b 6f 52 76 58 46 33 65 69 36 38 46 47 44 44 57 63 Data Ascii: LWA1svjJnTjAj1hIHvdjwdPoTKhxUFMSK44CYuu5nlIz8BgqkXhqKRKqJZYvE90h2q1HKpbaieYJsNkEpMQ70KUuTPHW2oxvfJ6lCuDUXhQAC4aT2PKC3BIQYPiC7YLaWWgNlpE31uqfPfiI0WFwreJpM6oKqEqVLRahJIdrvfSdVXV/fCQ2CNbfmLfB+AXRAviJhSZtPaFtPIcauB0iXPbNb4atlkhXVI+wjLQZnrBKvK+oRvXF3ei68FGDDWc
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 65 2e 67 74 61 67 3d 6e 3b 76 61 72 20 69 3d 6e 3b 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 69 7d 2c 22 30 63 63 33 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 61 28 22 62 30 61 63 22 29 2c 69 3d 61 2e 6e 28 6e 29 3b 69 2e 61 7d 2c 31 33 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 74 2e 65 78 70 6f 72 74 73 3d 61 2e 70 2b 22 73 74 61 74 69 63 2f 69 6d 67 2f 6c 6f 67 6f 2e 39 35 65 30 63 34 38 61 2e 70 6e 67 22 7d 2c 22 31 38 35 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 Data Ascii: nction(){window.dataLayer.push(arguments)};e.gtag=n;var i=n;e["default"]=i},"0cc3":function(t,e,a){"use strict";var n=a("b0ac"),i=a.n(n);i.a},1311:function(t,e,a){t.exports=a.p+"static/img/logo.95e0c48a.png"},"185a":function(t,e){t.exports="data:image/png
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 43 6c 61 73 73 3a 22 62 74 6e 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 73 75 63 63 65 73 73 6f 6b 2e 62 74 6e 22 29 29 29 5d 29 2c 6e 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 74 65 78 74 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 73 75 63 63 65 73 73 6f 6b 2e 76 61 6c 75 65 22 29 29 29 5d 29 5d 2c 31 29 5d 2c 31 29 2c 6e 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6c 69 73 74 73 2d 62 6f 78 22 7d 2c 5b 6e 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6c 69 73 74 73 5f 74 6f 70 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 6f Data Ascii: Class:"btn"},[t._v(t._s(t.$t("active.successok.btn")))]),n("v-uni-view",{staticClass:"text"},[t._v(t._s(t.$t("active.successok.value")))])],1)],1),n("v-uni-view",{staticClass:"lists-box"},[n("v-uni-view",{staticClass:"lists_top"},[t._v(t._s(t.$t("active.o
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 75 46 58 35 4a 4a 66 45 55 35 2b 36 61 41 4f 68 46 76 4f 43 49 38 76 6c 34 50 4a 6f 58 59 75 72 33 73 6b 2f 58 6e 45 2b 61 57 42 75 70 76 4f 43 54 6d 70 2b 39 73 39 50 54 76 6f 4c 59 31 62 61 2f 74 63 61 6a 72 4f 5a 6a 4e 47 73 72 5a 37 4f 48 31 71 36 4f 4e 54 4e 51 48 33 51 73 42 2f 34 61 43 46 67 76 39 38 2f 6e 42 44 79 57 36 6c 77 70 64 69 35 58 78 52 59 61 38 52 68 6c 33 57 61 61 47 63 63 37 45 38 49 54 4e 6d 76 33 76 4b 66 4e 50 75 71 6a 77 2b 2b 41 2f 37 71 79 4c 50 44 66 79 38 6f 4f 37 47 56 77 2f 6d 41 36 55 7a 6e 4c 58 62 5a 43 42 61 51 32 49 47 4f 4e 78 73 75 61 5a 37 57 71 78 39 4f 6c 67 30 73 35 7a 57 4e 30 64 6e 54 33 30 2f 6c 36 67 4c 2b 2b 30 4f 59 2b 30 66 6b 74 72 58 75 5a 52 78 72 43 74 4c 52 55 51 4e 68 4b 6a 52 43 50 70 43 70 42 77 62 Data Ascii: uFX5JJfEU5+6aAOhFvOCI8vl4PJoXYur3sk/XnE+aWBupvOCTmp+9s9PTvoLY1ba/tcajrOZjNGsrZ7OH1q6ONTNQH3QsB/4aCFgv98/nBDyW6lwpdi5XxRYa8Rhl3WaaGcc7E8ITNmv3vKfNPuqjw++A/7qyLPDfy8oO7GVw/mA6UznLXbZCBaQ2IGONxsuaZ7Wqx9Olg0s5zWN0dnT30/l6gL++0OY+0fktrXuZRxrCtLRUQNhKjRCPpCpBwb
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 52 32 45 76 49 6a 4a 51 4b 39 48 6a 55 53 5a 2b 62 78 32 75 31 36 7a 2f 47 33 79 38 66 33 48 53 6c 41 57 78 39 37 31 59 31 75 4f 66 31 54 4e 65 6f 71 38 51 56 39 69 45 2f 4d 31 49 4d 71 62 43 61 6b 78 2b 63 49 74 34 36 69 42 69 2f 43 74 70 5a 77 7a 65 4f 34 74 49 55 7a 58 74 41 4e 42 42 4f 6e 46 38 6a 5a 7a 42 52 32 65 51 59 39 76 68 45 39 55 45 48 53 4f 36 45 7a 41 4d 30 4b 61 41 64 72 51 31 77 31 67 70 55 74 5a 50 6d 39 75 43 51 6c 66 74 45 56 75 4f 62 64 69 44 71 47 69 79 33 5a 76 45 4f 6e 36 39 45 6a 51 34 36 56 39 74 33 5a 72 66 4e 76 6a 74 35 39 2b 37 31 64 52 64 39 2f 79 58 36 71 2b 55 58 52 46 74 48 42 72 2f 65 64 4b 68 51 4c 57 6a 41 74 52 37 49 30 52 37 6a 4b 59 46 76 72 63 54 5a 45 4a 41 48 6e 6b 4a 34 52 70 44 52 49 73 4f 5a 30 52 50 75 4b 37 Data Ascii: R2EvIjJQK9HjUSZ+bx2u16z/G3y8f3HSlAWx971Y1uOf1TNeoq8QV9iE/M1IMqbCakx+cIt46iBi/CtpZwzeO4tIUzXtANBBOnF8jZzBR2eQY9vhE9UEHSO6EzAM0KaAdrQ1w1gpUtZPm9uCQlftEVuObdiDqGiy3ZvEOn69EjQ46V9t3ZrfNvjt59+71dRd9/yX6q+UXRFtHBr/edKhQLWjAtR7I0R7jKYFvrcTZEJAHnkJ4RpDRIsOZ0RPuK7
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 67 58 30 43 5a 45 66 54 71 43 64 53 71 67 62 6e 30 41 38 66 66 46 4c 31 33 37 31 34 66 32 79 37 6f 5a 36 34 63 44 59 4c 67 37 35 31 78 31 39 69 44 79 32 57 56 4c 46 4c 32 71 6e 72 49 74 69 6f 4f 74 75 49 4b 42 2f 44 46 5a 57 6f 64 73 72 6b 57 74 70 45 53 62 64 31 4a 36 5a 7a 64 53 4b 6e 50 6a 31 4b 51 50 77 48 35 67 31 31 49 2f 32 34 66 6d 55 54 68 61 6f 73 49 4a 64 43 62 6f 44 35 44 6b 65 79 72 53 39 69 6a 6c 75 53 42 47 72 4c 56 45 46 52 47 30 58 6f 59 47 65 74 78 4c 6f 30 4f 35 48 75 71 62 34 6a 65 64 66 76 39 50 35 69 65 33 43 31 58 36 31 5a 6b 72 78 43 6c 50 32 4b 50 31 39 66 6e 64 38 35 54 76 71 78 4f 74 44 4f 41 46 56 57 6f 36 72 77 44 57 4d 47 37 43 4b 45 71 6a 44 6c 66 36 6d 43 71 6e 61 4b 77 34 72 4e 65 53 72 54 70 33 46 4e 44 64 62 56 51 46 7a Data Ascii: gX0CZEfTqCdSqgbn0A8ffFL13714f2y7oZ64cDYLg751x19iDy2WVLFL2qnrItioOtuIKB/DFZWodsrkWtpESbd1J6ZzdSKnPj1KQPwH5g11I/24fmUThaosIJdCboD5DkeyrS9ijluSBGrLVEFRG0XoYGetxLo0O5Huqb4jedfv9P5ie3C1X61ZkrxClP2KP19fnd85TvqxOtDOAFVWo6rwDWMG7CKEqjDlf6mCqnaKw4rNeSrTp3FNDdbVQFz
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 30 76 35 67 7a 37 47 37 6a 7a 34 62 35 48 4f 43 6e 6b 71 44 55 74 49 63 65 56 6d 57 75 72 39 51 7a 66 59 6c 39 72 47 56 66 6a 4f 31 6a 4a 51 37 6c 48 36 7a 51 37 67 7a 52 53 4c 56 44 61 6b 66 59 6a 4b 48 79 77 7a 69 2f 4b 4d 55 7a 36 6e 38 75 46 61 34 42 61 4d 5a 54 69 6e 4d 4e 30 65 52 38 6b 43 75 4e 6f 52 48 7a 4f 66 4d 70 38 78 74 36 61 64 4c 52 2b 35 35 36 72 6b 67 6e 78 66 30 47 59 39 4e 6c 4e 32 63 4e 5a 70 2f 72 45 34 32 66 74 2f 4e 4e 54 66 6d 78 7a 4e 74 46 7a 4c 30 57 49 66 77 6a 4a 78 77 61 34 59 61 74 30 68 6f 45 4f 57 58 4b 61 2b 67 67 72 4b 43 6e 73 4b 43 63 53 64 4b 32 44 76 47 63 70 6d 49 56 39 77 73 39 39 67 37 31 4d 32 52 74 4c 38 69 58 33 72 41 6a 39 54 50 65 7a 33 76 30 37 78 6e 37 72 42 30 30 32 38 4d 6c 4f 72 4a 62 74 74 75 58 2b 76 Data Ascii: 0v5gz7G7jz4b5HOCnkqDUtIceVmWur9QzfYl9rGVfjO1jJQ7lH6zQ7gzRSLVDakfYjKHywzi/KMUz6n8uFa4BaMZTinMN0eR8kCuNoRHzOfMp8xt6adLR+556rkgnxf0GY9NlN2cNZp/rE42ft/NNTfmxzNtFzL0WIfwjJxwa4Yat0hoEOWXKa+ggrKCnsKCcSdK2DvGcpmIV9ws99g71M2RtL8iX3rAj9TPez3v07xn7rB0028MlOrJbttuX+v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49856	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	761	OUT	GET /static/img/background1.5d83944f.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:57 UTC	908	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: image/png Content-Length: 55021 Connection: close x-oss-request-id: 666D32512319383135881E4D ETag: "5D83944FD444D1F802CB50F5761FF538" Last-Modified: Mon, 20 May 2024 05:15:41 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 824868142431419627 x-oss-storage-class: Standard Content-MD5: XYOUT9RE0fgCy1D1dh/1OA== x-oss-server-time: 4 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5332 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qX6dFRE3sdP6cqnWQcVywNehtfdJQMyEMd0FJAsE2sAU24vrOZ%2FjQ7ixujcxXqerDsR0n7G3C8c3yocrkXc75ojiE%2FJQqSiIzQeiFb%2Fhr%2BM2FHJkrxohqG%2FugGmdEw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088bae8d60f7c-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:57 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 03 a0 08 06 00 00 00 14 02 41 e9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 5f ac 5d 49 be df b5 f6 3e a7 fb f4 8c bb c7 f1 cc 35 33 6d 48 88 1d dd 0b 78 1a a4 84 a7 f0 40 10 e9 17 20 ca 03 a2 45 32 42 08 25 90 08 11 50 5a 6a 29 28 8a d2 dd 21 8a 40 8c 74 23 02 42 89 92 28 02 34 09 6a c4 43 88 c2 4b 07 25 3c 90 a7 24 12 b8 8d 72 47 69 47 b9 e0 b9 57 ce 8c f1 4c fb de 39 d3 c7 7b a3 b5 56 fd aa be f5 ab df af aa d6 3e 7f bc f7 f1 d7 d2 4c db 7b af 55 f5 ab cf ef ef aa 5d 55 6b 35 f0 0f 09 90 00 09 90 00 09 90 00 09 90 00 09 90 40 37 81 55 f7 95 bc 90 04 48 80 04 48 80 04 48 80 04 48 80 04 48 60 60 01 4d 23 20 01 12 20 01 12 20 01 12 20 01 12 20 81 05 04 58 40 Data Ascii: PNGIHDRAsRGB IDATx^_]I>53mHx@ E2B%PZj)(!@t#B(4jCK%<$rGiGWL9{V>L{U]Uk5@7UHHHHH``M# X@
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 20 01 12 20 01 12 20 01 16 d0 b4 01 12 20 01 12 20 01 12 20 01 12 20 01 12 58 40 80 05 f4 02 58 bc 94 04 48 80 04 48 80 04 48 80 04 48 80 04 58 40 d3 06 48 80 04 48 80 04 48 80 04 48 80 04 48 60 01 81 c3 2a a0 b7 db 4b 95 77 3b 0c c3 a5 76 50 51 cc cb ec 7b 81 bd c4 4b b5 bc 2f 53 fe cb ee fb b2 db df 85 3f ef 99 09 50 37 7d 96 60 71 3a 2f bb 56 9b e7 6d 1f 47 86 6d 5d 64 bb 7d f4 96 5f 75 15 32 5e 45 1f cb 47 7e 98 77 5c 34 4b af bd 5d fa d9 e5 9e c3 d4 42 90 7a b5 1a 87 7c 10 7f 5e 56 bd 58 87 d3 51 28 9f a7 80 b3 82 f1 12 23 ad 5d 2b 9a bf 08 b0 ad 04 25 05 c4 f8 df 56 7f d2 d6 45 71 d3 c5 4b 2f 93 5e ce ad f6 f4 78 7b 58 59 32 23 3b d4 5d 4f ff b5 a4 ee f1 b6 0c bf 97 c9 ae f7 a2 2c 7a bc c8 b1 57 8e d6 75 ad ef f5 38 96 5c df c3 b5 47 77 07 11 9d 17 Data Ascii: X@XHHHHX@HHHHH`*Kw;vPQ{K/S?P7}`q:/VmGm]d}_u2^EG~w\4K]Bz\|^VXQ(#]+%VEqK/^x{XY2#;]O,zWu8\Gw
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 7f 2c a6 ab 85 f4 15 17 d1 8b 8a d0 a5 8e 9d 5d 6f cc 3a e3 8c f3 58 38 63 d1 3c 16 cc cf 7e f0 6c 35 96 79 37 5f ff 71 94 f3 8b d7 6e ac be a9 04 f9 55 f8 f7 f8 1d fe 7b 17 99 a5 fd 5a 3b 56 3f f8 99 f7 77 91 a7 57 4e 7d 9d fc db fb 7c 97 f1 d6 ee a9 c9 69 71 ea 1d 97 d5 67 8b 69 ef d8 7a da 39 8f 9c a3 1c 4b ef f7 f4 e6 b5 e5 b5 5f 6b a7 b7 ad 1e fb 46 d6 3d 3c 6b fa 6c 8d e5 32 6d a1 35 0e cf 1f 2d ff 6d d9 fb 52 9b d0 fa da e5 fe de f1 59 e3 6c f5 d7 1a 6f 8f 3f f6 c4 a9 25 f6 d8 b2 ff 1a 8f 1e 59 2e 4b 27 2d d6 3d 31 a5 d5 46 ef f8 7a c7 d8 ea cf 92 79 89 7e 96 da 4f 2d 8e 8c 6d 8d f9 da f2 5b b4 7d f9 bb 97 db b5 fc b5 d8 d7 13 17 7b 6c 7b 89 de 7a 98 ed a2 df de b1 f4 d4 44 35 1d b4 e4 7f f3 cb e7 b1 90 fe da cf be b6 fd e5 e1 97 87 9b 6f df dc fe Data Ascii: ,]o:X8c<~l5y7_qnU{Z;V?wWN}\|iqgiz9K_kF=<kl2m5-mRYlo?%Y.K'-=1Fzy~O-m[}{l{zD5o
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 6a 5b aa 5d 7e 09 dd c7 ee 7a db 6e 5d d7 fa fe 3c b6 d6 73 ef cb ee bf 47 c6 a5 d7 4c 3e 36 de e4 2c 7f 6d 8d b9 f5 bd 25 cf 2e f7 2c 36 a6 f9 86 d5 f1 d1 34 1b fd e3 d3 61 f8 e2 67 49 98 17 db 2f ff d2 5f fc fe 9f fa 8f 86 6f 0c 9b ed f3 ed 66 3c e2 ee dd cf df dd 8c eb a1 e3 5a e8 a9 81 d1 71 2f ee 8f b8 e4 c5 b5 08 1b 07 65 f6 79 7b 7b bb fe d1 b4 69 f0 6c fd 87 fe b9 ff f0 f7 be 71 f4 c6 5f 90 0e 97 15 cf 9d 62 d6 8a b7 5e 65 7b 05 47 ef fd 28 6a f3 9e e6 05 ce c0 1b 11 35 36 ab db 37 12 58 af 08 d3 75 bd 17 77 e8 cb 1d 82 d3 47 4d b7 57 fd e0 55 f4 d7 e0 e2 d9 94 b4 b3 2b d6 25 f7 d5 ae cd 74 e1 5d 58 b1 a5 1e fe 2d fb e9 1e 4b e7 85 4d 7b 81 62 a8 b3 c9 0e ab be 9c 4b b4 af f4 aa 68 51 2c 3a af e8 bd 31 29 f4 d3 cb 3c da cd 98 04 5b c5 6b 5e a3 63 Data Ascii: j[]~zn]<sGL>6,m%.,64agI/_of<Zq/ey{{ilq_b^e{G(j567XuwGMWU+%t]X-KM{bKhQ,:1)<[k^c
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: a6 a8 03 09 30 58 e8 ab 00 1d 1d 40 66 d8 91 8b f2 40 61 19 e5 30 82 17 26 c3 cc 16 8a 0a 31 e8 5b 64 83 ef f5 c3 4c 1c 9e fa 35 00 63 4e ec ab a1 af fc 27 80 bc 2a c6 7e 31 60 45 0c 98 8c 14 f3 a2 f0 b0 a2 b5 99 09 12 a5 c2 8e 95 3f 58 f2 69 3f 89 e6 62 46 4f e3 e7 06 2d 67 16 31 c1 26 6b b6 aa fb 52 be 6b 05 7b 6d 43 f2 4b 4f 4c 22 d0 9f f6 e1 c2 e7 83 98 28 ba fe 7d 36 b2 0b e3 b5 1e 98 b3 64 00 5c d0 ef 10 83 55 44 59 71 24 d3 ab a8 1b ed 07 93 0d 38 4d 1c b7 b6 03 f1 19 6d eb d0 0e f6 89 05 b8 4e 8e 99 6d 83 7d 66 f7 68 99 ad 7e 33 67 2f ff 91 d9 ae 1e 3b 8e 19 8b c0 8a 0f 59 c5 45 c1 de 88 8b 52 f4 a0 bf c6 b6 e0 61 31 8b 27 10 0c f0 a1 66 62 a7 f3 01 c6 33 83 09 c6 fe 58 20 43 33 92 07 5d 3f 70 da cc 26 5f f0 a1 17 f3 5f 4d 6f c1 10 24 9f 4c 4c d4 Data Ascii: 0X@f@a0&1[dL5cN'*~1`E?Xi?bFO-g1&kRk{mCKOL"(}6d\UDYq$8MmNm}fh~3g/;YERa1'fb3X C3]?p&__Mo$LL
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 05 cd d9 3a ca d5 27 28 5b b8 6f 97 61 c5 7b 5a 37 7b df 37 75 07 82 aa 36 4c 35 e3 58 cf 53 b0 d4 6c a8 35 d6 5e bd f7 b6 d3 73 5d cd 2f 7a e5 b1 ae ab 25 62 fc ce e5 de 23 bc d1 71 ad df f3 8e a7 66 23 a6 8f b7 0c cf 3a 52 4e f9 5d 8f cc 4b 51 2d bd de 93 a1 65 3b 3a 86 d4 ec a4 f5 9d d7 97 dc 87 cb a3 96 f6 bb 24 96 4c 09 bd 63 22 06 af e9 91 67 09 63 91 01 c7 5e 93 a9 47 de 5a ff 0b 19 37 bb eb c9 2d e7 89 c1 d3 bd 20 45 a6 df a6 74 6d 8f 6b c5 98 9a 5f c4 ef 3a e4 10 4e 12 77 7a fc 4d af be f0 fc 0a 19 b5 96 16 a2 be ba c6 16 3a d5 d7 86 7f af de 78 7d f8 f5 17 eb a9 88 1e ff 6c 86 ed 5f fb 0b bf f4 27 fe ed 1f de fc fa 8b 53 6b 1d f4 5e 15 d0 95 f5 cf e3 9b 07 ff 83 5f f8 e3 7f 67 18 56 ff ec 57 57 67 c3 d7 8e c2 b9 cf 3d 8a 43 45 59 4a ec 09 52 da Data Ascii: :'([oa{Z7{7u6L5XSl5^s]/z%b#qf#:RN]KQ-e;:$Lc"gc^GZ7- Etmk_:NwzM:x}l_'Sk^_gVWWg=CEYJR
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 81 c6 9c da 9c ef f2 02 aa 76 d8 b1 3d 09 2b fa 91 d6 2a 08 d1 01 ca 04 63 2b c9 2f a8 75 a8 c9 83 84 76 66 ef df ba 88 cf 1e 2f 83 48 da a4 fa 0a 39 fb 7d ee 7e d0 cb 4f b5 2f 59 c7 ef 8b 5f f7 f2 31 e4 85 ac 0e 3a 16 77 7b 3c 25 5f 8b 61 6f f2 b5 ec 56 7d 66 c6 d2 9e 60 3d b3 12 fb 6f 73 b4 d8 6a 7f f0 a6 07 ac 87 3e eb 5e 3d 5e 9d b0 2c 6b f7 7c be c7 1f 2d 1b c5 98 51 b3 59 2b 21 20 53 6f cc e2 71 7a 46 d5 4a a4 56 cc c3 88 a7 bf ef b9 de f7 a5 d2 07 bc 07 54 95 b4 a2 c7 d7 c6 94 fb 54 f2 13 1d df 74 4c 44 3b b1 ec cb 8b a1 b5 58 a9 e7 b2 b5 bf d4 fc ce ce 11 e9 8e d6 64 86 95 43 5a f7 58 76 88 7a 4c b6 23 b9 28 95 e4 9a 83 f6 0b db 07 f2 fb 2d c6 ad 18 e3 8d 49 c7 56 cb 96 f2 f1 26 4f f3 ec bb e6 13 35 7f c6 ef b4 9d 89 5c 9e be 6b b6 88 f7 6a fb b6 Data Ascii: v=+*c+/uvf/H9}~O/Y_1:w{<%_aoV}f`=osj>^=^,k\|-QY+! SoqzFJVTTtLD;XdCZXvzL#(-IV&O5\kj
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 2d ec 2a af cb 3a 17 1d 71 b6 28 d8 55 2c d2 ad 24 15 6d cf 90 a0 b8 be 72 1c d8 04 26 df 01 6d da 72 a6 0b b8 a2 6a 97 4a 81 3a b9 eb c4 63 e8 bb f8 c8 3a fd 06 13 63 a5 cd ec 97 27 2b c1 a3 0d 18 36 9f 3d 28 59 b2 76 b2 c8 f2 4a cb ee 33 39 80 3b 26 ce e9 1a a3 70 85 f8 34 89 ab c6 64 3e 7c 18 51 b8 39 6e a3 ed ac c0 31 e2 75 b7 df eb b8 5f c4 98 4a 6c ab d9 93 95 4f 6a 71 ce 1a 83 a7 3b af 1d f8 3c cb 69 63 db 86 dd 16 85 8f e6 ac c6 67 e6 c9 8e 31 95 b1 c9 3e 9d c1 8d 0b a1 8f f4 fd 6a 58 6d b7 c3 16 0d 0c 0f 08 00 3f b1 6d 50 2b ae 23 d2 7b f5 41 68 ca 64 59 b1 8f a8 8e 9a 8e 51 6f ba 2d 27 d7 c6 e2 58 eb db c9 49 d1 6f 55 5f f9 a1 08 de 69 1c e5 e7 a6 8d 9c c7 3f 4d 86 ea c9 bd 27 ae 6b 3d d5 64 6a b4 17 c7 08 66 63 cd 40 df 79 7e b4 39 be 7d bc 79 Data Ascii: -*:q(U,$mr&mrjJ:c:c'+6=(YvJ39;&p4d>\|Q9n1u_JlOjq;<icg1>jXm?mP+#{AhdYQo-'XIoU_i?M'k=djfc@y~9}y
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: ee dc bf 60 a4 e1 46 8c 7b da 9e 0d 2e 45 d0 11 20 e3 61 e4 e1 25 89 7a 31 65 74 aa 2c e9 e4 2d 79 a7 3e a4 cf cb 87 87 29 81 1b 8b d0 6b fa 4d c3 0d f6 62 3d 68 65 45 90 3c 98 e4 a0 c5 ee 62 b1 18 99 cf 47 5d 45 19 82 cf 4f 6b fe c0 69 33 19 e1 c1 0e 3f c7 3e 52 78 9b e5 d0 e9 2b 89 ac f4 1a 6f 0c 65 5f 56 a4 e6 3a 98 e2 72 d4 61 fa ae e0 39 8d 49 66 37 53 88 9a 43 bf 4e b2 2a f9 54 de 7c 9d 8d 3d 2e b3 54 7e 5d 51 6e fa 2a d9 0a ea 41 c6 56 ea 06 5c 10 96 7b 87 da 30 98 f3 3c de fc 47 6d 2c 91 73 5e 59 38 57 4b cc f1 3b ab ec c0 b4 50 b8 2f 8c 3f c5 be 5c fb 4a ab c1 16 db 47 68 4e f7 a1 ba 32 3f c0 97 f7 e4 0e 52 3c 83 89 2f d4 7e 0d c4 da de 8d 51 c1 b6 64 52 03 7d 5d c5 c5 cc 0f 61 0c d1 87 f0 7a eb 57 21 d8 27 33 ed 37 80 8d 33 b3 78 16 3f eb 2c 5c Data Ascii: `F{.E a%z1et,-y>)kMb=heE<bG]EOki3?>Rx+oe_V:ra9If7SCNT\|=.T~]QnAV\{0<Gm,s^Y8WK;P/?\JGhN2?R</~QdR}]azW!'373x?,\
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: af f5 e1 05 79 ef 5e cf 17 6b fd 5b 0f d7 9e 5d b6 3e af f1 a9 e9 70 96 cf 5a e3 5c 26 15 d1 8b c5 cc 0a f0 fa 7a 2d 47 eb df 7a 4c 35 9f d5 fd db fe 90 5f 55 ef bf a4 56 b6 69 93 ad f9 13 c6 7d 2b a9 7b 71 c6 f2 37 2f a6 79 c9 b6 2e ad 45 30 8f 3c 2d 3b 6a 7d ef 8d 1d 2d d0 1a bf a7 a7 9e b8 d5 8a 11 b5 98 88 76 2e 91 b4 be bd d5 23 af 1f 70 25 26 da 36 e6 e5 40 6b c2 05 e3 af 57 24 b6 f4 d2 8a c5 18 cb 65 a1 61 a8 12 61 b1 e0 3c 76 2b 47 6b 8e b5 f8 81 31 a3 67 6c 35 ab b5 ec a3 37 76 e9 76 bd 02 fa e0 d6 40 e3 29 1c d9 1a 68 73 06 3a 99 4e cd 31 3d 03 eb 09 8f d8 43 be 29 48 52 53 52 45 fa d9 7e 5c bb 25 1b 6c d2 75 18 10 e5 2e dc cc 94 07 83 5c ba e9 5e 25 70 b1 7d cc f8 89 df 0a 30 b5 20 ae d3 ad be 1f 47 e3 6d ad 2c 8b 79 3d eb 20 e1 0a d8 c1 f0 50 Data Ascii: y^k[]>pZ\&z-GzL5_UVi}+{q7/y.E0<-;j}-v.#p%&6@kW$eaa<v+Gk1gl57vv@)hs:N1=C)HRSRE~\%lu.\^%p}0 Gm,y= P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49858	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	761	OUT	GET /static/img/background3.8cb66a81.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:57 UTC	910	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: image/png Content-Length: 36933 Connection: close x-oss-request-id: 666D32511E3C923038248B7C ETag: "8CB66A81237E072DE84020DBF7646C01" Last-Modified: Mon, 20 May 2024 05:15:41 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11188607835476758800 x-oss-storage-class: Standard Content-MD5: jLZqgSN+By3oQCDb92RsAQ== x-oss-server-time: 8 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2541 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xh%2Bw8SGuyUzJFn8MkOOBW5BMLhNUWEnHSOK9L4Ag4oIKISvGzVBtA%2F5LSdhXLOyQ8A%2FeAR1ku7aJdX4gfSb89Plr4UxoUrTevqmBgp5DETWgPL%2FDUuTE39MpGPVC%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088baee9a159f-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:57 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 04 40 08 06 00 00 00 c7 e1 64 e5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec dd 5f 6c 64 db 9a 18 f4 bd 77 d5 bd 75 67 dc 3d a6 ee 8d 35 73 1d 12 c5 46 33 04 b7 41 ca f0 c4 0b 41 c4 2f 10 94 87 88 86 a4 05 28 9a 81 44 88 80 d2 52 4b a0 28 9a 6e 87 28 02 71 a4 44 04 84 12 25 51 04 e8 24 d0 c0 43 88 e0 c5 83 12 1e c8 53 12 09 dc 46 99 51 ec 28 03 be 19 39 77 0a df 69 cf dc 9a 5b b5 37 5a 6e ef 73 ea d6 a9 2a ef 2a d7 9f bd 76 fd 2c 8d 7a e6 78 d7 de 6b fd f6 67 fb cb ca b7 be 95 26 be 08 10 20 40 80 00 01 02 04 08 10 a8 2c 90 56 be d2 85 04 08 10 20 40 80 00 01 02 04 08 24 12 68 41 40 80 00 01 02 04 08 10 20 40 60 0e 01 09 f4 1c 58 2e 25 40 80 00 01 02 04 08 10 20 Data Ascii: PNGIHDR@dsRGB IDATx^_ldwug=5sF3AA/(DRK(n(qD%Q$CSFQ(9wi[7Zns**v,zxkg& @,V @$hA@ @`X.%@
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 10 88 2f 81 2e 8a 89 63 2e 92 24 89 6f 32 73 bc a9 9a 5c 1a 9c c3 d7 aa ac 9f fa 1e 9f fa f9 9a 30 af 75 18 75 30 2b c7 b0 ea b1 4c ba ff aa 9f 39 e9 65 ae f2 99 b3 ee bd aa e7 3e 76 df c7 be 5f 1a 55 bd 6e ad 3f 20 0b 3c 6c de 79 cc 7b fd 02 43 aa dd 47 9e fa b7 64 99 66 cb bc d7 28 f4 53 ef fb d4 cf d7 ed a5 57 9e 4f 9a 96 e1 51 b7 29 fc d0 78 56 95 07 3d 7d d2 53 12 e5 69 37 ae f2 62 a6 5d 33 fe df 57 f5 07 68 f4 be 4f fd e5 31 ee 50 65 fe 55 5e ca f8 18 ab 06 48 15 db 55 b9 4e fa e3 3b 2d 21 7b 2c 51 9b 27 16 26 fd a2 7c ec bd ce 93 c0 3d f6 4e ab 7e 7f fc 37 51 78 a7 8f 7d b6 4a ac cc 73 4d 15 d7 45 e2 63 52 bc 4e 7a d6 53 ff 1f 7d 55 c6 3f 4f a2 5c 75 8c f3 fc 5c 2d f2 4e e7 f9 4c 95 d8 9e e5 3c 2d f6 c7 3f 53 35 0e 66 bd 93 45 df 57 18 4b 55 93 2a Data Ascii: /.c.$o2s\0uu0+L9e>v_Un? <ly{CGdf(SWOQ)xV=}Si7b]3WhO1PeU^HUN;-!{,Q'&\|=N~7Qx}JsMEcRNzS}U?O\u\-NL<-?S5fEWKU*
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 69 f1 3a 2d b6 c7 e7 39 6a 3b 29 ee ab c4 fe f8 bc e7 fd 1d f1 d8 58 17 89 91 79 5c 66 fd ce 9c 66 32 cd 65 da ef 9d 45 7f c7 55 f9 dc 3c 7f 1b 16 fd bd 38 6b be d3 7e 5f 3e f6 bb ae ea ef 86 59 d7 3d 36 f7 59 71 f0 d8 df 8d aa 71 5c 65 0c 93 fe c6 4e 7b fe bc 31 57 f5 e7 e7 29 d7 cd fa 19 99 f6 3b a5 ca ef 8e 49 f1 3d fe df aa fe 4e 9e f6 fb 77 7c ec bb df fe de 0f 25 d1 df 1d 94 49 f5 a7 04 bb 4c a8 43 32 3d 9e 48 ff 50 69 c7 1a 93 e8 f5 26 d0 23 89 73 90 3a 4d 4e d3 d1 15 e7 90 38 8f 26 cd 21 61 be fd ce 6d 1a 52 e4 bb af 7f 2f dd 7f 10 ff f8 b5 9d fb 71 ff 78 92 24 bf 3c e3 a7 78 fc fb b3 fe ef d1 ef 85 ff 3d 7c 4d ba 77 79 dd 63 cf 9e f5 cb a5 ca 3d 66 8d a1 bc f7 a4 31 4c 1b 57 d5 f9 8d 8f 7b de 79 3e 36 b7 f1 71 4c 7b 7f b3 9e 3b 6d de e5 d8 c3 3d Data Ascii: i:-9j;)Xy\ff2eEU<8k~_>Y=6Yqq\eN{1W);I=Nw\|%ILC2=HPi&#s:MN8&!amR/qx$<x=\|Mwyc=f1LW{y>6qL{;m=
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: d1 7a e8 55 ac 42 2f 3f 81 9e b8 fa dc cb 42 bb ba 50 ba f1 7b 0e fe e0 8f ff e4 8f fe 93 7f 3b 4d d3 6e 40 0a 65 1b df fc 91 aa 5c ae 23 40 80 00 01 02 04 08 10 20 90 24 bf f2 eb 5f 96 73 84 ee 1c bf f4 6b 7f f7 a7 ff fb ab 3f f7 cb 65 29 47 f7 b2 fb c5 2a f4 17 09 ef 92 56 a1 57 96 40 87 d5 e7 a3 f7 47 69 68 59 17 56 9f d3 9b 34 4b 9e 27 d9 cf fc d4 1f fb cf 5b 49 eb 67 c3 8b 0f 1b 06 f7 76 d4 3c fb 21 20 40 80 00 01 02 04 08 10 98 4f 20 d4 44 df dc 7d b9 b1 70 98 0c ff c2 5f fc 85 3f f1 1f 24 bf 9a e4 c5 5e 91 af 72 15 7a a5 09 74 d8 3c d8 3d fc 72 f5 f9 0f fc e4 9b df fa ad ce fe ff 55 1e 92 12 56 9e 75 db 98 2f 58 5c 4d 80 00 01 02 04 08 10 20 f0 49 20 6c 28 0c 2b d1 e1 2b 4d 92 1f dc f4 af ff e9 bf f4 8b 9f fd 83 b0 0a dd bf 3d ce 4f 1e 56 a1 97 5d Data Ascii: zUB/?BP{;Mn@e\#@ $_sk?e)G*VW@GihYV4K'[Igv<! @O D}p_?$^rzt<=rUVu/X\M I l(++M=OV]
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: dd 3b ec 65 4a 38 36 19 46 9e 4d 80 00 01 02 04 08 10 d8 1e 81 59 9b 08 a3 ea 03 dd d9 ed 67 da d8 6d 4f e0 9a 29 01 02 04 08 10 20 40 60 53 02 8d 49 a0 75 e1 d8 54 08 79 2e 01 02 04 08 10 20 40 60 bb 04 a2 4f a0 cb 1a 68 09 f4 76 05 ae d9 12 20 40 80 00 01 02 04 36 25 30 ab 8d 9d 12 8e 4d bd 15 cf 25 40 80 00 01 02 04 08 10 a8 ad 40 95 4d 84 b5 6e 63 67 05 ba b6 b1 65 60 04 08 10 20 40 80 00 81 46 0a 54 49 a0 6b d9 85 a3 48 92 e4 34 39 4d 1d e5 dd c8 b8 34 29 02 04 08 10 20 40 80 40 6d 05 a6 25 d0 c7 b7 9d fc ec b2 9b bf 78 79 51 d4 32 81 0e a2 ef 24 d0 b5 0d 2c 03 23 40 80 00 01 02 04 08 34 55 a0 ca 0a 74 ed 4a 38 8a a2 48 d3 b1 04 5a 1b bb a6 86 a8 79 11 20 40 80 00 01 02 04 ea 25 50 25 81 ae fd 0a f4 89 83 54 ea 15 55 46 43 80 00 01 02 04 08 10 68 b0 Data Ascii: ;eJ86FMYgmO) @`SIuTy. @`Ohv @6%0M%@@Mncge` @FTIkH49M4) @@m%xyQ2$,#@4UtJ8HZy @%P%TUFCh
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 81 c7 05 66 ad 40 f7 2e bb f9 8b 87 15 e8 fb 3b d5 79 05 5a 09 c7 e3 2f db 15 04 08 10 20 40 80 00 01 02 4f 17 88 f2 20 95 a4 28 ee b7 33 96 07 a9 8c 96 70 58 81 7e 7a 50 b8 03 01 02 04 08 10 20 40 80 c0 74 81 c6 94 70 74 76 fb 99 93 08 85 3a 01 02 04 08 10 20 40 80 c0 aa 05 66 25 d0 a3 9b 08 ef c7 51 e7 12 0e 09 f4 aa 43 c5 fd 09 10 20 40 80 00 01 02 04 82 40 63 56 a0 d5 40 0b 68 02 04 08 10 20 40 80 00 81 75 08 cc 3a 48 25 aa 4d 84 56 a0 d7 11 2e 9e 41 80 00 01 02 04 08 10 20 d0 98 15 68 09 b4 60 26 40 80 00 01 02 04 08 10 58 87 40 b4 5d 38 02 ce 68 1f 68 09 f4 3a c2 c5 33 08 10 20 40 80 00 01 02 04 ac 40 8b 01 02 04 08 10 20 40 80 00 01 02 73 08 44 9b 40 8f f6 81 3e 39 ec 65 e7 da d8 cd f1 da 5d 4a 80 00 01 02 04 08 10 20 b0 a8 c0 a4 Data Ascii: @f@.;yZ/ @O (3pX~zP @tptv: @f%QC @@cV@h @u:H%MV.A h`&@X@]8hh:3 @@ @sD@>9e]J
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 ea 28 30 ad 06 7a f4 28 ef 5a 76 e1 98 76 90 8a 04 ba 8e 61 66 4c 04 08 10 20 40 80 00 81 e6 08 4c 5b 81 1e 4f a0 43 be 9a a6 69 f8 67 e1 af 74 e1 4f 8e 7f b0 28 ee ef 35 da 07 5a 0d f4 d2 74 dd 88 00 01 02 04 08 10 20 40 60 86 40 b4 2b d0 e3 09 b4 2e 1c e2 9c 00 01 02 04 08 10 20 40 60 1d 02 55 56 a0 a3 69 63 17 6a a0 1d e5 bd 8e b0 f1 0c 02 04 08 10 20 40 80 c0 f6 0a 4c 5a 81 3e d8 6b e7 e7 b7 9d bc 77 d9 cd 5f bc bc 28 6a 59 03 3d be 02 ad 84 63 7b 83 d8 cc 09 10 20 40 80 00 01 02 eb 14 68 4c 09 87 04 7a 9d 61 e3 59 04 08 10 20 40 80 00 81 ed 15 68 4c 02 1d 6a a0 95 70 6c 6f 20 9b 39 01 02 04 08 10 20 40 60 5d 02 8d 49 a0 ad 40 af 2b 64 3c 87 00 01 02 04 08 10 20 b0 dd 02 b3 4e 22 3c b9 ec e6 17 b1 d4 40 5b 81 de ee 40 36 7b 02 04 Data Ascii: @(0z(ZvvafL @L[OCigtO(5Zt @`@+. @`UVicj @LZ>kw_(jY=c{ @hLzaY @hLjplo 9 @`]I@+d< N"<@[@6{
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: dd 0c 32 7d a0 9b 1d b0 66 47 80 00 01 02 04 08 10 d8 b4 c0 b4 1a e8 ce 6d 27 ef c6 72 12 a1 a3 bc 37 1d 46 9e 4f 80 00 01 02 04 08 10 d8 1e 81 49 2b d0 07 0f 9b 08 a3 39 ca 5b 0d f4 f6 04 ac 99 12 20 40 80 00 01 02 04 36 2d 50 a5 84 a3 d6 9b 08 8f de 1f a5 67 87 bd ac b3 db cf f4 81 de 74 38 79 3e 01 02 04 08 10 20 40 a0 f9 02 d1 27 d0 1f de 1f a5 4a 38 9a 1f a8 66 48 80 00 01 02 04 08 10 a8 8b 40 b4 5d 38 8a 24 49 4e 93 d3 d4 0a 74 5d 42 c9 38 08 10 20 40 80 00 01 02 db 21 30 ab 06 3a 8a 36 76 e3 09 f4 fe ce 30 7b 75 f0 e6 63 f9 fa f6 9f 6f c7 8b 34 4b 02 04 08 10 20 40 80 00 81 f5 08 8c 26 d0 9f 5f 7d f6 ec fa ae 95 0f f6 da 79 3f 96 93 08 25 d0 eb 09 14 4f 21 40 80 00 01 02 04 08 10 f8 24 10 7d 0d b4 12 0e a1 4c 80 00 01 02 04 08 10 20 b0 4e 01 09 f4 Data Ascii: 2}fGm'r7FOI+9[ @6-Pgt8y> @'J8fH@]8$INt]B8 @!0:6v0{uco4K @&_}y?%O!@$}L N
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 5e 02 04 08 10 20 40 80 00 81 4d 08 44 9b 40 8f ae 40 8f d6 40 0f 77 86 d9 2b 47 79 6f 22 96 3c 93 00 01 02 04 08 10 20 b0 15 02 55 da d8 d5 be 84 a3 4c a0 95 70 6c 45 cc 9a 24 01 02 04 08 10 20 40 60 a3 02 d3 6a a0 fb b7 9d bc 77 d9 cd 5f bc bc 28 6a 9d 40 1f bd 3f 4a cf 0e 7b 99 93 08 37 1a 47 1e 4e 80 00 01 02 04 08 10 d8 1a 81 c6 95 70 5c ef 0c b3 d7 4a 38 b6 26 80 4d 94 00 01 02 04 08 10 20 b0 6e 01 09 f4 ba c5 3d 8f 00 01 02 04 08 10 20 40 20 6a 81 49 27 11 5e ed b5 f3 d1 12 8e 5a 76 e1 08 ea 65 1b 3b 35 d0 51 c7 a0 c1 13 20 40 80 00 01 02 04 a2 12 a8 52 03 5d eb 04 3a d4 40 f7 0e 7b d9 f9 6e 3f 3b 70 90 4a 54 c1 67 b0 04 08 10 20 40 80 00 81 18 05 1a 55 c2 a1 0b 47 8c 21 68 cc 04 08 10 20 40 80 00 81 b8 04 aa 1c e5 5d eb 2e 1c 1f de 1f a5 27 0f 2b Data Ascii: ^ @MD@@@w+Gyo"< ULplE$ @`jw_(j@?J{7GNp\J8&M n= @ jI'^Zve;5Q @R]:@{n?;pJTg @UG!h @].'+
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 04 1a 25 50 35 81 2e 92 24 49 d3 34 fc b3 f0 d7 7d e7 8c a5 7c 8d 74 e1 28 13 68 6d ec 96 22 eb 26 04 08 10 20 40 80 00 01 02 8f 08 54 4d a0 ef 6f 53 a7 04 3a a4 f2 a7 c9 69 2a 81 16 e3 04 08 10 20 40 80 00 01 02 eb 14 98 b5 89 b0 a7 06 7a 9d af c2 b3 08 10 20 40 80 00 01 02 04 62 10 98 b5 02 5d 76 e1 78 9b bc fd 74 70 49 9d 56 a0 c3 78 26 1d a4 a2 06 3a 86 b0 33 46 02 04 08 10 20 40 80 40 bc 02 d1 1e a4 32 5e c2 a1 8d 5d bc 41 68 e4 04 08 10 20 40 80 00 81 98 04 66 b5 b1 eb 5e 76 f3 8b 97 17 45 54 2b d0 fa 40 c7 14 7e c6 4a 80 00 01 02 04 08 10 88 4f 20 da 15 68 25 1c f1 05 9b 11 13 20 40 80 00 01 02 04 9a 20 30 ad 06 fa 38 96 83 54 c6 fb 40 5b 81 6e 42 58 9a 03 01 02 04 08 10 20 40 a0 be 02 d1 b6 b1 2b 57 a0 47 db d8 1d dc 0c b2 eb 9d 61 f6 fa e0 cd c7 Data Ascii: %P5.$I4}\|t(hm"& @TMoS:i* @z @b]vxtpIVx&:3F @@2^]Ah @f^vET+@~JO h% @ 08T@[nBX @+WGa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49854	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	466	OUT	GET /static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-in~2ace6e53.e328c61f.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	880	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C467B9C05EDB3830DD8489 Last-Modified: Tue, 20 Aug 2024 09:33:00 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 7196093106936787015 x-oss-storage-class: Standard Content-MD5: YEtO/nuBNEyQasob94seqw== x-oss-server-time: 1 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6909 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GOprpg2bP2PaPsGQhanN8JP5MonQuUdtjjPjiAOvPpQ0CYQDCWXsYyq0Ninfqrku%2Bbt6LLLfdjpBYBKr5wtOFj5pKrEuH4BMP4SuMrTuoVIcP%2Fq0PzCP9E6x9diXww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088baed4043d9-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:57 UTC	489	IN	Data Raw: 34 33 35 33 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 61 70 70 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 7e 70 61 67 65 73 2d 69 6e 7e 32 61 63 65 36 65 35 33 22 5d 2c 7b 22 31 64 65 35 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 7b 7d 29 Data Ascii: 4353(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-in~2ace6e53"],{"1de5":function(t,e,i){"use strict";t.exports=function(t,e){return e\|\|(e={})
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 28 22 37 61 38 32 22 29 3b 76 61 72 20 6e 3d 69 28 22 34 65 61 34 22 29 2e 64 65 66 61 75 6c 74 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 2c 69 28 22 63 39 37 35 22 29 3b 76 61 72 20 6f 3d 6e 28 69 28 22 63 38 66 64 22 29 29 2c 61 3d 7b 6e 61 6d 65 3a 22 75 6e 69 50 6f 70 75 70 22 2c 63 6f 6d 70 6f 6e 65 6e 74 73 3a 7b 6b 65 79 70 72 65 73 73 3a 6f 2e 64 65 66 61 75 6c 74 7d 2c 65 6d 69 74 73 3a 5b 22 63 68 61 6e 67 65 22 2c 22 6d 61 73 6b 43 6c 69 63 6b 22 5d 2c 70 72 6f 70 73 3a 7b 61 6e 69 6d 61 74 69 6f 6e 3a 7b 74 79 70 65 3a 42 6f 6f 6c 65 Data Ascii: e,i){"use strict";i("7a82");var n=i("4ea4").default;Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,i("c975");var o=n(i("c8fd")),a={name:"uniPopup",components:{keypress:o.default},emits:["change","maskClick"],props:{animation:{type:Boole
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 6f 6d 70 75 74 65 64 3a 7b 69 73 44 65 73 6b 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 70 75 70 57 69 64 74 68 3e 3d 35 30 30 26 26 74 68 69 73 2e 70 6f 70 75 70 48 65 69 67 68 74 3e 3d 35 30 30 7d 2c 62 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 22 3d 3d 3d 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 7c 7c 22 6e 6f 6e 65 22 3d 3d 3d 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3f 22 74 72 61 6e 73 70 61 72 65 6e 74 22 3a 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 7d 7d 2c 6d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 6e 69 2e 67 65 74 53 79 73 74 Data Ascii: omputed:{isDesktop:function(){return this.popupWidth>=500&&this.popupHeight>=500},bg:function(){return""===this.backgroundColor\|\|"none"===this.backgroundColor?"transparent":this.backgroundColor}},mounted:function(){var t=this;(function(){var e=uni.getSyst
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 73 68 6f 77 54 72 61 6e 73 3d 21 31 2c 74 68 69 73 2e 24 65 6d 69 74 28 22 63 68 61 6e 67 65 22 2c 7b 73 68 6f 77 3a 21 31 2c 74 79 70 65 3a 74 68 69 73 2e 74 79 70 65 7d 29 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 72 29 2c 74 68 69 73 2e 74 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 73 68 6f 77 50 6f 70 75 70 3d 21 31 7d 29 2c 33 30 30 29 7d 2c 74 6f 75 63 68 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6c 65 61 72 50 72 6f 70 61 67 61 74 69 6f 6e 3d 21 31 7d 2c 6f 6e 54 61 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6c 65 61 72 50 72 6f 70 61 67 61 74 69 6f 6e 3f 74 68 69 73 2e 63 6c 65 61 72 50 72 Data Ascii: ar e=this;this.showTrans=!1,this.$emit("change",{show:!1,type:this.type}),clearTimeout(this.timer),this.timer=setTimeout((function(){e.showPopup=!1}),300)},touchstart:function(){this.clearPropagation=!1},onTap:function(){this.clearPropagation?this.clearPr
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 28 74 29 7b 74 68 69 73 2e 70 6f 70 75 70 73 74 79 6c 65 3d 22 72 69 67 68 74 22 2c 74 68 69 73 2e 61 6e 69 3d 5b 22 73 6c 69 64 65 2d 72 69 67 68 74 22 5d 2c 74 68 69 73 2e 74 72 61 6e 73 43 6c 61 73 73 3d 7b 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 62 6f 74 74 6f 6d 3a 30 2c 72 69 67 68 74 3a 30 2c 74 6f 70 3a 30 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 74 68 69 73 2e 62 67 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 22 63 6f 6c 75 6d 6e 22 7d 2c 74 7c 7c 28 74 68 69 73 2e 73 68 6f 77 50 6f 70 75 70 3d 21 30 2c 74 68 69 73 2e 73 68 6f 77 54 72 61 6e 73 3d 21 30 29 7d 7d 7d 3b 65 2e 64 65 66 61 75 6c 74 3d 61 7d 2c 32 39 30 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 Data Ascii: (t){this.popupstyle="right",this.ani=["slide-right"],this.transClass={position:"fixed",bottom:0,right:0,top:0,backgroundColor:this.bg,display:"flex",flexDirection:"column"},t\|\|(this.showPopup=!0,this.showTrans=!0)}}};e.default=a},2909:function(t,e,i){"use
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 69 2d 76 69 65 77 22 2c 7b 6f 6e 3a 7b 74 6f 75 63 68 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3d 65 3d 74 2e 24 68 61 6e 64 6c 65 45 76 65 6e 74 28 65 29 2c 74 2e 74 6f 75 63 68 73 74 61 72 74 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 5b 74 2e 6d 61 73 6b 53 68 6f 77 3f 69 28 22 75 6e 69 2d 74 72 61 6e 73 69 74 69 6f 6e 22 2c 7b 6b 65 79 3a 22 31 22 2c 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 6d 61 73 6b 22 2c 22 6d 6f 64 65 2d 63 6c 61 73 73 22 3a 22 66 61 64 65 22 2c 73 74 79 6c 65 73 3a 74 2e 6d 61 73 6b 43 6c 61 73 73 2c 64 75 72 61 74 69 6f 6e 3a 74 2e 64 75 72 61 74 69 6f 6e 2c 73 68 6f 77 3a 74 2e 73 68 6f 77 54 72 61 6e 73 7d 2c 6f 6e 3a 7b 63 6c 69 63 6b 3a Data Ascii: i-view",{on:{touchstart:function(e){arguments[0]=e=t.$handleEvent(e),t.touchstart.apply(void 0,arguments)}}},[t.maskShow?i("uni-transition",{key:"1",attrs:{name:"mask","mode-class":"fade",styles:t.maskClass,duration:t.duration,show:t.showTrans},on:{click:
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 3b 76 61 72 20 6e 3d 69 28 22 62 38 37 63 22 29 2c 6f 3d 69 2e 6e 28 6e 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 29 5b 22 64 65 66 61 75 6c 74 22 5d 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 2e 64 28 65 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 74 5d 7d 29 29 7d 28 61 29 3b 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 6f 2e 61 7d 2c 22 38 61 61 38 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 6e 3d 69 28 22 32 34 66 62 22 29 3b 65 3d 6e 28 21 31 29 2c 65 2e 70 75 73 68 28 5b 74 2e 69 2c 27 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 5c 72 5c 6e 2f 2a 2a 5c 72 5c 6e 20 2a 20 e8 Data Ascii: (t,e,i){"use strict";i.r(e);var n=i("b87c"),o=i.n(n);for(var a in n)["default"].indexOf(a)<0&&function(t){i.d(e,t,(function(){return n[t]}))}(a);e["default"]=o.a},"8aa8":function(t,e,i){var n=i("24fb");e=n(!1),e.push([t.i,'@charset "UTF-8";\r\n/*\r\n
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 75 6e 69 2d 70 6f 70 75 70 2e 6c 65 66 74 5b 64 61 74 61 2d 76 2d 37 39 31 37 37 31 36 35 5d 2c 20 2e 75 6e 69 2d 70 6f 70 75 70 2e 72 69 67 68 74 5b 64 61 74 61 2d 76 2d 37 39 31 37 37 31 36 35 5d 7b 74 6f 70 3a 76 61 72 28 2d 2d 77 69 6e 64 6f 77 2d 74 6f 70 29 7d 2e 75 6e 69 2d 70 6f 70 75 70 20 2e 75 6e 69 2d 70 6f 70 75 70 5f 5f 77 72 61 70 70 65 72 5b 64 61 74 61 2d 76 2d 37 39 31 37 37 31 36 35 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 5c 72 5c 6e 20 20 2f 2a 20 69 70 68 6f 6e 65 78 20 e7 ad 89 e5 ae 89 e5 85 a8 e5 8c ba e8 ae be e7 bd ae ef bc 8c e5 ba 95 e9 83 a8 e5 ae 89 e5 85 a8 e5 8c ba e9 80 82 e9 85 8d 20 2a 2f 7d 2e 75 6e 69 2d 70 6f 70 75 70 20 2e 75 6e 69 2d 70 6f 70 75 70 5f 5f 77 Data Ascii: uni-popup.left[data-v-79177165], .uni-popup.right[data-v-79177165]{top:var(--window-top)}.uni-popup .uni-popup__wrapper[data-v-79177165]{display:block;position:relative\r\n /* iphonex */}.uni-popup .uni-popup__w
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 74 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 69 73 53 68 6f 77 3a 21 31 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 22 2c 6f 70 61 63 69 74 79 3a 31 2c 61 6e 69 6d 61 74 69 6f 6e 44 61 74 61 3a 7b 7d 2c 64 75 72 61 74 69 6f 6e 54 69 6d 65 3a 33 30 30 2c 63 6f 6e 66 69 67 3a 7b 7d 7d 7d 2c 77 61 74 63 68 3a 7b 73 68 6f 77 3a 7b 68 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3f 74 68 69 73 2e 6f 70 65 6e 28 29 3a 74 68 69 73 2e 69 73 53 68 6f 77 26 26 74 68 69 73 2e 63 6c 6f 73 65 28 29 7d 2c 69 6d 6d 65 64 69 61 74 65 3a 21 30 7d 7d 2c 63 6f 6d 70 75 74 65 64 3a 7b 73 74 79 6c 65 73 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 28 30 2c 73 2e 64 65 66 61 75 6c 74 Data Ascii: ta:function(){return{isShow:!1,transform:"",opacity:1,animationData:{},durationTime:300,config:{}}},watch:{show:{handler:function(t){t?this.open():this.isShow&&this.close()},immediate:!0}},computed:{stylesObject:function(){var t=(0,s.default)((0,s.default
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 22 22 2c 74 68 69 73 2e 69 73 53 68 6f 77 3d 21 30 3b 76 61 72 20 65 3d 74 68 69 73 2e 73 74 79 6c 65 49 6e 69 74 28 21 31 29 2c 69 3d 65 2e 6f 70 61 63 69 74 79 2c 6e 3d 65 2e 74 72 61 6e 73 66 6f 72 6d 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 69 26 26 28 74 68 69 73 2e 6f 70 61 63 69 74 79 3d 69 29 2c 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 3d 6e 2c 74 68 69 73 2e 24 6e 65 78 74 54 69 63 6b 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 74 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 61 6e 69 6d 61 74 69 6f 6e 3d 28 30 2c 72 2e 63 72 65 61 74 65 41 6e 69 6d 61 74 69 6f 6e 29 28 74 2e 63 6f 6e 66 69 67 2c 74 29 2c 74 2e 74 72 61 6e 66 72 6f 6d 49 6e 69 74 28 21 31 29 2e 73 74 65 70 28 Data Ascii: "",this.isShow=!0;var e=this.styleInit(!1),i=e.opacity,n=e.transform;"undefined"!==typeof i&&(this.opacity=i),this.transform=n,this.$nextTick((function(){t.timer=setTimeout((function(){t.animation=(0,r.createAnimation)(t.config,t),t.tranfromInit(!1).step(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49855	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	763	OUT	GET /static/img/good_text_two.b3c83d2a.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:57 UTC	906	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: image/png Content-Length: 4557 Connection: close x-oss-request-id: 666D3251108AF530301C373A ETag: "B3C83D2A0FEBAB95F2CF2DFC974E326C" Last-Modified: Mon, 20 May 2024 05:15:47 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1844759822262608813 x-oss-storage-class: Standard Content-MD5: s8g9Kg/rq5Xyzy38l04ybA== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2990 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rwm8%2FGID8PC5RDom6tciEVC1TnwWXVELE8PTgfGrgMO%2Fm59sUo9xg8e8LARD%2B9PzQ21x939UsbNb4CgasQgUNh0XGOkz%2FTJWxK3FUkXgkOpl3YB7lEy4ntXncfS7HQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088baeb304331-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:57 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 12 00 00 00 dc 08 06 00 00 00 25 40 48 52 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 11 87 49 44 41 54 78 5e ed dd 5f 88 a5 e7 5d 07 f0 df 73 e6 df ee 9a 48 1b e7 cc 6c 87 b8 2b 5a d0 56 6f a4 1b 08 cd 45 51 84 5e 68 a1 55 54 6c 1a 6a 29 4d 4b 42 eb 5d 6f 0c a5 a5 f6 a2 d4 0b f1 4f 48 1a 88 62 b3 20 41 6c 21 78 91 1b f5 c2 14 a5 5b 41 30 ac ad a1 6b d7 30 3b 73 ce 6c 52 1a d9 dd 73 66 67 1e 39 a9 11 05 cd 9e 33 7f de f3 fc 9c 4f 6e f7 79 df f3 7d 3f df 09 f3 65 76 cf 9c 12 0d ff 57 6b ed 6d df dc be af b7 b0 f8 73 11 f1 ae 88 fd 9f aa 35 ce 46 29 3f 5c 22 96 1b 8e 2e 1a 01 02 04 08 10 e8 54 a0 46 8c a3 d6 ef 97 12 5b 11 bd 7f 8e 88 6f ee ef dd fe eb f5 d3 eb df 28 a5 ec 1f 57 98 72 5c 37 3e cc 7d Data Ascii: PNGIHDR%@HRsRGBIDATx^_]sHl+ZVoEQ^hUTlj)MKB]oOHb Al!x[A0k0;slRsfg93Ony}?evWkms5F)?\".TF[o(Wr\7>}
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 38 c8 d5 93 6b e6 36 24 2e d5 4b 4b e7 c6 e7 9e 8b 28 46 c4 41 db 73 1d 01 02 04 08 10 38 b4 40 7d fe ea f2 d5 f7 5d 28 17 0e f4 93 89 b9 0d 89 ed 5b c3 2f 97 e2 af 33 0e dd bf 1b 10 20 40 80 00 81 43 0a d4 1a 4f ad 9f ea 3f 7c 90 db cc 65 48 4c fe 61 65 e9 c5 33 07 09 ec 1a 02 04 08 10 20 40 e0 e8 05 ea 7e 7c 68 fd f4 ec ff 00 b3 f3 21 31 79 8b 67 59 5e b8 ec dd 19 47 ff 45 e0 8e 04 08 10 20 40 e0 a0 02 93 77 73 d4 f1 de 3b 66 7d 6b 68 e7 43 62 fb d6 f0 89 52 e2 e3 07 7d 50 d7 11 20 40 80 00 01 02 c7 23 50 6b 3c b9 7e aa ff 89 59 ee de e9 90 d8 bc b1 79 6e 71 61 e9 25 bf 6c 6a 96 8a 9c 25 40 80 00 01 02 9d 09 ec de de db 7d fb c6 99 8d ab d3 be 62 a7 43 62 38 1a 7e b1 46 7c 7a da 70 ce 11 20 40 80 00 01 02 dd 0a d4 1a 5f 5a 3f d5 9f fa 7b 75 67 43 62 f2 Data Ascii: 8k6$.KK(FAs8@}]([/3 @CO?\|eHLae3 @~\|h!1ygY^GE @ws;f}khCbR}P @#Pk<~Yynqa%lj%@}bCb8~F\|zp @_Z?{ugCb
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: d1 4c 15 82 10 20 40 80 00 81 7c 02 86 44 be ce 24 26 40 80 00 01 02 cd 08 18 12 cd 54 21 08 01 02 04 08 10 c8 27 60 48 e4 eb 4c 62 02 04 08 10 20 d0 8c 80 21 d1 4c 15 82 10 20 40 80 00 81 7c 02 86 44 be ce 24 26 40 80 00 01 02 cd 08 18 12 cd 54 21 08 01 02 04 08 10 c8 27 60 48 e4 eb 4c 62 02 04 08 10 20 d0 8c 80 21 d1 4c 15 82 10 20 40 80 00 81 7c 02 86 44 be ce 24 26 40 80 00 01 02 cd 08 18 12 cd 54 21 08 01 02 04 08 10 c8 27 60 48 e4 eb 4c 62 02 04 08 10 20 d0 8c 80 21 d1 4c 15 82 10 20 40 80 00 81 7c 02 86 44 be ce 24 26 40 80 00 01 02 cd 08 18 12 cd 54 21 08 01 02 04 08 10 c8 27 60 48 e4 eb 4c 62 02 04 08 10 20 d0 8c 80 21 d1 4c 15 82 10 20 40 80 00 81 7c 02 86 44 be ce 24 26 40 80 00 01 02 cd 08 18 12 cd 54 21 08 01 02 04 08 10 c8 27 60 48 e4 eb 4c Data Ascii: L @\|D$&@T!'`HLb !L @\|D$&@T!'`HLb !L @\|D$&@T!'`HLb !L @\|D$&@T!'`HLb !L @\|D$&@T!'`HL
2024-10-13 15:58:57 UTC	1356	IN	Data Raw: 02 04 08 10 20 d0 8c 80 21 d1 4c 15 82 10 20 40 80 00 81 7c 02 86 44 be ce 24 26 40 80 00 01 02 cd 08 18 12 cd 54 21 08 01 02 04 08 10 c8 27 60 48 e4 eb 4c 62 02 04 08 10 20 d0 8c 80 21 d1 4c 15 82 10 20 40 80 00 81 7c 02 86 44 be ce 24 26 40 80 00 01 02 cd 08 18 12 cd 54 21 08 01 02 04 08 10 c8 27 60 48 e4 eb 4c 62 02 04 08 10 20 d0 8c 80 21 d1 4c 15 82 10 20 40 80 00 81 7c 02 86 44 be ce 24 26 40 80 00 01 02 cd 08 18 12 cd 54 21 08 01 02 04 08 10 c8 27 60 48 e4 eb 4c 62 02 04 08 10 20 d0 8c 80 21 d1 4c 15 82 10 20 40 80 00 81 7c 02 86 44 be ce 24 26 40 80 00 01 02 cd 08 18 12 cd 54 21 08 01 02 04 08 10 c8 27 60 48 e4 eb 4c 62 02 04 08 10 20 d0 8c 80 21 d1 4c 15 82 10 20 40 80 00 81 7c 02 86 44 be ce 24 26 40 80 00 01 02 cd 08 18 12 cd 54 21 08 01 02 04 Data Ascii: !L @\|D$&@T!'`HLb !L @\|D$&@T!'`HLb !L @\|D$&@T!'`HLb !L @\|D$&@T!'`HLb !L @\|D$&@T!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49857	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	754	OUT	GET /static/img/logo.9c46be7e.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:57 UTC	909	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: image/png Content-Length: 48128 Connection: close x-oss-request-id: 66FF9C217C0F4232394C8037 ETag: "9C46BE7E85A648192C0BD6A5FAF10048" Last-Modified: Tue, 20 Aug 2024 09:32:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13846146131262887224 x-oss-storage-class: Standard Content-MD5: nEa+foWmSBksC9al+vEASA== x-oss-server-time: 13 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6751 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WOeFYmYI%2Bzz8wDMWoJ%2FFqAyDAW7oMK9LYo%2FuCk5qqvO2wvwXPnBVb72wz4varkE7dDrCgdALmy0iGBTcbLYoKweRo%2BGS7gh2IwtrFaT5rKkoAFuFKSXaGH3IOCetRw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088baea767c99-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:57 UTC	460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 62 00 00 00 64 08 06 00 00 00 25 90 5c d2 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 78 14 c5 df 7e 67 77 af e7 d2 43 20 24 10 7a 09 bd 2a 88 14 41 b0 60 a5 29 58 50 40 40 01 e9 a0 74 0b a8 88 20 88 58 11 15 05 01 41 51 10 45 89 a0 08 d2 44 08 bd 04 08 29 24 a4 5e df 32 df 33 7b 97 e4 d2 20 09 45 fd 7f fb f3 f1 41 b9 dd 29 ef ee ce bc f3 ab 04 9a 68 08 68 08 68 08 68 08 68 08 68 08 68 08 68 08 fc 23 08 90 7f a4 57 ad 53 0d 01 0d 01 0d 01 0d 01 0d 01 0d 01 0d 01 0d 01 68 44 4c 7b 09 34 04 34 04 34 04 34 04 34 04 34 04 34 04 fe 21 04 34 22 f6 0f 01 af 75 ab 21 a0 21 a0 21 a0 21 a0 21 a0 21 a0 21 a0 11 31 ed 1d d0 10 d0 10 d0 10 d0 10 d0 10 d0 10 d0 10 f8 87 10 d0 88 Data Ascii: PNGIHDRbd%\sRGB IDATx^]x~gwC $z*A`)XP@@t XAQED)$^23{ EA)hhhhhhhh#WShDL{4444444!4"u!!!!!!!1
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 40 43 40 43 40 43 e0 1f 42 40 23 62 ff 10 f0 5a b7 1a 02 1a 02 1a 02 1a 02 1a 02 1a 02 1a 02 1a 11 d3 de 01 0d 01 0d 01 0d 81 ff 0e 02 be 35 7b 16 01 12 48 97 2e 71 24 36 16 82 5e 0f ae 5a 93 ba 42 bb b8 5a 21 7a 81 33 07 05 5a 03 04 aa 08 1e ca 04 54 51 14 b7 dd e9 b6 9f 3d 76 26 eb b7 93 17 9d 7c 86 5d b6 db a9 92 9e fe ab 12 1f df 45 01 66 51 1f 04 f9 7f fe 77 10 d1 46 aa 21 f0 1f 47 40 23 62 ff f1 07 a8 0d 5f 43 40 43 e0 7f 1e 81 02 f2 d5 ba 75 32 df ba 77 6b 5d ed 6a 21 ba 8e 8d 1b 86 55 a9 1e 5e 3d 24 d0 54 db 60 d0 d7 d1 eb 74 91 14 4a 75 9d a0 0f e1 38 04 02 10 08 d4 5b 15 45 a1 36 51 92 72 28 a5 59 0a a5 c9 2e b7 fb ac dd ee 3c 93 91 95 7d fe 78 62 4a f2 6f 7b 8f b8 ce fe 79 4c dc bc 39 55 02 e2 a8 8f 98 69 a4 ec 7f fe d5 d2 26 f8 6f 40 40 23 62 Data Ascii: @C@C@CB@#bZ5{H.q$6^ZBZ!z3ZTQ=v&\|]EfQwF!G@#b_C@Cu2wk]j!U^=$T`tJu8[E6Qr(Y.<}xbJo{yL9Ui&o@@#b
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 79 28 28 85 53 76 e1 b2 27 13 09 79 c7 71 c2 7e 1a a9 ee 4b c8 52 b2 61 57 ec 10 21 c2 17 29 59 70 6b be 6a 9c 7d 7b 84 72 08 e0 2d 08 22 81 08 16 82 10 63 ac 8e 96 41 4d 51 c3 54 1d 01 82 05 3c e7 3d 51 fa 9b 3f 99 b9 52 92 e4 13 19 d9 8e 8f b7 fc 76 68 dd 8c 55 7b 52 92 d2 73 45 4d 3b f6 bf fd 76 6a b3 bb 79 08 fc cb 88 98 77 43 9f 3e 1d 0b 39 0e a3 18 0c df ee b6 61 d2 e7 97 71 3c 47 06 0c 5c c9 d8 9d e2 aa 75 36 23 91 a2 9a 81 60 d6 83 c1 78 aa 7b 60 be 86 2c de e1 c0 a3 16 0b 52 4b df f8 55 82 c3 fa 7c 1d 80 e1 f7 33 14 cf 7d 23 e1 af 6c 1f e9 bb 9a 57 84 0c 04 73 14 b3 bb f2 18 79 1b 0f 81 0d 95 62 9b dd 8e 01 56 2b d2 af 9d 6c f8 16 6d c6 04 64 2c e3 38 0c 1b f7 c2 4c 7c b6 7a 6d 99 a7 59 8f cb 89 ed 3f 6c 44 b3 26 8d 21 29 98 aa e3 f1 9a f7 d5 ba Data Ascii: y((Sv'yq~KRaW!)Ypkj}{r-"cAMQT<=Q?RvhU{RsEM;vjywC>9aq<G\u6#`x{`,RKU\|3}#lWsybV+lmd,8L\|zmY?lD&!)
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: e5 97 2e fb 09 41 d3 ee 0f f6 c7 89 53 67 0a 22 d4 f2 ef 6f 11 d7 08 1b 57 7f c6 9e f1 df 5c b7 f8 d6 de b9 68 9b 52 39 be de ff 67 97 f8 99 23 6d a9 c2 3d cd 6b 9b e7 0f 6f 7f 57 ad 6a 41 73 f4 3a a1 b6 ff ea a5 28 0a 52 5c 69 f8 e1 d2 36 ec ca d9 8b 3c e4 de 3c ac d8 62 08 1e 75 8d 75 70 77 c4 1d 68 19 d4 0c 7a 41 cd 15 ab 4a 3e 19 cb b1 39 57 ae dd 7a 68 c1 8c f7 7f bf 90 76 39 d0 83 7d c3 98 ff a4 46 c6 6e de 93 d2 7a fa 1f 41 a0 3c 54 e7 06 4e d5 4b c2 ec 2e f9 2e b3 81 ff 4e a1 14 7d e6 a6 62 fd 69 b7 b7 cf ab 8d ce 8f 79 95 49 c2 f2 47 4f 80 30 0a 6c 7d a1 2a 9a c5 1a d8 a6 79 2c db 25 0d 09 36 0a df 13 82 a0 37 b6 2a 98 b4 5d f6 3a e3 fb 0b fb 5f b7 82 8e 55 09 7a 35 e2 d0 2a ca fb fb c1 14 8a f8 93 0a b6 9e 07 14 96 dd ac 40 8a de df d8 00 ec 7a Data Ascii: .ASg"oW\hR9g#m=koWjAs:(R\i6<<buupwhzAJ>9Wzhv9}FnzA<TNK..N}biyIGO0l}y,%67]:_Uz5*@z
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: ed 27 a2 1e 6c 53 db ac 86 cc cd ff 59 c6 c4 78 a5 98 46 cf 3b a1 40 89 e2 e0 58 1d 62 43 08 3c 92 32 d5 f0 e8 ba 37 ca af 91 a2 04 c3 f6 09 cc 2c 69 e7 23 0c e7 e7 47 2f 08 34 73 4f 56 84 88 31 ad 58 a0 d9 84 7d 3b b6 c2 a0 d7 23 2d 57 bc b5 ea 10 dd 9e 8a 6b a1 bc cf ee c4 92 fb 6a d6 ab 62 f8 5b 51 14 4b f7 7b 1f c6 a9 a4 24 d0 32 72 87 f9 03 eb 4f c4 72 1c ca 47 35 27 24 4c b4 c8 1e 77 32 f3 c0 7b bf 35 73 0c fc 77 10 b1 59 f1 7c 74 82 97 f8 5e 7a b7 f6 ef 02 87 72 10 31 1c ae 32 62 df 6d 96 2c 8f 27 29 ce 2d 62 d6 bf 85 58 5e db 22 a1 dd 7d 2d 08 e4 3b e7 c7 f3 30 39 f9 76 11 ae 80 77 5f 68 7f 5f 5c ad 2a 2f e9 04 8e 25 6b 2d 90 64 57 2a 96 9f 5f 85 bf 1c 87 20 d3 c2 f4 83 f9 2b 53 69 1f 46 65 17 70 46 ae c2 84 30 dc 12 d4 5a cd c4 bf 3b 77 3f f2 e4 Data Ascii: 'lSYxF;@XbC<27,i#G/4sOV1X};#-Wkjb[QK{$2rOrG5'$Lw2{5swY\|t^zr12bm,')-bX^"}-;09vw_h_\/%k-dW_ +SiFepF0Z;w?
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 63 30 3a 87 b3 3d 1c f8 3a f9 3b 7c 91 fa 75 41 7d ca d2 1a 53 cd 97 0a 41 a7 a0 5b 30 38 66 00 82 0d 41 fe 1a 34 9a 63 f3 fc f8 da aa df 26 7e b0 21 ed 5c 26 42 dd 08 b0 f9 4a 21 55 4e cb 4d 29 8d 04 30 d0 57 63 f8 96 0a 4d f0 0a 17 2b 0a c6 f0 3c 79 fb 7a b5 77 85 f5 84 8d 7f 10 80 47 af f2 fd 56 76 28 0b 01 3c 5f 8e 9b 8f 03 60 95 1a b4 72 72 e5 00 eb 9f b8 e4 26 13 b1 42 27 68 65 59 6b 55 1b f6 dc c7 19 78 67 97 ad d0 88 a8 6e 5b 3e 13 25 01 6e 0d 15 f0 eb ab d5 a1 e3 09 be d9 97 fb e9 e0 0f 93 7e 24 54 91 00 4e 26 f0 92 22 af ab be c2 53 c2 09 8f b4 0b 8a 5d f0 58 d4 64 83 40 ac ab 7e b7 61 e0 b2 74 70 66 1f 21 f1 91 b0 22 93 a6 14 62 54 35 10 45 51 13 c0 be 77 8f 80 61 b7 e9 e0 70 d3 4b f7 2f 3c 3b 76 ff 59 57 26 21 f0 28 04 22 51 38 89 31 3e b5 4f Data Ascii: c0:=:;\|uA}SA[08fA4c&~!\&BJ!UNM)0WcM+<yzwGVv(<_`rr&B'heYkUxgn[>%n~$TN&"S]Xd@~atpf!"bT5EQwapK/<;vYW&!("Q81>O
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: a9 79 88 30 ea 50 a4 3e 63 fe 3d 3a 19 4e 6f 75 8b 7c b9 d1 73 f5 1d 5c 12 d6 08 91 c6 20 5d 80 05 96 b5 e3 5a 3c 11 57 2b 6c 2a cf 91 02 d3 94 4b 76 63 55 d2 06 d5 2c 28 92 52 ea 44 52 20 c6 10 85 61 31 8f a1 59 50 63 70 7e a5 c3 98 49 70 7f d6 df 78 e7 fc 47 48 97 2e 97 ab bc 51 fe ec 8d bc a1 04 11 fb 2c 65 4d b9 09 5d 2d 43 0d 8c ae 39 0c b1 96 98 82 77 8b 59 28 b3 f2 5c 5b 26 bd fb eb a4 f5 7f a6 25 67 bb 23 9d 70 9a e4 8a 04 e1 38 1c 34 da 68 c4 d7 84 a0 2d 9b 5f aa 2b 1d 3f 5d 8e c7 fe f4 c3 38 92 7b 42 2d 70 ae a8 96 b9 8a cb 1d 55 6e c3 dc 66 2f 80 27 3c d6 ac 49 30 f4 eb 17 e7 ad 0f 75 5d fd 52 29 4b 4c 3e 96 e3 a0 1e 6e 2e 3a 53 f1 ed c5 2d f8 35 fd 0f 9c b3 27 41 a4 d2 15 03 23 ca 33 ab fb a2 7a 62 66 1c 3b 8f 7a e5 9d 53 cb f1 f1 d9 55 a5 de Data Ascii: y0P>c=:Nou\|s\ ]Z<W+l*KvcU,(RDR a1YPcp~IpxGH.Q,eM]-C9wY(\[&%g#p84h-_+?]8{B-pUnf/'<I0u]R)KL>n.:S-5'A#3zbf;zSU
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 81 26 6d 59 61 ef a2 1b 07 d3 d4 34 a8 15 8b 1f 37 ac c6 2f bf fe 86 fe 4f 0f af 24 11 2b 58 d4 5e e5 38 4c 61 64 6b c9 b2 0f f1 da db ef 82 08 7c c5 eb 7f 7a d5 64 10 dd 6e bc 38 e6 59 8c 7a f6 19 15 0a 51 c4 58 fd 40 2c 46 7a 3c b1 ff d0 e9 4e 46 c4 b6 ef dc 85 fe 4f 8d 80 c0 fa b9 8e c2 08 e8 e3 fd 1f c6 6b b3 a6 b1 1a 9b 9f 08 77 c4 0f 55 93 be 32 07 98 c6 20 ab 1e c6 e7 1c 87 01 79 79 36 4c 9e 3e 1b 5f 7d f3 1d cc 01 01 e5 22 9a c5 87 69 12 04 2c 5b f8 3a ba 75 b9 1d 23 27 4c c5 37 9b b6 14 d9 e4 39 8e a0 4e cd 58 fc b2 71 8d 8f 88 c5 37 07 6e 66 35 00 3f 12 c6 aa 45 44 44 70 5f 4f a8 61 7d a0 ad f5 20 21 28 12 49 98 3f 37 4a b1 89 eb 9f f0 20 e2 d2 15 24 74 29 64 df 71 f1 04 09 11 9c fb 8b b8 e9 7a 41 35 65 95 10 59 a6 3b 84 b1 a7 7b c0 9d a3 e0 44 Data Ascii: &mYa47/O$+X^8Ladk\|zdn8YzQX@,Fz<NFOkwU2 yy6L>_}"i,[:u#'L79NXq7nf5?EDDp_Oa} !(I?7J $t)dqzA5eY;{D
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: b0 45 9c 9d a8 99 d4 b7 12 18 82 38 96 f0 d3 ed 26 7a 9d 4e 30 79 64 c5 c2 11 1a d0 ab 59 40 cc 17 23 a2 57 83 10 43 e3 37 dc 38 ee f4 8b a0 64 84 8c 00 0f 44 13 ac 7f 4a c7 c2 be 0f d5 7b fa 5c bb c4 c4 44 e9 0a 1a a9 4a 13 31 46 b8 7a 3d d0 1f 47 ce 9c 2d a1 49 72 d8 ed f8 7d cb b7 68 58 bf 1e cb 6d 36 d9 d0 63 fb 82 92 9a 39 af 89 c5 b6 b9 cb 00 8b 11 9f 5d ce cc 44 d3 76 9d c1 17 73 d0 67 27 e2 f6 2d 9a 63 cd 67 1f aa f0 54 8a 88 f9 c8 68 ae 43 ea 68 35 09 db 58 c8 fa a8 71 93 b1 6e f3 8f 25 4c a0 fe cf 90 99 74 98 66 80 69 fd 98 ff 13 d3 66 5d c9 54 c8 92 db 4e 1b 37 5a d5 8c 51 8a f3 5b 0e 66 77 6e 1e 63 6e 51 2d 4c bf fe 66 10 31 8f a8 7c 56 67 60 f2 33 49 36 97 e2 fc a6 ee 00 a3 0e 9f 38 5d 2e dc f3 40 3f 9c bc 70 51 55 da 5e ad b0 b3 aa 3d 61 a9 Data Ascii: E8&zN0ydY@#WC78dDJ{\DJ1Fz=G-Ir}hXm6c9]Dvsg'-cgThCh5Xqn%Ltfif]TN7ZQ[fwncnQ-Lf1\|Vg`3I68].@?pQU^=a
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 25 70 28 e7 28 16 9c 59 86 14 8f 5f 3c 82 ef aa 56 81 4d 71 47 78 67 b0 48 c9 7c 61 b9 59 62 cd 35 11 63 8e 52 ff ea 94 ed 0c 52 5c 97 8a bc 7b 0e c9 89 8d 97 b6 e0 84 fd 74 a9 66 51 76 00 a8 65 ac 89 a9 f5 46 a3 86 39 ba c0 09 9d 02 ae 9f f7 25 ce 1e fe de b1 2f 2f e7 f2 79 a1 96 06 8e 92 07 cd c2 da 9b ca ea be 4c d3 de 6e db a5 9d 98 f2 f7 cb 6a 64 64 59 c2 70 b1 f0 66 98 05 13 98 9f 9b 81 2f 9b a0 fa b7 c1 c6 7a 7b c4 2d 18 5d ef 69 d5 fc da 75 76 62 48 fc 65 c9 c9 2a 60 a4 7f 82 2a a1 46 d5 c1 9e f9 2c 5c bd 3c 88 b7 34 de 32 00 0b 08 41 1a 4b 70 7d 72 c9 7d b1 75 ab 18 4e 65 7b 72 30 74 ef c4 2b 6a f4 4c bc 11 56 de a2 1e 1a d9 3c ae 76 e8 2a 82 05 05 7a 56 eb 8a 61 b5 19 7f f1 ca 95 88 d8 ec 26 13 c0 9c fb af 22 6c 3e ef 03 78 d3 3f c5 85 c3 41 6b Data Ascii: %p((Y_<VMqGxgH\|aYb5cRR\{tfQveF9%//yLnjddYpf/z{-]iuvbHe`F,\<42AKp}r}uNe{r0t+jLV<v*zVa&"l>x?Ak

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49850	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	376	OUT	GET /static/js/pages-active-active.d55d2611.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	878	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 66C47E18A05E3637355FD296 Last-Modified: Tue, 20 Aug 2024 09:32:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3992696518855324102 x-oss-storage-class: Standard Content-MD5: cqWWT+SV7imLBmpTuuNPNw== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6324 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dpvqt1tKUo7fh0qPyKfVwUtH7M9UOSugdc9HRGBoANCAZxoymlYgHGWbmlrOepNgMQNTKuWQBuYrejYm9wMhytlNW%2Bq0r59NUf32fPVcRJtnnzaNeGU5s1g2CoB5HA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088baeb59c475-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:57 UTC	491	IN	Data Raw: 37 63 34 33 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 22 5d 2c 7b 22 30 32 37 38 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 74 2e 65 78 70 6f 72 74 73 3d 69 2e 70 2b 22 73 74 61 74 69 63 2f 69 6d 67 2f 6e 6f 5f 69 6e 76 65 73 74 6d 65 6e 74 2e 63 30 35 66 62 62 64 37 2e 70 6e 67 22 7d 2c 22 30 37 30 66 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 3b 76 61 72 20 61 3d 69 28 22 31 64 64 66 22 29 2c 6e 3d 69 28 22 66 37 37 39 22 29 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 5b 22 Data Ascii: 7c43(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active"],{"0278":function(t,e,i){t.exports=i.p+"static/img/no_investment.c05fbbd7.png"},"070f":function(t,e,i){"use strict";i.r(e);var a=i("1ddf"),n=i("f779");for(var o in n)["
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 69 28 22 62 30 32 65 22 29 2c 6e 3d 69 2e 6e 28 61 29 3b 6e 2e 61 7d 2c 31 31 35 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 74 2e 65 78 70 6f 72 74 73 3d 69 2e 70 2b 22 73 74 61 74 69 63 2f 69 6d 67 2f 67 6f 6f 64 5f 74 65 78 74 5f 74 77 6f 2e 62 33 63 38 33 64 32 61 2e 70 6e 67 22 7d 2c 22 31 37 37 62 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 61 3d 69 28 22 34 64 30 32 22 29 3b 61 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 61 3d 61 2e 64 65 66 61 75 6c 74 29 2c 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 61 3d 5b 5b 74 2e 69 2c 61 2c 22 22 5d 5d 29 2c 61 2e 6c 6f 63 61 6c 73 26 26 28 74 2e 65 78 70 6f 72 74 73 3d 61 2e 6c 6f 63 61 6c 73 29 3b 76 61 Data Ascii: se strict";var a=i("b02e"),n=i.n(a);n.a},1150:function(t,e,i){t.exports=i.p+"static/img/good_text_two.b3c83d2a.png"},"177b":function(t,e,i){var a=i("4d02");a.__esModule&&(a=a.default),"string"===typeof a&&(a=[[t.i,a,""]]),a.locals&&(t.exports=a.locals);va
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 5f 6f 6e 65 5f 62 6f 78 22 7d 2c 5b 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 74 65 78 74 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 74 75 74 6f 72 69 61 6c 2e 62 6f 74 74 6f 6d 2e 76 61 6c 75 65 2e 31 22 29 29 29 5d 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 74 65 78 74 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 74 75 74 6f 72 69 61 6c 2e 62 6f 74 74 6f 6d 2e 76 61 6c 75 65 2e 32 22 29 29 29 5d 29 5d 2c 31 29 2c 61 28 22 76 2d 75 6e 69 2d 69 6d 61 67 65 22 2c 7b 73 74 61 74 69 63 53 74 79 6c 65 3a 7b 77 69 64 74 68 3a 22 35 30 32 72 70 78 22 2c 68 65 69 67 68 74 3a 22 33 34 30 72 70 78 22 7d 2c 61 74 74 72 73 3a 7b 73 72 63 3a Data Ascii: _one_box"},[a("v-uni-view",{staticClass:"text"},[t._v(t._s(t.$t("tutorial.bottom.value.1")))]),a("v-uni-view",{staticClass:"text"},[t._v(t._s(t.$t("tutorial.bottom.value.2")))])],1),a("v-uni-image",{staticStyle:{width:"502rpx",height:"340rpx"},attrs:{src:
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 28 22 64 62 30 32 22 29 7d 7d 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 61 64 76 61 6e 74 61 67 65 2d 62 6f 64 79 2d 74 69 74 6c 65 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 61 64 76 61 6e 74 61 67 65 2e 63 6f 6d 6d 69 74 6d 65 6e 74 22 29 29 29 5d 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 61 64 76 61 6e 74 61 67 65 2d 62 6f 64 79 2d 74 65 78 74 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 61 64 76 61 6e 74 61 67 65 2e 63 6f 6d 6d 69 74 6d 65 6e 74 2e 74 65 78 74 22 29 29 29 5d 29 5d 2c 31 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 Data Ascii: ("db02")}}),a("v-uni-view",{staticClass:"advantage-body-title"},[t._v(t._s(t.$t("active.advantage.commitment")))]),a("v-uni-view",{staticClass:"advantage-body-text"},[t._v(t._s(t.$t("active.advantage.commitment.text")))])],1),a("v-uni-view",{staticClass:"
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6e 61 6d 65 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 67 6f 6f 64 2e 74 77 6f 2e 6e 61 6d 65 22 29 29 29 5d 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 67 6f 6f 64 2d 74 65 78 74 22 7d 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 61 63 74 69 76 65 2e 67 6f 6f 64 2e 74 77 6f 2e 74 65 78 74 22 29 29 29 5d 29 5d 2c 31 29 2c 61 28 22 76 2d 75 6e 69 2d 76 69 65 77 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 67 6f 6f 64 2d 74 68 72 65 65 22 7d 2c 5b 61 28 22 76 2d 75 6e 69 2d 69 6d 61 67 65 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 68 65 61 64 22 2c 61 74 74 72 73 3a 7b Data Ascii: a("v-uni-view",{staticClass:"name"},[t._v(t._s(t.$t("active.good.two.name")))]),a("v-uni-view",{staticClass:"good-text"},[t._v(t._s(t.$t("active.good.two.text")))])],1),a("v-uni-view",{staticClass:"good-three"},[a("v-uni-image",{staticClass:"head",attrs:{
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 73 74 65 72 2e 72 65 6e 64 61 2e 77 68 61 74 73 61 70 70 22 29 29 29 5d 29 2c 61 28 22 76 2d 75 6e 69 2d 74 65 78 74 22 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 28 22 69 6e 76 69 74 61 74 69 6f 6e 2e 74 6f 2e 72 65 67 69 73 74 65 72 2e 72 65 6e 64 61 2e 72 65 6e 64 61 2e 6e 65 77 22 29 29 29 5d 29 5d 2c 31 29 2c 61 28 22 76 75 65 2d 73 65 61 6d 6c 65 73 73 2d 73 63 72 6f 6c 6c 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 72 65 6e 64 61 5f 6d 61 69 6e 5f 6c 69 73 74 22 2c 61 74 74 72 73 3a 7b 64 61 74 61 3a 74 2e 72 65 6e 64 61 4c 69 73 74 2c 22 63 6c 61 73 73 2d 6f 70 74 69 6f 6e 22 3a 74 2e 6f 70 74 69 6f 6e 53 65 74 74 69 6e 67 7d 7d 2c 74 2e 5f 6c 28 74 2e 72 65 6e 64 61 4c 69 73 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 Data Ascii: ster.renda.whatsapp")))]),a("v-uni-text",[t._v(t._s(t.$t("invitation.to.register.renda.renda.new")))])],1),a("vue-seamless-scroll",{staticClass:"renda_main_list",attrs:{data:t.rendaList,"class-option":t.optionSetting}},t._l(t.rendaList,(function(e,i){retu
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 94 a8 e6 a0 b7 e5 bc 8f e5 8f 98 e9 87 8f 5c 72 5c 6e 20 2a 5c 72 5c 6e 20 2a 20 75 6e 69 2d 61 70 70 20 e5 ae 98 e6 96 b9 e6 89 a9 e5 b1 95 e6 8f 92 e4 bb b6 e5 8f 8a e6 8f 92 e4 bb b6 e5 b8 82 e5 9c ba ef bc 88 68 74 74 70 73 3a 2f 2f 65 78 74 2e 64 63 6c 6f 75 64 2e 6e 65 74 2e 63 6e ef bc 89 e4 b8 8a e5 be 88 e5 a4 9a e4 b8 89 e6 96 b9 e6 8f 92 e4 bb b6 e5 9d 87 e4 bd bf e7 94 a8 e4 ba 86 e8 bf 99 e4 ba 9b e6 a0 b7 e5 bc 8f e5 8f 98 e9 87 8f 5c 72 5c 6e 20 2a 20 e5 a6 82 e6 9e 9c e4 bd a0 e6 98 af e6 8f 92 e4 bb b6 e5 bc 80 e5 8f 91 e8 80 85 ef bc 8c e5 bb ba e8 ae ae e4 bd a0 e4 bd bf e7 94 a8 73 63 73 73 e9 a2 84 e5 a4 84 e7 90 86 ef bc 8c e5 b9 b6 e5 9c a8 e6 8f 92 e4 bb b6 e4 bb a3 e7 a0 81 e4 b8 ad e7 9b b4 e6 8e a5 e4 bd bf e7 94 a8 e8 bf 99 e4 Data Ascii: \r\n \r\n uni-app https://ext.dcloud.net.cn\r\n * scss
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 2e 63 6f 6e 74 65 6e 74 20 2e 74 6f 70 62 61 6e 6e 65 72 2d 6c 69 73 74 5b 64 61 74 61 2d 76 2d 63 65 66 32 30 32 38 65 5d 7b 77 69 64 74 68 3a 25 3f 35 38 30 3f 25 3b 68 65 69 67 68 74 3a 25 3f 34 38 3f 25 3b 70 61 64 64 69 6e 67 3a 30 20 25 3f 32 30 3f 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 25 3f 32 34 3f 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 6f 70 3a 25 3f 34 30 3f 25 3b 7a 2d 69 6e 64 65 78 3a 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 25 3f 32 30 3f 25 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 36 2c 32 36 2c 32 38 2c 2e 34 29 7d 2e 63 6f 6e Data Ascii: .content .topbanner-list[data-v-cef2028e]{width:%?580?%;height:%?48?%;padding:0 %?20?%;font-size:%?24?%;overflow:hidden;position:absolute;color:#fff;top:%?40?%;z-index:2;border-radius:%?20?%;border-top-left-radius:0;background-color:rgba(26,26,28,.4)}.con
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 33 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 25 3f 32 34 3f 25 3b 63 6f 6c 6f 72 3a 23 37 63 36 32 35 39 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 63 6f 6e 74 65 6e 74 20 2e 61 63 74 69 76 65 2d 74 6f 70 2d 62 6f 78 20 2e 67 69 66 74 2d 62 6f 78 20 2e 70 72 6f 6d 65 73 73 61 2d 62 6f 78 5b 64 61 74 61 2d 76 2d 63 65 66 32 30 32 38 65 5d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 74 61 72 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 25 3f 36 30 3f 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 25 Data Ascii: position:absolute;top:30%;font-size:%?24?%;color:#7c6259;font-weight:700}.content .active-top-box .gift-box .promessa-box[data-v-cef2028e]{display:flex;flex-direction:row;align-items:center;justify-content:start;position:absolute;bottom:%?60?%;font-size:%
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 25 3f 34 30 3f 25 20 25 3f 34 30 3f 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 25 3f 32 34 3f 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2b 6c 2b 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 25 3f 34 30 3f 25 7d 2e 63 6f 6e 74 65 6e 74 20 2e 6d 61 69 6e 2d 62 6f 78 5b 64 61 74 61 2d 76 2d 63 65 66 32 30 32 38 65 5d 7b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 25 3f 34 30 3f 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 25 3f 2d 34 30 3f 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 66 62 66 Data Ascii: %?40?% %?40?%;font-size:%?24?%;background-image:url("+l+");background-size:100% 100%;background-repeat:no-repeat;border-radius:%?40?%}.content .main-box[data-v-cef2028e]{width:100%;border-radius:%?40?%;position:relative;top:%?-40?%;background-color:#f4fbf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49851	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	373	OUT	GET /static/images/common/icon_tutorial.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	907	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: image/png Content-Length: 580 Connection: close x-oss-request-id: 666D324DCB36F930377B1A97 ETag: "7427E0A7A90B982D0D7EDB662054C40C" Last-Modified: Mon, 20 May 2024 05:15:02 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4084357108615782039 x-oss-storage-class: Standard Content-MD5: dCfgp6kLmC0NfttmIFTEDA== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2346 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Af%2BV4CkJawwCHTbCo3uJAGWJGeoi4FAIiulNqvdGFOcpmsZqRGPlzPzymE53hYT%2BSieq%2Bxhw7%2BksbgPVktI%2Bb02FpkYMIfTgTbz6ONjVCSEMoxCu6q22i9kTIQlprg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088bae8388cd6-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:57 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 03 00 00 00 f3 37 75 51 00 00 00 db 50 4c 54 45 00 00 00 9a 9d ad 9a 9d ae 9a 9d ae 99 9d ae 99 9d ad 99 9c ad 9a 9d ae 9a 9c ae 99 9c ad 99 9d ae 9a 9d ae 9a 9d ae 9a 9d ae 9a 9d ad 99 9c ad 99 9c ad 99 9c ae 99 9c ad 99 9d ae 9a 9d ae 9a 9d ad 80 80 ff aa aa aa 9a 9d ae ff ff ff 9a 9c ae 9d 9d b1 99 9d ab 9a 9d ae 9a 9a ad 9a 9d ae 9a 9c ae 96 96 a5 99 9e ae 9a 9b ae 99 9d ad 9a 9c ad 80 80 80 bf bf bf 95 9c b1 92 92 b6 9a 9c ae 99 99 ac 8b a2 a2 99 9c ad 95 95 aa 99 99 a6 99 9c ac 98 98 ae 92 92 a4 98 9c ae 99 9c ac 99 99 ad 94 9c ad 97 9b af 99 9c ae 99 99 a8 9d 9d b1 99 99 aa 9a 9d af 95 9b ae 9a 9c ad 99 9c ae 9a 9a ac 9a 9d ae 96 9b af 9c 9c aa 99 9c ad 9a 9e ae 97 9c af 9a Data Ascii: PNGIHDR7uQPLTE
2024-10-13 15:58:57 UTC	118	IN	Data Raw: be d9 f9 92 a8 99 f5 c8 25 06 c4 3a 0d 96 db e0 a2 5e f6 81 13 0e d2 da ee 7e 13 62 36 72 80 6e 12 26 95 73 80 4a 92 06 f9 4d a1 36 d5 0a 61 66 78 03 80 8a 12 62 18 ee 79 92 a1 1f 62 b2 14 7e 32 e9 88 86 e6 09 b3 70 b7 6e 72 09 1c 44 63 14 91 85 75 c7 28 46 dc cc d7 5c c3 22 7d 4c 1c 18 35 3f ec ec 0e b1 d5 32 4c 24 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: %:^~b6rn&sJM6afxbyb~2pnrDcu(F\"}L5?2L$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49853	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	466	OUT	GET /static/js/pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab.ed0a5c28.js HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	880	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-oss-request-id: 67061AA0E2619A3036EB7770 Last-Modified: Tue, 20 Aug 2024 09:33:00 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8466350487063375608 x-oss-storage-class: Standard Content-MD5: l9mCe1ogEKv59PLPZBpUbQ== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6899 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FoPPtIdJMP0djkRbqTnE5KZHwXtmGPMcdiAPXHRWp5L1tiYe14IQitnJ4qV8b6uerZaUlLQo%2FLMpxY0soBG6ocrxPlKn8ObIrUZ36HZLdpl1PaM7XiFkvylFD0VA0Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088bae83b0f9f-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:57 UTC	489	IN	Data Raw: 37 63 34 30 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 61 70 70 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 2d 77 65 62 7e 70 61 67 65 73 2d 61 63 74 69 76 65 2d 61 63 74 69 76 65 5f 6e 65 77 7e 70 61 67 65 73 2d 61 63 7e 63 62 35 32 33 37 61 62 22 5d 2c 7b 22 30 36 33 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 2c 6e 2e 64 28 74 2c Data Ascii: 7c40(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["pages-active-active~pages-active-active-app~pages-active-active-web~pages-active-active_new~pages-ac~cb5237ab"],{"0633":function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 22 75 2d 6e 6f 74 69 63 65 2d 62 61 72 2d 77 72 61 70 22 2c 73 74 79 6c 65 3a 7b 62 6f 72 64 65 72 52 61 64 69 75 73 3a 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 2b 22 72 70 78 22 7d 7d 2c 5b 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 65 2e 6d 6f 64 65 26 26 65 2e 69 73 43 69 72 63 75 6c 61 72 3f 5b 6e 28 22 75 2d 72 6f 77 2d 6e 6f 74 69 63 65 22 2c 7b 61 74 74 72 73 3a 7b 74 79 70 65 3a 65 2e 74 79 70 65 2c 63 6f 6c 6f 72 3a 65 2e 63 6f 6c 6f 72 2c 62 67 43 6f 6c 6f 72 3a 65 2e 62 67 43 6f 6c 6f 72 2c 6c 69 73 74 3a 65 2e 6c 69 73 74 2c 76 6f 6c 75 6d 65 49 63 6f 6e 3a 65 2e 76 6f 6c 75 6d 65 49 63 6f 6e 2c 6d 6f 72 65 49 63 6f 6e 3a 65 2e 6d 6f 72 65 49 63 6f 6e 2c 76 6f 6c 75 6d 65 53 69 7a 65 3a 65 2e 76 6f 6c 75 6d 65 53 69 7a 65 2c 63 6c 6f 73 65 49 Data Ascii: "u-notice-bar-wrap",style:{borderRadius:e.borderRadius+"rpx"}},["horizontal"==e.mode&&e.isCircular?[n("u-row-notice",{attrs:{type:e.type,color:e.color,bgColor:e.bgColor,list:e.list,volumeIcon:e.volumeIcon,moreIcon:e.moreIcon,volumeSize:e.volumeSize,closeI
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 22 66 31 39 38 22 29 2c 69 3d 6e 2e 6e 28 6f 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6f 29 5b 22 64 65 66 61 75 6c 74 22 5d 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 64 28 74 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 7d 29 29 7d 28 61 29 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 69 2e 61 7d 2c 32 32 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 22 32 34 66 62 22 29 3b 74 3d 6f 28 21 31 29 2c 74 2e 70 75 73 68 28 5b 65 2e 69 2c 27 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 5c 72 5c 6e 2f 2a 2a 5c 72 5c 6e 20 2a 20 e8 bf 99 e9 Data Ascii: e,t,n){"use strict";n.r(t);var o=n("f198"),i=n.n(o);for(var a in o)["default"].indexOf(a)<0&&function(e){n.d(t,e,(function(){return o[e]}))}(a);t["default"]=i.a},2242:function(e,t,n){var o=n("24fb");t=o(!1),t.push([e.i,'@charset "UTF-8";\r\n/*\r\n
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 25 3f 31 38 3f 25 20 25 3f 32 34 3f 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 75 2d 64 69 72 65 63 74 69 6f 6e 2d 72 6f 77 5b 64 61 74 61 2d 76 2d 31 66 34 38 66 62 31 61 5d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 75 2d 6c 65 66 74 2d 69 63 6f 6e 5b 64 61 74 61 2d 76 2d 31 66 34 38 66 62 31 61 5d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 75 2d 6e 6f 74 69 63 65 2d 62 6f 78 5b 64 61 74 61 2d 76 2d 31 66 34 38 66 62 31 61 Data Ascii: %?18?% %?24?%;overflow:hidden}.u-direction-row[data-v-1f48fb1a]{display:flex;flex-direction:row;align-items:center;justify-content:space-between}.u-left-icon[data-v-1f48fb1a]{display:flex;flex-direction:row;align-items:center}.u-notice-box[data-v-1f48fb1a
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 3a 22 69 6e 68 65 72 69 74 22 7d 2c 62 6f 6c 64 3a 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 2c 64 65 66 61 75 6c 74 3a 21 31 7d 2c 69 6e 64 65 78 3a 7b 74 79 70 65 3a 5b 4e 75 6d 62 65 72 2c 53 74 72 69 6e 67 5d 2c 64 65 66 61 75 6c 74 3a 22 22 7d 2c 68 6f 76 65 72 43 6c 61 73 73 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 6c 74 3a 22 22 7d 2c 63 75 73 74 6f 6d 50 72 65 66 69 78 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 6c 74 3a 22 75 69 63 6f 6e 22 7d 2c 6c 61 62 65 6c 3a 7b 74 79 70 65 3a 5b 53 74 72 69 6e 67 2c 4e 75 6d 62 65 72 5d 2c 64 65 66 61 75 6c 74 3a 22 22 7d 2c 6c 61 62 65 6c 50 6f 73 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 6c 74 3a 22 72 69 67 68 74 22 7d 2c 6c 61 62 65 6c 53 69 7a Data Ascii: efault:"inherit"},bold:{type:Boolean,default:!1},index:{type:[Number,String],default:""},hoverClass:{type:String,default:""},customPrefix:{type:String,default:"uicon"},label:{type:[String,Number],default:""},labelPos:{type:String,default:"right"},labelSiz
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 6e 74 57 65 69 67 68 74 3a 74 68 69 73 2e 62 6f 6c 64 3f 22 62 6f 6c 64 22 3a 22 6e 6f 72 6d 61 6c 22 2c 74 6f 70 3a 74 68 69 73 2e 24 75 2e 61 64 64 55 6e 69 74 28 74 68 69 73 2e 74 6f 70 29 7d 2c 74 68 69 73 2e 73 68 6f 77 44 65 63 69 6d 61 6c 49 63 6f 6e 26 26 74 68 69 73 2e 69 6e 61 63 74 69 76 65 43 6f 6c 6f 72 26 26 21 74 68 69 73 2e 24 75 2e 63 6f 6e 66 69 67 2e 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 69 6e 61 63 74 69 76 65 43 6f 6c 6f 72 29 3f 65 2e 63 6f 6c 6f 72 3d 74 68 69 73 2e 69 6e 61 63 74 69 76 65 43 6f 6c 6f 72 3a 74 68 69 73 2e 63 6f 6c 6f 72 26 26 21 74 68 69 73 2e 24 75 2e 63 6f 6e 66 69 67 2e 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 63 6f 6c 6f 72 29 26 26 28 65 2e 63 6f 6c 6f 72 3d 74 68 69 73 2e 63 Data Ascii: ntWeight:this.bold?"bold":"normal",top:this.$u.addUnit(this.top)},this.showDecimalIcon&&this.inactiveColor&&!this.$u.config.type.includes(this.inactiveColor)?e.color=this.inactiveColor:this.color&&!this.$u.config.type.includes(this.color)&&(e.color=this.c
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 35 38 62 36 39 66 61 22 2c 6f 2c 21 30 2c 7b 73 6f 75 72 63 65 4d 61 70 3a 21 31 2c 73 68 61 64 6f 77 4d 6f 64 65 3a 21 31 7d 29 7d 2c 34 33 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 22 37 61 38 32 22 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 2c 6e 28 22 61 39 65 33 22 29 3b 76 61 72 20 6f 3d 7b 70 72 6f 70 73 3a 7b 6c 69 73 74 3a 7b 74 79 70 65 3a 41 72 72 61 79 2c 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 5d 7d 7d 2c 74 79 70 65 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 6c 74 3a 22 77 61 Data Ascii: 58b69fa",o,!0,{sourceMap:!1,shadowMode:!1})},4332:function(e,t,n){"use strict";n("7a82"),Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0,n("a9e3");var o={props:{list:{type:Array,default:function(){return[]}},type:{type:String,default:"wa
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 22 63 6c 69 63 6b 22 2c 65 29 7d 2c 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 65 6d 69 74 28 22 63 6c 6f 73 65 22 29 7d 2c 67 65 74 4d 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 65 6d 69 74 28 22 67 65 74 4d 6f 72 65 22 29 7d 2c 63 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 65 74 61 69 6c 2e 63 75 72 72 65 6e 74 3b 74 3d 3d 74 68 69 73 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 2d 31 26 26 74 68 69 73 2e 24 65 6d 69 74 28 22 65 6e 64 22 29 7d 7d 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 6f 7d 2c 22 34 61 38 32 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 22 63 33 30 34 22 29 2c 69 3d 6e 28 22 Data Ascii: "click",e)},close:function(){this.$emit("close")},getMore:function(){this.$emit("getMore")},change:function(e){var t=e.detail.current;t==this.list.length-1&&this.$emit("end")}}};t.default=o},"4a82":function(e,t,n){"use strict";n.r(t);var o=n("c304"),i=n("
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 2c 64 65 66 61 75 6c 74 3a 22 31 38 72 70 78 20 32 34 72 70 78 22 7d 2c 6e 6f 4c 69 73 74 48 69 64 64 65 6e 3a 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 2c 64 65 66 61 75 6c 74 3a 21 30 7d 7d 2c 63 6f 6d 70 75 74 65 64 3a 7b 69 73 53 68 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 21 3d 74 68 69 73 2e 73 68 6f 77 26 26 28 31 21 3d 74 68 69 73 2e 6e 6f 4c 69 73 74 48 69 64 64 65 6e 7c 7c 30 21 3d 74 68 69 73 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 29 7d 7d 2c 6d 65 74 68 6f 64 73 3a 7b 63 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 24 65 6d 69 74 28 22 63 6c 69 63 6b 22 2c 65 29 7d 2c 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 65 6d 69 74 28 22 63 6c 6f 73 65 22 29 7d 2c 67 65 74 4d 6f 72 65 3a Data Ascii: ,default:"18rpx 24rpx"},noListHidden:{type:Boolean,default:!0}},computed:{isShow:function(){return 0!=this.show&&(1!=this.noListHidden\|\|0!=this.list.length)}},methods:{click:function(e){this.$emit("click",e)},close:function(){this.$emit("close")},getMore:
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 22 34 33 33 32 22 29 2c 69 3d 6e 2e 6e 28 6f 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6f 29 5b 22 64 65 66 61 75 6c 74 22 5d 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 64 28 74 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 7d 29 29 7d 28 61 29 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 69 2e 61 7d 2c 22 38 66 65 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 22 62 31 32 64 22 29 2c 69 3d 6e 28 22 31 64 39 30 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 Data Ascii: function(e,t,n){"use strict";n.r(t);var o=n("4332"),i=n.n(o);for(var a in o)["default"].indexOf(a)<0&&function(e){n.d(t,e,(function(){return o[e]}))}(a);t["default"]=i.a},"8fe3":function(e,t,n){"use strict";n.r(t);var o=n("b12d"),i=n("1d90");for(var a in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49862	35.190.80.1	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	490	OUT	POST /report/v4?s=sNMwhAG3sTGYT63oEZBtO1jTllxAQvCD2DWBBIX%2B%2FahW%2FpZzlNl9AY0Zr1jn3dm3qopWaqKQVMLTFpqpemXYz0h3WxCwMIIdNC9aVGdtLeSl5zvyqABt6F1QZSlwix%2BjEu8YCqvLxw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 456 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:57 UTC	456	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 39 39 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 68 35 2e 67 37 6f 72 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 35 32 2e 39 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 36 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: [{"age":52,"body":{"elapsed_time":1993,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://h5.g7or.com/","sampling_fraction":1.0,"server_ip":"104.21.52.99","status_code":206,"type":"abandoned"},"type":"network-error","url":"http
2024-10-13 15:58:57 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sun, 13 Oct 2024 15:58:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49866	104.21.52.99	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	640	OUT	GET /resource-files/2023-02-20/ZsIuf5QJP53BJNF2.mp4 HTTP/1.1 Host: cdn.shippinghero.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://h5.g7or.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=23396352-23442350 If-Range: "B291CFD5EF405501F9786EB9800218CA"
2024-10-13 15:58:57 UTC	960	IN	HTTP/1.1 206 Partial Content Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: video/mp4 Content-Length: 45999 Connection: close x-oss-request-id: 65F28C3DEE88453134E3401E ETag: "B291CFD5EF405501F9786EB9800218CA" Last-Modified: Mon, 20 Feb 2023 11:08:31 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1085788942378088547 x-oss-storage-class: Standard Content-MD5: spHP1e9AVQH5eG65gAIYyg== x-oss-server-time: 11 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5168 Content-Range: bytes 23396352-23442350/23442351 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uSnyZHXcNLjQfLHJZbswp3qTbb1fg1CxGV3u2skSYGeFA122gjD7nkE3PQlr25Mlk2x%2Bl5aOd0ymhoL6K2cI5pSxTk6JhaIjpq3%2BxVWJGG1DIHlrAugDUj%2BrNOll9UP7D%2B8EziAbsg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088bbf8d7727b-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:57 UTC	409	IN	Data Raw: 9b 68 21 c9 3b 4f 2f 7e 62 00 1b 5b 9e a1 7b ea 74 36 fa 97 33 05 e1 9b 05 bb 17 fb 36 6f af 33 0a 6d 36 a7 12 bd fa 2f 2f 97 f4 37 e6 e2 d0 e8 9b 61 2d cb fe b3 05 60 d0 ff 44 8b 51 80 78 a3 b9 99 15 c0 32 fe 83 d7 f3 22 31 8c 9e 29 cb 09 7b eb 9b 0f f6 36 8c 57 97 99 9a dc b5 75 7e 13 c1 0d c6 38 af bf de 58 27 37 f4 f4 06 c2 47 cb fb e6 f0 f6 a7 c2 62 17 88 72 ff 9b 98 47 20 1d 5a 09 8f 4f cb 99 bd 28 80 31 08 e1 23 35 ed f3 70 36 60 d4 51 8b 0f 15 f2 f9 8b e9 ff 8a cf 9a af db 99 91 18 7d 0b ce 14 a1 6f 6b 89 c3 b2 2e 66 60 4b 45 be d4 30 b7 ef 59 48 3c cc 3f 18 8c ba 5e e7 fe c1 fc cc 26 95 4c 96 8d 01 21 1b 02 11 89 fe b8 12 7b 01 3f ff 4c a6 1c fa f5 3f 09 92 9f 8a da 9b 0c 61 b4 47 61 f9 1b f3 5a 9e df e1 eb f9 bf fb 7c 5f be 9f ac d6 c7 1c e5 d8 Data Ascii: h!;O/~b[{t636o3m6//7a-`DQx2"1){6Wu~8X'7GbrG ZO(1#5p6`Q}ok.f`KE0YH<?^&L!{?L?aGaZ\|_
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 1f ae fe 26 50 4c d5 13 74 fa 71 8a 0f 6b cd 68 25 bc 30 b0 55 6f bf 8b 24 32 f2 65 17 d1 46 6a f0 f0 fc 3c 21 7c df ff f6 16 f0 dd 33 db f1 a4 1e 87 37 ff fb 77 e3 69 82 fd 5a 63 2a 9f 9f 65 cb f9 90 ee 2d 90 e2 92 6c 2e e8 9a 5b d8 16 df 95 44 2f 10 56 0f 5e 7f f5 af 66 0c 18 82 2d 16 b5 82 61 7d f6 f3 48 9c 7f 85 30 a0 49 13 90 1b ac a1 57 18 35 a2 2d 89 62 6d 3a 7f de 97 6c 64 41 79 d0 8f 28 f3 4d 6a 12 84 c0 e4 c7 74 a3 6c bb 5e 27 ef bd 3f a7 5f d6 8d 96 d9 4b 29 32 4d 00 21 24 59 fc 51 26 98 b1 d8 e0 74 1d 87 82 6b e6 de 0b ff b0 96 b5 5f 33 d0 48 54 4b c8 35 37 ed 77 ef c4 3c 76 f8 c1 ce ee f7 b1 76 1d 77 b7 78 bf 21 19 15 18 75 0d 6d e0 00 1f 1d 71 7c c1 4f cb a2 5f 67 24 f7 f8 29 f1 d6 41 2f 9a 41 2b 77 56 eb 73 ef c8 d5 ed f5 f1 9f 61 bc 68 4d Data Ascii: &PLtqkh%0Uo$2eFj<!\|37wiZc*e-l.[D/V^f-a}H0IW5-bm:ldAy(Mjtl^'?_K)2M!$YQ&tk_3HTK57w<vvwx!umq\|O_g$)A/A+wVsahM
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: dd ff 33 02 75 00 20 0c e4 04 58 cb 43 ca 55 16 f4 ae 60 cc 10 46 88 89 6a ef d6 ef ee c1 f9 da 7f e1 64 20 02 8f 1c 03 d3 69 7f 29 04 1b 39 78 8e 9f 3c 1e a3 a8 98 65 f2 8a 97 42 f7 ea 62 d4 91 11 f0 60 6c 69 2d 30 01 6d 42 c8 aa 28 2b aa 6f ea 49 58 15 36 cb fc d0 40 74 f3 3c 58 a7 72 2e f4 09 e0 ed 85 bf 29 1d dd 9f 84 6e fb cd 9c f6 be 11 bb bb e7 a8 0e ba 96 77 8f e0 9e ee ef 7a bf c1 2d dd dd de ef c7 c7 91 dd de ee f2 df 86 65 b4 7d e6 00 e8 67 ce 3b 04 c1 77 eb e6 35 6a 97 cd 08 01 82 1e 56 3e 13 0a 3e ed df e1 22 3e f3 7e 13 63 c5 6a c9 93 2f 34 35 65 f3 4b e9 d2 cc 56 27 b6 9f 76 22 77 b6 32 60 91 e6 12 6b 08 20 42 9b 5c b4 e8 66 8c 7b 78 fd ad de 60 6c 23 4b 7e 2b d0 a7 eb a1 fe 91 3b 30 44 98 90 a0 92 ce 2c aa 35 4d a6 8a 46 76 f0 99 20 8f 71 Data Ascii: 3u XCU`Fjd i)9x<eBb`li-0mB(+oIX6@t<Xr.)nwz-e}g;w5jV>>">~cj/45eKV'v"w2`k B\f{x`l#K~+;0D,5MFv q
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 10 c8 1c 7c c6 53 1f f1 30 fb f7 f6 d3 99 35 44 11 d8 0c b6 13 0a ee 9b 49 f3 1d 0f 99 a1 74 b0 47 33 0f 9e f2 82 10 95 de ff 31 1d f9 83 ed 68 74 46 87 b1 db 18 a7 bf 76 38 26 cf e7 7c de 03 c9 83 d8 b1 27 62 37 a9 8b 0c 02 8e 8c 8c 72 f9 80 ba 4a 1f dd 0e c7 7a c1 df fe f9 a4 85 f4 97 df 0c a8 fb d7 d3 4c 7e 9d 7d c1 21 35 5e cd 15 41 e1 62 35 01 85 4b c4 38 dd 7d 39 98 02 1f b4 a9 13 4e 9e 9e 33 5f 46 f3 03 20 7f 86 d5 63 3f 5b d9 66 62 c6 64 cc 3e 09 00 9b 4e c4 f7 af e5 ed 78 28 11 7b bd b3 1c 7c c5 ed a3 b4 45 b1 62 f6 fb 79 73 9c 93 f9 86 d0 0c 3b f6 09 30 d3 dc d3 66 97 2f 91 4f 7e 9e de df 5e 77 04 9e ad a6 f1 14 2c b8 04 13 52 4b eb b1 44 0b 2d 56 60 03 15 3b 01 8c 52 8c 40 45 7a fd 49 0e cc c4 59 e7 9f c1 01 db f9 be 0d 48 04 13 13 c3 8f 70 89 Data Ascii: \|S05DItG31htFv8&\|'b7rJzL~}!5^Ab5K8}9N3_F c?[fbd>Nx({\|Ebys;0f/O~^w,RKD-V`;R@EzIYHp
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 28 1e 79 4f 75 45 5f a6 5b 37 da 02 59 52 c2 b0 02 15 da da c7 0c ef bf f9 f7 ff 82 8f d4 de 9b c7 40 e8 05 84 bc bc f9 8b 34 32 a4 7b 53 0f 14 9f cd 16 8f 0c cf 48 4c 8f d6 df 34 bf f0 3e 1f e9 bc d1 80 07 4f 2c 27 b7 f5 99 85 a4 dc 38 d6 09 e9 da 6f 65 9b c8 4b e9 d8 60 8d 7a 7a 7c 26 c2 80 21 1f a8 f5 6b f1 75 17 f9 bd bf fb 09 c6 50 6b 68 f5 0e 65 ec 8c a0 a2 98 9f f1 da 7d 05 d7 ae b6 fe a3 b6 6c fe ca 31 e8 2d 6b af f3 a6 cc 22 56 8c 65 39 2a 0c e8 fa 3d 3e 69 71 84 34 95 05 26 ff 55 9b 2f 8f 1e 87 96 b9 2d e5 c8 4b 9b 9c 0a 9f fc d2 fc 47 f6 b1 85 5f 9a 94 7f d5 26 6c 6d 48 f8 f1 75 fd 78 bc c1 e5 c3 50 0c 13 75 b5 e6 91 63 c4 bf 0c ea 30 b9 29 93 92 cc 31 fc bf 86 65 ce ad 73 0b 37 8f f7 8e 7f 59 69 37 a3 d3 66 f1 ee 7f c3 16 eb 92 8b a5 53 7e 5f Data Ascii: (yOuE_[7YR@42{SHL4>O,'8oeK`zz\|&!kuPkhe}l1-k"Ve9*=>iq4&U/-KG_&lmHuxPuc0)1es7Yi7fS~_
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: cb 86 a0 fd 17 7b b9 d1 a7 7f 22 5a fd 34 e6 f3 fc 0a f4 15 80 4c e6 42 e8 bd dd 2f a2 e0 5a bc 4e 55 ec 60 66 b3 af 40 4b f8 7e 14 ed 97 6f 50 66 a4 02 b8 fd 3f 81 b2 2a 0c 5b c6 21 05 ef e9 be 35 5a 86 00 83 3c 07 66 51 0e b2 99 fd 4d b2 33 00 90 2e a0 99 aa 01 8e 60 a0 fb 9b d5 9c cf 42 09 19 71 f4 4c d7 9b 36 39 78 aa a0 50 76 62 ca ab dd 4d b1 3b 98 c6 0d 90 9d b0 0d 26 b0 45 e5 6e ef f0 06 f1 45 3a 13 fb eb 29 3f d0 f4 b0 cc 49 03 7b 44 bf c9 e0 53 70 95 7f 19 b9 37 ca 59 ae 2f 0e c5 9a 5a 40 c6 de 06 1b 31 90 64 03 7f 9b 09 90 69 c7 ee 8e 6c a2 03 31 18 46 42 90 72 26 2d fd 81 ab 91 7b 18 65 5d d8 44 b5 f9 76 2d c2 8a 00 2d 1e 29 ad 52 42 df 7f a4 98 18 a4 83 ee 5e 58 08 43 ed c0 28 80 ee 15 76 c5 3f e2 57 45 00 65 e2 f2 9a 15 23 01 5f cd 8a 0d 0a Data Ascii: {"Z4LB/ZNU`f@K~oPf?*[!5Z<fQM3.`BqL69xPvbM;&EnE:)?I{DSp7Y/Z@1dil1FBr&-{e]Dv--)RB^XC(v?WEe#_
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 00 2a 92 fa 0d 76 78 21 eb 63 67 d7 0f fe ce a3 ef ec f2 35 d6 f3 78 20 76 b9 c5 94 f2 6a 88 c9 9c 42 17 28 ff ff c4 e7 db 6f 9a 0f 04 57 ff 41 a2 e0 a7 84 87 45 27 0a 40 11 89 7c 0c 9e d4 a8 c5 46 59 97 0c a5 8f b5 22 88 9a 87 83 25 fb 5c ce e2 ee 57 8f 1d 06 bb 6c cc d1 30 98 89 df ff a2 8a 75 0e a9 7c d0 31 92 e4 d3 eb 53 c6 5f 46 c4 30 f7 f4 fe 25 f4 bc c1 00 5d e2 59 49 06 b4 26 88 3a f8 b9 0c d5 85 6e a5 4d 02 a4 a7 dd 40 b9 9b 08 55 9c c9 aa bf 32 4e 47 0f 7f bc 5e bf 8b 98 5c 60 01 ff 41 ae 38 d3 03 99 05 63 e8 ff f5 29 b6 1e 26 12 54 7f d0 e7 2c 51 fc 33 5c 5c 01 b6 23 a5 48 f7 fd 7d af 33 85 77 0f d2 87 6d 77 8f b1 98 4f 79 69 f1 30 2b d0 7a 5e ec 23 2b d6 d7 7d a9 af c2 08 bb b5 ad 4f 5e c8 3d b0 69 e1 63 e8 fb f6 ad b4 ec 76 de fb 9d ff df b1 Data Ascii: *vx!cg5x vjB(oWAE'@\|FY"%\Wl0u\|1S_F0%]YI&:nM@U2NG^\`A8c)&T,Q3\\#H}3wmwOyi0+z^#+}O^=icv
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 3b f8 94 15 47 73 62 94 40 66 03 0e 89 e0 90 24 f7 d7 d1 1f 3b 08 82 7d a3 42 f2 81 19 ad d5 bd 77 f2 42 db d6 64 0b 69 a5 9f c6 7a f2 fd f3 00 1c 84 4f 68 78 a2 a7 47 32 82 6f f5 f0 87 b4 d2 90 40 56 ba d2 99 88 06 16 ff 8b 21 19 d0 9b 7b 16 12 de 1e 66 20 b1 5d bd 45 2e 56 3d d9 3b fa ad b1 e5 1a cf 84 f0 85 9f ac 3c 2f 86 69 2b 2f aa 4a 56 27 cd 93 76 19 15 b8 a0 c6 77 d3 bb 7e 68 68 cc 16 a7 48 ae bc f0 71 d5 7c 6f 9a de 58 01 a3 06 1f ed fc 75 dd f4 de 2b f3 00 63 0b 58 79 b1 65 2b 0d a1 53 9e 38 51 ef 32 48 6c c0 25 02 da 2f 6c 38 ec bc 39 ff 5c c1 d9 21 d1 8a 97 b1 69 d5 36 fa ed 4c 10 fb 08 7e 2c c9 d4 ce c8 a1 f7 07 4f fb f9 02 0b 2a b3 16 5b 40 34 39 b0 c0 67 ae dc f6 61 4c 53 9c a9 c5 0a 4f a7 43 6e 9c ff 32 76 0f 9c a9 04 9b 17 2c c1 ff ca f6 Data Ascii: ;Gsb@f$;}BwBdizOhxG2o@V!{f ]E.V=;</i+/JV'vw~hhHq\|oXu+cXye+S8Q2Hl%/l89\!i6L~,O*[@49gaLSOCn2v,
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 7c b4 48 65 a3 ef f0 96 f3 62 52 63 17 8c c1 df 36 99 34 d4 3b a6 1f f7 f2 a8 3b 0b 8b 97 38 11 3d 39 7f 17 c6 79 74 74 85 05 ed b7 45 33 4b be 33 cb 4d b5 2e cf 9b 7f 08 f3 e3 10 77 ed f9 b5 4f c1 36 6d 7f 60 67 c7 e0 82 82 a8 ee 7c ac 7a 08 3f a4 47 c2 68 78 d8 90 fb bb fd fe 27 34 92 50 87 f8 91 2e 96 a5 ff 79 99 b9 4f 97 c2 74 db 42 4d 8b f6 30 88 a7 4e 86 6c 4d 24 f4 e9 cc 2c 16 0f ed c4 fa b4 3a 99 bd ef 2b 39 88 70 0f 42 62 42 bf ba f1 9a a9 a5 69 ac b6 d6 66 6f 98 70 62 45 85 2c 78 87 06 63 b3 13 f4 dc 9a 5c 8c 86 18 77 3b 18 3b f3 7f ef 33 23 65 44 26 da 91 25 6b 43 5e 97 9b b6 de d6 95 93 97 9f f5 69 d0 f7 59 80 39 f8 7e 09 bc 28 ad 79 f2 24 f3 6f 79 a4 de 5b 65 26 28 af e9 d8 fb cc d1 10 91 34 dc 2d 9a 97 b9 81 c5 e8 c5 58 f2 ca 3f 17 14 75 eb Data Ascii: \|HebRc64;;8=9yttE3K3M.wO6m`g\|z?Ghx'4P.yOtBM0NlM$,:+9pBbBifopbE,xc\w;;3#eD&%kC^iY9~(y$oy[e&(4-X?u
2024-10-13 15:58:57 UTC	1369	IN	Data Raw: 62 1c 3d 2d 3e 16 27 79 9f 27 e6 e6 12 fc 28 12 e5 ce 38 93 bb ba 07 1b da 7f 84 29 22 ba 24 ef 74 5f 05 72 e6 45 25 a6 e7 61 08 b4 ef f0 8d e8 9e 5a 5f cf 9e 32 f5 50 df 4e e7 dd a6 03 56 bc 5d de 6c 70 d3 2d 53 c3 07 c9 30 82 88 d4 9f 77 7f c2 14 3d c6 7a e7 43 62 36 f8 46 88 ac 6c 21 8f 7c 4d 7e 11 ce a3 06 3d 53 ec e5 fe 3b b4 9c d9 83 7f 88 85 9e 5f e4 a7 0f c8 c7 88 05 19 a4 c1 2d bf c1 00 55 bf cc 51 ce ee e8 2e c4 86 58 e3 d8 ef ea f1 5e be 2c b0 fd 21 ae 75 ec 5f 42 18 a5 f7 e4 7b df c5 6f 1d c9 f7 2f f1 37 4e de f7 99 c1 a3 df 1f ba d5 39 d4 b1 8e ec c2 3e 79 8d cc b1 84 02 84 73 53 f1 e2 85 85 25 53 48 cc 56 9d 3c db 49 ac c0 10 86 ca d6 34 4b 3e 6f 7b f9 8c 51 c0 9a c4 c8 1e 24 85 7e 1c e6 f5 a8 5e ed 51 21 f8 87 77 7f ae 1f 09 ee c7 b6 e7 fe Data Ascii: b=->'y'(8)"$t_rE%aZ_2PNV]lp-S0w=zCb6Fl!\|M~=S;_-UQ.X^,!u_B{o/7N9>ysS%SHV<I4K>o{Q$~^Q!w

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49859	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155857Z-17db6f7c8cfvq8pt2ak3arkg6n000000035g00000000349p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:57 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49860	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:57 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:57 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 36e78a2e-101e-008d-054a-1c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155857Z-17db6f7c8cffhvbz3mt0ydz7x4000000035g00000000hew2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:58 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49861	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: cb11dd2f-401e-0029-235b-1c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155858Z-17db6f7c8cf9wwz8ehu7c5p33g00000002cg000000007hhf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:58 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49867	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: fe0e2196-001e-0079-5547-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155858Z-17db6f7c8cfmhggkx889x958tc000000027g00000000byme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49868	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155858Z-17db6f7c8cfvzwz27u5rnq9kpc00000005ag00000000dpag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49873	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	758	OUT	GET /static/img/head_one.f7e798be.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:58 UTC	910	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: image/png Content-Length: 8504 Connection: close x-oss-request-id: 666D3251637FD2383235F51B ETag: "F7E798BEBDE903CC9FC214C94548DDB3" Last-Modified: Mon, 20 May 2024 05:15:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4748039439168339023 x-oss-storage-class: Standard Content-MD5: 9+eYvr3pA8yfwhTJRUjdsw== x-oss-server-time: 1 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5788 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gGhAXOuilIC7kjjSA5dq2%2FDgiW4xwd3EeeQ%2F7KVuDssx4ehp6kjU7oRMFyy9K5Hx%2BT2FXMrrZglq8UuFzJANZ6Mqg44HlRF%2FoPOgAQ3%2BOWxm%2BmpJwvLFTFXOdRJkSw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088beece817ad-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:58 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5e 00 00 00 5e 08 06 00 00 00 aa d2 a3 6e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ed 7d 09 94 5d 55 95 f6 77 ee bd 6f ac aa 57 43 aa 32 55 66 e6 49 19 62 18 44 9a c1 40 02 24 88 d0 2d 28 0a 4e 2d 22 88 da 2a e2 4f e3 00 82 a2 76 a3 9d 66 09 0a 82 10 25 ca 64 13 86 10 08 83 20 a3 84 21 40 20 29 02 19 6b ae 37 bf 3b df 5e 7b 9f 73 5f bd aa 10 52 c3 ab 14 7f af dc b5 1e 29 aa de bb c3 77 f6 f9 f6 de df de e7 3c 81 dd c7 b8 20 20 c6 e5 aa bb 2f 8a dd c0 8f 93 11 ec 06 7e 37 f0 e3 84 c0 38 5d 76 b7 c5 ef 06 7e 9c 10 18 a7 cb ee b6 f8 dd c0 8f 13 02 e3 74 d9 dd 16 bf 1b f8 71 42 60 9c 2e bb db e2 77 03 3f 4e 08 8c d3 65 c7 dd e2 83 20 68 01 30 17 c0 41 00 f6 06 30 0b c0 14 00 Data Ascii: PNGIHDR^^nsRGB IDATx^}]UwoWC2UfIbD@$-(N-"*Ovf%d !@ )k7;^{s_R)w< /~78]v~tqB`.w?Ne h0A0
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: ed 2d b9 da 50 90 f5 47 22 40 24 2a 67 84 3c ba 01 5c 03 60 89 10 a2 54 ed 4b 0e f7 7c 55 07 3e 08 82 b3 00 fc 14 c0 4c be 19 b2 6e db 92 d6 3d 1e 07 cd 80 68 ac 72 16 bc 0b e0 7b 42 88 db c7 e3 76 c2 6b 56 0d f8 20 08 08 e8 df 00 58 50 06 dc b2 00 6f 78 80 87 ac 5e b5 1b 0b 9f 54 37 80 d8 80 01 58 01 e0 2b 42 08 1a 88 5d 7e 54 e5 f9 82 20 f8 0c 80 ff 06 50 cf 0e d1 32 25 a5 0c e1 20 a0 d7 ad 7d 03 8f 3f f6 08 1a 1b ea 71 c4 51 1f c5 94 d6 99 d0 14 4f 87 37 58 e9 66 47 75 d3 44 41 b1 78 e8 8c 33 44 89 42 88 db 86 70 ab 55 7d cb a8 9e 21 08 82 18 80 eb 94 03 05 5c 07 30 cd 61 71 78 10 04 e8 ed ee c2 85 17 9e 8f 2d 9b b6 c1 b1 4d 1c 7a f0 41 38 65 f1 62 34 b7 4c 44 b1 98 87 10 02 35 c9 04 a6 cf 9c 83 89 93 a7 33 68 a3 ba 71 f2 01 f1 38 60 84 29 02 6e 02 70 Data Ascii: -PG"@$*g<\`TK\|U>Ln=hr{BvkV XPox^T7X+B]~T P2% }?qQO7XfGuDAx3DBpU}!\0aqx-MzA8eb4LD53hq8`)np
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 9c 8d 00 f6 ab 46 59 71 47 c0 7f 87 8b 06 55 0c 1d 07 5b ba 6f db 70 df 7c 09 bd 8f af c4 25 4f be 80 1f 7d f3 02 4c 98 39 1b 66 2e 8f a7 9e 78 0a c7 9f 78 22 f4 ad 1b 81 92 8b ce d5 7f 47 dd c2 d3 f0 c4 ca 47 f1 d1 63 8e 86 ef 9a 28 be d3 86 cf fc f4 3a 1c 65 db b8 70 d1 f1 98 3a 7f 21 22 47 1c 03 3d 96 18 1b f0 fb 43 cc ef 0a 21 7e 3e da e9 b5 1d f0 aa 5c 47 15 fc 66 14 8b c3 d6 d3 87 7a 43 5e f7 36 f4 ad 7a 00 5a 6d 03 7e 7d d7 1d 38 fd 8c 53 31 fb 90 79 b2 e6 2a 04 7c d3 82 d1 be 15 7e d1 45 d7 53 ab 50 7f e6 99 08 34 03 be e3 c2 29 15 90 7d 7b 3d be 75 f5 af 70 ee 8c 3d 71 fc 3f 9f 82 f8 94 c9 48 ee ff 21 18 ad b3 c6 06 78 0a 6d 93 54 a7 e7 4a d6 ec d1 96 11 df 0b 78 aa 8f 5e cb 05 0c 02 7e 8c 0e 77 eb bb 28 be fc 24 82 48 1d 6c dd 46 6c ef 83 20 34 Data Ascii: FYqGU[op\|%O}L9f.xx"GGc(:ep:!"G=C!~>\GfzC^6zZm~}8S1y*\|~ESP4)}{=up=q?H!xmTJx^~w($HlFl 4
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 62 c2 04 b6 d6 51 f9 86 7e d1 6c 95 10 e2 84 91 02 4f da fb be 2c 13 8c b2 a6 4a 19 a6 bf be 0d fe 86 77 11 14 2d 78 9e cb f5 52 e6 0d ee 14 08 d8 7a b9 86 ea 12 7d 38 0c 3a 5b b4 e9 b0 55 7b 04 3a cd 0a d2 8a 3c 42 9d 22 4b 1d 7a 34 02 8d 80 8c f5 ff 2b e8 77 b1 28 04 01 19 31 78 b6 88 a8 06 41 d9 ac a6 29 70 15 f9 04 3e 04 ad 24 11 80 31 79 22 c4 d4 29 d0 66 cc e4 5e 9a 61 cf 02 92 0d 48 3e 00 de 10 42 ec 3f 52 e0 29 63 6d 19 4d c6 ca 94 92 c9 c2 7d ea ef 70 b3 79 0e 90 f8 69 02 6a cd f0 00 c6 9e 3a 05 64 ab 06 ab 9f 6a 10 24 95 d0 20 b8 20 9d de b7 1c 78 96 c9 ff f2 a0 09 01 cd 90 80 eb 31 a2 22 9d 7f 26 0a e1 17 d3 89 ae 5e 0a 70 43 f0 2c e1 82 79 b8 84 87 ee 91 43 e5 80 ef 49 38 2e f4 fa 3a 44 8f 3e 0a 68 69 19 1e f8 fd 19 6c a7 10 62 d2 48 81 a7 b4 Data Ascii: bQ~lO,Jw-xRz}8:[U{:<B"Kz4+w(1xA)p>$1y")f^aH>B?R)cmM}pyij:dj$ x1"&^pC,yCI8.:D>hilbH
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 49 19 f3 8a 1a 80 30 02 53 b3 4c 4e 8a 70 66 48 8a a3 b7 eb f1 18 92 df fb 37 7a 16 ba e9 91 17 42 a4 5f 0b 86 5d fa f3 b2 3d 28 de 7a 2f 5c bb 00 b8 4a 16 50 d6 e6 d3 20 10 f0 85 0c f4 58 1c 5a 22 09 4d 57 a2 15 df 7d 18 83 87 f1 b7 02 be 82 be fb f9 3a f4 92 6a 33 8a 70 5b 15 1a 6c e5 c9 e5 52 1d 95 80 55 84 a7 24 47 90 fa e9 a4 33 08 e0 22 d2 d4 cc b3 8f 25 08 25 35 b0 e3 87 cc 8c c3 52 62 99 7e e8 77 3c b8 34 cd 7c 1e 34 63 da 54 d4 7e ed 4b 74 53 a3 2b fd 29 e0 87 5d ec 76 37 6e 46 e1 7f ee e3 7e c6 32 f0 a4 9f 33 25 92 a5 b9 f0 4a 79 68 9a 80 5e 53 07 8d 3a b1 d8 d2 d4 3e 33 21 bf 2a 0b 53 32 8a 44 39 8c 6a 98 92 64 e8 58 de c3 46 01 51 d6 7f 38 c9 a5 10 91 c0 57 03 40 b3 81 a5 07 57 b6 85 74 75 b2 b0 16 6b 9c c0 b3 8f 22 2d cd 20 45 93 32 61 4a cc Data Ascii: I0SLNpfH7zB_]=(z/\JP XZ"MW}:j3p[lRU$G3"%%5Rb~w<4\|4cT~KtS+)]v7nF~23%Jyh^S:>3!*S2D9jdXFQ8W@Wtuk"- E2aJ
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 56 f2 2d 5e a1 00 27 9d 46 9e 16 24 db 79 d4 1f 7e 20 f6 b9 ea 67 d0 a2 ef df e0 4a 0b 1e 0a 6b d7 22 fd dc 0b e8 7c f6 05 94 5e 7d 1d 8d b5 b5 a8 6b 9e 88 e4 d4 29 98 70 c5 65 30 a6 b5 d2 1d 5e 22 84 a0 dd fc 46 75 bc a7 58 f2 7e cb 2d d9 52 7c 1f d9 db 96 c1 d9 d2 21 8b d2 e4 58 89 62 4c 13 4e ba 8f 65 02 d0 1e 9b 11 01 2d 19 e7 e2 77 4d 4d 0a ba 63 b3 d3 d3 e2 b5 d0 6b 6a a1 4d 9e 80 d8 79 67 a0 eb e9 15 48 3e b2 01 81 08 20 38 7e a7 b2 1e 51 8c 8a b1 29 d4 e3 01 50 be 21 4c b0 78 8f 03 b2 f4 8a 56 11 a2 b7 74 1a 85 ce 0e e4 75 0b 53 3e fd 09 4c 3b ef 2b c3 02 a9 f7 e1 55 e8 bd e6 5a d4 cc 9c 89 c8 84 09 48 1c 7f 2c 6a ce 58 4c e7 d8 44 6d 30 63 b6 dc 52 59 3d 6d 63 f8 9e 0b 8c fd 42 01 f9 9b ff 04 ab bb 8f eb ac dc 86 e1 3a 88 d7 c5 10 6b ac 83 9e 4c Data Ascii: V-^'F$y~ gJk"\|^}k)pe0^"FuX~-R\|!XbLNe-wMMckjMygH> 8~Q)P!LxVtuS>L;+UZH,jXLDm0cRY=mcB:kL
2024-10-13 15:58:58 UTC	1200	IN	Data Raw: 5e 7e 15 d9 25 37 20 d2 32 11 7a aa 1e 1a d1 cb 59 67 c0 98 c1 a0 d3 f6 87 c7 08 21 e8 5b 18 c6 e4 18 12 c7 57 5e b9 72 c3 4f af bd 03 bd 37 de 02 3f 93 e9 6f c5 50 dc 5b a6 20 5b 49 b6 5e 00 bb af 9b c1 4f b7 77 62 fd e6 8d 68 3c fc 30 cc 99 ff 4f 48 ec 31 03 fa e4 16 50 5f 57 be b7 07 99 9b ee 46 63 ce 81 11 a5 85 08 11 5e 8c c0 4e 8e 8a 15 bc 52 84 6a a9 aa e5 5b 35 bd 52 18 4a da b9 ec af a7 58 3e 83 62 ba 1b 5e 52 43 f3 e2 63 d1 fa 95 6f 0d 68 7e 2a bd f9 16 7a 7f fa 1f 10 c9 3a 24 f6 de 1b 75 5f 38 07 c6 54 ee b6 fe e0 6d f8 59 61 f9 b4 c5 ed 4a da 6c c2 4b 67 90 be 65 29 ec 0d ef f4 b7 6b 10 18 2a c7 81 ed 72 46 cb 3d ef c5 02 03 bb 71 d3 46 e4 34 03 73 a6 cd 44 2c 9a 60 61 8a da ad 11 8b c0 f3 03 e8 b6 87 68 2c 82 88 2e e4 2a 10 d2 f0 c3 ca 55 18 Data Ascii: ^~%7 2zYg![W^rO7?oP[ [I^Owbh<0OH1P_WFc^NRj[5RJX>b^RCcoh~z:$u_8TmYaJlKge)krF=qF4sD,`ah,.*U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49874	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	762	OUT	GET /static/images/active/icon-steps1.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:58 UTC	900	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: image/png Content-Length: 3769 Connection: close x-oss-request-id: 666D32517C0F42333180E59E ETag: "3C36D7209A67C7E7CB7465B1799FE007" Last-Modified: Mon, 20 May 2024 05:14:43 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6677073076349016858 x-oss-storage-class: Standard Content-MD5: PDbXIJpnx+fLdGWxeZ/gBw== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2291 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9tgNUTd5OfSp8aPhQoTUxEgUTF8cXzmPNSHFk3IHSgK0d5qjAHpkiF8rAWoSRQ1bJGSosHjlfhsC0vIY7fOcFLtGvKtQr5hP5FVUWekLDgYmw7jDkNd%2BFFqPGtkQmQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088bf1cb39e04-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:58 UTC	469	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 42 00 00 00 42 08 06 00 00 00 e3 54 00 e8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0e 73 49 44 41 54 78 5e ed 5c 6b 90 15 c5 15 fe ce dd f7 b2 0f d8 65 25 ac 21 b1 52 3c 14 92 8a 06 c5 94 56 51 b1 c0 28 46 e3 23 82 8a 06 4b 53 31 46 c0 20 31 28 90 84 25 25 20 fe 80 04 f4 07 96 89 c6 24 24 3e 12 c4 b7 3c c4 fc 48 59 22 16 a6 a2 2b 25 98 f2 81 c0 f2 66 df 7b ef de 39 a9 9e 9e 9e e9 ee e9 b9 3b 0b 8b 8f 8a f3 43 ef de 3b d3 d3 e7 3b e7 7c df 39 3d 3d 10 3e 89 63 2a 17 e1 cb 28 c5 97 50 8c 2e 94 a0 07 45 20 64 50 02 42 29 c8 9f 42 16 8c 1c 18 0c 0f 65 c8 a3 02 39 ec 43 2f 76 23 8b 27 28 7f b2 a7 29 27 71 32 8e d9 5c 86 53 51 8e 56 94 a3 04 45 27 74 8b 1c f2 a8 41 37 3e 46 37 56 53 cf 09 8d 95 70 f1 Data Ascii: PNGIHDRBBTsRGBsIDATx^\ke%!R<VQ(F#KS1F 1(%% $$><HY"+%f{9;C;;\|9==>c*(P.E dPB)Be9C/v#'()'q2\SQVE'tA7>F7VSp
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 9e fc e3 0e ae 40 2d aa c1 10 fc 64 1e 59 e4 b0 0b 87 fb 43 a6 e9 81 b8 85 4b 30 14 75 b1 54 10 f9 df 8b 76 dc 47 6d 27 df 7a c7 1d e6 71 35 8a 51 15 e3 11 91 2a 07 71 18 0f 52 2e cd bc d2 01 b1 86 4b b0 07 f5 b1 fc 14 51 b0 07 47 d2 dc ec c2 0d dc 48 25 f9 0b c0 45 13 08 3c 0e c0 69 00 1a 18 41 8a 31 3a 01 1c 60 e0 7d 30 bd ed 21 bf 35 e3 15 6d d9 f8 5d da d3 a7 21 c2 49 8d 18 e2 88 0e 0f 8d 38 84 9f f4 0d 46 df 40 88 9b 0c 77 80 50 8e 2e cc c7 d1 42 b9 38 69 13 d7 17 65 bc 19 00 4d 27 c2 78 70 20 11 81 4e f8 5a a1 fe 23 66 a2 f4 23 b0 9c 85 94 30 de c8 83 d7 66 28 f3 e8 e6 c9 74 28 19 14 26 2c c3 60 74 fb 84 aa 1f 1e f6 e2 50 5f ce 2a 0c 84 e0 84 51 18 ea 50 86 76 2c a6 d6 a4 49 09 ef 67 8a bc f9 20 ba d9 f7 b8 66 b8 61 7c 64 b0 fc 64 01 21 fe e6 08 a0 Data Ascii: @-dYCK0uTvGm'zq5QqR.KQGH%E<iA1:`}0!5m]!I8F@wP.B8ieM'xp NZ#f#0f(t(&,`tP_QPv,Ig fa\|dd!
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 5e c9 cc 73 42 63 75 af a8 36 d9 2a 86 d4 b9 36 7f 4c 6c 00 6e fb 3a b0 68 1b b0 e3 18 30 b2 0a 78 72 8a 04 e2 da 97 35 a3 fc 88 90 83 c7 3a d2 02 f2 1a eb 73 88 56 bd 37 83 7e 66 00 61 67 41 39 ba 08 f3 b9 c1 58 7c 69 c4 01 7b 8d ef 9c 75 fc 3c c0 53 22 a3 2c 6f 68 e1 9f 18 2d c1 e4 6b 8b 81 ce 3c 90 f3 a4 f7 47 55 01 7f bf 04 68 3e 00 4c db 1c 3a 38 08 0d 02 07 96 85 19 e0 8f 23 35 da a9 38 56 74 10 68 f3 7f 6f a2 c9 06 10 72 0d b6 21 fc 2e 8b 1c c5 14 a3 19 2d f6 92 d6 f8 75 de 4e 30 46 1a 45 94 5d 27 38 b8 c0 75 be 0d 94 00 62 dd a5 12 88 a9 9b e2 ad 77 2c ec 1d b2 6a 82 14 80 19 ce 87 de fb e0 66 1a 69 00 11 17 88 bc 00 c2 64 d0 c5 d8 6b 17 52 df fa 87 77 0c 1e 6a 42 0f 68 ae 30 bc d2 57 be 6a f9 a2 d6 22 05 10 4f 5d 26 81 f8 c1 46 4d 35 12 2a 50 5b Data Ascii: ^sBcu66Lln:h0xr5:sV7~fagA9X\|i{u<S",oh-k<GUh>L:8#58Vthor!.-uN0FE]'8ubw,jfidkRwjBh0Wj"O]&FM5P[
2024-10-13 15:58:58 UTC	562	IN	Data Raw: 06 80 0a 28 82 d8 28 72 6b 6e 9e 63 d7 cc 71 6d 14 91 a8 f7 6b eb d0 90 df f1 4c 06 56 f9 91 11 f8 2b ca 5f 17 bb ab ea ca ae 34 55 13 13 15 44 a1 d8 6a 7b 0c a3 a2 4a fd 4a 79 26 dc e6 04 41 84 e9 71 6f 1d 92 29 d2 af cd 64 83 57 f2 55 0c 7e 84 41 fe 96 3e 3f d3 23 7d b5 e4 4e f3 b8 2a 85 83 4a 50 5e a4 64 58 73 b7 9e 33 6a 4d 52 46 60 1b 79 34 23 bb 80 4e c2 66 32 15 c1 fd dc 5e 58 73 1f 8f f2 8a f1 18 80 b3 74 ad 57 36 46 52 1b 45 44 48 f4 3a 68 61 67 15 7a 5c e1 63 b4 f1 20 6c cf 65 70 0d e6 d1 4e 43 1d d4 1f 03 b2 bd 50 49 41 3f 37 9c 0a 69 ad 6c c7 3c 02 e6 83 11 14 5d 8a 48 83 19 86 c1 12 74 04 e1 df 66 29 1d 72 48 24 8b 6a 56 1d 60 2c eb ad c3 7d 89 7b ac 07 74 c3 a9 b8 ed 71 6e 41 ae 5c ce 8d 5c 84 05 f0 70 13 88 2b a3 4a 50 5a a5 a4 30 4a a3 a0 Data Ascii: ((rkncqmkLV+_4UDj{JJy&Aqo)dWU~A>?#}N*JP^dXs3jMRF`y4#Nf2^XstW6FREDH:hagz\c lepNCPIA?7il<]Htf)rH$jV`,}{tqnA\\p+JPZ0J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49881	104.21.52.99	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	621	OUT	GET /resource-files/2023-04-13/nP16KABtPQPg42Ti.png HTTP/1.1 Host: cdn.shippinghero.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:58 UTC	1273	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: image/png Content-Length: 9574 Connection: close x-oss-request-id: 667F8B85F53B5C3332ACB53B x-oss-cdn-auth: success ETag: "F0F6FB1C05D7595623686E8778F3559A" Last-Modified: Thu, 13 Apr 2023 09:03:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 16101840501010951116 x-oss-storage-class: Standard Content-MD5: 8Pb7HAXXWVYjaG6HePNVmg== x-oss-server-time: 121 Via: cache9.l2us1[790,790,200-0,M], cache33.l2us1[791,0], ens-cache10.us22[0,0,200-0,H], ens-cache1.us22[0,0] Age: 4648 Ali-Swift-Global-Savetime: 1719634821 X-Cache: HIT TCP_MEM_HIT dirn:-2:-2 X-Swift-SaveTime: Sat, 29 Jun 2024 04:20:21 GMT X-Swift-CacheTime: 2592000 Timing-Allow-Origin: * EagleId: 2ff6179517199199223593493e Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dDjRb2MDeBbBGvm2S%2F2zJC7q%2FOvyLLOy2W8TjJEStY7U6AVCFOGeqjTsHKMtlwdcT%2FxUee1Jo4lAifFKZ4D4kqvmeUnQtKZnH%2FlhOifld9tgr%2FAMunX3YjGUFIBvLXXrEBgGjFAlCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c20884de96-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:58 UTC	96	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 82 08 06 00 00 00 8a 03 10 fd 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 25 18 49 44 41 54 78 9c ed 9d 7b 98 5d 65 7d ef 3f ef 5a 6b df 6f 73 cf 24 99 99 4c 32 09 11 30 21 40 08 46 41 22 10 bc Data Ascii: PNGIHDRpHYs%IDATx{]e}?Zkos$L20!@FA"
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 71 55 b0 d2 da 3e ed a1 a5 e8 b1 ea e3 39 52 eb 73 aa 56 4f 6d 85 5e d0 d3 5a aa 07 6d 6b 2d 0a 54 2e a2 a8 20 42 e5 18 93 10 08 09 09 04 98 24 93 c9 65 26 73 dd f7 bd d7 ed 3d 7f bc 7b 4f f6 de 33 c9 5c 32 7b f6 24 cc f7 79 56 32 7b ed bd d6 5e 7b fd be eb 7d 7f ef ef 2a a4 94 9c 85 88 00 cb 0b 5b 07 d0 06 74 01 f5 80 1f 08 16 b6 50 61 03 48 17 b6 4c 61 cb 01 23 40 37 70 18 38 04 1c 28 6c c9 39 fa 1d 73 06 71 96 10 a1 19 58 0f 5c 06 6c 04 ce 03 a2 80 04 b4 92 4d 14 3e 5f fa 7f f1 6f 59 d8 a8 f8 df 2d d9 04 90 00 f6 02 5b 80 e7 80 e7 81 81 2a fc a6 39 c5 99 4a 84 08 4a f0 97 02 d7 03 2b 50 4f ba b7 b0 e9 55 fe 7e 07 30 0b 5b 0e d8 0f 3c 06 6c 45 11 e3 8c 1b 31 ce 24 22 44 80 4d c0 ef 01 17 01 61 94 f0 c3 a8 a7 bd 96 70 81 14 8a 14 29 e0 05 e0 df 80 67 38 Data Ascii: qU>9RsVOm^Zmk-T. B$e&s={O3\2{$yV2{^{}[tPaHLa#@7p8(l9sqX\lM>_oY-[9JJ+POU~0[<lE1$"DMap)g8
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 12 7d 40 02 3f 3d 90 e2 7f 3c 3b c0 81 84 45 c0 d0 10 67 e7 82 60 d6 20 25 64 6d 97 e5 51 0f 7f 7b 45 33 ef 59 1e ae b4 9c e6 80 ff 05 7c 1b 65 8c 3a 6d cc 16 11 a2 a8 55 c1 97 29 21 81 2b e1 a1 d7 12 7c fa bf 06 18 cd bb 95 4b a4 05 4c 82 bc 23 a9 f3 69 fc dd 3b 9b b9 f9 9c 28 15 2b ea 1c f0 e7 a8 55 45 e2 74 bf 6b 36 88 e0 41 ad 0a be 57 f8 1b 00 57 4a be b9 3b c1 97 7e 33 48 c6 76 2b 35 e1 05 4c 11 8e 94 04 0d 8d cf bf ad 89 db d7 44 d1 ca ef a3 85 f2 d6 3e 52 f8 7b c6 98 0d 22 bc 1d f8 77 94 62 08 28 95 f6 ee ed 23 dc f3 e2 30 79 5b 2e 4c 05 a7 09 29 55 4c c4 a7 2e 6c e0 33 97 d4 57 06 66 1c 00 3e 02 fc fa 74 be e3 74 89 b0 0e a5 b4 74 15 77 58 ae e4 ef 9e 1f e1 9e 9d a3 98 ce ac af 72 de d4 f0 ea 1a 9f 5a 57 c7 a7 d7 d7 e3 29 9f 27 ba 51 4a fa ce 99 Data Ascii: }@?=<;Eg` %dmQ{E3Y\|e:mU)!+\|KL#i;(+UEtk6AWWJ;~3Hv+5LD>R{"wb(#0y[.L)UL.l3Wf>tttwXrZW)'QJ
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 3e 78 4e 84 cb 96 04 f1 e9 a0 09 31 a9 ef 37 a0 6b f8 3d 1a 08 b5 9a a8 56 39 08 af 2e 38 90 b0 f8 f5 b1 2c 1f 5c 15 29 ee 6e 44 c9 7a 42 22 84 50 19 cc 63 1a e5 b6 be 3c 87 92 f6 59 5b b4 62 2a 10 85 9a 8b 59 5b 92 ce 38 48 5b 12 0c e9 5c bd 2a c2 cd 2b c3 6c ea 08 d2 19 55 b5 16 a7 93 c4 d3 9b b2 18 48 5a 20 95 9f a0 5a d5 09 bc 9a e0 50 d2 66 5b 5f be 94 08 1e 94 ac 43 a8 42 e4 65 44 58 4f 49 55 b3 c3 49 9b 5d 83 39 72 b6 fb a6 8b 3e 12 02 74 01 79 07 52 59 1b 27 ef 82 21 78 4b 8b 9f eb 56 44 b8 76 79 88 75 2d aa ca c9 4c 57 52 fb 47 2d 06 32 0e 9a a6 46 8f 6a 29 e2 9a 50 23 d8 ae c1 1c 87 93 36 6d 91 31 91 87 51 32 7f 16 ca 89 f0 db 94 e8 07 db fb 72 1c 49 db e8 6f 92 d1 40 a0 6e 9a 2d 25 f1 bc c4 c9 38 e0 4a 9a eb bd bc 73 55 80 1b 57 46 d8 b8 24 40 Data Ascii: >xN17k=V9.8,\)nDzB"Pc<Y[bY[8H[\+lUHZ ZPf[_CBeDXOIUI]9r>tyRY'!xKVDvyu-LWRG-2Fj)P#6m1Q2rIo@n-%8JsUWF$@
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 11 ea 29 51 06 e2 a6 c0 72 6b 53 f5 44 a0 9e 7e d3 91 98 ae da 42 42 b0 22 6c b0 6e 89 9f ab 3a 42 5c b7 22 c4 e2 a0 31 eb d7 97 32 5d ba 13 16 77 6f 1f e1 87 2f 8f 92 b5 5c 22 31 0f 19 5b e2 e6 1c fe f0 c2 7a fe fc 1d cd 2c 0d cd 7c da 79 7d d4 e2 58 42 59 14 3d 62 ee a7 06 21 54 b1 b3 b8 59 76 f3 04 50 6f 50 62 48 02 c8 b9 72 f6 2b 3e 4f 72 71 52 aa 65 95 23 95 f0 a5 23 69 f6 6a ac 68 f6 73 cd b2 10 d7 77 85 59 d7 e4 9b fc 64 33 80 23 95 65 f0 bb 7b 13 fc ed f3 c3 0c 8d 58 04 22 3a cd 51 0f c3 59 1b d7 85 4f bf ad 91 cf 6e 68 a4 f9 34 96 9d a0 2c b6 89 a4 85 57 80 56 45 d7 f3 a9 e0 a2 64 5c 81 40 91 08 63 14 c9 5a 12 c7 ad ee 7a e1 44 84 af 44 ba 60 ba 60 d9 2e 3e 0d 96 c7 3c 6c 6a 53 c2 7f c7 92 00 75 be ea 4c 51 12 18 cd 3b 6c 39 96 e3 2f b7 0e b3 f5 Data Ascii: )QrkSD~BB"ln:B\"12]wo/\"1[z,\|y}XBY=b!TYvPoPbHr+>OrqRe##ijhswYd3#e{X":QYOnh4,WVEd\@cZzDD``.><ljSuLQ;l9/
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 9e b2 58 52 e7 e5 ee 4d 2d 7c 68 55 74 4e 4b 03 be 36 6c 91 97 92 50 8d 87 04 29 5d fc ba c6 e2 68 99 a1 cc 05 0e 1a a8 9e 40 63 44 68 8d 05 f0 eb 72 ce 3c 22 b2 e2 0f 5d 83 90 4f 91 42 ba ca c0 d5 9f 73 39 7a 2c cb 0b fd 39 1e db 97 64 79 9d 17 9f 21 d8 71 3c 4b ce 94 44 fc 3a 5e 43 99 6d 4b cd e3 ba 26 c8 59 2e c9 a4 c5 5b 16 07 f8 da 95 ad 5c d3 31 79 b8 f9 6c a2 3f 63 d3 9d 30 41 68 68 35 f0 38 96 41 4a fc ba a4 35 56 76 0f 5c e0 80 01 1c a2 84 08 ed 01 17 af ae e3 e0 d4 2c 66 71 8c 83 02 82 5e 41 d0 ab 8f b9 a7 47 f2 0e 83 c7 32 80 c0 e3 11 d4 87 8c c2 fc 7f e2 78 01 08 4d 90 ca 39 64 d3 36 6f 5f 1e e2 9e ab 5a b9 a4 a5 3a 1e cc 53 e1 d5 61 93 c1 b8 85 4f 13 a7 9d 26 77 ba 70 10 78 75 9d f6 40 d9 68 ef 02 87 0c a0 87 12 22 2c 0d 0a 82 3e 03 c4 69 75 Data Ascii: XRM-\|hUtNK6lP)]h@cDhr<"]OBs9z,9dy!q<KD:^CmK&Y.[\1yl?c0Ahh58AJ5Vv\,fq^AG2xM9d6o_Z:SaO&wpxu@h",>iu
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 7e 04 0c 17 77 dc d0 15 e6 8a b6 20 a9 6a 84 36 cf 12 8a 99 be 48 68 8f 7a e8 2c a4 d2 7d e3 a5 11 3e f9 cb 7e 32 a6 4b 43 c4 53 f0 43 9c 1a 9a 26 a8 0f 6a 48 0d be bb 3b ce ef 3f 71 8c a7 7a c7 b5 da 9d 10 b6 2b d9 33 98 af b9 ff 3e 65 ba 5c d1 16 e4 86 f2 42 5f c3 28 d9 8e 63 f6 c9 d6 58 f7 a3 e2 14 00 d5 84 fa ca f6 20 ed f3 7c 05 21 a5 04 bf 46 de 85 27 0e a6 f9 93 5f 1e e7 73 cf 0d 92 cc 4b 1a 42 fa 94 8b 57 49 09 42 08 ea bc 1a 41 9f ce 73 3d 19 3e fc d8 11 be bc 75 98 f8 24 0f 43 da 96 bc 3c 64 d6 d4 ed 6c 3a 92 f6 a8 87 2b db 83 95 f6 94 83 28 d9 8e c3 c9 88 70 18 d5 f3 67 2c 4e e1 dd cb 42 6a 54 c8 cf 4f 5d a1 98 c5 d3 10 d0 f9 7f 47 33 7c fa e9 7e be bd 6b 94 8c e3 d2 10 d4 55 bc e0 34 38 5c fc 6c c0 23 88 86 74 86 b2 0e 7f f5 eb 41 3e fa 64 3f Data Ascii: ~w j6Hhz,}>~2KCSC&jH;?qz+3>e\B_(cX \|!F'_sKBWIBAs=>u$C<dl:+(pg,NBjTO]G3\|~kU48\l#tA>d?
2024-10-13 15:58:58 UTC	1264	IN	Data Raw: 9b 3b 43 7c 69 63 13 e7 35 7a 4b 9d 7a 12 15 5c f2 19 54 a0 49 72 d6 be 7b 96 89 00 aa 93 f0 06 94 02 b9 92 92 78 de e1 9c c3 5d db 87 b9 77 57 9c 8c ed 12 7d 13 06 b6 9c 0c 45 2f 62 d0 d0 b8 63 6d 8c 3b 2f 69 a8 ac 11 2d 81 37 50 8a e1 36 26 88 44 3e ad ef af 02 11 8a b8 18 f8 26 b0 8e 12 5d 24 61 ba fc 68 7f 9a af 6e 1f 66 f7 50 9e a8 57 c3 53 bb ca f5 35 87 4a e5 57 f7 65 4d a3 8f 3f bd a4 81 eb 56 84 2a a3 8f 5d d4 d2 f0 76 60 47 55 ae a3 8a 44 00 78 0b f0 05 e0 46 60 cc 47 ea 48 c9 d6 be 1c df d8 39 ca a3 dd 29 b2 8e 24 36 0b 3d 9c cf 44 c4 4d 95 a2 77 43 57 98 8f ad ab e3 d2 56 3f 7a b9 12 55 ac 73 f4 17 c0 ab d5 ba 8e 6a 13 01 60 29 f0 29 14 9b a3 a5 6f f4 a7 6d 1e e9 4e 71 df 9e 38 3b fa 73 f8 0d 8d 40 0d 7a 26 cf 35 04 2a da 38 67 bb 5c bc c8 cf Data Ascii: ;C\|ic5zKz\TIr{x]wW}E/bcm;/i-7P6&D>&]$ahnfPWS5JWeM?V]v`GUDxF`GH9)$6=DMwCWV?zUsj`))omNq8;s@z&58g\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49902	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	762	OUT	GET /static/img/icon-liwu-in.8826eb23.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:58 UTC	907	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: image/png Content-Length: 14883 Connection: close x-oss-request-id: 666D31D35ADBFC313574E36F ETag: "8826EB232B2BA2C08DC2C423991276BD" Last-Modified: Mon, 20 May 2024 05:15:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3008941944852271591 x-oss-storage-class: Standard Content-MD5: iCbrIysrosCNwsQjmRJ2vQ== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1369 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6EfXi8h2lqQ9g%2BK9wrEEE9hDP8W9qzmsEQ6Fg9zgPrttVsVv15vFVdKO0CKZl0lrsmlSb7egQt%2BoWFWo9j7P3g9MnlbXl2h8KDV2ypyZlc%2BX8bDLA9cxy4%2Byn1oZFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c20fe47ce4-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:58 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 76 00 00 00 82 08 06 00 00 00 93 a4 3c 1e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ed 7d 09 bc 24 55 79 ef ff 9c da ba 7a bd fb 36 0b 77 60 36 66 58 07 30 20 1a 07 44 08 51 54 54 14 0d 1a 63 34 e2 82 5b 4c 5c 9e 4f 06 8d 89 31 71 89 c6 84 45 c0 25 fe 12 e1 bd 48 62 9e ef bd 44 8d cf 05 25 32 ac 82 2c c3 ec db bd 33 77 e9 ad ba ba aa ce 39 ef f7 9d 53 75 a7 67 98 7d 2e e0 5c a7 7e bf 9e ee be 53 dd 5d 75 fe f5 7d df ff 5b 8b e1 c4 36 27 57 80 cd c9 b3 3a 71 52 38 01 ec 1c bd 08 7e 23 81 55 00 63 80 22 4c 3b 5f cf 25 8c 7f e3 80 55 80 fd b3 f9 70 4e 7f eb 4b 4f 99 da bc 7d 52 fc e0 fe c9 89 8d 10 ff 06 88 35 80 3c 1a 70 e9 e2 b8 01 60 d7 a7 17 4b 76 d1 1c cd 77 cd d6 67 7e Data Ascii: PNGIHDRv<sRGB IDATx^}$Uyz6w`6fX0 DQTTc4[L\O1qE%HbD%2,3w9Sug}.\~S]u}[6'W:qR8~#Uc"L;_%UpNKO}R5<p`Kvwg~
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 46 6b 32 c0 72 00 27 0f f8 65 c8 5c 71 5d 70 f7 da b7 3d f2 17 37 de 67 4f a2 75 0e 20 d7 02 bc 0e a8 b3 de f5 fc 79 d6 f2 a5 67 bb 8b 17 fe 8e e3 e7 cf e3 e5 c2 4a 44 d2 d3 ca 9b 59 80 65 9b 67 db 43 b8 73 fc 2b 5b ff e0 83 1f b5 73 a8 2f da 88 f0 70 80 98 ed 7d e6 3c b0 64 ff 36 8e c2 6b 04 a8 2c be e1 f7 ff 2c 37 d4 ff 56 08 d2 90 cc 48 ab 9d 03 72 65 c0 2b 9b d7 36 82 e6 7d f7 df f0 d8 27 bf 70 9b db 84 58 f4 e7 6f bd c8 5b 36 fa 21 a7 5c 5c 06 db a9 a0 2d 0c 80 dc 36 9f e7 4e fa 3a 7b 26 90 ad e6 96 0f fc e9 e5 ea e1 47 7f b9 70 33 aa fb 4a ff 6c 83 b8 bf ef 9b f3 c0 de 0b 38 85 12 ca 83 d7 5e fa ea ee e7 9f fe 77 10 d2 d2 0b c1 38 60 b9 80 57 02 72 5d 80 57 34 60 c7 0d 40 34 55 b4 71 c3 d7 d7 ad b9 e5 33 f3 df 7f cd d5 e5 0b cf fd ef 40 06 26 01 4a Data Ascii: Fk2r'e\q]p=7gOu ygJDYegCs+[s/p}<d6k,,7VHre+6}'pXo[6!\\-6N:{&Gp3Jl8^w8`Wr]W4`@4Uq3@&J
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 7f ea 0f 3f 6d 77 97 2e d0 24 cd 75 01 87 82 22 25 63 e3 c9 24 90 9d a7 0b 2a aa a7 52 1b 20 58 bf fe ab eb df fb 85 0f ef ce a3 7a d1 51 44 af 8e 7b 60 d5 55 ef ef 81 6a ac 43 ad d1 8d 58 00 9c 03 be 1b a1 e0 d7 e0 79 31 84 c8 cb 56 bb 22 9b 6d 08 d5 84 e8 8d 91 54 62 24 61 0b f1 64 4d 93 a9 f2 0b 4f 85 7f ca 80 91 c2 4c 5a 09 3c 62 d2 64 47 c3 18 82 24 7e b2 0a 45 2a 79 d5 72 b0 a0 05 84 6d 28 72 89 76 8f a3 ba 65 33 94 14 28 0d cd 43 61 70 10 51 98 6c 7a fc f3 77 7d 7c f4 8f 2e ff dd f2 ca 45 af 23 36 a5 c8 fe da 3a 36 0d e4 8b 60 f9 1e a0 d0 6b a2 5e a4 92 c9 be 6b 22 35 0d c5 a2 f6 d8 cd ff f8 aa e9 6f dd 73 cf f2 3a a6 8f 34 a1 70 fc 03 fb fa b7 bf 13 53 8d 2f a3 da 00 62 0a dc 2a c0 a5 e0 83 0b e4 5c 09 df 6d a8 82 5f 87 52 39 19 46 bd 1a e0 76 13 Data Ascii: ?mw.$u"%c$R XzQD{`UjCXy1V"mTb$adMOLZ<bdG$~Eyrm(rve3(CapQlzw}\|.E#6:6`k^k"5os:4pS/b*\m_R9Fv
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 35 ef 51 c4 8b a1 cb 7a 08 e4 e3 6f 53 bf ff 9e 17 63 b2 fa 3d 90 1f da a4 4c 8c 38 b0 7d 3d 92 d3 cb 00 a6 67 02 97 fc 4e 87 2b e9 da 75 e1 f2 a6 88 23 5f 06 ed 2e 41 ec b8 4d 2a 3a 84 28 27 10 8e 84 e5 da e8 7d db 9b e0 2c 3e c5 04 37 18 83 9a 9a 44 f3 cb 5f 82 a8 37 c0 c8 04 d8 0e 90 73 c0 88 a9 3b 0e 85 1d 75 a8 5a 31 06 5e c8 81 17 f3 b0 fc 1c 98 ef c2 ca b9 e0 ae 0b e6 d1 fb 4a ea ef 96 cc 05 43 a1 47 4a 2f 52 c2 82 58 b4 c5 11 d7 ea b7 3d f9 df 6e fe 93 d6 56 d4 89 3d 1f 9f c0 be f5 bd ff 8c 5d b5 2b b5 1a a6 40 01 05 26 68 31 75 d4 e8 48 90 3c c0 be a9 14 2b 02 38 55 d5 24 c9 ca b5 42 e1 b0 ba 04 6c d5 8e 4a b2 d9 b6 44 b1 ce e4 42 06 d9 8a 21 13 01 6f d5 99 b0 47 86 e1 b4 a6 c0 7e 79 1f 64 a3 a1 25 52 1f 1a 49 1b a9 7d 52 d5 74 d1 e4 3c b0 9c 0b Data Ascii: 5QzoSc=L8}=gN+u#_.AM*:('},>7D_7s;uZ1^JCGJ/RX=nV=]+@&h1uH<+8U$BlJDB!oG~yd%RI}Rt<
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 50 58 38 1f fe e0 10 2c 12 3a ad a6 29 45 47 89 f5 d4 6d da 9f 9a 26 c0 bb 39 70 d9 d0 01 a4 35 d5 ca 4f d6 81 fb 03 80 a7 dd b7 9d 8c 5a 47 b6 34 c8 b1 f2 ac ba b2 2d 25 85 f2 65 ab 95 13 41 c8 65 d2 84 ac 24 10 dd 12 92 27 10 0d 4a be 4b a0 c5 e1 f6 0f c0 3d a9 07 de 92 2e d8 fd 39 30 ca 5a 71 0b cd c7 36 fe 68 c3 e7 ef bc 3e 67 61 5d 75 1b c6 8e cb 00 45 f2 e6 2b de 88 7a eb eb 6a aa 09 59 0d a0 9a 91 01 35 92 50 89 24 6b 06 95 05 04 08 c8 ac d2 25 25 c5 04 ac 02 d7 20 13 9b f4 87 87 50 38 e9 24 38 be 0f 96 66 6f 66 ec 70 e6 13 67 12 4c cf cf 2b 02 0b a9 1d e4 00 9b c3 81 7f d9 0e 04 7b 99 de 94 5c 71 18 9f b8 23 b2 e5 d9 0a 39 b7 29 1d 3b 94 0c 96 6a c7 05 d9 0c 5c 19 51 49 4f 04 d9 27 20 4b 0c 42 27 fb db 90 93 6d c8 71 a9 fd 5c 77 b4 0f ce 99 c5 47 Data Ascii: PX8,:)EGm&9p5OZG4-%eAe$'JK=.90Zq6h>ga]uE+zjY5P$k%% P8$8fofpgL+{\q#9);j\QIO' KB'mq\wG
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: a7 2c 42 ae bb 0f 9c 52 88 01 25 20 28 95 98 ba 4c 69 db c8 b1 e2 ab 3f 9f 95 f4 a4 95 97 28 e6 81 ae 02 d0 db 75 13 bb f1 af ae 7d 56 80 55 d7 5f e5 22 df ee 8b 2b ee 2b ed d3 f2 2f c6 bc fc 59 cc 46 3f 38 6c 78 cc 42 ce 62 e0 4c a1 29 24 a6 23 a9 da 2a 00 63 93 4c b0 1d 62 22 99 56 77 d7 2e e7 9b 1b 2e db 15 80 6d 6b 18 1b 4b 0c 34 55 8d 07 63 a1 3a f3 a2 51 cd 5c 94 4e 90 0d ba 7b a9 ea 0e 17 88 a4 96 cd 2f 81 8d 94 b4 5a d6 99 9c 4e 95 4d 6f 2c 86 f6 93 93 88 c7 5a ba 42 42 bb 4c 85 3c 0a 27 2d 44 7e 64 d8 c4 a7 5b 14 3d 22 b7 2c 8d 6e 69 a2 37 8b 52 4c 52 5b f4 81 de 4a 8c 4a e9 7c 76 fb 17 ee 7b 46 81 25 f3 d4 fa fb ab 46 fc f9 de 79 49 89 5d 64 55 9c d5 ac 6c 2d 82 c3 8b 46 df 91 49 d4 34 50 db 4a fd a0 c5 a2 b2 10 9f 2b 58 a0 54 8d 92 13 91 83 0d Data Ascii: ,BR% (Li?(u}VU_"++/YF?8lxBbL)$#*cLb"Vw..mkK4Uc:Q\N{/ZNMo,ZBBL<'-D~d[=",ni7RLR[JJ\|v{F%FyI]dUl-FI4PJ+XT
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: f6 9e d7 54 7b ac 04 ac 52 1e 05 2a e9 e9 1f 82 45 61 7d 2a 06 20 80 b3 c0 87 36 6b a4 86 f3 40 77 e9 35 ec 1f 6f fc 9f 9d 07 38 2b c0 6e 58 b3 3a 37 30 c0 5e 2c 76 85 6b 78 8f 75 4e ee dc 7e 66 f5 e5 0c a8 21 55 96 71 6d b3 64 c2 d1 5a bf 13 8a 4f c1 3f b3 04 2b 67 01 4d 52 35 26 e9 0d 9e 07 38 b5 ed f7 03 8c 06 6b f5 02 3c ad c5 d5 0b 25 a0 82 f5 40 70 37 18 8a 40 e8 83 b5 a9 6c 53 01 dd 1e a0 5c c8 f5 2d b0 ff b1 13 f8 c1 2e b0 c0 54 c9 1f d1 46 f8 ad 1c 00 8a de de 1f eb 94 56 b2 6d f7 6d 05 88 a5 a7 98 67 97 c0 4c 95 ab 56 b9 06 71 0d a2 3e fe 3d 4c 79 4f 0a b1 23 7d 48 fb e8 d4 0c d3 6b a6 2c 05 56 70 91 1b 1a 82 df 33 0c 47 d1 6c 0d 12 16 d2 48 64 5f 6d 62 c3 1b 81 c2 0a 76 e7 e7 5b b3 0a 2c f9 f0 f5 9b 2f 5d c6 93 e4 5a b1 33 78 bd 73 72 7e 20 77 Data Ascii: T{REa} 6k@w5o8+nX:70^,vkxuN~f!UqmdZO?+gMR5&8k<%@p7@lS\-.TFVmmgLVq>=LyO#}Hk,Vp3GlHd_mbv[,/]Z3xsr~ w
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 2e 50 42 78 d6 22 06 77 55 d1 f0 1f 0a ee d3 8a 53 15 bc e2 10 35 9a a5 d4 80 3d 62 83 b9 74 35 2f 85 98 a4 16 fd cd 90 35 9a ea 4d 6d 81 59 3c 99 34 98 8b c2 ef bc 03 dc 2f 42 b6 1a 08 7f 7e 2b 9c 91 1c 78 85 9a 84 29 86 4c d5 f8 b6 69 7d a0 91 ef 76 05 50 a3 c6 7f a6 8a 79 f2 58 86 5c a8 ad 31 e4 df 4d 80 fd 70 1a bc 73 64 50 b6 42 74 11 2e ed 03 7a f2 07 5e 33 ba 80 7e 35 0e 4c 1b d2 74 f4 5b 27 c8 69 c5 87 4e 70 11 a8 44 9a 52 37 a6 e4 43 55 7c 9d 63 25 60 d1 9d ff b6 fd 89 af bf ea 70 7f f7 58 8e 50 ff 46 f0 97 e7 bf 4a 29 fe c7 88 71 3e 62 c9 ad 41 01 f7 79 79 b0 3c e5 21 d3 92 15 3d 50 cb 82 a4 41 1c cd 00 16 79 35 3e 90 8c 05 48 b6 07 90 51 a2 dd 23 ca ea 68 c0 7c 1b 3c e7 c3 1a be 18 56 cf c9 50 22 41 fb fe ff 0b 60 3d dc 45 15 bd cf cc c8 76 d2 Data Ascii: .PBx"wUS5=bt5/5MmY<4/B~+x)Li}vPyX\1MpsdPBt.z^3~5Lt['iNpDR7CU\|c%`pXPFJ)q>bAyy<!=PAy5>HQ#h\|<VP"A`=Ev
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: a2 10 ee 25 1c 9c 1a 99 a8 b9 8f f2 8a 04 2e 39 e2 4a 41 44 14 6e 24 17 c7 82 08 12 24 bb 5b 48 26 02 48 4a 94 33 17 b9 f3 2e 81 bb ec 1c 5d f7 34 b3 89 09 03 b0 dc 99 fe 89 ae 7e f2 67 7d e8 a4 7e 6d a7 21 39 64 b3 69 30 61 b0 c1 cc 31 26 89 a0 8b e8 21 01 f9 17 6d f0 6a 02 76 f6 b0 51 83 3a a4 9d 46 c9 3a 4c 81 fe db 7d e9 85 71 f8 a9 84 43 08 57 87 b4 6a 6f c1 4c 64 d5 2e 0e d9 7b aa 36 ec 31 f6 15 e5 fc 75 ec 63 b7 fe ed 91 4a 2b ed 3f 2b c0 d2 a1 36 be fe d2 e5 cc 73 af e5 36 bf 4a 4e 87 c3 ea 89 69 60 a2 01 ef 77 63 d8 2b 18 58 9b 1b 7b 9b 4e 58 a1 98 28 35 29 53 70 54 fb a5 94 af 8d 85 19 14 32 d1 42 b2 2b 80 98 6e 83 17 7a e0 3f ef 25 70 16 ad ec 38 3f aa b4 d8 01 c4 0f 00 aa 0a 25 2d a8 38 07 b4 a8 a4 64 0c 9c a6 97 e5 e9 5e 92 34 d9 ea 31 33 cd Data Ascii: %.9JADn$$[H&HJ3.]4~g}~m!9di0a1&!mjvQ:F:L}qCWjoLd.{61ucJ+?+6s6JNi`wc+X{NX(5)SpT2B+nz?%p8?%-8d^413
2024-10-13 15:58:58 UTC	1369	IN	Data Raw: 0b a5 10 6f 41 18 5f 81 56 e8 cb 6d 21 e8 56 2a bc d4 80 bd 3c 84 b5 94 6e a2 6c 9b 78 b2 76 7d 0c 80 ba 5e 48 df 71 db dc 59 59 df 41 92 22 58 fa c2 4f 03 ce 54 7b 43 8b 45 7a 9c 42 8a 85 25 0a 95 93 14 a2 a7 38 a6 ef 49 47 d2 51 0c 99 54 70 0c cc 93 c0 94 bd 29 fc f0 c0 2d ee ea f3 9b fc a4 fc 1b 10 cb 55 88 85 b5 07 34 52 df 6d e0 a9 5d a6 ed 51 cf 41 a6 67 ba 17 0e 3d f6 01 39 eb cf d5 ad 28 1d fd 97 19 d0 fa 2a ef 48 1c 64 33 9e b2 2c 4e 47 32 1d 94 73 25 89 2d f9 67 b0 0f df fc f0 af 2d b0 19 99 0a 62 ff 12 26 e5 07 11 c9 df 42 d0 f6 41 41 88 71 d2 c1 4d b8 cb da 70 4f 8f c1 a8 46 89 fe d4 36 01 0c 63 ae 3a 67 f7 3a 60 54 53 4b f6 57 d7 37 11 e8 34 d9 85 76 24 17 c9 37 77 9b 42 1d b2 f1 18 98 a8 83 31 72 65 72 d0 c3 37 16 92 b4 ca 96 f8 6a fe fb f1 Data Ascii: oA_Vm!V<nlxv}^HqYYA"XOT{CEzB%8IGQTp)-U4Rm]QAg=9(Hd3,NG2s%-g-b&BAAqMpOF6c:g:`TSKW74v$7wB1rer7j

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49876	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: cbabfe0b-601e-00ab-0220-1c66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155858Z-17db6f7c8cfcrfgzd01a8emnyg00000002qg000000002b50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49879	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 1a8c6729-d01e-0014-7547-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155858Z-17db6f7c8cf6f7vv3recfp4a6w000000025g000000007rvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49885	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7a29fcb1-e01e-0003-091e-1c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155858Z-17db6f7c8cfp6mfve0htepzbps00000004h0000000006umz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49886	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c0284108-301e-005d-6416-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155858Z-17db6f7c8cffhvbz3mt0ydz7x4000000038g00000000bm37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49905	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	754	OUT	GET /static/img/logo.95e0c48a.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	903	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 314320 Connection: close x-oss-request-id: 666D31AD22435B35367C1387 ETag: "95E0C48A5B2B60D2CC1638B9F64B7ADF" Last-Modified: Mon, 20 May 2024 05:15:49 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 951223057047120554 x-oss-storage-class: Standard Content-MD5: leDEilsrYNLMFji59kt63w== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2135 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YmO3gXoWFaIdYgbgPAowCKZdBkiwEGr5RnzOI6s5FuvUaXCR8u%2BbxLiDWiGP67fsPuTfq9HjOhWAA8nCN47gTfu6dslExX1iiziA4EvkpVnBI7%2F0169ZKx4lXVhzsA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c2bf3e0f3f-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 29 00 00 04 29 08 06 00 00 00 ec f6 57 67 00 04 cb 97 49 44 41 54 78 9c ec 9d 07 b8 5c 75 9d fe ff 54 69 8a b8 60 2f eb ea ba 76 f0 b1 ac ab 6b 7d 74 d7 f6 28 b8 e0 ca 22 4d 51 40 8a 74 c1 2c 3d 10 3a 28 45 90 2e 48 95 de a4 44 22 21 84 16 6a 0c 25 e4 1f 3a 09 48 30 62 20 e5 ce f9 ed fb f9 cd f9 4d ce 9d cc cc 9d 7a e7 e6 de f7 f3 3c af 31 37 97 e4 de 99 b9 73 ce 79 cf fb 7d bf ff cf 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 63 88 10 c2 0a 75 b4 a2 b4 52 95 56 96 56 91 56 95 5e 23 ad 26 ad 9e 6b 0d 69 4d 69 2d e9 b5 d2 eb a4 b5 a5 d7 e7 5a 47 fa 07 69 dd 5c eb 49 6f ac d2 9b a4 37 d7 d0 5b aa f4 d6 82 de 56 a5 b7 d7 51 f1 73 8a ff 7d f5 df 5d eb df e7 eb aa fe 5a f9 fa d3 f7 c2 f7 c5 f7 97 be 57 be Data Ascii: PNGIHDR))WgIDATx\uTi`/vk}t("MQ@t,=:(E.HD"!j%:H0b Mz<17sy}c1c1c1cuRVVV^#&kiMi-ZGi\Io7[VQs}]ZW
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 63 cd e3 ce e3 5f eb 79 e1 f9 b2 51 61 8c 31 c6 18 63 8c 31 66 f9 21 bf eb 9e d2 0f dc b1 e7 02 37 a5 1d b8 c3 cf 85 30 17 c6 c9 78 a8 16 46 c4 bf 48 1f cc c5 c5 f5 27 f2 0b ee 2f 49 ff 99 9b 10 df cd 2f d0 b7 ce cd 87 5d f2 8b 7a 2e f6 31 02 30 0e 30 0a 4e 92 ce 92 ce 93 2e 96 ae 90 ae 95 6e 28 e8 66 69 8a 74 5b ae db a5 bb a4 69 05 dd 27 3d 28 cd 90 1e 91 1e cd 35 53 9a 2d 3d 29 3d 23 3d 57 10 1f 7b ac f0 b9 fc 77 fc f7 fc 3d fc 7d c5 bf 9f 7f 8f 7f 37 7d 0d 7c 3d 7c 5d c5 af 93 af 9b af 9f ef 83 ef e7 cc fc fb e3 fb c4 0c 39 38 ff fe 79 1c 78 3c 30 33 30 68 78 9c 78 bc 30 31 fe 43 fa 62 fe 78 f2 b8 7e b8 f0 58 f3 b8 f3 f8 d7 7a 5e 48 75 f0 bc f1 fc f1 3c f2 7c a6 74 06 cf 33 cf 77 4c 61 f4 fb 35 68 8c 31 c6 18 63 8c 31 66 8c 93 9b 13 5c a8 32 66 c0 f8 Data Ascii: c_yQa1c1f!70xFH'/I/]z.100N.n(fit[i'=(5S-=)=#=W{w=}7}\|=\|]98yx<030hxx01Cbx~Xz^Hu<\|t3wLa5h1c1f\2f
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 0e f5 0c 89 0d 23 94 74 32 b2 84 69 f1 9f 12 3f 1f 1b 48 6c 17 29 f6 5c 90 34 62 5d 2e 2b 53 ab 93 17 4e 5d 18 63 8c 31 c6 18 63 c6 2e b9 39 c1 5d de 54 68 b9 b6 f4 2e 89 64 04 9d 11 df ca 2f ba b6 95 f6 94 26 48 27 4a 27 4b a4 23 e8 8e 20 1d 71 99 74 bd 44 87 04 c6 04 6b 3f e9 02 e0 82 8e bb d5 74 05 18 b3 bc 43 f7 c9 7c 89 b4 0f 23 49 a4 7f 30 2c 48 5e fc 51 22 21 84 71 41 6a 88 9f 0f 36 d0 f0 f3 c2 08 09 46 06 26 de 1e d2 8f a5 ef 49 24 8f 58 93 4a 71 2c a9 a4 d5 25 77 5e 18 63 8c 31 c6 18 63 c6 26 ba 20 e2 ce 2d 77 71 49 4d d0 27 41 4c 9d 3b c0 94 59 72 57 18 53 02 23 82 79 7d 8a 07 5f e8 e1 05 a0 31 a3 1d 56 a6 62 6a 30 42 82 89 c1 c6 91 ad 25 4a 3a 49 5c a4 d5 a8 4e 53 18 63 8c 31 c6 18 63 46 17 79 4a 82 d1 0d 0c 08 22 e6 94 fd 11 3f a7 3b 82 38 7a Data Ascii: #t2i?Hl)\4b].+SN]c1c.9]Th.d/&H'J'K# qtDk?tC\|#I0,H^Q"!qAj6F&I$XJq,%w^c1c& -wqIM'AL;YrWS#y}_1Vbj0B%J:I\NSc1cFyJ"?;8z
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: c4 ba 53 52 16 bf 96 30 2d 8a 5d 16 24 c6 e8 d9 a1 8c 93 22 4e 4a 81 49 5a 30 fa e6 b1 10 63 8c 31 c6 18 63 7a 81 4e b6 49 4a d0 2b f1 99 fc c4 7c 07 89 15 7f 27 e7 27 f0 8c 6e 70 f7 f1 49 69 ae 44 d1 25 e5 75 a4 26 b8 4b 89 41 e1 94 84 31 66 a4 93 46 42 48 58 90 ae c0 b0 c0 64 25 61 41 77 0e eb 8e 49 86 dd 24 51 c2 89 31 bb 9b b4 99 f4 15 e9 c3 12 23 21 f4 58 ac d8 ef f7 6e 63 8c 31 c6 18 63 96 4b 0a bd 12 a4 25 18 db 60 f6 9a a6 fb 4f 49 9f 97 be 2d 6d 23 b1 1a f4 b8 fc e4 9c 19 ee a9 12 73 dd 98 12 c9 8c 30 c6 98 d1 0c e6 2b 86 ec 7d 12 89 b1 8b 24 52 16 e3 a5 b4 ea f4 6b 12 5d 16 1f 93 18 11 79 97 14 c7 44 24 92 69 4e 59 18 63 8c 31 c6 18 53 8b 7c 2b 07 cd f5 b4 d9 bf 4f fa 82 44 cb 3d 27 db f4 4a b0 ae 8f 93 70 56 f8 71 52 fe 90 c4 08 07 77 14 9f 97 Data Ascii: SR0-]$"NJIZ0c1czNIJ+\|''npIiD%u&KA1fFBHXd%aAwI$Q1#!Xnc1cK%`OI-m#s0+}$Rk]yD$iNYc1S\|+OD='JpVqRw
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: f7 cb 38 07 25 98 dc a9 62 43 c7 86 d2 0e 12 e6 04 27 8b c4 72 89 e9 72 d7 cb 18 63 8c e9 15 8c 0a b2 aa 1a d3 82 12 66 b6 83 6c 2f 7d 4b e2 f8 44 d2 6f 0d 89 de 8a 55 24 46 12 dd 5d 61 8c 31 c6 18 33 1a c8 4f f4 28 2b fb ac 44 6a 82 98 2d 71 db b3 a4 cb a5 89 12 5d 13 34 b4 d3 33 c1 5c b1 31 c6 18 d3 2b 48 57 2c 94 18 25 64 7d f5 9f 24 cc 8a d3 a5 03 25 b6 83 b0 e6 9a 75 d7 a4 fe de 28 71 2c 5b a9 df c7 54 63 8c 31 c6 18 d3 21 3a a9 63 b4 e3 eb 12 9b 39 4e 93 88 da 52 7e c9 49 a2 31 c6 18 33 52 20 61 c1 88 21 c9 3e 46 0f 0f 90 e8 49 fa 88 b4 9e f4 9a 7e 1f 53 8d 31 c6 18 63 4c 93 e8 e4 8d 32 cc 35 25 4a 30 3f 29 fd 87 c4 9d 28 e6 7d 69 55 67 43 c7 54 09 83 e2 2f 92 4b 30 8d 31 c6 8c 24 30 cf ff 2a 61 54 90 f0 bb 4e c2 5c c7 ac 20 5d c1 98 22 dd 15 1f 90 Data Ascii: 8%bC'rrcfl/}KDoU$F]a13O(+Dj-q]43\1+HW,%d}$%u(q,[Tc1!:c9NR~I13R a!>FI~S1cL25%J0?)(}iUgCT/K01$0*aTN\ ]"
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: c4 18 63 8c 31 63 18 9d 8c 90 9c 60 85 28 1b 3b 5e 23 bd 41 62 95 e8 97 24 0a 31 2f 93 1e 90 16 0c e7 99 94 31 c6 18 63 7a 0a e5 d6 18 16 57 49 07 48 df 96 18 01 e1 3c 80 2e 2a ce 0b 38 3f 70 b2 c2 18 63 8c 31 c3 87 4e 3e 18 eb a0 3c eb 43 12 9d 13 5b 4b e3 25 d6 88 fe 49 a2 78 eb 79 c9 a5 98 c6 18 63 cc e8 81 f5 e0 2f 48 33 a5 5b 25 12 93 24 2b b6 93 be 2e 51 94 cd f9 c1 ea fd 3e 57 31 c6 18 63 cc 18 42 27 1f 6c ed 78 af 44 89 16 9d 13 98 13 33 86 fd 54 c9 18 63 8c 31 fd 66 b6 74 b5 44 67 05 e7 05 9c 1f bc be df e7 2a c6 18 63 8c 19 a5 e8 44 83 d8 e6 9a 12 33 a7 9f 90 36 92 b8 63 c2 1e 75 56 89 12 f9 64 63 c7 9c 61 3f 2d 32 66 39 22 cb 24 75 e7 97 06 b2 50 5a 22 2d 2a 2d ab 85 03 21 7b 65 a1 06 a5 94 a8 4e 9a ff 72 08 f3 fe aa 7b 97 2f 86 30 57 01 a5 e7 Data Ascii: c1c`(;^#Ab$1/1czWIH<.8?pc1N><C[K%Ixyc/H3[%$+.Q>W1cB'lxD3Tc1ftDgcD36cuVdca?-2f9"$uPZ"-*-!{eNr{/0W
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 32 0d b6 d9 a9 2c fe 7f ab e2 bf fb f1 8e f5 b5 4d 92 3e ef 27 3b c8 d4 d0 84 d9 b6 d2 4f 7e 2a f3 44 1f c3 ac d8 4b 26 4a b5 f6 db af 6c 56 1c aa c7 a2 a8 c3 0e d3 63 a6 d1 15 12 18 98 39 d5 a3 24 3c c6 a4 31 f4 f8 a7 51 92 ec 4a f5 ff 5d fb 87 b2 61 74 8b 12 eb 77 ca 40 52 2f 46 e9 81 72 ea 22 8e de 14 9e e7 8a 78 fe 63 07 86 5e 17 bc 3e 8a af 17 5e 3f a4 69 f4 7a ca e8 ba a0 9f c4 5e 87 19 5b 70 1e c1 f9 04 e7 15 9b 4a ac 2c 67 13 c8 7a d2 1a fd 3e 07 32 c6 18 63 cc 08 44 27 09 6f 93 30 27 36 93 74 76 1f 2e 92 e8 9e 60 6b 07 eb 44 8d 19 5b 0c c8 a0 a0 58 f1 45 8d 59 73 01 5a 2c a6 9c ae ae 03 15 4c c6 42 48 12 10 d7 4d 0a d9 d5 ba b0 bd 52 17 ba b9 b2 f3 ae 0e a5 53 65 42 9c 76 69 34 20 e2 5d 7e 2e 96 0f 39 be 3c 7e 71 d0 31 ba b8 3e 26 64 7b eb d7 71 Data Ascii: 2,M>';O~*DK&JlVc9$<1QJ]atw@R/Fr"xc^>^?iz^[pJ,gz>2cD'o0'6tv.`kD[XEYsZ,LBHMRSeBvi4 ]~.9<~q1>&d{q
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: ac b4 58 5a a4 2d 0b ba 60 a3 2f 82 f8 7c 5c df f9 90 ca 2a 55 6e 18 ee d6 ca 4e 95 54 66 b7 6b 65 a7 ee 50 97 6e b8 23 64 d7 dd 52 1e d1 50 31 62 38 fb 12 f5 43 9c 1f 4a c7 69 54 63 82 d6 57 1e ae ce 01 7a 22 48 46 a8 03 82 54 44 b6 83 7e dd 4e b1 7e 12 10 18 14 3f c4 a4 50 ec 7f 90 49 51 54 b5 49 21 25 63 21 1a 10 b9 a1 31 c8 98 a8 32 29 ea 25 2b d2 7f 3f 1c 26 45 25 51 51 48 56 74 62 52 54 12 15 d5 ea 81 49 51 e9 b1 a8 95 ac 68 c1 a4 a8 99 bc a8 36 2b a4 9d f5 ef 60 50 90 b0 48 26 c5 4f 65 60 60 62 54 2b 7d 6e 12 69 8c 71 7a 4d a5 34 46 ea c2 60 8c e4 78 19 17 a7 c8 b8 20 c1 23 d3 22 bb 5a 89 0b 6d 25 c9 26 de 5c 36 2f 78 5d 33 3e a2 d7 79 b8 5f db 48 e8 bf 98 a5 e4 85 ca 5b e3 98 92 7e 2e e2 cf 47 12 6b 53 6d 52 98 91 0b e7 1d 9a 79 0a 6a 1f 0e 7a 71 Data Ascii: XZ-`/\|\*UnNTfkePn#dRP1b8CJiTcWz"HFTD~N~?PIQTI!%c!12)%+?&E%QQHVtbRTIQh6+`PH&Oe``bT+}niqzM4F`x #"Zm%&\6/x]3>y_H[~.GkSmRyjzq
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 49 89 62 4c 0c 0a 2f b1 33 3d a7 92 92 a0 e4 92 8d 04 5c ec 50 ec a7 8b a0 d8 21 71 d7 a3 d1 94 a0 d4 92 ed 1a d9 69 57 85 d2 31 2a b4 54 91 65 d8 ff 64 6d 42 f8 55 c8 f6 d6 c8 c6 6e 52 9e 9a 08 3f ce d3 12 4a 47 54 0c 89 5a 26 45 33 aa 1e e3 68 64 52 0c a5 86 26 45 ad de 8a 5a 7f de 25 93 62 99 64 45 af 7a 2c 86 b1 bf a2 ad 55 a6 bd ea af a8 95 b6 a8 da 08 d2 b6 49 51 ad 34 02 92 1b 13 28 1a 17 35 3e be 8c f2 d4 45 31 65 b1 bf 5e 73 e3 65 ee 1d a2 94 d1 04 75 5d 1c ae 0d 23 bf 3a ba dc 71 71 a6 0a 64 59 8f 4a bf c5 24 dd b4 be eb ee 38 5a 15 b7 8b b0 11 87 cd 38 2a e5 1c 78 45 ab 50 55 c6 e9 b4 85 19 26 52 57 85 1c ee 58 ac c9 ca 52 15 0f 85 d3 24 bd a8 c3 e7 24 12 a3 6b f4 fb 1c cc 18 63 8c 31 42 07 65 d6 72 b1 9e 6b 1d e9 1d d2 47 a4 af 4a 3a 43 8d 07 Data Ascii: IbL/3=\P!qiW1TedmBUnR?JGTZ&E3hdR&EZ%bdEz,UIQ4(5>E1e^seu]#:qqdYJ$8Z8xEPU&RWXR$$kc1BerkGJ:C
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 32 2e 52 67 fd 69 5b 63 22 75 52 17 1d 15 70 d6 50 2f 0b 38 2b e9 8a 42 01 67 db ab 4d eb a4 2e ba 36 1a 52 4c 5a b4 52 b8 39 44 8f 45 5b 65 9b 0d 7a 2c 1a 9a 14 4d a4 2c 2a 26 45 0d 31 26 b2 0b 1d 17 12 06 06 eb 50 f7 62 54 44 bd 16 6c 12 c9 7b 2d c2 a5 ba b1 ad 4e 8b b8 3d 24 ad 3b a5 cb 82 11 31 63 7a c7 53 d2 6f 25 ce 93 3e d9 ef f3 36 63 8c 31 66 d4 a1 03 ec 0a 12 e9 89 37 48 ac db fa b6 a4 2b a5 a0 c5 f7 41 b7 a9 e2 1e 71 63 da 87 a2 bb bc 57 22 ae 05 65 25 e8 23 8f 97 0d 89 3b 66 84 25 7f bc 3f 94 ae 98 1a 4a e7 e4 1b 38 28 ba 3c 52 e6 84 ba 25 b2 71 27 86 6c 97 63 cb 06 c5 96 87 86 6c d3 03 96 9a 11 45 53 a2 fa f7 9d 9a 14 69 04 a4 98 b8 18 d4 5d 51 95 b0 e8 aa 81 d1 8d 42 ce 5a eb 4f 3b 5d 77 da e4 68 48 37 d6 9b 56 ab 23 f3 a2 98 b0 a8 de 14 52 Data Ascii: 2.Rgi[c"uRpP/8+BgM.6RLZR9DE[ez,M,*&E1&PbTDl{-N=$;1czSo%>6c1f7H+AqcW"e%#;f%?J8(<R%q'lclESi]QBZO;]whH7V#R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49907	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:58 UTC	759	OUT	GET /static/img/logo_text.16117719.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	913	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 26445 Connection: close x-oss-request-id: 666D3251E702E239306432CF ETag: "16117719842894CC3CB832508DDFD082" Last-Modified: Mon, 20 May 2024 05:15:50 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2602966112837872306 x-oss-storage-class: Standard Content-MD5: FhF3GYQolMw8uDJQjd/Qgg== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5332 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BXLfAE1XMgpMeSQeXSw30WDgVxpgXm0E99R6AHD5ClE7s2qI%2BzK%2B11m3OXNd7mQfa%2FT9Yoxmi%2B%2BtO0GG9Ekp%2FjKJ06xfSeND9zjXqSngjHgnWCIQWsivDOBXu1JqRw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c30afb43b3-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	456	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 01 90 08 06 00 00 00 f1 cd cd a7 00 00 67 14 49 44 41 54 78 9c ec dd 09 98 5c 55 9d f7 71 50 14 90 1d 65 17 05 8d 20 36 e9 ee 5b b7 92 18 99 19 a2 a2 28 e2 a8 8c b8 20 8e b8 b3 b8 8d fb 86 71 7c 75 70 40 91 e5 19 9c 8c 62 7c 63 92 ae ba 55 dd 21 61 0c 44 94 00 2a 83 2c 82 20 b2 04 06 91 2d 64 eb ba f7 56 77 f6 d4 fb 3f d5 cd 4c ec 37 69 ba aa 4f d5 ff dc 53 df cf f3 fc 1e 7c 66 d0 be f5 af 73 aa 6e 9d 7b 96 5d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRgIDATx\UqPe 6[( q\|up@b\|cU!aD*, -dVw?L7iOS\|fsn{]
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 9c ae ba 97 dc 74 df ae 7d a3 49 c8 f8 49 2f d7 ee 2b 40 27 88 ba 6a 7b 97 c2 74 b9 7e 9f 27 9d 97 f4 ee 85 61 f2 22 ed 3e d0 b8 da ae c5 5c f2 13 fd fa d9 4e 25 93 fb 31 02 00 00 60 27 16 f5 0e ee 2f fb bc 3c a0 7f a3 49 c8 38 09 e3 6f 68 f7 15 a0 13 98 53 e1 a5 cf dd a7 de e7 49 27 e6 c6 a5 53 6a bb 6b f7 81 46 99 6b 96 19 80 d7 3a 50 3f 9b d9 10 e5 e3 e9 da b5 05 00 00 80 45 fd c1 e0 4b a3 30 7d cc 81 9b 4d 42 76 9a 72 2e 3d 4f bb af 00 9d 40 4e db 7e 95 3c 14 5a a9 dd e7 49 e7 a5 18 c4 91 59 82 ae dd 07 1a 35 d7 3c 48 cd c5 bf d7 ae 9f e5 dc 5f ee 8d 5f a1 5d 5b 00 00 00 58 54 e8 8d a7 c9 8d de a0 03 37 9b 84 ec 34 32 bb e2 4c ed be 02 74 82 72 38 3c 43 fa 5c 55 bb cf 93 ce 4b 31 8c 7f a8 dd fe 9b d1 37 6d ed 91 66 ff 42 ed fa 59 4e ff e2 19 d5 43 b4 Data Ascii: t}II/+@'j{t~'a">\N%1`'/<I8ohSI'SjkFk:P?EK0}MBvr.=O@N~<ZIY5<H__][XT742Ltr8<C\UK17mfBYNC
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 35 df 53 cc c5 df 94 a7 f5 17 c8 6b ff b5 64 bd 03 ef 41 2b c2 8f 11 a0 c5 e6 75 af dc 4b 3e 53 ae 70 a0 bf b7 2a f7 c9 6c ad 42 14 a4 ff 5c 0c e2 4c 7d 3f 94 82 f4 eb e6 b3 be 14 24 3f 95 d7 e1 e5 c1 5d e6 81 a4 76 1f 68 d4 d2 29 2b 76 97 ef df ef cb f5 9b 41 33 f5 1a 5a ca a6 42 10 bf 59 bb b6 00 00 00 b0 68 e4 04 e0 f4 0e 07 6e 36 6d 65 4b 29 17 7f 26 ea aa ed ad 5d 5b 0d 51 cf f0 11 f2 e3 f6 db 0e bc 0f b6 b3 ad c4 8f 11 a0 e5 fa 82 a1 c3 a5 bf dd e4 40 9f 6f 45 ee 2b e6 d6 1c a7 5d 63 1b 64 00 f3 55 f2 59 ff 7b 07 6a 6a 35 c5 30 f9 bc 76 6d 1b b5 74 46 6d 5f b9 f6 c5 da b5 b3 9c a4 1c 54 f2 da b5 05 00 00 80 45 85 5c 7a 9c fc 88 78 d4 81 9b 4d 3b 09 92 b5 66 03 7b ed ba 6a 89 c2 75 fb 15 73 e9 37 d5 df 07 fb 59 31 10 54 7b b4 eb 0b f8 ae 2f 3f 18 48 Data Ascii: 5SkdA+uK>Sp*lB\L}?$?]vh)+vA3ZBYhn6meK)&][Q@oE+]cdUY{jj50vmtFm_TE\zxM;f{jus7Y1T{/?H
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 29 75 b8 5f fd 7d 68 c1 8f 11 69 b1 bb 6a d7 f7 d9 14 f2 eb 8e 97 d9 8a 97 cb 35 ff 49 f2 90 fc e7 7b 89 87 91 e5 a4 f2 fe de 2d ff f9 57 66 a9 5c 29 37 74 ea 9c b0 f6 3c ed f6 37 59 51 d7 2a 39 14 2a 5d a6 dd df 6d 47 66 34 6e 95 d9 e1 1f d6 ae af 2d b3 cd a1 13 b9 e4 df b5 eb da 82 dc db 1f 0e 1d a6 5d df 46 98 53 b3 4b b9 b8 e8 40 ed 5a 91 cd 92 a7 24 e6 fb 4c e2 c0 67 6f 16 13 24 8f 49 fd 56 c8 01 75 9f 5f 12 d6 5e a0 dd 66 77 64 59 77 6d 2f 73 ff cc 7b dd a9 49 ee ab 9f 2a 6f 56 51 e5 d2 4b fa 82 21 d5 2d 77 64 5f d5 57 c9 f5 98 83 95 56 c8 f5 98 6d aa 32 7a 3f 2d d7 1f 24 2b cd 0a 84 62 ae 7a b2 66 4d 0b 61 e5 e5 51 10 5f 21 d7 74 a3 d4 f6 81 ec f5 73 69 a3 f5 76 90 ac 92 6c 90 df 85 bf 8d c2 f4 1c f3 1d 6c bb 56 51 38 fc 12 f9 1b 17 ca ff fe 9d f2 Data Ascii: )u_}hij5I{-Wf\)7t<7YQ9]mGf4n-]FSK@Z$Lgo$IVu_^fwdYwm/s{I*oVQK!-wd_WVm2z?-$+bzfMaQ_!tsivllVQ8
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: fd d7 6d 31 b2 14 3c 9e d2 8e fa 8d ce 88 36 a7 df 6b bf 66 e2 78 ea db 25 e4 e2 cf b4 a3 5d 5a 25 3f f6 3e a9 5d 3c bb 89 0b da 35 45 e7 92 3d 74 de 2b ed d0 bb fd 17 c9 a4 b3 46 66 7e fc 83 76 fb 9c 08 f9 0c bd dc 81 7a d9 ce fd 2e ee bb 05 3f c8 0c c6 6f 3a d0 c6 89 fb d9 22 3f 16 4e d3 6e af 3b c2 89 97 64 bb 98 7b d8 b3 b4 db e4 58 66 1b 20 99 99 98 e5 59 80 b7 2e ea 1d dc bf d5 75 aa ef f9 e7 db b2 df 5c 32 10 85 b5 fd 5a 5d bb 67 14 c3 f4 b5 7e ad 8e 24 2d cc 3a 19 6c ff fb 76 b5 4d 6b e4 a2 2f 70 a0 78 f6 22 c7 81 6b d7 14 9d c9 cc 3c 95 2f 8c af a9 f7 01 e2 6a 16 b9 3e 3b d9 2c b5 91 eb ec 77 a0 56 b6 73 f5 9c f0 89 17 68 d7 17 7e 92 f6 35 d7 81 36 4e dc cf fa be de c1 59 da ed 75 ac d9 f5 7b 97 64 91 03 f5 21 4e 24 1e 2a e5 53 e7 da a9 f4 9d a3 Data Ascii: m1<6kfx%]Z%?>]<5E=t+Ff~vz.?o:"?Nn;d{Xf Y.u\2Z]g~$-:lvMk/px"k</j>;,wVsh~56NYu{d!N$*S
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 4d c5 ec 13 66 63 2f e2 b2 39 09 39 4c 56 6a bf 1e 1b 31 b3 a7 cc c4 09 33 b8 6b a1 89 58 23 33 2b bf ad 5d 1b 92 99 ac 2a f4 24 c7 68 b7 d9 86 2c 09 6b 2f 90 0b cf ec 87 e9 0e 22 eb f5 d3 77 6b d7 15 9d 69 f6 2e b3 9f 23 5f 64 57 39 d0 0f 88 fb d9 52 0c d3 f3 5d db 64 bb 2f 3f 18 c8 4d 6a ec 40 7d 6c e6 41 f6 85 45 ab 44 3d c3 47 48 9f 79 c4 81 76 4e dc cf cd 8b 7a 6b fb 6b b7 d9 ed 99 ef 20 39 3c af e8 40 6d 88 3b b9 26 ea 59 73 84 76 db 1c 4b 06 65 a6 c8 6f bc bf 38 50 9f e6 12 24 1f 9e 6c 0d 64 c0 ec 54 f9 df f2 65 bf ce f5 f2 d9 f3 71 d7 ee 83 0d 69 67 57 38 50 1f 92 8d fc 7a 60 7a f2 42 ed 36 db 10 b3 57 9e 5c b8 47 4f ae d3 f5 cc f4 80 96 d1 01 f5 5f eb f7 03 92 85 c8 8d dc 7f cc 9d 55 db 43 bb dd 6e 4f 06 25 5f 2b 37 64 66 76 a2 7a 7d 2c 9e 0c 3f Data Ascii: Mfc/99LVj13kX#3+]*$h,k/"wki.#_dW9R]d/?Mj@}lAED=GHyvNzkk 9<@m;&YsvKeo8P$ldTeqigW8Pz`zB6W\GO_UCnO%_+7dfvz},?
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 39 37 5b 6b 74 cf fa cc 3e a0 9c e8 c3 48 b3 ff a2 bc 07 1e 0c fe 25 eb 5d db f3 74 22 a2 ae da de b2 3a f2 37 0e d4 8f 64 20 b2 bc fd 22 ed 36 db b0 28 57 79 9d 5c 7c 66 3f 4c 77 90 4d b2 04 f8 fd da 75 45 67 92 3d 23 ba a5 0d ae 72 a0 1f b4 22 1b e4 86 e4 57 f2 cf b9 a5 30 fe 61 b1 0d 31 7f 67 74 8b 82 25 92 2c 2f fb d8 71 c2 e4 8f 8b 67 38 77 02 f0 05 ea 75 b1 1c f9 81 7b 6b 21 8c cf 95 9b ef 0f 95 c2 e4 23 f2 64 fd e3 e5 20 3d 9b b8 11 f9 5c f9 98 bc 47 67 96 83 a1 bc 76 fb 6f 46 31 97 9e a7 dd c6 5b 18 59 21 12 cf 93 be f3 a3 76 7c e6 cb df 9b 23 7d f4 ff ca 3f af f1 72 03 f6 30 f9 79 14 ae db 4f bb cd 3e 63 91 ec 47 66 de 5f f5 ba b4 26 4f cb 0f b3 9f 99 7b 88 96 de a7 e4 d2 f9 51 98 fe c2 9c 04 e9 c0 6b b6 94 f4 72 17 67 b4 c8 b5 99 43 f6 1c a8 4f Data Ascii: 97[kt>H%]t":7d "6(Wy\\|f?LwMuEg=#r"W0a1gt%,/qg8wu{k!#d =\GgvoF1[Y!v\|#}?r0yO>cGf_&O{QkrgCO
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: a6 5f 33 07 d4 98 27 7e da ef d1 44 8d 2e 05 1b d0 ee 03 ad e9 57 15 d5 7e 15 75 c5 07 ca 75 dc a7 5d 07 db 91 3e ff 41 cd ba 8e d5 27 07 28 c9 75 c5 da 75 21 9d 9a f4 72 ed 3e d0 a8 72 38 3c 43 ae 3d f3 fb 36 ed 20 37 9a 07 2f 5a 75 8d f2 c3 d3 e5 1a ee 76 a0 0e 56 6b aa 71 a0 ca ce 98 65 9e 72 4d f7 3b 50 17 db b9 49 06 af f7 6c 67 2d cd 7e 99 f2 77 b7 3a f0 da 27 1f b9 07 6f 67 ed 26 6a f4 d0 ca cc ce 94 2b 8c b9 df 2b e6 aa 27 d7 f7 0f 73 e0 da 26 91 4d e6 04 54 df b6 de 92 f7 c5 c7 43 07 4d e6 6a d6 d5 6c 33 24 bf 7b 7e eb 40 1d ac 44 5e 8b 59 26 7e 96 66 4d 9b b2 f8 84 da 3e 72 e1 ff a5 5d 40 9b 29 07 c9 87 b4 eb da 88 d1 27 5a 37 8e 36 22 f5 fa 39 14 b9 91 4a ef 8a a6 57 8e d6 7e 8f 26 6a fe c8 b1 f1 e6 68 75 ed da 59 8f 0c 52 7f 40 b3 b6 0b 47 fa Data Ascii: _3'~D.W~uu]>A'(uu!r>r8<C=6 7/ZuvVkqerM;PIlg-~w:'og&j++'s&MTCMjl3${~@D^Y&~fM>r]@)'Z76"9JW~&jhuYR@G
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 84 2f f3 23 5b ae c3 a7 3d 23 4c 36 94 c2 aa 53 1b c7 8e 6e ba ef c7 29 86 24 8b b9 2d 6b 3f 2e ca 61 6c 4e 00 4e 1d a8 9d dd 98 65 cd f2 9d a6 55 d7 91 e5 a9 a9 57 27 00 d7 67 a7 e5 e3 53 b4 6a 3a 9e a8 eb de e7 cf 9d f5 c8 1e d1 cc c7 f6 cc 6c 54 ef 51 92 ef 6b b7 2f 5b a9 cf 0a 55 ec fb 3b 63 06 76 e5 fa 7c bb 0f cc 4a 36 c9 e0 df b7 cc ac 61 ed 76 d0 7a 72 48 4b 2e 99 e3 40 cd 5b 91 3f 99 55 0b 5a 95 95 09 06 53 3c 38 f5 fa af 62 3e 2f db 79 e0 94 15 a3 9b d6 fe 5e bb 78 56 23 9b 56 9b 1b 19 ed da 36 ab 7e 32 54 2e 9e af 5e 47 47 22 37 cc 17 6b bf 27 13 15 cd 8c 0f 94 3d 93 7e a7 5d 33 fb 49 37 ca 92 9a 2f 69 d6 56 66 2a bf 59 ae c5 a7 99 ca 26 ab cb b9 aa 33 07 80 18 32 93 e9 e3 0e d4 85 74 68 64 e3 f9 9f cf 3d ea 91 3d b4 fb 41 23 4a 72 fa 9b 5c bb Data Ascii: /#[=#L6Sn)$-k?.alNNeUW'gSj:lTQk/[U;cv\|J6avzrHK.@[?UZS<8b>/y^xV#V6~2T.^GG"7k'=~]3I7/iVf*Y&32thd==A#Jr\

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49903	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b0fa5ee8-501e-0047-295e-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155859Z-17db6f7c8cf9wwz8ehu7c5p33g000000029000000000etr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49908	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	761	OUT	GET /static/img/value-one-1.d4b0c142.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	916	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 78738 Connection: close x-oss-request-id: 666D325122435B3936AF048D ETag: "D4B0C1420FFEE14F8ADD3A8045CA1554" Last-Modified: Mon, 20 May 2024 05:15:52 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8150162276068390537 x-oss-storage-class: Standard Content-MD5: 1LDBQg/+4U+K3TqARcoVVA== x-oss-server-time: 13 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5406 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xrKIXX%2FPonHdRP97BgjRQFwPATp74RN5MjD%2F7Rl%2BMHFTu7DU4fTgSIuG9%2Bp%2BY0Ers5vV4ckfnw8dhDZl%2BJ%2BEmVm8NUygpkmDuUIYGyN%2FN1KX6vWuDlEtbAzTo8eSBg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c34faac461-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	453	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f6 00 00 01 54 08 06 00 00 00 d6 3f 1e 59 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 7c 5b d5 d5 ff 9f f7 34 2c ef ec 65 67 d8 92 1d 5b 1e 59 10 c2 0e a3 cc 42 19 09 94 b2 3e f6 6c 29 65 95 32 02 b4 8c b2 c3 5e a1 94 91 92 30 ca a6 ac b0 09 60 b2 2c d9 b1 65 3b 31 ce 76 9c 78 ca 92 ac f7 ce f7 bb 4f 96 63 3b c3 53 b2 2c bf db 1f 8d 25 dd 7b ee b9 ff 73 df 3d ef de 7b 06 41 2f 1d 10 60 66 19 80 4a 44 ac 43 13 b9 08 2c e1 25 f2 3c cc 13 0c ea b2 8a 5c 31 0d 4a ce 98 99 00 48 4b b1 14 f3 69 be 32 28 07 31 44 98 16 b2 5a 8a a5 92 2e a7 8e 02 17 13 58 2f 3a 02 3a 02 3a 02 3a 02 3a 02 3a 02 51 82 80 ae d8 a3 44 90 fa 30 74 04 74 04 74 04 74 04 74 04 04 02 ba 62 d7 e7 81 Data Ascii: PNGIHDRT?YsRGB IDATx^]\|[4,eg[YB>l)e2^0`,e;1vxOc;S,%{s={A/`fJDC,%<\1JHKi2(1DZ.X/::::::QD0tttttb
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 0e bb 42 44 ba 9f f0 90 9e 0d d1 39 78 11 0f e3 17 fc 22 55 a0 42 d5 37 10 03 27 e3 02 2e 30 0e 45 19 0c 29 c5 2e 76 88 65 28 33 da 60 f3 81 a0 1f c1 87 f9 79 0b e2 ef 85 97 ed b0 b7 e8 d7 20 61 16 80 de 5d 58 11 10 c7 c1 4e 38 8d 66 98 c9 0a ab 98 ef 43 6e e7 18 56 c0 f7 d4 19 83 5c 70 99 86 1a fe 43 46 b1 0b a5 f2 0b 7e 89 99 89 99 1e fd 01 0b ef e3 26 16 b8 32 94 99 aa 11 23 6d c0 0f 3e 7d 07 13 5e fc f5 de 06 16 01 71 42 95 82 39 a6 51 f0 a8 56 58 7d fa 0b 6d 78 e5 31 14 d7 fe 21 a1 d8 5b df 9c e3 aa 51 ed 99 4b 73 fd e1 9d 56 43 bb 37 07 3b 4c 00 c4 7f be 1c ca f1 0d 6d 34 f4 d1 0f 65 04 f4 67 61 e0 a4 bf 8c 97 19 46 61 54 8c 1d f6 a6 a1 f0 62 35 24 14 fb b7 bc 36 61 0c 64 9f 8d 6c de 81 9b 5a 43 ab 67 71 c7 e8 44 b5 45 c1 66 ce 43 5e b3 7e 4a 32 b4 Data Ascii: BD9x"UB7'.0E).ve(3`y a]XN8fCnV\pCF~&2#m>}^qB9QVX}mx1![QKsVC7;Lm4egaFaTb5$6adlZCgqDEfC^~J2
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 1d a9 32 0b a0 46 3b 32 d6 0c d6 5d 66 24 21 2d f2 b7 8f 44 ca c1 06 f8 0b b3 28 ab 26 92 78 eb 0e 2f 83 4e b1 17 70 81 d1 8c c4 c3 bd e0 95 b3 06 b9 81 43 77 04 14 ea 3a c2 18 07 b0 ec 2f 83 9b a7 22 7d a5 6e 8c 13 6a c4 75 fa 3a 02 fd 8f 80 30 76 5d 8b f2 e9 04 c4 f8 e1 f9 59 37 76 ed 3b c6 01 c3 6c 69 86 17 75 cb 66 d1 ac 96 be 53 0c 1f 85 41 a7 d8 9d 5c 3a 5b 85 a1 39 97 d2 f4 23 f8 3e ce 13 07 6f 8b 07 ea 0e 22 f8 36 d8 c9 ee ec 23 39 bd 79 18 11 10 2f 64 06 8c 31 13 76 98 15 28 46 15 66 23 05 d2 7f 1a 64 48 b2 0a 45 26 48 92 0a 49 36 02 f0 83 b4 67 9d c1 6c 00 b3 0a 56 19 06 55 82 a2 28 50 15 19 b2 9f 20 b5 00 92 4f 86 b7 85 31 dc eb c7 56 af ae 20 c2 28 d4 7e e8 ca c9 ae 6c 80 26 32 12 bf cd a1 d1 8d fd 40 72 48 93 58 cb 15 79 0a fc 16 3b 65 fc 38 Data Ascii: 2F;2]f$!-D(&x/NpCw:/"}nju:0v]Y7v;liufSA\:[9#>o"6#9y/d1v(Ff#dHE&HI6glVU(P O1V (~l&2@rHXy;e8
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: a7 32 5a 9e 8d d4 38 0f 11 ab d8 9d 5c 76 2c 00 b2 93 f5 a3 9e 43 3f b4 5b 2c e1 25 72 0e 66 9c ae 40 41 31 56 bf 31 9f e6 eb 4a bd 17 53 42 64 b9 6b 82 2f 57 82 94 cf 20 8b 04 5e 23 41 75 ea c7 c4 bd 00 b3 0f 4d 44 cc 05 13 24 bb 0c ca 63 28 1e 00 ab ea 51 e3 88 f4 7b ce 3e 0c 39 a4 4d c5 fa 90 85 fc d3 65 c8 70 60 85 be 3e f4 02 6d 27 97 1d 07 28 b0 53 66 44 ea a7 88 54 ec ab b8 64 82 11 f4 7b 13 e8 31 fd 4e b8 67 b3 4e ec d4 9d 70 9d 29 41 52 b3 90 be 44 7f 23 ef 19 7e a2 76 11 57 4c 62 28 fb 33 90 46 c0 5a 82 bc 2a 9b d2 2a 7b 4e 49 6f d1 df 08 08 d9 00 ea 74 15 3c 95 20 97 11 f0 b3 2e 9b 9e a3 2c d6 89 62 94 cf 57 a1 4a 76 d8 fe a3 af 13 3d c3 30 60 b3 40 57 1b a0 2c ce a4 cc 8d 3d 6b 1d fa da 11 a7 d8 c5 5d 5b 11 ca af 52 d0 f2 65 1e 65 15 86 1e 82 Data Ascii: 2Z8\v,C?[,%rf@A1V1JSBdk/W ^#AuMD$c(Q{>9Mep`>m'(SfDTd{1NgNp)ARD#~vWLb(3FZ**{NIot< .,bWJv=0`@W,=k][Ree
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: dd ee e6 a6 a6 a6 ba e6 e6 e6 ed 93 26 4d aa 15 21 20 96 37 16 8e 89 8f 8b 11 ee a2 a3 15 a8 ff ce a3 cc b5 43 0a c0 7d 0c 56 a4 7b 26 48 bf 63 78 17 e8 d9 0a bb 9e 15 df f2 da 84 64 d0 bd 66 48 0b 6c 03 78 45 3a a0 8a bd 90 4b ff 24 43 2e cb a6 f4 88 4e 81 d7 b5 38 43 5f 43 f8 9a 8e 41 ea 5f 19 bc d6 4e b6 a5 a1 ef 31 f2 7b 58 cb 6b 13 14 18 ce 02 d8 a6 40 7a 29 8f d2 f5 48 85 91 2f b6 7e e1 70 de bc 79 f2 d3 4f 3f 3d ce 62 b1 8c b7 58 2c b1 ed 88 f2 1e 3a e8 bc ce 89 3a e4 f7 fb bd 8d 8d 8d 9b 97 2c 59 b2 f1 d2 4b 2f 6d 11 91 c4 fc 50 cf 03 b8 cc 08 f5 d5 a9 fa 66 43 83 d2 c9 ae 79 0c 64 55 63 c3 dd 7a 8c 8c ae a7 6f 21 97 9e 20 41 9a 62 27 eb e3 5d d7 0e 4d 8d 01 53 ec c5 5c 9e c1 50 2f 77 a3 ee 06 dd bd ad 6b e1 3a b9 f4 52 40 32 db 61 7d 0c 84 3d 2d Data Ascii: &M! 7C}V{&HcxdfHlxE:K$C.N8C_CA_N1{Xk@z)H/~pyO?=bX,::,YK/mPfCydUczo! Ab']MS\P/wk:R@2a}=-
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 04 5f 53 f8 22 e9 47 2c 92 ce 63 70 9e 1f ea c3 f9 34 75 5d 9f 18 1a 84 8d 85 e5 77 31 ca ff 01 d0 57 d9 94 ae 67 e3 dc 87 0c 8b d8 75 23 83 56 db c9 fa 71 b8 44 1d 36 c5 de fa 30 3c d1 02 e5 9e a1 f8 20 74 57 a0 45 5c 6e 63 a8 37 f9 41 7f 1d 8a 71 ac 8b b8 f4 28 06 ce 02 0c 4f db 29 ed a7 ee e2 a6 d7 8b 2e 04 d6 af 5f 3f 65 d2 a4 49 e9 41 65 5a 54 57 8a 2b 0b 6f 20 a1 d4 db df a3 07 47 4d 32 b5 ed b2 59 e1 b6 75 2d 78 ef 2e 7e 0f 7c ef c7 c9 a3 4f c0 56 6f 0d be ad fb 16 c2 d4 4e 94 e0 ef f5 5c cf 37 4e fa 13 1d 33 fa f0 e0 ce 9d 76 ee dc b9 65 f8 f0 e1 8e ce 08 3b b9 74 36 80 4b 09 78 2d 9b 32 3e 8b 2e 09 74 3d 9a 40 3e 06 f5 5e 19 f2 3d 03 e5 d6 d5 35 97 03 5f a3 98 d7 4d 66 f8 6f 76 a3 ee ca 70 6d d4 c2 a6 d8 03 e9 45 39 2f 87 6c f7 0d 3c d4 91 c9 c1 Data Ascii: _S"G,cp4u]w1Wgu#VqD60< tWE\nc7Aq(O)._?eIAeZTW+o GM2Yu-x.~\|OVoN\7N3ve;t6Kx-2>.t=@>^=5_MfovpmE9/l<
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 60 72 5c e0 56 a0 a5 a5 a5 29 36 36 f6 bb ae 10 6d 4d ad 7c 3b 83 7e 79 03 af 2e 5a 40 0b 3a db a2 74 45 62 50 fe 5e cc ae c3 54 e0 f4 6c 58 ff 1c 8e e3 e6 c1 08 92 83 cb 6f 23 f0 4f a1 b6 90 0f a9 62 17 41 1d 9c 28 7b 86 c1 0f e7 52 46 f1 60 14 44 a8 79 76 b2 eb 02 06 8f cc a1 8c 7f 86 b0 af b6 5d 7a 79 79 79 46 6a 6a ea 11 46 a3 31 98 11 2b 78 8f 28 ba 6f ff b7 c6 4e 83 b7 01 d5 fe 1d 68 52 9b d0 dc e2 15 15 c8 20 19 38 c1 18 87 e1 86 e1 48 36 26 42 92 b4 7b cc f6 c7 93 1d ee ed 5b c7 d5 b2 65 cb 96 1f d7 7a d6 ae 19 91 32 f6 06 92 64 d3 f6 9a 8d f7 ce 1d 3d 57 1c d7 eb 45 47 40 20 20 31 f3 e1 7e bf 5f 7b d9 5c 56 fd 3d df ea ba 17 c3 8c 09 a4 48 01 ab 77 56 fd 74 d8 b0 83 f8 96 a9 7f ee 8c 98 36 e7 96 54 bd 83 27 aa 5e e0 58 b2 68 9f 63 24 8b 56 d7 40 Data Ascii: `r\V)66mM\|;~y.Z@:tEbP^TlXo#ObA({RF`Dyv]zyyyFjjF1+x(oNhR 8H6&B{[ez2d=WEG@ 1~_{\V=HwVt6T'^Xhc$V@
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 2e 51 e0 25 b4 73 db 58 39 06 f7 d8 6f c1 16 6f 35 dd 5e 74 1f 62 e4 98 0e f3 4d b4 6b df a6 d1 d7 44 4b 67 bd c0 a9 71 e3 34 7a 5b b6 6c d9 9c 92 92 b2 aa 37 70 3a b9 ec 08 80 2f 21 48 b7 46 7b a4 b6 75 bc 2e c6 0d ff 73 0c f9 01 3d 8b e7 ee b3 c5 c9 e5 47 12 d4 a3 b3 c9 76 53 6f e6 52 57 6d 42 a2 d8 45 ac 6f 19 d2 dd 76 d8 ce 0e 67 e0 fb ae 06 1b 09 bf 8b 09 df 0c e5 99 16 f0 a3 f9 a1 39 82 d7 64 5a 53 53 93 90 9c 9c 7c b6 24 49 22 d6 76 fb bb 74 2e 69 28 c7 9d a5 f7 93 9b dd 6c 12 47 91 22 ad 65 6b 8a cb b6 bf 83 a9 2e 3b 7f 1f 04 b1 2d 15 e6 de 51 4d 36 c6 27 8e 8f 9d 30 ad b2 7e 43 d1 39 a3 4f af 9e 3b f6 90 b6 85 b8 5d 2b 65 c7 8e 1d 4b 46 8c 18 a1 a5 c8 6c 2d ba 72 8f 84 c9 1a 66 1e 36 6e dc 98 39 66 cc 98 34 d1 ad 38 2a 3f e6 bb 33 61 de cb 0e bc Data Ascii: .Q%sX9oo5^tbMkDKgq4z[l7p:/!HF{u.s=GvSoRWmBEovg9dZSS\|$I"vt.i(lG"ek.;-QM6'0~C9O;]+eKFl-rf6n9f48*?3a
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: f1 48 c5 b3 88 95 f7 7d 17 5e af b8 31 6f ec f1 b8 2d e7 ba 0e 23 14 bb f3 57 2a df c6 a2 ca 57 b0 c5 5d 8d 33 27 9d 8c 7f e4 dc dc a1 8e 50 f6 af 6e 7c 1b ff aa 58 ba 5b 8c 79 af e2 c7 09 63 e7 e2 b6 ac 5d 74 1f 7b ec b1 ef fe fc e7 3f 8b 93 c8 7e 79 e9 74 72 c9 fe 80 f4 57 09 d2 8d 59 94 5e 1a d9 22 ea 3d 77 0e 76 dd 43 c0 4a 3b d9 96 f4 9e 4a f4 b5 14 c9 61 8c 30 3c 60 87 f5 cc fe 8c d6 d7 af 8a bd 88 cb 8f 62 f0 b1 76 b2 76 7c c2 a2 4f 1e 3d 1a 51 09 97 8c f4 43 7a 9e 61 b8 2c 44 e1 53 35 39 d6 d6 d6 ce 4d 48 48 38 a0 3d 73 4d aa 07 17 ad fa 13 9a e1 e9 6c f8 ae 55 f3 ab 7e 08 17 35 8b 64 d2 3c 77 7d f0 c0 24 89 fb f7 ee 47 c1 f4 a9 7e 5c 3c e9 dc b8 23 47 1d b2 9f 05 66 c7 db 9b 3f de fe af 8d af c1 d4 ce 8f bd 03 60 2a e0 f1 fb f0 4c de 03 48 8d 99 Data Ascii: H}^1o-#WW]3'Pn\|X[yc]t{?~ytrWY^"=wvCJ;Ja0<`bvv\|O=QCza,DS59MHH8=sMlU~5d<w}$G~\<#Gf?`LH
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 78 1e 4e 9f 20 a2 5c b6 95 b6 5d bb c7 ef a3 df af bc 84 7d 10 d9 dc 24 71 76 af 45 9d 0b d8 be a9 e2 68 92 86 9b 92 31 39 61 d2 34 15 aa 52 5a e7 2a 9c 37 ee 77 38 75 ec 09 1a b1 b7 b6 7c 80 a5 9b df 61 23 0c 20 10 91 24 f3 4e df 4e f2 c3 cf 82 5e fb 4e 1b bc 8d fc e7 29 57 d0 49 e3 8e ee 70 6a b0 7d fb f6 e5 63 c6 8c 09 de 39 85 64 87 14 22 99 e8 64 fb 86 00 7d f7 dd 77 a3 66 cf 9e dd 66 1d bf ba de c1 67 7c 77 19 25 76 e3 ae bd 7d d7 c2 17 be c1 d7 80 58 39 01 47 8c 9c 83 13 27 1e c5 f6 84 2c 0c 33 27 90 db ef c5 8a da 35 b8 cf f9 24 36 79 37 05 15 bf 36 cf c4 5c 7d 78 c6 1d 38 71 cc ae 1d bf cb e5 2a cc ca ca 0a 5e 0f f5 6d 84 5d b4 76 70 d9 2d 04 8e 5d 8a 57 6f 89 c6 94 af 0e 76 3d 04 f0 77 39 94 f1 66 48 81 1c 44 c4 57 b0 6b 94 19 f8 77 1d 62 4e 3d Data Ascii: xN \]}$qvEh19a4RZ7w8u\|a# $NN^N)WIpj}c9d"d}wffg\|w%v}X9G',3'5$6y76\}x8q^m]vp-]Wov=w9fHDWkwbN=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49897	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	370	OUT	GET /api/v1/h5/version?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:59 UTC	201	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:59 UTC	76	IN	Data Raw: 34 36 0d 0a 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 63 6f 64 65 22 3a 32 30 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 7b 22 68 35 22 3a 22 35 2e 30 2e 33 22 2c 22 61 70 70 22 3a 22 35 2e 30 2e 33 22 7d 7d 0d 0a Data Ascii: 46{"status":1,"code":200,"msg":"ok","data":{"h5":"5.0.3","app":"5.0.3"}}
2024-10-13 15:58:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49899	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	387	OUT	GET /api/v1/static/invitePageRewardLogs?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:59 UTC	201	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:59 UTC	1360	IN	Data Raw: 35 34 39 0d 0a 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 63 6f 64 65 22 3a 32 30 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 7b 22 6c 69 73 74 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 73 22 3a 22 2b 39 31 20 39 39 35 2a 2a 2a 2a 38 31 39 20 73 75 63 63 65 73 73 66 75 6c 20 77 69 74 68 64 72 61 77 61 6c 20 52 73 20 35 30 30 2e 30 30 ef bc 81 22 7d 2c 7b 22 63 6f 6e 74 65 6e 74 73 22 3a 22 2b 39 31 20 38 32 34 2a 2a 2a 2a 32 39 34 20 73 75 63 63 65 73 73 66 75 6c 20 77 69 74 68 64 72 61 77 61 6c 20 52 73 20 35 30 30 2e 30 30 ef bc 81 22 7d 2c 7b 22 63 6f 6e 74 65 6e 74 73 22 3a 22 2b 39 31 20 37 34 31 2a 2a 2a 2a 38 38 39 20 73 75 63 63 65 73 73 66 75 6c 20 77 69 74 68 64 72 61 77 61 6c 20 52 73 20 35 30 30 2e 30 30 ef bc 81 22 7d 2c 7b 22 63 6f Data Ascii: 549{"status":1,"code":200,"msg":"ok","data":{"lists":[{"contents":"+91 995**819 successful withdrawal Rs 500.00"},{"contents":"+91 824294 successful withdrawal Rs 500.00"},{"contents":"+91 741**889 successful withdrawal Rs 500.00"},{"co
2024-10-13 15:58:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49901	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	395	OUT	GET /api/v1/test-page-view-count-log/invitePage?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:59 UTC	232	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49900	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	377	OUT	GET /api/v1/member/phone_code?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:59 UTC	201	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:59 UTC	55	IN	Data Raw: 33 31 0d 0a 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 63 6f 64 65 22 3a 32 30 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 5b 22 2b 39 31 22 5d 7d 0d 0a Data Ascii: 31{"status":1,"code":200,"msg":"ok","data":["+91"]}
2024-10-13 15:58:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49898	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	382	OUT	GET /api/v1/customer-service/lists?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:59 UTC	201	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:59 UTC	1932	IN	Data Raw: 37 38 35 0d 0a 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 63 6f 64 65 22 3a 32 30 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 7b 22 6c 69 73 74 73 22 3a 5b 7b 22 69 64 22 3a 31 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 68 69 70 70 69 6e 67 68 65 72 6f 2e 76 69 70 2f 72 65 73 6f 75 72 63 65 2d 66 69 6c 65 73 2f 32 30 32 33 2d 30 34 2d 31 33 2f 6e 50 31 36 4b 41 42 74 50 51 50 67 34 32 54 69 2e 70 6e 67 22 2c 22 72 65 6d 61 72 6b 22 3a 22 52 65 67 69 73 74 72 61 74 69 6f 6e 20 6c 6f 67 69 6e 20 70 72 6f 62 6c 65 6d 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 6d 65 2f 4a 65 6e 6e 79 31 37 32 37 22 2c 22 66 6c 61 67 22 3a 22 31 22 2c 22 73 6f 72 74 22 3a 31 30 30 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 Data Ascii: 785{"status":1,"code":200,"msg":"ok","data":{"lists":[{"id":1,"icon":"https://cdn.shippinghero.vip/resource-files/2023-04-13/nP16KABtPQPg42Ti.png","remark":"Registration login problem","link":"https://t.me/Jenny1727","flag":"1","sort":100,"created_at":"
2024-10-13 15:58:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49896	8.219.197.25	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	383	OUT	GET /api/v1/static/invite_page_rank?version=5.0.3 HTTP/1.1 Host: server.e9sg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:58:59 UTC	201	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: *
2024-10-13 15:58:59 UTC	550	IN	Data Raw: 32 31 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 63 6f 64 65 22 3a 32 30 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 7b 22 6c 69 73 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 2b 39 31 20 39 35 32 2a 2a 2a 2a 37 38 33 22 2c 22 61 6d 6f 75 6e 74 22 3a 22 2b 52 73 20 39 35 36 37 2e 38 39 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 2b 39 31 20 37 33 36 2a 2a 2a 2a 39 34 35 22 2c 22 61 6d 6f 75 6e 74 22 3a 22 2b 52 73 20 38 33 32 31 2e 34 34 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 2b 39 31 20 38 39 31 2a 2a 2a 2a 32 32 37 22 2c 22 61 6d 6f 75 6e 74 22 3a 22 2b 52 73 20 36 37 32 31 2e 33 31 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 2b 39 31 20 39 39 32 2a 2a 2a 2a 35 31 38 22 2c 22 61 6d 6f 75 6e 74 22 3a 22 2b 52 73 20 35 39 33 32 2e 37 36 22 7d 2c 7b 22 6e Data Ascii: 21f{"status":1,"code":200,"msg":"ok","data":{"lists":[{"name":"+91 952**783","amount":"+Rs 9567.89"},{"name":"+91 736945","amount":"+Rs 8321.44"},{"name":"+91 891227","amount":"+Rs 6721.31"},{"name":"+91 992**518","amount":"+Rs 5932.76"},{"n
2024-10-13 15:58:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49911	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	520	OUT	GET /static/images/common/icon_invite.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	902	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 667 Connection: close x-oss-request-id: 666D31CB81BDAB34345910E0 ETag: "96C29F5BF4139617BE6F27AE20B2D299" Last-Modified: Mon, 20 May 2024 05:14:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 15225301273166933759 x-oss-storage-class: Standard Content-MD5: lsKfW/QTlhe+byeuILLSmQ== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2342 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gOgaiONAApmXfXOfZG%2BLZgDTmQfVFGad9oC0H5x0t46tGJX7Np2xTRi4c5GjnWUdpUIOFgsKuq9hg%2BffoaGJyHohHuG8GNFAroyBUyx5jHL4dW5h2Vw52uwB9HdkZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c51cc00f69-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 03 00 00 00 f3 37 75 51 00 00 01 02 50 4c 54 45 00 00 00 9a 9d ae 99 9d ae 9a 9d ae 9a 9d ae 9a 9d ae 9a 9d ae 9a 9d ae 9a 9c ae 9a 9c ae 9a 9d ae ff ff ff aa aa aa 9a 9e ad 99 99 b3 9a 9c ae 98 9c ad 9b 9e ae 9a 9d ae 9a 9d ae 96 9e ad 9a 9c ad 99 9e ae 9a 9f ae 9a 9e ae 9a 9d ad 9b 9b ae 9a 9c ad 99 9e af 9a 9c af 9b 9b ad 9a 9f ad 99 a2 aa 99 9d ad 9b 9e ad 99 9c af 98 9e af 9a 9d ae 9c 9c ad 99 9c ac 95 9b ae 80 80 bf 9f 9f bf 99 9c ad 9e 9e a7 99 9d ae 98 9c ad 99 99 99 99 9e ac 8b a2 b9 99 9d ad 92 92 a4 8e 8e aa 98 9c aa 99 99 b3 97 9c aa 92 a4 a4 99 99 ad 90 9b a6 99 aa bb 96 9d b1 92 92 b6 9a 9c af 9c a1 b1 99 99 a6 9b 9b ad 9f 9f 9f 98 9d a8 99 a3 ad 95 9e b0 97 97 ae 9f Data Ascii: PNGIHDR7uQPLTE
2024-10-13 15:58:59 UTC	200	IN	Data Raw: 92 ed 82 b1 8c 4e 12 2d 2b 49 5e 0b 58 d7 eb d7 07 15 68 18 35 42 ee 2d cc fa 81 8d 20 d2 b7 4f 52 96 11 0f e7 f5 37 13 32 bb 7b 9e 7b e4 3c ef ca 53 5a b9 0a fa 06 64 a3 f8 a3 44 87 9a 65 6d 67 9d d1 4f 99 df 03 f1 2f 0d 44 98 d5 53 e2 3c da 95 29 74 37 28 16 7f 15 10 97 0a 9c b1 63 12 fc 4b 9b 20 63 87 90 12 a3 a1 59 6f 8c 5d 84 1d 0e 90 4b 8d fe a1 4a 86 48 c3 33 f0 dd b0 53 06 64 4a 0f d2 40 f5 c6 10 db ee ba 67 c8 81 f3 e2 1a 70 50 8c bd 43 04 40 cd 9d 3b 25 40 bd 0e 69 9a 8b 7b b9 b7 43 91 23 df f7 f9 7d df 5b b6 f6 e4 06 62 02 b3 da 12 21 5f e6 5a 14 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: N-+I^Xh5B- OR72{{<SZdDemgO/DS<)t7(cK cYo]KJH3SdJ@gpPC@;%@i{C#}[b!_ZIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49910	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	520	OUT	GET /static/images/team/activity_icon.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	906	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 2053 Connection: close x-oss-request-id: 666D324D4005843232CFDA2C ETag: "19056E8DCEC69218C3CB0C675C093794" Last-Modified: Mon, 20 May 2024 05:15:34 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8580686725633497525 x-oss-storage-class: Standard Content-MD5: GQVujc7GkhjDywxnXAk3lA== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2547 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2F42u6ThS9qxkXPM67APUPc7KryGiAMik3lcl5fubFPKbcVbPnaqtzNkrAzGeFbzskLJsOn%2F0VyQtgfA2%2FtfBbA9%2BKIZLin1tKPr98pzMtABVGGFYoT0sdAHyUTPEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c52f49c443-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 03 00 00 00 9a 86 5e ac 00 00 01 98 50 4c 54 45 00 00 00 9a 9d ae 9a 9e ae 99 9b ad 97 9b ab 9b 9b b1 9a 9d ad 9a 9d af 9a 9d ae 9b 9d ae 9a 9d ae 9a 9d ad 9b 9e ae 9a 9d ae 9b 9d ae 9a 9e ae 9a 9e ae 9b 9f b0 9c 9c aa 9a 9d ae 9a 9d ae 9a 9d ae 9a 9d ae 99 9d ae 9b 9d af 9a 9d ae 9b 9d ae 99 9d ae 9a 9d ae 9a 9c ad 9a 9d af 9a 9a af 9a 9e ae 9a 9c ad 9a 9d ae 9b 9e af 9a 9d ae 9a 9d ad 9a 9d ae 9a 9d af 9a 9d ae 9e 9e aa 9a 9e ae 92 92 b6 99 9d ad 9a 9c ae 99 9d ad 9b 9c ae 98 9d ae 9b 9d ae 9b 9e b0 9b 9b af 9a 9c ae 9b 9d ae 9a 9e ae 9c 9f b0 9a 9d ae 9b 9d af 9a 9e af 9a 9d ae 9a 9d ae 99 9d ab 99 9c ae 9b 9c ac a2 a2 ae 9a 9d ae 9b 9b ad 99 a3 ad 9a 9c ad 9a 9e ae 99 9f b0 9a Data Ascii: PNGIHDR^PLTE
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: bf 80 40 17 60 9f f0 c6 b1 c4 aa a1 75 d4 4c 4a 12 d6 f7 ec 8e 5b e5 d3 dd 8a f4 6a b8 30 ca b5 f1 b2 bd 9c c2 cf a4 15 e3 07 99 62 8c 84 2f bc 57 33 58 6f 9d 4d a7 8b 89 b6 72 46 55 4a 16 65 1c 19 d1 90 2d df cc 44 7d 78 6b 6e d8 09 7b 51 5f db 1b 0f 29 e8 59 03 36 28 0a 24 a8 14 3c 6e 22 76 3b 56 42 4e 53 25 4f 89 1e 61 20 3c 48 2c 37 59 06 a5 52 62 9a 96 86 18 95 13 1d 0d 0c 32 14 99 69 37 34 31 89 88 fc 95 00 00 05 94 49 44 41 54 78 9c ed 9d f5 7b d4 4a 14 86 93 6e bb 75 d9 ba 3b 55 a8 41 1d 28 50 a4 d4 70 77 77 f7 eb 7e ff ed bb 2d 97 a7 e4 cc 9c e4 64 26 4f 93 85 ef fd 91 9d f3 cd bc 2d 91 99 4d 3a 0e 00 00 00 00 be 6b 1e bd 4f d5 ef 28 6b 6f 2f db 51 9f 9a 18 1b 8e 2a 76 78 6c 62 2b f7 fd a3 a8 62 f5 14 4c cf 76 d6 ba 5e 9a 4b 56 ee 57 db c5 fe b1 Data Ascii: @`uLJ[j0b/W3XoMrFUJe-D}xkn{Q_)Y6($<n"v;VBNS%Oa <H,7YRb2i741IDATx{Jnu;UA(Ppww~-d&O-M:kO(ko/Q*vxlb+bLv^KVW
2024-10-13 15:58:59 UTC	221	IN	Data Raw: 20 02 11 2f 10 a1 40 04 22 5e 20 42 81 08 44 bc 40 84 02 11 88 78 81 08 05 22 10 f1 02 11 4a 54 22 82 0d 43 b4 cc 52 91 59 d3 a4 88 44 12 87 54 24 e1 fb a8 b8 6e 97 50 24 f1 6f 83 07 6e 3e f2 3f ca be 90 49 23 68 af cc 2f bc 89 7b a0 41 bc 11 8a 08 b6 cf 8b 97 43 42 91 a4 bf ac 2b 7d 55 37 f1 1b aa b0 1b a8 a8 a8 fb de 25 88 19 b9 87 d3 e1 b3 c5 59 dc 14 75 84 10 71 9e c5 3d 5c 9e 67 61 3c 12 fc 67 06 42 ef ed 98 af dd b5 38 6e 1a 0d ee c4 5f e9 b7 c0 8b 95 f2 57 e1 3d b2 bc 2c 1f 8a 7b e4 5f 33 54 fe d2 48 63 93 8e 74 4b 97 ed 2e 24 35 43 43 35 b6 3b 8f 74 b5 a4 43 9d ac 00 00 00 00 90 db fc 07 d7 3b a1 67 cb 57 59 f8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: /@"^ BD@x"JT"CRYDT$nP$on>?I#h/{ACB+}U7%Yuq=\ga<gB8n_W=,{_3THctK.$5CC5;tC;gWYIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49916	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	516	OUT	GET /static/images/common/icon_me.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	901	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 633 Connection: close x-oss-request-id: 668DCED943F9F83730FD7C1C ETag: "A989B6777314B48946C9EA85957C102A" Last-Modified: Tue, 09 Jul 2024 07:12:10 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9903885363814163686 x-oss-storage-class: Standard Content-MD5: qYm2d3MUtIlGyeqFlXwQKg== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4529 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=23REiXdooDMYvwfGWy8uIXF7LlcV8PmYmwHOEaxxEjMg%2BfFJ%2F04bp2UNqOo2Xs2qndWn2aAm08ddHVINk5j9eUPu7XoW1c97e7KGZvQnB0lenAbnBne3i9InYWAmAw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c539c50c74-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 03 00 00 00 f3 37 75 51 00 00 00 de 50 4c 54 45 00 00 00 9a 9d ae 9a 9d ae 99 9d ae 99 9c ae 9a 9d ae 99 9d ad 9a 9c ad 99 9c ae 99 9d ad 99 9d ae 9a 9d ad 9b 9d ae 9a 9d ae 99 9c ae 98 9b ae 99 9c ad 99 9d ae 98 9d ae 99 9c ae 9a 9d ae 9a 9d ae 9a 9d ae 80 80 80 9a 9d ae 9a 9d ad 98 98 ac 99 9d ad 9a 9d ad 9f 9f 9f 99 9d ad 8e 8e aa aa aa aa 99 9c ad 99 9c ac 96 96 a5 99 9d ae 98 9b ad 94 94 ae 95 9f aa 99 99 b3 99 9b ae 98 9c ac 9a 9c ad 99 99 ac aa aa aa 9a 9b ae 9b 9d ae 9a 9c ae 99 9c ae 92 92 b6 89 9d 9d 99 9d ad 99 9d ae 9b 9b ad 97 97 aa 7f aa aa 9f 9f af 99 9d ad 90 9b a6 96 9b ab 98 9b ac 95 9e b0 98 9d ad 97 a2 ae 9b 9f b0 9a 9b ad 9b 9e ae 9a 9d ae 9a 9f ad 99 9d ae 99 Data Ascii: PNGIHDR7uQPLTE
2024-10-13 15:58:59 UTC	165	IN	Data Raw: 2e c3 6e 86 be 60 7a 11 bf e4 c2 ae 8a 63 af 75 98 13 ba 4e 4c e8 17 a2 20 64 a0 42 ed 84 1d 9a 03 59 b4 0d 87 bd 9b b3 39 13 c5 83 0d f8 8b 66 d2 54 7c 20 ba 3a 88 c7 14 d9 f7 b4 c0 e9 f3 25 d4 f7 bd f8 b5 b0 b8 e5 c7 ce df 90 b2 47 bc 3e c5 4f 4f 68 5d 0d 91 df 17 a4 a1 d5 96 c6 b9 f9 80 b9 5b 9f 2c ac e5 41 49 8c 74 f7 b3 06 ee 8e 04 21 01 0c 9a 4a 91 72 6d a0 d0 b4 f1 5a 32 5f b0 69 fa 68 94 4c 03 3e cd 30 58 95 cc 2a 30 c9 1f 80 28 10 c2 9c a5 a3 bb 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: .n`zcuNL dBY9fT\| :%G>OOh][,AIt!JrmZ2_ihL>0X*0(IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49915	104.21.52.99	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	638	OUT	GET /resource-files/2023-02-20/ZsIuf5QJP53BJNF2.mp4 HTTP/1.1 Host: cdn.shippinghero.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://h5.g7or.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=191184-23396351 If-Range: "B291CFD5EF405501F9786EB9800218CA"
2024-10-13 15:58:59 UTC	957	IN	HTTP/1.1 206 Partial Content Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: video/mp4 Content-Length: 23205168 Connection: close x-oss-request-id: 65F28C3DEE88453134E3401E ETag: "B291CFD5EF405501F9786EB9800218CA" Last-Modified: Mon, 20 Feb 2023 11:08:31 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1085788942378088547 x-oss-storage-class: Standard Content-MD5: spHP1e9AVQH5eG65gAIYyg== x-oss-server-time: 11 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5170 Content-Range: bytes 191184-23396351/23442351 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cbQfibxJPWBzSWFvLmkv%2BC%2BbZxmPVcSpI5WtBmlmg2hcyHFOOoVpFizNWEoRPAkyApG0JohWxbSux9aa0LTpkKEwROcGjyI2V3ASxoak9bUs9j1B0hAkHFR8rah5rA0ooEjT1n2JzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c528e31a2c-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	412	IN	Data Raw: bc aa 68 c1 ca d9 db ff 70 ab e5 f7 fc 0a e2 cd 96 fa 81 fe 9d c0 ac 09 c2 1a 9d b3 af 1e 4c 3f a0 88 4d 35 f7 fa 09 8d 35 f0 87 2d 1e 8d 56 b5 f8 27 28 67 de 2e c6 4c c7 19 1c ca 1c a6 4f 4e 0c f5 23 31 63 33 f3 66 2b c4 76 ee 10 bd 4c 02 40 37 15 35 4f 93 3e 08 48 b5 45 cc 9f 05 d6 1d 8d dd 0d e4 be 3a 3e 23 7a a1 3d 8e 2f 17 f0 91 c5 d3 c8 c5 08 57 e4 27 68 5d 70 50 51 e7 0f f2 7a 31 f8 83 45 68 4a 6d 9f e1 2d 5b e3 a9 8e 60 06 f8 78 42 61 25 53 f2 11 89 38 48 30 d2 e8 e3 f1 19 30 e4 1e 4c e6 01 f4 2d be c6 98 b1 b6 d8 65 12 84 cc e7 3e 2a 7b 29 e3 14 b5 a7 d1 8b c2 c0 02 2e 1b 57 31 8b 3f 96 85 41 38 c1 04 bb ee fc 72 50 0e c9 aa 6b 7a b3 e3 dd c2 46 2d df f6 4a d7 89 2a e7 b1 51 dd 82 f0 87 54 dd 44 34 c5 eb f1 a5 18 e7 aa b3 65 39 60 d6 6b 2e f0 e0 Data Ascii: hpL?M55-V'(g.LON#1c3f+vL@75O>HE:>#z=/W'h]pPQz1EhJm-[`xBa%S8H00L-e>{).W1?A8rPkzF-JQTD4e9`k.
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 5a ad 6e bf a6 5e 0a 65 6d 1a 7d 04 1c be 1b 06 e7 72 4a 09 b0 90 19 a4 c7 bf de ff 98 44 78 8c 6e 51 0b 0a 84 a3 52 db 22 c2 15 58 db 53 ad 86 4c 33 cd fc df 02 7f 43 8a f9 b3 2b 2c a0 ea 62 32 b4 90 71 30 68 23 fa 6b c4 c1 45 0a 2b 15 8b ac 69 30 82 5f 82 8e 3b b0 66 22 b1 5c 7a f8 53 47 15 9e 22 c0 f2 51 98 ad 9c 5c bc 5e 4b e0 aa 2b 2d e2 be 3d 91 d8 3f e2 e5 be 14 a3 c4 21 10 11 5f 35 36 42 a7 3f d8 c5 99 ec c6 56 17 29 93 f2 df 17 d5 6f 9f 8a db 2f f8 a2 b0 73 91 32 88 af 9b cf 8f 1e 41 fc e4 7c df cb 8c fa aa ac d2 d0 4e 75 0e 6f 9b 9a 0f 53 3a 9c 84 5b 1f 2f c1 68 cd 15 a5 f0 ea 87 b2 c6 a5 34 33 99 98 c9 4d 9f eb a7 f9 84 09 ec d2 e8 7c 74 ea 7f 97 2d 6a 9f a7 e1 88 24 9f 9b 22 e8 d7 30 f9 0c 79 cb 1d 91 4c 8a 4f fe 42 0e bf 39 9f c1 1c 5c 29 5e Data Ascii: Zn^em}rJDxnQR"XSL3C+,b2q0h#kE+i0_;f"\zSG"Q\^K+-=?!_56B?V)o/s2A\|NuoS:[/h43M\|t-j$"0yLOB9\)^
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: af 69 cc b4 9d 8d 91 fe 4b 31 18 13 01 23 16 60 45 79 a0 2e b5 a3 ca 20 3f b2 4c a2 1b 58 cc 3f e0 14 85 4d e3 33 4d a6 87 0a dd 56 e4 fd ee 0c 08 d8 d0 45 4c 10 6b 15 c5 7f c0 bc 28 21 5a 57 9f 3a 05 21 3a b7 4e 80 de af 45 bf 09 6a c6 b1 46 eb e2 ea 87 2b 0b d3 e2 42 35 a3 d5 d6 ea fe 0a e2 fa 91 8e 6d ad 4b 75 2d e6 63 e0 a6 d9 b1 4e b1 1c 7a f3 41 8f d3 af 26 82 93 f8 9a 76 31 20 c1 a1 8c 53 42 4d 6d 09 5b f3 4c 20 59 a3 17 7c b6 ab d4 77 2f cc c6 ed bf 50 85 56 de aa ef f8 2e c1 93 bc f2 b0 9b cc 28 25 8a b8 d2 0f f8 f0 ac 57 15 b2 5e f2 08 59 bd 47 8c ad db 7c 54 e4 d9 0e c5 3c 5f 51 62 36 d3 dd fc 28 25 67 ad ac d4 71 66 2b 17 9e a2 c7 a3 fe 0a e2 f3 3e 2e 2e 2a 69 45 ce 27 3e 68 e5 dd 72 4f e1 4d 8c d5 af 8a d8 c4 e8 82 a7 17 17 17 1d 4a 3e 09 71 Data Ascii: iK1#`Ey. ?LX?M3MVELk(!ZW:!:NEjF+B5mKu-cNzA&v1 SBMm[L Y\|w/PV.(%W^YG\|T<_Qb6(%gqf+>..*iE'>hrOMJ>q
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 61 4c 1c 6e 94 ed b2 b0 1f b4 05 65 4a 63 e9 f0 15 0b d7 c1 1d 34 c5 47 7f 02 10 ad 0e 31 47 e9 f8 23 0b e7 ab 43 54 65 c4 82 cb 62 f1 76 d3 9c 83 8f 55 a3 1c c5 04 11 b9 16 d2 b1 39 73 cf 08 af c5 60 9d f1 76 62 60 8b 17 60 d3 3b 7c 12 72 60 b8 a6 cc 2d 1e be 3c 82 72 d0 22 74 7e 2b bd c1 95 5b fd 46 36 1e 45 2d a7 6f d3 cc a7 6c fe 47 d5 63 64 c7 f3 17 8c fc 0a ec 74 57 a6 53 14 9a 63 97 63 42 1f 11 72 a7 bf 5f 82 42 1a 8d e9 1e 24 32 13 ed 93 ad 73 45 32 e0 5f b8 17 73 5c 20 33 bd 82 df 8c a0 da 00 01 9a 99 7c dc 80 a4 b0 58 8d 0a e7 fb b6 91 68 d2 0c 26 e9 62 01 00 cc 97 a4 9b 34 e2 e5 f9 49 9d 22 bf 4d 2a 40 8a d0 c1 1f 7c be 3c 6c e7 ce a3 91 35 9a 15 a8 35 b0 5f f8 fb 03 cb f6 0d 36 f1 7c db 7f db b7 e5 ed cd d4 3d 33 e4 f6 5a 33 53 e2 85 0a 87 69 Data Ascii: aLneJc4G1G#CTebvU9s`vb``;\|r`-<r"t~+[F6E-olGcdtWSccBr_B$2sE2_s\ 3\|Xh&b4I"M*@\|<l55_6\|=3Z3Si
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 7c 61 b2 01 fd b9 a1 e1 91 8c 9b de 18 39 bc 7f 38 b1 ec 29 33 04 b5 f4 ed eb b0 e0 76 2c ff 93 ab 85 d1 fa cd f8 f0 f2 62 c8 ad 53 3f a1 80 02 61 48 e1 4a 75 df 72 d2 f5 6e 86 9a c9 a6 df ef c7 ce fc 4e 6f 07 57 4c 75 78 54 97 1c 36 f1 fa 15 46 fd 36 fc 70 a1 63 ed 63 e1 46 94 fc 56 18 29 95 14 43 83 91 85 cb c3 b0 5e b2 f7 0e ca c0 b4 6d f8 9e 6e 39 1a d1 82 f8 ac ec 4c cc 1d 99 8f 42 7b 08 d0 c9 e4 e7 5f e4 ef 18 8e 2c 22 ad 2f 56 a6 6a 44 e6 c4 02 2d a6 59 f0 38 b7 9f 17 d8 e5 87 fc f4 e9 98 71 37 83 ae 69 fa ad 71 31 51 e3 49 8e b3 28 17 e6 68 00 6c 83 59 f6 78 a8 f2 b2 1a 50 d7 81 8e b9 d7 3e fe 3f cb 48 c8 e5 2f 7b 18 5e 10 76 f2 df e2 82 0b d1 cc 89 cc db 56 53 71 5a eb bd c1 8e 33 57 47 f0 a0 f1 ef 67 50 54 4e ea 19 2e 34 a9 cc 1d 43 8a e1 f6 23 Data Ascii: \|a98)3v,bS?aHJurnNoWLuxT6F6pccFV)C^mn9LB{_,"/VjD-Y8q7iq1QI(hlYxP>?H/{^vVSqZ3WGgPTN.4C#
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: d6 43 0a 93 45 98 e1 a4 7f dd cb db e6 bf 21 18 cc ff 3c 39 ce 99 92 29 ce a6 bb 26 29 ca a6 89 97 b7 d3 f0 50 44 10 b8 ae 2b cf 44 57 c4 c1 61 5e 99 e5 1d 8c bf d1 71 97 8c 53 34 b2 f7 e5 4e 7d 8f 6c 66 a1 e8 c4 04 23 f9 a0 88 5f 7e df c4 b8 b8 bb 0d f3 14 17 43 0e 51 c6 cf 0e 5f f9 a4 b5 fe 6f fe 5c 90 fe 8b 65 cb 98 c5 1b fc fe 1b c3 32 a8 6f f3 3f 7a 70 4d 83 bd a0 dd 3f 4f bf 8b a4 64 e3 1f af 9f 3c 06 20 90 c2 eb 5a f8 1c be 2c 2a 18 ab 70 62 c6 2b 57 ec 3a 20 42 d3 d6 ab 46 18 dd bc d9 11 52 51 e9 86 82 e2 f6 f7 8a c6 10 11 66 c9 ab ff 1f 58 bd ce a5 3e 7c 8b e2 21 2b 9f 38 c8 93 6a bf 04 33 e1 f3 46 2b 13 1f 2b 1e 91 08 f8 bb 58 58 10 85 2f 92 9a 47 6c 6e ab 58 d4 5d 92 40 f0 4d d2 1d 18 89 75 46 b9 aa 55 df aa 11 c9 29 7f 91 01 e1 da e9 50 0a 68 Data Ascii: CE!<9)&)PD+DWa^qS4N}lf#_~CQ_o\e2o?zpM?Od< Z,*pb+W: BFRQfX>\|!+8j3F++XX/GlnX]@MuFU)Ph
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: d8 5a 90 e6 20 69 0b d5 62 e5 ff 13 d1 dc 5e 9f ca 40 76 65 79 91 01 19 80 a8 51 23 c5 16 8b 7d 2d 41 da e6 11 12 c1 70 86 34 98 38 89 c7 a1 e5 61 8b 17 7f 12 67 bf 76 4b 8c 29 1d 47 a1 b0 23 72 b2 ad ed b7 f7 a6 bf 08 d5 2a 19 e8 82 7c f4 5f c2 16 36 d5 58 20 e7 99 44 08 bf 17 9a a0 3b 69 5e 96 51 ec 24 fc fe b6 e6 ec 27 74 bd e6 62 2d c0 ed f9 71 c0 62 5a 67 4a 6c 2a 51 c6 52 d9 1c db 1b 8e 1a dd cd f9 46 2f 70 d0 8e 4c bf 17 5f 0a 69 a9 da 81 13 21 b9 4e 9e b7 98 d8 1a fa 51 97 18 c5 d1 f7 c2 85 16 32 b0 5e 62 ee 1a 25 ed a5 0d b9 a8 c1 79 05 72 96 d9 e7 a8 c6 f1 03 08 46 1a c3 1a a0 10 fc 1b fc 98 a4 fa 7e 33 07 77 1d 86 b0 80 dd de c7 70 6a 22 41 f2 43 c2 9b b4 18 be ef 2f 5f e0 7e c2 d2 61 0d 5f c0 68 57 60 7d f0 57 bb ec 0a b7 40 86 46 46 d6 a6 47 Data Ascii: Z ib^@veyQ#}-Ap48agvK)G#r\|_6X D;i^Q$'tb-qbZgJlQRF/pL_i!NQ2^b%yrF~3wpj"AC/_~a_hW`}W@FFG
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 75 92 46 26 5e 2b 2d 98 78 1a 5e 30 11 35 ce 48 fd fd 4a 63 70 81 6c f0 ab b5 5e 04 c6 fe 67 a6 7f 67 f8 52 8c 5d ce 09 b8 ad cb 4f a5 19 8f 1d b3 40 1d e4 ae af c5 d6 7d 1e 2d 50 b9 59 97 6f f6 b7 74 94 89 8e 1f f5 16 c0 5b af fc 25 4a 2a 6d 8a e6 10 23 ba 78 4f 4c 5e d1 e8 52 53 e3 2f b5 b5 0a 7d 5c 58 ca eb 88 8d c5 50 10 5e c7 c7 b0 3e a4 d5 ca fd 44 68 f6 3c 79 34 71 7f 0e f2 34 f8 e8 de 99 f8 b0 04 58 e3 7f 7a db e6 a0 ee 82 5c 22 78 4f 4a 6e 08 9e a5 57 8f d0 3a 7a 83 c2 77 c7 b0 13 ab ce 22 fb 7f e6 41 05 91 88 e2 35 52 3a aa 7a 47 b7 2f fb 45 a4 08 8c 6a 19 65 e1 4a b6 3f 17 eb e1 5e 39 2d 07 6c c6 4b 59 6d 60 c1 b8 ac db e9 c2 aa f1 1e de 2b d3 15 35 bf e1 22 d5 38 ef a3 f3 44 dc 14 6d ef e4 66 23 b9 1d f2 cc 7f f7 86 9a b4 0a bf 1e cc ab c2 55 Data Ascii: uF&^+-x^05HJcpl^ggR]O@}-PYot[%J*m#xOL^RS/}\XP^>Dh<y4q4Xz\"xOJnW:zw"A5R:zG/EjeJ?^9-lKYm`+5"8Dmf#U
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 95 8d cd e8 96 be df 30 c0 3f 59 0c 38 ac 94 cf 53 60 d5 0b 7c ca 1e c3 31 9d 22 d4 22 65 fa fc 7f 17 25 1b a7 73 6a c4 72 2f c4 82 d9 73 3d c5 d0 31 76 86 29 f0 a4 dd a2 52 03 4b 2e 48 48 bc 99 f3 4a 8c 57 10 0a a1 b2 e0 2f cc c6 a2 ed 49 65 a0 d6 35 f8 53 8b c4 d7 73 90 9b 82 f8 a2 ec a1 bb 88 47 c5 f9 bf ff da 0b 39 d9 b7 a8 62 ce 8d ff 3b 3e fd 9b db ff b0 bf 99 8e 66 3b 35 a7 03 66 33 76 05 c5 85 7a e7 e9 9c 8d cc f9 44 88 15 bf cb 0e 1f 10 28 aa 5f 3f f3 07 ff f2 0c 8d 53 34 18 f3 ae ec 97 f8 80 90 4c 56 5e 2b 8a ef 98 0b 22 29 29 50 a2 fc 24 f9 f2 f8 51 54 b7 2d bd ff c5 c5 9c 54 71 51 b6 2f 9b 1d a1 1c b2 7d d4 51 ed ab d1 dc 36 8e fa 25 2f b7 e2 60 b3 2f 8a e2 f1 5c 57 15 a4 3e 0a 38 85 8a 71 79 11 17 82 c8 bc e2 02 2b 17 b7 8b b4 e3 ee 24 40 bd Data Ascii: 0?Y8S`\|1""e%sjr/s=1v)RK.HHJW/Ie5SsG9b;>f;5f3vzD(_?S4LV^+"))P$QT-TqQ/}Q6%/`/\W>8qy+$@
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 6e 3f 4c 4e 2a 5c 8a 65 61 af 22 96 0c 1c b4 0f b0 4b 37 21 12 12 d7 e7 33 cc 2a 45 e5 c2 00 fc 6e 72 90 de a4 8a bd 4b b1 ff 3a 9c ec 4f 83 83 6c 1f ae 69 c4 44 a0 99 ef e2 64 c5 2c 23 ce 13 2e 42 db 9c d0 15 af 40 7f 33 5c ea 50 00 1b 95 0e 9d 4a 61 80 30 87 56 e9 f9 08 9f 24 22 64 ed af cd 43 08 81 10 3c a3 e7 53 e3 ab fe 8a 63 32 f5 e8 fb 1c c8 20 05 49 3e d0 f8 ce 2c 53 0b e0 4d b3 78 fd 08 e1 25 d7 ab 99 05 ed 34 16 9f 30 e4 4f 94 7b 58 fc b9 ba 27 fe 42 38 6f 00 22 8a 8b 7f c2 96 22 fe a2 e6 5c 42 67 4f 32 11 45 9b e5 22 80 26 4d 49 99 70 3d d2 fc 21 f8 bd 22 29 9e 48 a7 a8 28 1c fb ba 33 b5 d3 6e a0 8c cd 18 85 a1 83 ff e5 2b 2c 04 67 e8 fc 77 e0 e0 9c 45 8f 0e 18 43 73 a9 5f 05 01 3b d8 dd 64 61 1f e2 01 35 82 8f 69 f1 3a 4c 9e 50 59 e7 4a aa f3 Data Ascii: n?LN\ea"K7!3EnrK:OliDd,#.B@3\PJa0V$"dC<Sc2 I>,SMx%40O{X'B8o""\BgO2E"&MIp=!")H(3n+,gwECs_;da5i:LPYJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49913	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	513	OUT	GET /static/img/bg-in.9e70ec73.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	910	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 632380 Connection: close x-oss-request-id: 666D31CE108AF539344A6A35 ETag: "9E70EC7342C1C175D50E90E7A6ADCF00" Last-Modified: Mon, 20 May 2024 05:15:42 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2525262883575623331 x-oss-storage-class: Standard Content-MD5: nnDsc0LBwXXVDpDnpq3PAA== x-oss-server-time: 3 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4172 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ZiRpzSEn%2B4utJZBLOqioyh3%2FX9KMbg1B5gNh0PH%2Fo5qFx9II8aPsEhiATC3JZ2QjNrKBK7AMv%2FX9l5Cad8zal1zSKMsyg1WfAO2s3qnjPZ2ohR0T6cELm3z%2F9MYZg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c52af543bf-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 05 00 08 06 00 00 00 18 f4 d7 b6 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e cc bd f9 af 2d 49 72 1e f6 d5 59 ef 7e df eb 7e 4b 6f d3 b3 48 33 a4 2c d2 86 c1 a1 29 db b2 21 d8 fe 7b 6d d9 b2 00 fd 22 80 16 40 0b b0 3d 06 4d 13 1c 49 1c 0e 39 5b 77 bf fd dd 77 b7 b3 55 95 f1 45 66 e4 89 8a ca ac 3a b7 87 a4 7c 1b b7 df b9 a7 b2 72 89 88 8c f8 32 32 32 b2 fa c3 7f 5e ef ea 1a 93 b6 05 d0 02 55 05 b4 0d d2 0f ff de ff 11 9e c9 77 fc e5 3b e6 b9 bc cb ef be e5 cf e0 bb 5a af ed 8f b6 a3 7d b1 65 e2 e7 5c f1 5c f7 7c b9 ce b8 4b 2f 90 5e 07 8c b5 6a 80 76 b2 2f 38 a9 5a 4c da 1a 53 fe a2 c6 a2 da 61 31 d9 a6 df a3 c9 0e b3 49 8d 19 76 98 a1 c1 ac d2 5f fe 5d 63 8e 1d 26 Data Ascii: PNGIHDRsRGB IDATx^-IrY~~KoH3,)!{m"@=MI9[wwUEf:\|r222^Uw;Z}e\\\|K/^jv/8ZLSa1Iv_]c&
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: dd e2 f4 59 aa 96 1f a2 8c 25 5d 61 f5 90 d5 8f b6 0e 2f 74 63 42 78 88 7e 31 f4 49 3a 34 f2 de 37 3d a6 9e 0f d1 67 56 50 12 6f 4c c5 a5 a1 a7 a1 e8 dc 8c 76 24 d9 1b b5 2b 43 63 d6 ca 33 65 ac fd 60 77 9a 16 a8 9b c8 26 15 b0 0c 01 e4 3d 6d 3b a7 37 a2 5e d1 26 4b 34 fc 6d 6c 5f 6e c8 bd 76 e2 d8 6d 3b 6a 73 8b 7c 75 36 d9 db e8 ec 7b 19 79 4d 6d 52 77 1b bd 7d 50 bf 23 fd 12 9d 1d 3d 55 cf 77 74 ff 88 dc 97 68 3d 26 df 07 f3 2e 83 25 54 ee 45 ef a9 6e d5 b1 c4 89 23 af e5 1a 89 74 b3 c3 2a f6 65 80 a8 43 e3 b3 cf 2c 86 13 f5 10 e5 20 d9 e0 11 99 3e b4 9d 6c 57 ad 2e 68 db bd ae 4e 8a 23 60 16 e2 9a b3 d9 06 97 b3 35 1e c7 7f 2f e7 6b 5c cc d6 b8 98 6e 70 3e df e2 64 da 60 3a c9 29 50 4e 70 4e d6 da 75 c1 6a 9f 92 10 59 20 61 2d 53 8b a6 ad b0 6b ab 88 Data Ascii: Y%]a/tcBx~1I:47=gVPoLv$+Cc3e`w&=m;7^&K4ml_nvm;js\|u6{yMmRw}P#=Uwth=&.%TEn#t*eC, >lW.hN#`5/k\np>d`:)PNpNujY a-Sk
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 19 1e aa 22 4c bb ef 19 fa c8 ae a9 91 77 a9 7e 40 4e a4 ac 9d 63 91 bf f2 fd 90 7c 1b 5b de 59 98 ba 9d 91 51 1e 17 f8 e2 79 5c dc 35 89 7c a6 ba 4c b6 c5 8c 37 d5 13 3f f4 64 c7 d1 e6 d0 fe f6 ea c9 08 65 4e 4e 4b e3 b2 32 d7 29 53 e8 77 69 0e 14 a6 4c a2 b2 38 f8 92 97 4f 6d 6b f0 41 53 72 e8 6d 3f a7 97 7d be 16 8f 3b 7f 2f e6 9b 00 da a7 6b 9c cf 76 38 9b 05 6f bb b7 07 41 ee 08 da 47 b6 d5 8b 16 3d 0a 5d c1 2b 25 40 ba 21 80 a7 a7 9d 9f 89 9f 02 98 16 50 ad 40 5a fe 56 50 4d 9c 05 f1 be 07 d1 ae d0 46 26 4b 84 05 41 bb ec 30 70 5c 04 ed 2c 4b 0c 14 3c f6 e2 61 8f 9f 83 17 9f 80 1d 02 d4 03 70 e7 df a1 0c a6 d5 00 70 e7 d8 e8 f3 77 02 97 05 ee e3 aa ff 41 25 ac 42 c8 1a 31 a3 b1 c9 3f 61 83 6e 85 53 3f 68 bf bd c7 31 c3 e7 2c 48 30 20 2b 01 f4 08 98 Data Ascii: "Lw~@Nc\|[YQy\5\|L7?deNNK2)SwiL8OmkASrm?};/kv8oAG=]+%@!P@ZVPMF&KA0p\,K<appwA%B1?anS?h1,H0 +
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: e3 d9 63 88 cc 74 8b f3 f9 0e a7 74 68 d2 21 69 f4 4e 1a bc 28 48 f1 4a 8a 60 e6 76 8f 06 f7 6d 3b e1 12 b9 01 31 e4 85 e0 9a 0e cf 0a 5b c6 3b 68 88 8c 7c 0e e1 2c 04 d6 12 d3 2e e1 31 21 4c 26 78 da 03 06 9b 54 95 44 44 2c 26 dc 5d d8 e2 78 ba 93 21 04 6f ba 7a d8 43 88 4d 8a 69 97 76 f7 a1 31 2c 47 af 3f 81 7c 88 a3 af d0 4e a7 d1 e3 1e 3c f7 e1 a7 c0 31 51 10 46 31 4a d9 9c d5 3b 40 c1 3d b4 48 f2 54 c4 fe 49 17 75 41 67 e3 f0 cc 64 50 00 d1 9b c0 0a 26 47 3a 91 70 aa 1f a3 31 b0 71 11 b9 57 6a 26 de cf 1a 4a b2 93 9b 2a 0b c2 e5 7a 83 a3 66 85 63 10 b8 af c5 b3 3e 9f 12 b0 d7 e2 75 e7 41 d5 f9 94 9e f7 6d 00 f6 04 e9 72 a4 34 00 f5 09 63 dd 59 46 80 fb 56 de 99 4c ea 70 80 83 c2 12 44 39 b0 47 56 a7 53 b4 8c 71 97 ed 1e 02 e4 0a 4d cd cf 0b ec aa 85 Data Ascii: ctth!iN(HJ`vm;1[;h\|,.1!L&xTDD,&]x!ozCMiv1,G?\|N<1QF1J;@=HTIuAgdP&G:p1qWj&J*zfc>uAmr4cYFVLpD9GVSqM
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 03 3f 80 ce 1d 45 a7 2b f2 01 b4 94 f4 45 ec 63 02 4b 1e e4 99 03 93 a3 dd 30 a1 05 9d d0 a0 08 be 12 06 4b 02 bb af 71 d2 36 f4 65 e3 a4 bd c7 72 b7 c2 82 c0 7d c2 5f 82 f7 b5 80 f4 f0 db 04 00 cf f4 90 fc 9b c0 bd 5d 07 f0 3e 65 5c 3b 0f a3 ee 24 2b 0d 81 7c f0 ba 47 2f fc 94 9e 77 1e 62 0d 83 de 1f 91 90 f3 db 68 ab 63 59 21 ee ea 1d 9a 76 17 84 91 7b 00 ed 12 db 66 81 0d c1 7b cd ac 32 4b 89 79 e7 21 d5 ab fa 1c ef 56 67 78 bd 79 84 ab c9 39 36 11 bc 97 48 af 22 41 f0 a4 73 4e c4 63 20 a6 5b 74 31 41 7b 5c fd 4b f9 b8 2d a9 db b3 52 9d 1a 03 53 97 ef 47 b6 5f 76 22 97 40 63 81 f9 25 e0 ee 23 15 8a a2 98 b1 d8 22 8b b1 bd e4 50 f0 f4 31 88 a6 57 b7 39 cb 21 d5 78 cf a3 91 79 3f ac 8e 4e b3 f2 6c 36 da b4 bd 0c 0e 0b 3c f5 95 2a af 23 51 7c 76 9c 1e 38 Data Ascii: ?E+EcK0Kq6er}_]>e\;$+\|G/wbhcY!v{f{2Ky!Vgxy96H"AsNc [t1A{\K-RSG_v"@c%#"P1W9!xy?Nl6<*#Q\|v8
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 50 6b f7 2c af 4b 9f 3b 72 67 0a e9 94 d1 af 7a ea 46 fb 54 30 04 63 a1 5c 9d b3 27 56 63 95 f5 5a 5a 1b e4 e6 4a 5a 7c 2a fd 6d 3d 66 67 40 9b 92 c7 9a 39 29 d3 e6 48 37 1e ac 21 ac 37 47 eb d6 85 e3 2c c6 b9 2b 1f a5 6b 9e be 07 b6 58 5a 48 25 8f 7b a9 1e 0b 22 73 e0 29 12 2e 85 8f 18 9e 0d a9 d7 a4 8e 62 9d 36 cc 21 f5 d5 b7 37 56 a1 1f 43 a6 bf 29 ee de 94 f5 34 ed 80 8f ac 50 99 fb 1f b4 ff b1 5c 3a cb 60 de cb e9 56 d1 09 63 a0 2b 3e 17 a3 28 f1 a2 7b 8f 7b 69 b3 37 91 c8 87 32 a9 de 30 7a 6b 7f 38 ce 2d de dc 2e b0 86 1d 68 26 a9 12 c0 2c 85 4d 14 54 41 51 72 b3 74 c9 c9 5e ac c1 92 d1 8a 6b 1a b2 ca a8 03 a2 07 81 37 d7 cb 34 76 e5 8d a9 a4 c8 4e 13 93 af c3 20 2f 75 0e a8 ce 89 50 a5 7b 68 dc c8 40 16 0b 8c c9 90 09 7d 12 e0 5e 3a 1c 6c 2b 3f 70 Data Ascii: Pk,K;rgzFT0c\'VcZZJZ\|*m=fg@9)H7!7G,+kXZH%{"s).b6!7VC)4P\:`Vc+>({{i720zk8-.h&,MTAQrt^k74vN /uP{h@}^:l+?p
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 5d 71 86 c8 97 79 4f aa f4 97 95 39 fe ba 9d ff 62 f8 45 1a 6f 09 ad 79 8f bc f2 db 81 53 4f b7 4e 75 46 3e c7 f8 31 f6 bc 34 a5 b4 09 df 2d a5 e9 d8 7b fa bc 08 5a 49 72 33 f6 dc f0 3b a6 dc 8e b9 50 79 11 b8 3b 7b 5f ea 53 8e 56 3a 87 04 b8 3b 63 f0 5b 03 77 33 8e d4 27 cd 6c 68 54 4d e2 45 a1 e3 c5 f1 14 84 e8 d0 f2 76 7c d6 b9 29 51 2a 71 a2 da 32 89 45 ba 05 98 cc 85 f1 b6 a3 15 40 ce ac 31 17 b3 95 5c b0 c4 18 f7 b3 29 e3 db 43 6e 73 7a db 8f 27 21 4c 46 3d d7 69 4b 5f c6 74 40 98 4c 54 5c e9 ee 99 92 e0 76 bc b7 de 98 aa c1 33 4a ba 68 83 a2 62 52 20 d8 d3 53 d6 13 e7 88 d7 29 1b 52 48 6a 6a 49 bd 25 35 84 cf c4 6c 80 fa b9 9a cb cd 56 09 b8 27 a0 11 2b 4c 8c 7e 88 41 f6 86 66 68 06 e7 88 e1 0d 56 09 0d e7 de 8d 56 a0 03 24 ac 55 8f e0 47 78 e6 f6 Data Ascii: ]qyO9bEoySONuF>14-{ZIr3;Py;{_SV:;c[w3'lhTMEv\|)Q*q2E@1\)Cnsz'!LF=iK_t@LT\v3JhbR S)RHjjI%5lV'+L~AfhVV$UGx
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: a0 4d f1 3d 46 89 5a a5 59 f4 c0 96 ac 50 01 a0 f7 0c e6 90 b6 2a 5b 38 a1 9c c4 b8 c7 43 ab 3c c5 28 a0 1d d8 d6 35 d6 6d 3c 9c 5a ef dc 01 58 af 78 0f b1 c4 43 52 ee 01 96 55 84 2e ef 69 aa e6 10 37 a6 69 b3 43 06 0f fc 6d da 47 33 71 e5 9d f8 77 8a 95 77 a0 5e b7 6e f9 b5 8d f9 3c 04 58 30 6f 29 0f a6 32 ae fd bc b9 c6 a3 fa 3d ce 9a 1b 9c 54 f7 38 9d dd e2 74 b1 4a e1 32 27 0c 97 61 5e 77 89 67 0f 17 2b 85 f0 17 de a4 ba 93 18 f7 45 b5 92 8c ec b3 c5 12 f3 e3 25 66 cc dd de 6e 31 6d b7 98 b4 35 2a de 9e ca 00 df 29 c3 63 76 a8 9a 0f 68 b7 77 40 b5 44 35 bb 10 a1 6e 25 d5 c2 0c 68 e7 00 af e3 ac b6 00 6e d0 b6 04 f0 f4 c0 33 65 24 63 dd 4f b1 a2 e7 3d e6 77 97 0c 33 ed 05 de 6e 2e f1 eb 9b e7 f8 77 f7 3f c0 af 27 9f 61 3b e5 c1 d7 01 6a 44 4d 6f 59 2e Data Ascii: M=FZYP[8C<(5m<ZXxCRU.i7iCmG3qww^n<X0o)2=T8tJ2'a^wg+E%fn1m5)cvhw@D5n%hn3e$cO=w3n.w?'a;jDMoY.
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: ed 6e 13 73 9c 4e 80 d9 02 d5 f2 18 98 b5 a8 b6 ef d0 ae af 82 d7 fd e8 63 60 7a 24 68 b8 dd 71 40 04 ef d4 56 3c c8 fa 01 68 af 81 76 13 0f 82 2c d0 34 c7 d8 ed 18 f3 3e c7 7d 3d 93 f4 90 04 ef 6f ea 47 f8 f5 ed 73 fc d9 bb 1f e1 67 f8 07 b8 5d 9c a0 55 24 9e 31 f2 9a 2b 3f a5 3f 8b 61 32 c2 1b f5 bc 3b 7e 08 a9 e3 ed c6 cc 09 9f 48 6f 81 ac e1 65 27 75 a4 95 39 bb 50 b3 c2 42 1d e1 d6 8a 49 74 0a 21 6c 43 22 a0 75 75 e6 e7 00 30 1d d5 11 6e de 64 a7 83 dd 3d f2 87 53 f9 be 0d 2f 52 dd e0 64 58 ea 3d 14 0d 5a 8f bc ea 83 91 77 c7 aa 1e 7b ee bb dd a3 9b c9 38 41 c3 9b 4b 09 29 75 c4 86 92 3e b0 17 61 65 80 91 f6 ab 64 60 e5 15 db f9 4e 3c 56 a8 50 a6 96 bf 6e 3e 77 d9 d6 18 70 37 75 1f 42 af cc 70 fe ce be b2 f4 29 60 94 d1 b6 3b a0 6e a0 b4 e5 9d cc d5 Data Ascii: nsNc`z$hq@V<hv,4>}=oGsg]U$1+??a2;~Hoe'u9PBIt!lC"uu0nd=S/RdX=Zw{8AK)u>aed`N<VPn>wp7uBp)`;n
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 65 dd 44 e9 76 3c 2b 43 63 13 49 ab b0 bb 07 39 65 1e 85 aa 07 60 5d c8 8f bc 2a 07 32 0c 71 73 b7 c5 fa 7e 65 34 75 f2 3e 95 d0 b7 01 ee b9 4b ad 4a 53 de 0e af ab 78 0e 54 29 05 9a f2 6b 05 ef b2 7b 6a 68 a0 9e 6f ab e7 3c 90 8f e2 d0 55 d7 fe cc 4b 97 ac f9 0e db ad 19 a3 cb 34 05 6a 31 4e dd ea f3 0c 78 4a 0e 8f 43 ac 6a 89 94 39 40 3a 46 76 a7 63 a5 b8 7a 84 6d 9f 73 f5 58 63 c5 cf 76 b1 92 59 0c 8d 01 1c 21 67 e4 49 02 f8 51 c7 90 3e 0c ad a3 e6 d2 c3 a9 63 43 93 e7 39 1b 94 e9 48 0f fc 15 3a db f1 58 fb fa 87 36 6e 23 9d 8b ec 55 a0 ab 05 72 72 a6 f5 0f 81 e2 dc 7c 2e ed 50 18 02 da f1 7b 31 f2 6c 2e 8a 5f 89 66 f1 05 1b ff 9e 21 5d aa 76 14 c8 3b 0c d1 03 a6 ea 34 32 a1 31 a2 ef 8c 6e 11 53 1a 5f 4c e9 8b 15 54 17 06 98 6b 27 bb 5b e3 de cf 92 c5 Data Ascii: eDv<+CcI9e`]*2qs~e4u>KJSxT)k{jho<UK4j1NxJCj9@:FvczmsXcvY!gIQ>cC9H:X6n#Urr\|.P{1l._f!]v;421nS_LTk'[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49914	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	517	OUT	GET /static/img/buding-in.537670f0.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	907	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 33006 Connection: close x-oss-request-id: 670A6B218F02F93930E725D6 ETag: "537670F0CFE6D2EEF641A50FA13D3752" Last-Modified: Tue, 20 Aug 2024 09:32:40 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8100039110384243175 x-oss-storage-class: Standard Content-MD5: U3Zw8M/m0u72QaUPoT03Ug== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5397 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lmt6KN81nzACtBJwOU5LIA5ZxuWs%2FWa49iiexsCRFaIs5LHGVe0eHfXWQXCVnUKlQRXhuKDzW%2BxMkVgNuJInQcdy0%2BYx%2FOzEI09CYvZEhB9b1oTyeHTZLGbvhpNFYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c53c4041d5-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 8c 00 00 00 bc 08 06 00 00 00 f2 d6 ff 52 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 09 98 65 67 55 ee ff 7e fb d4 d4 73 27 21 09 09 93 0c 61 1e 03 09 01 05 82 24 c4 24 cc a1 03 46 ae a8 28 51 d4 ab 78 f5 af 32 dc cb 5f c4 e1 11 45 2f 86 21 2a ca a0 08 49 20 0c 01 12 50 86 30 25 04 19 03 84 59 42 20 64 ea b9 6b 3a 67 7f f7 79 d7 b7 d6 3e df d9 b5 4f 9d 7d aa ab d3 5d e9 75 78 8a aa ae da c3 b7 df bd 2b e7 57 ef 9a 02 0e d0 2b 9e fa 8c ad 58 3f 79 4a 89 f8 28 84 e2 41 11 b8 57 11 71 5c 0c 38 02 c0 0c 80 89 03 74 6a 3f ac 2b e0 0a b8 02 ae 80 2b e0 0a b8 02 77 54 05 ba 00 e6 42 c4 f6 32 e0 c7 01 f8 2e 62 79 6d 81 70 0d f6 2d 7e 36 7c ec d2 1d 07 e2 c2 c3 6a 1e 34 9e f9 Data Ascii: PNGIHDRRsRGB IDATx^egU~s'!a$$F(Qx2_E/!*I P0%YB dk:gy>O}]ux+W+X?yJ(AWq\8tj?++wTB2.bymp-~6\|j4
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: cf 7c f6 2f 84 50 5c 80 80 2d e3 9e cc b7 77 05 5c 01 57 c0 15 70 05 5c 01 57 c0 15 38 88 0a 44 ec 8c 45 f9 9b 13 ef bf f8 5f c7 59 45 6b 60 8c 67 9e 39 5d 16 9b 5e 0b e0 d7 c6 39 81 6f eb 0a b8 02 ae 80 2b e0 0a b8 02 ae 80 2b 70 c8 29 f0 0f 45 b9 fb b7 c3 07 3f 38 df 66 65 ad 80 31 9e 7d de 11 31 76 2f 8d 01 8f 6f 73 50 df c6 15 70 05 5c 01 57 c0 15 70 05 5c 01 57 e0 d0 56 20 44 7c 22 84 89 67 84 cb fe 6d fb a8 95 8e 04 c6 f8 e4 67 1e 53 4e 4c 7c 18 21 3c 74 d4 c1 fc e7 ae 80 2b e0 0a b8 02 ae 80 2b e0 0a b8 02 6b 48 81 18 bf 5c 74 bb a7 87 2b de 7d d3 72 ab 5e 16 18 e3 19 db 8e 2c 3b f8 a8 c3 e2 1a ba f1 be 54 57 c0 15 70 05 5c 01 57 c0 15 70 05 c6 50 20 c4 f8 e5 d0 c3 13 c3 e5 17 dd 36 6c b7 a1 c0 c8 9c c5 5e d8 74 79 08 78 c2 18 e7 5c 7e d3 4e 01 9c Data Ascii: \|/P\-w\Wp\W8DE_YEk`g9]^9o++p)E?8fe1}1v/osPp\Wp\WV D\|"gmgSNL\|!<t++kH\t+}r^,;TWp\WpP 6l^tyx\~N
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 15 70 05 5c 01 57 c0 15 70 05 5c 81 83 ad c0 a6 99 c4 71 9d 02 f1 25 17 03 db f7 b5 5b 51 c4 cb 43 ef ec 73 df 0e e0 b9 ad f6 38 ed 81 08 db 4e 42 e4 d0 eb 0b 3f de 6a 17 df c8 15 70 05 5c 01 57 c0 15 70 05 5c 01 57 e0 10 51 e0 fc 53 11 4e bc 07 e2 c5 d7 00 1f be b6 dd a2 62 7c 47 28 cf 3e f7 aa 08 9c dc 6a 8f 9f 7d 00 c2 93 1e 88 f8 ae cf 03 84 46 7f b9 02 ae 80 2b e0 0a b8 02 ae 80 2b 70 87 53 20 6b 56 68 33 f1 f8 39 34 4c 4e b6 6f 71 97 fc 23 df 74 8c de 87 07 5c ca fb 1c 03 dc 79 0b f0 a5 eb 5b 8f 70 8e 31 5e c3 90 f4 0f 10 70 b7 b1 16 38 66 e3 c7 b1 8e ed 1b bb 02 ae 80 2b e0 0a b8 02 ae 80 2b 70 40 15 88 03 0d ac a3 75 b3 16 28 d4 13 f3 73 41 46 0c a9 4b 75 11 e4 df 03 2f fe 3b 87 c4 92 ad 67 f4 d8 dc 8f 3f 93 ef d5 1a 66 1f 4a 00 d9 46 e7 88 eb 19 Data Ascii: p\Wp\q%[QCs8NB?jp\Wp\WQSNb\|G(>j}F++pS kVh394LNoq#t\y[p1^p8f++p@u(sAFKu/;g?fJF
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 5c 01 57 c0 15 70 05 5c 01 57 60 7f 14 88 13 11 98 2a 93 c3 68 8d b8 ad 1a 45 18 51 2b 8b 05 16 19 ae e6 54 16 ba 8a d6 3e 47 5b e5 34 75 9c ae 7f 2f 87 b6 91 8b 1e 17 1a 5b b8 8c 03 f0 aa 39 8e ac e0 26 0c b3 8a 7a 1f 9d c6 32 35 fd 5e 25 68 1c 79 99 d9 06 ed 81 71 9c a3 fa b6 ae 80 2b e0 0a b8 02 ae 80 2b e0 0a ec 87 02 52 e0 42 58 64 28 ba 3e c3 b9 0a 43 2b 34 8a b3 88 e4 28 8a b3 68 85 2d d6 80 51 17 d2 66 54 49 6b a7 91 c7 1c 17 1c 4d 90 16 fb 59 81 8e d8 80 da f0 7b b6 44 24 34 32 af b1 ac ca ae f7 43 e5 f6 bb 3a 30 b6 d7 ca b7 74 05 5c 01 57 c0 15 70 05 5c 81 db 41 81 d8 29 25 67 31 4e 29 2c 1a 1b 99 ab 68 fd 09 09 8e fc 19 8d 44 82 a2 8d f5 b3 9c c5 81 96 39 2d 20 6d 80 01 5b 6e 2f 1d c1 57 c2 8e 2d 8e 6f d0 c8 4d 6d ac 20 f3 19 e9 36 d2 75 ac 9a Data Ascii: \Wp\W`*hEQ+T>G[4u/[9&z25^%hyq++RBXd(>C+4(h-QfTIkMY{D$42C:0t\Wp\A)%g1N),hD9- m[n/W-oMm 6u
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 9b 9c 24 d0 85 14 42 ce 3e 57 95 d4 3c 46 5e 04 23 4b 49 10 2c c7 b1 74 47 ba 95 cc 81 ac 26 d7 14 08 d2 89 5c 1d 47 09 55 67 f9 8d 4d d0 28 fa 65 6d 7f 78 3c ba 8c 6c ee 3d af c0 38 12 aa 47 3f 9d ed 1b 77 8f 3e 96 6f e1 0a b8 02 ae 80 2b e0 0a 0c 2a 70 fc 16 e0 47 3b 5d 15 57 40 15 48 60 18 0b 86 a2 f9 b5 86 75 09 90 7c 19 db 55 8e 9c 82 16 01 51 fa 2d b2 48 c4 26 9f b4 05 c6 fc c0 0d 37 22 2f 36 e1 79 eb b0 48 48 33 a0 25 28 72 1d 3a 51 66 c0 4d ac 5a ec 64 74 96 83 5a 13 b7 f2 5c 74 2f 25 5c 6d 79 87 12 9f ef 43 a3 84 ab db 40 63 e6 46 2e 46 44 16 c0 cc 96 08 74 19 c5 c5 1c 05 ce cb 3f a4 0e 8c fe 4b ec 0a b8 02 ae 80 2b 70 60 14 d8 34 0d dc 6d 2b f0 b5 9f 1c 98 e3 fb 51 d7 9e 02 04 2f ab 8c 96 82 17 75 1b eb 2c b3 c4 5d d4 dc 45 9b 15 6d 90 37 96 73 Data Ascii: $B>W<F^#KI,tG&\GUgM(emx<l=8G?w>o+*pG;]W@H`u\|UQ-H&7"/6yHH3%(r:QfMZdtZ\t/%\myC@cF.FDt?K+p`4m+Q/u,]Em7s
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 60 eb 91 df 7c 28 c2 d1 eb 07 8e 10 f7 2c 20 fe df 2f 02 fb 7c ea cb 4a a5 5d d3 fb 31 1c 4d 58 9c 4c 61 df 41 18 d3 50 b4 84 a3 75 8c 1e d9 8e b0 c8 70 f4 b4 16 bb 48 41 cc 30 15 6a 2e e2 92 cd cc b9 cb dd 45 6d 9f 23 51 5e 1d f3 c7 e7 d7 5c c8 25 c7 48 05 31 8a b3 39 0d 37 7c 6f 94 cb b8 dc dd ac 15 d2 54 11 ec 54 41 2d 15 dd 0c 3f cb 20 eb 4e 0a 4d 0f 2d be c9 7a 33 f2 94 0b 65 15 9a 0e 7f ef c0 b8 a6 7f a7 7c f1 ae 80 2b e0 0a ac 65 05 c2 d3 ef 89 f0 c8 a3 1b 2f 21 7e 67 17 e2 5b af 4b 79 6a fe 3a 7c 14 20 db 58 ee 62 5e ec 52 15 af 18 08 25 60 14 26 63 b1 cb 34 dd c5 94 4f 58 15 bb b4 79 74 ea f9 7c 96 37 a8 a1 6f 71 e9 d8 6f 51 1a 73 d3 5d a4 b3 a8 2d 74 9a 26 aa 08 8c b1 21 a3 da 74 ac 92 59 12 82 ae 2c d3 55 b8 af 0d 61 e9 3c 6c af e0 6c d0 98 46 Data Ascii: `\|(, /\|J]1MXLaAPupHA0j.Em#Q^\%H197\|oTTA-? NM-z3e\|+e/!~g[Kyj:\| Xb^R%`&c4OXyt\|7oqoQs]-t&!tY,Ua<llF
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 19 03 e6 87 b9 91 b6 1d f5 c9 7e 79 06 60 31 4d 77 49 2f 86 bd d9 79 db 72 3b 55 d3 9e cd 5a b4 aa 69 dd fc 1e c7 22 3c ef c9 a9 e0 e7 c6 db 80 6f 5e 0f dc 70 13 70 cb 6e e0 d6 7d c0 4e 8e 0c 5c ae 65 51 3a 4e 6b 60 94 60 ff 86 29 e0 98 cd c0 3d 8f 06 1e 7c 17 84 fb dd 19 f1 53 df 06 fe d5 81 f1 00 fc aa f9 21 5d 01 57 c0 15 58 53 0a 84 47 6c 40 78 e2 d6 e5 d7 cc 37 ad cf ec 46 bc 6a b7 4f 7e 59 53 77 77 05 8b ed 28 28 12 18 ab 70 74 56 7d cc 43 6a 8b 1b 2c aa 8d 48 06 23 2c 32 1c cd fc 42 2d 88 19 fc 23 64 58 de 5f 6d 8d 59 3a a0 80 22 21 90 4c 16 58 58 63 b0 98 e7 2e ea 0e 3a a2 30 2e 76 11 69 8c 71 6d 65 a0 27 a9 61 66 86 cd a7 10 66 d6 09 3c a2 e8 20 14 1d 60 82 8b cf 42 c8 03 8e 63 be b6 1c 14 73 80 54 88 94 1c cf bc c0 27 f5 5b ec 17 dd 30 6d 83 7f Data Ascii: ~y`1MwI/yr;UZi"<o^ppn}N\eQ:Nk``)=\|S!]WXSGl@x7FjO~YSww((ptV}Cj,H#,2B-#dX_mY:"!LXXc.:0.viqme'aff< `BcsT'[0m
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 25 db f4 44 02 e3 02 70 ff 7b 22 3c ed 89 29 f2 7d e9 7f 00 d7 fd 40 b5 53 67 b3 7e fb ec ef 36 b9 44 75 35 67 19 96 ee 01 b3 71 3e 96 c5 67 03 ca 8f 46 e0 f3 dd 32 7c 6b ba 8b 1b 71 04 f6 0c f5 73 e3 69 db b6 f4 a6 c3 39 40 7c 51 40 78 e4 d8 8f 0b a1 f1 ff 3b 2b 39 8d 5f f8 01 f0 86 8f 8e 7d 08 df c1 15 70 05 5c 01 57 60 ed 2a 10 9e d3 41 d8 1c 50 5e d4 05 76 ac dd eb f0 95 af 40 01 86 a1 09 8c fc 2c 7d dd 6b c0 28 6e 5c 02 46 c9 5f 24 50 4a c1 0b e4 b3 14 8d 18 30 66 5c d5 bc 92 1a ca 18 30 4a 27 9b ac a0 86 df cf 81 71 e8 18 3d 9e 5f 1a 41 26 67 51 e0 91 3b 5b 55 72 16 2e b6 d6 38 74 1d 4b ba 8c 1a b2 26 fc 2d 2c a2 64 e1 49 e8 a0 d8 b0 09 c5 fa 4d 29 3c 5d 15 fd e8 d5 d0 55 ec 2e a2 dc b3 33 fd 8c c5 33 13 2c a0 a1 20 7a 6d 3c 25 81 93 3f ef ce 01 e5 Data Ascii: %Dp{"<)}@Sg~6Du5gq>gF2\|kqsi9@\|Q@x;+9_}p\W`*AP^v@,}k(n\F_$PJ0f\0J'q=_A&gQ;[Ur.8tK&-,dIM)<]U.33, zm<%?
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: d7 da 20 5d 81 91 e0 28 58 1b 3f dd 09 e5 19 e1 75 17 ed 59 c9 f3 b6 62 60 e4 c9 76 3d e9 99 47 6d 98 99 f8 0c 10 4e 68 75 f2 9f 39 01 e1 bc 53 10 3f 7e 1d f0 8e ab 5b ed e2 1b b9 02 ae 80 2b e0 0a b8 02 ae c0 1a 52 40 2a a4 d5 61 94 3e 7f 96 bb c8 bc 44 05 1f 82 19 dd 3b e9 c1 18 11 a6 a2 d4 99 c8 0c 69 42 9d 00 63 6e d3 35 5d 7f 53 75 34 b7 4b 4e 60 ea bf 98 e0 69 49 3b 9d 81 1c c6 ec 38 da 27 92 d5 d5 b2 3e 9d ee 92 e6 50 a7 06 dd a9 75 8e 42 24 43 d4 92 32 48 17 b2 00 26 39 e5 65 06 81 e3 02 c5 f0 d3 19 d3 85 b6 d4 e1 f1 1a 5b eb e8 ba 53 a5 4e 4a e0 e4 e2 a5 f7 a3 f6 7d d4 82 9a f0 9c 33 10 4e b8 07 e2 7f 5e 03 7c ee eb 35 60 b4 c6 8a da 0b 52 4a d4 e9 5e 16 df 2a 3a f3 8f 09 17 bc 7b c5 c5 24 fb 05 8c bc bc f9 33 ce 79 d0 c4 44 71 75 2a 29 1a f1 3a Data Ascii: ](X?uYb`v=GmNhu9S?~[+R@a>D;iBcn5]Su4KN`iI;8'>PuB$C2H&9e[SNJ}3N^\|5`RJ^:{$3yDqu*):
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: b8 96 0f 16 d0 4c 22 4c 4f a3 f8 5f e7 00 eb 67 d0 7b f5 5b 81 dd 7b 50 4c 11 24 19 cb 27 30 b2 e8 85 1f da 7f 11 91 41 f0 17 84 0b de fd a6 d5 7a 6a 56 15 18 e3 69 db b6 94 d3 f8 89 66 21 2c bb c6 f0 87 67 22 de b8 0b f8 f7 ab 80 f9 fd 0e ad af 96 1e 7e 1c 57 c0 15 70 05 5c 01 57 c0 15 58 a9 02 36 e5 c5 1c 46 71 d9 b2 c6 dd e6 30 b2 35 8d 85 a4 3b 06 8c 1a 92 96 d1 7c 6d 16 50 43 98 0c 18 a5 ff 22 3f f8 b2 fc 45 31 0b 15 10 97 f4 62 14 d2 d2 fe 89 93 40 b1 45 2b 8e 17 f4 7b fc b9 f5 3c 24 98 d1 65 b4 d0 6f d3 24 3b 19 c9 c2 93 eb 71 f8 d9 42 cc f9 f6 a9 aa 9a 4d bb 09 8b e5 ec 9e d4 46 47 72 18 35 3f 92 9f 39 53 fa 91 f7 45 b8 f3 91 28 3f 70 25 0a 9d f4 c2 f9 d2 72 5c 69 bd b3 a0 6b 92 30 f9 7c b1 b8 e7 d8 70 e1 47 76 b6 51 b2 cd 36 ab 0a 8c 3c 61 f7 ec Data Ascii: L"LO_g{[{PL$'0AzjVif!,g"~Wp\WX6Fq05;\|mPC"?E1b@E+{<$eo$;qBMFGr5?9SE(?p%r\ik0\|pGvQ6<a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49912	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	516	OUT	GET /static/img/botton-1.93f3ca53.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	903	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 26008 Connection: close x-oss-request-id: 666D31CE048FEF3431F85351 ETag: "93F3CA53871F273491D214494A0B5D43" Last-Modified: Mon, 20 May 2024 05:15:45 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5174893089628399927 x-oss-storage-class: Standard Content-MD5: k/PKU4cfJzSR0hRJSgtdQw== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1366 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g3690qX%2FBaidauZ4uuIWnd5vMCgTcP7PasO6pWoUJftjRxsix8URHa3PNBN0rw9DKjJwA9K%2Bt7q8ECJm4taye7hZxbaUQHoZUYnzinMLP2qfeSHinLS2zmQldjSWmg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c53d2f437b-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 4e 00 00 00 58 08 06 00 00 00 03 49 78 5a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ed bd 7b cc ae d9 75 17 f6 bc 67 3c 73 66 c6 8e 4d 94 d8 71 e2 0c 14 21 a4 16 fa 6f 05 52 a3 a8 a2 97 54 a8 55 d5 0b 42 c8 06 13 1a 94 22 8a 8a 7a b3 02 28 72 02 98 24 0d 89 c9 5d 94 26 0d 38 6d 09 34 6a 28 0d 25 10 2a 45 a4 04 da 46 15 25 b4 b4 0a 89 6d 4e 35 f6 50 1c 5f e6 72 ce f8 9c b7 7a f6 5e 6b ed df fa ed b5 f6 de cf fb 7d 67 3c 93 79 47 3a f3 7d df fb ee 67 5f d6 e5 b7 7e 7b ef b5 f7 73 da 06 ff 9d cf e7 27 5e d8 5e 78 e6 ff db 1e dc bd bb 3d f9 96 3b db 9d 3b 77 b6 ed 34 7a e6 fa dd 55 02 57 09 5c 25 70 95 c0 55 02 57 09 5c 25 f0 46 91 c0 a3 6d 3b 3f da 1e 3d ba bf bd fa f9 2f d9 Data Ascii: PNGIHDRNXIxZsRGB IDATx^{ug<sfMq!oRTUB"z(r$]&8m4j(%*EF%mN5P_rz^k}g<yG:}g_~{s'^^x=;;w4zUW\%pUW\%Fm;?=/
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 9c 24 09 fc 9d d7 ed b9 37 b2 5a af 7d bf 4a e0 2a 81 ab 04 ae 12 b8 4a e0 2a 81 c7 21 81 7d db ee 9d db 5b 5f d8 73 9e 0a 71 fa e8 f9 97 bf f8 b4 bd fa cc a8 b1 77 fd f8 4f fc 86 27 3f fe fc fb ee 7c fe d5 7f 7e 3b 9f 9f db ce e7 bb e5 7c 5d f9 77 96 9f 52 83 7d 4e 7f ef 7f ea 77 fa 3b af 7d e1 e6 e1 4d cf ef ed cf 9f a5 cd fd e7 4d ff d3 fe 60 9d d8 47 6d 23 6b 57 3f 8f fa 31 fa 6e d4 6f 7c ee d2 3a 50 07 97 ca 69 d6 f6 ec 7b b5 07 6c 7f e5 99 e8 b9 99 7c b9 de d5 76 b0 de ec 99 15 1d df c4 2e 2f 69 f7 88 7e 57 ec 09 fd 60 45 6f 51 9f dd 67 e7 ed bc 9d e4 b8 6e 35 80 ea 62 fd 83 ea 7a 3a 24 76 6f 76 47 27 6a 81 a9 c8 c4 47 c3 4e 55 5a 1a 97 1e 94 4a eb 28 da 08 aa 70 ea f3 ad a7 0b e2 a8 c3 23 19 1d 81 2f 7b f4 cc a3 5d 34 76 c6 b8 52 0f 2b 7e a1 47 d0 Data Ascii: $7Z}JJ!}[_sqwO'?\|~;\|]wR}Nw;}MM`Gm#kW?1no\|:Pi{l\|v./i~W`EoQgn5bz:$vovG'jGNUZJ(p#/{]4vR+~G
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: f7 b5 bd 96 6d 3d ee b1 5c eb 8f 25 60 3a f6 14 c5 45 50 05 6c 5b 39 88 af f8 cf c2 ab 8f 83 1e 80 8f 10 9a 15 15 22 e0 ba d4 99 51 64 82 4e c4 3c 23 8b 36 03 56 92 06 28 8b be b9 3e 56 06 7a a3 32 40 28 2c 14 27 15 46 5c 07 83 29 8a e0 52 92 16 11 df 51 5d 9c 13 b5 d4 2e ca 7d a4 b7 fc bb 10 0e a1 5a db 5d b4 3c a7 75 25 21 f9 39 9d 85 f0 00 bb b6 ef 99 29 2c 8d 7d a2 5b 64 64 21 a3 9f 8f a3 4e 88 fc a4 06 28 62 b8 ad 8d 2b c5 4a 84 5a 28 56 19 04 6d d3 e4 c6 4a 44 00 54 08 30 ed ab 2b f9 51 db 47 32 e4 48 94 92 a5 53 25 49 4a bc 94 20 c1 cf 32 7e f7 f7 9e ef 74 de ce e5 39 99 5c ca f7 a7 47 e7 f3 fd 7f e6 9f fe 9a 7f f2 f5 bf fd e7 79 74 9f df 1e 3d 3c fd d2 f9 85 2f 8f f2 9b de f3 3d 3f f8 a1 3b f7 ef bf df af 1e 05 a4 89 49 d2 8c 34 19 01 83 5c 43 fd Data Ascii: m=\%`:EPl[9"QdN<#6V(>Vz2@(,'F\)RQ].}Z]<u%!9),}[dd!N(b+JZ(VmJDT0+QG2HS%IJ 2~t9\Gyt=</=?;I4\C
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: b3 d8 33 eb cf 0a 16 ac 06 86 a3 43 42 56 c1 cf ae f4 eb 06 cf a0 eb 8f 70 83 4d 25 7a ae 8b df ba 8d 20 47 b1 0b 2d 9a 04 9d 4c 14 4b 62 c8 12 27 61 60 71 3d 39 ba d5 f2 93 d6 0d 58 01 61 cb 40 16 4f 1f cd 00 9b bf 1f 05 14 45 d7 e1 71 a2 05 69 46 7a 5a 78 ac a1 30 33 46 4d 22 a3 ce 1f 20 21 53 b7 b2 00 49 09 3b 17 b6 91 1e 2e 33 4e d9 32 56 f4 0c 25 a6 f5 0e c5 75 49 9f 82 38 8d e7 cd d7 ee 04 0a a4 88 e6 8f 41 75 69 a6 9a 68 65 38 be 00 3d 70 6b eb 90 6c 48 28 23 a2 32 35 20 2a d0 c9 3b 77 3c ec 32 5e dd 51 6a 24 43 c8 ed 22 a9 9f f5 33 88 75 cd 06 e4 21 ec 98 fe ae 04 09 b7 ec f8 fa 00 22 3b 96 b7 a4 ab 4f 48 94 94 40 3d dc 13 c2 5b 8e d3 9e 20 be 3d 3c 49 92 b8 e4 40 95 6d bd 6d 6b c4 a9 12 a6 6d db 7f 6e 13 e2 c4 ab 4d 11 31 62 32 95 92 ab 84 34 29 Data Ascii: 3CBVpM%z G-LKb'a`q=9Xa@OEqiFzZx03FM" !SI;.3N2V%uI8Auihe8=pklH(#25 *;w<2^Qj$C"3u!";OH@=[ =<I@mmkmnM1b24)
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 9f 47 71 ee 8d 48 96 86 0e 91 80 7c 16 e3 97 01 e1 12 b4 5b 65 24 51 d4 5f 7c 36 eb 3f 06 1a 0e 3a ab 80 32 ea 42 14 88 d1 96 42 40 c3 71 a2 51 e6 e8 e7 30 2d c8 39 c6 d8 1d 0d 13 81 c4 5e 21 26 f3 79 9d d5 87 b8 3f 02 e4 05 d5 b8 c9 7c 91 0b 0a 6c 92 33 b3 50 7f d7 e7 a9 38 89 30 cc 74 cb df 47 c8 3e ec 27 68 26 da f2 64 91 70 20 8e 48 b6 b3 5b b6 a5 41 67 16 8a c6 e6 dc 8e 3f d5 b8 a4 17 1a 02 69 26 5f 9a b9 96 89 51 77 25 dd 99 02 66 47 28 94 c0 b9 d8 f8 55 a6 6a 0b 47 6d d8 e4 74 01 1e ad 3c b2 c2 04 32 5c 89 70 ae 1b 1f cb 2f 11 40 d0 06 df f3 ca d6 d4 6e 07 d7 95 40 5c 11 94 d7 2e 05 13 07 9c 9c a1 ba 7c 4f e5 84 b1 eb 2e 24 ce 8d 62 17 86 a5 fd f9 6a a8 ee 2a 82 f2 b8 9e 90 d3 32 fb cf f2 ba 94 fa b3 e4 31 25 ab 4e 95 20 c9 0d e1 0f 25 97 a9 10 a4 Data Ascii: GqH\|[e$Q_\|6?:2BB@qQ0-9^!&y?\|l3P80tG>'h&dp H[Ag?i&_Qw%fG(UjGmt<2\p/@n@\.\|O.$bj*21%N %
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: a8 6b e5 33 06 59 13 43 e6 18 24 57 6e 78 28 c6 c5 3a 2f 52 b3 5d 62 84 46 b4 66 7d a9 6e f5 16 5d ad 26 2e d8 41 20 bc 53 1b 5d 41 45 95 b3 cf 5a 42 ef 05 6b e5 07 57 49 90 ab d8 80 77 bc d5 84 6f 94 82 91 23 f2 35 24 4d fa 3b 26 88 d3 35 04 2d df c9 6f d5 d9 d6 dd c3 f3 76 7a 28 79 51 76 b7 53 db a6 b3 bb 9f ce e7 ed b3 3f f4 03 07 89 53 b9 39 3c 49 ec 56 42 34 bb 10 53 cb d9 4f 7a d5 0a 9c a6 2b 6a df c9 c9 1e b7 e5 3d 94 1a 24 5c bc 86 b7 c3 33 06 f2 bb de eb 62 68 33 a8 f8 66 65 7e 7b 58 e0 7c 80 93 16 b8 a4 71 4f 7a 26 46 14 b8 8a d2 a4 fa 95 ef af e3 0e 6c 60 5d 5d 71 60 5a f3 ce a4 14 fb e2 1a 0b 1b 27 e2 94 6e 06 15 ad 80 ff 91 c1 d8 ca 9c 28 ea d6 eb 97 ce a4 01 89 ad 33 e8 3c ab 0c 81 9e 82 46 1f 5f fd c3 ed f5 a9 b5 dd 62 d5 b0 aa d3 9d 42 9f Data Ascii: k3YC$Wnx(:/R]bFf}n]&.A S]AEZBkWIwo#5$M;&5-ovz(yQvS?S9<IVB4SOz+j=$\3bh3fe~{X\|qOz&Fl`]]q`Z'n(3<F_bB
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 18 cf 6b 62 9b 37 26 02 84 57 76 73 f0 2b 77 a9 2e a5 65 15 29 48 e1 53 21 46 01 7e 60 1c 89 62 b8 7b 04 fc 43 45 ac df ef 3f ed 77 c5 44 21 49 3a de fd 63 5d 6d 92 df eb 36 1e 5c 74 29 f7 3b ed 39 4b 75 fb ae 11 28 7c c9 af ad 52 ed db 79 7a 27 54 a9 73 db 3e f7 e7 ff cc 41 e2 f4 6d df 7b 6f 5f 0d 2a c4 49 49 92 92 1c 21 40 b6 b2 b4 7f ae db 6f 46 8e da ea 92 96 73 37 84 33 61 62 e2 c4 82 e7 0b 4a f4 a2 9c 23 47 b1 8b d0 69 19 bd 28 1b cf 7b 22 dd 3d 00 fa 59 d1 d0 be 56 3c 3a 70 d8 ae ae 95 7a 26 b3 cb 21 59 5b 19 3f 9e 8c 58 88 55 e0 bb 61 a0 5b 88 1a 15 3b 2c 95 b9 65 91 06 57 11 19 16 59 ae bd ba 7c 6d c8 9a c3 3c 0f 11 eb 42 57 3c 7e 57 74 d9 6c 2b a5 7b 21 93 97 4f 5f 3f e8 73 61 5b 30 0d 16 61 c7 9b bc 34 3b c2 c9 90 2b e3 53 5f 41 9d f8 51 e3 59 Data Ascii: kb7&Wvs+w.e)HS!F~`b{CE?wD!I:c]m6\t);9Ku(\|Ryz'Ts>Am{o_*II!@oFs73abJ#Gi({"=YV<:pz&!Y[?XUa[;,eWY\|m<BW<~Wtl+{!O_?sa[0a4;+S_AQY
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 56 ed b3 cb bc 98 f9 1a 46 2a c7 50 06 0f 0e 45 a3 4e 42 c7 19 33 f9 6b 33 c5 40 82 20 3e 7a 4e 9f c1 4b 96 a2 ec ec 81 a9 04 11 2d f7 ce d0 75 f8 c3 7d 37 a2 9e 78 62 d7 52 53 71 2f 41 76 06 12 78 49 e4 9f 5d 31 c6 3d 02 aa 14 50 89 a9 38 9c 0f f4 5f 9a a1 25 71 7d 33 81 e8 c9 4e c8 02 36 fa e6 77 d9 4c 72 83 34 54 64 a0 d1 61 c2 80 6d 45 f8 e1 9c 0a 0c 2c c3 42 73 d8 56 b6 cb 74 91 af ec 0a 21 a7 02 7d 39 8c fa 77 bb 28 bc 33 6f 9c e0 a8 0a dc 4f b8 fb 69 ff bc fc 83 d5 27 db a2 93 cf 6c f5 48 da 84 2d 3c cb 8d d2 ed 39 2d 2b 89 e5 65 15 4a da 78 f1 2f ff d9 83 c4 e9 8f 7d d7 3d 5b 72 d6 55 24 45 40 25 40 4c 7a ca e7 a2 05 fd 5d 57 91 f4 19 5d 65 42 34 c5 7a 28 28 0b a2 5a 6a 12 db 38 9a b9 61 90 d4 57 95 53 0d b6 da a4 3f b4 8b ca cb 7e ef 8c 5f e3 3a Data Ascii: VF*PENB3k3@ >zNK-u}7xbRSq/AvxI]1=P8_%q}3N6wLr4TdamE,BsVt!}9w(3oOi'lH-<9-+eJx/}=[rU$E@%@Lz]W]eB4z((Zj8aWS?~_:
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 6f 8f bd 57 e0 8c 2f 0a 22 6e 12 3e c3 08 e9 13 6e 43 b4 0b 8c 46 20 b1 20 73 37 18 96 e2 cc db 61 49 3e 5a 55 40 80 ea 85 26 df 06 6d cc 9a e5 7a 9d ad 0d 00 90 c5 11 a0 78 5d e1 6c b3 42 8e 99 4d af fa ba 14 04 38 56 24 91 14 08 6e 9d fe ad 9a c8 da a0 e3 29 78 92 ee 0c b1 7a 57 73 7c cf dc aa 32 d8 32 fb 0b 30 ba fb 4c 63 1c 0c b1 f6 bc 7e 50 b6 49 f0 bc 35 ea d4 8d 21 51 36 e1 7b ed 14 94 8d 1d be 05 18 1e a4 81 5b 43 7c 94 34 76 15 86 51 a7 7b 32 9e 28 c5 a9 6c 76 d0 fc c2 85 3c 1e 47 e8 07 84 53 6c df 5d 1d 03 07 71 2b ee 55 17 9c 9e ce f3 84 3a de da 48 dd fa de 5f 95 a1 bb 2d d4 56 42 0a ab b8 a5 a3 33 db 83 58 e3 2e 59 34 53 05 3f 1a 61 41 34 99 90 47 9d 6e db f0 6c 65 a4 7c 1f a6 b9 e9 24 5f 6d 59 3b 15 54 ec 1a 91 bb 85 38 76 66 49 95 1d 34 8f Data Ascii: oW/"n>nCF s7aI>ZU@&mzx]lBM8V$n)xzWs\|220Lc~PI5!Q6{[C\|4vQ{2(lv<GSl]q+U:H_-VB3X.Y4S?aA4Gnle\|$_mY;T8vfI4
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 47 81 08 44 4e cb 96 d6 51 14 99 1b 07 84 5d b7 ca 29 00 17 af e0 60 a7 29 8e 80 be 7c 57 55 3e 7a dc 30 91 97 d3 77 02 92 d6 3c d8 a4 23 5b cd 2e 51 34 a5 a7 56 bf c7 d9 3a ce 36 2e 5d 01 74 e1 55 b6 88 1b 51 ac 44 42 57 d7 ac ee bd 1a 5c ad 72 0d 9f b6 97 ff d6 5f 3c 48 9c 3e f0 27 65 c5 49 3a c8 c9 39 8e 34 81 71 59 62 12 ac ed 81 cf 22 b1 a9 55 e0 59 97 26 90 96 03 d0 d0 11 f5 d4 29 da 65 b2 83 83 ab 00 c5 e3 f8 cd e2 5d 42 13 06 b0 5c 93 12 a1 89 a5 65 8c 8d b0 b2 48 34 2c db 02 7f ed 46 db 0a d3 e2 f6 d3 c5 98 2c 65 3a 5a 3b ed 01 a7 b4 3a e8 8f 83 cb 14 60 c9 31 2c 2f 21 42 53 da fb 51 b0 4a 3a 81 4d fa 6d 3c e8 74 e2 b7 a6 28 fc 3e d5 13 50 ac d2 a7 44 28 e8 d0 33 a4 9c 81 cb 40 3c d5 3d bc be ba 1e 21 5a 64 cc 97 1d 67 5f a6 ee f9 a6 67 38 03 bc Data Ascii: GDNQ])`)\|WU>z0w<#[.Q4V:6.]tUQDBW\r_<H>'eI:94qYb"UY&)e]B\eH4,F,e:Z;:`1,/!BSQJ:Mm<t(>PD(3@<=!Zdg_g8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49917	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	763	OUT	GET /static/img/no_experience.a2f552ee.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	908	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 5620 Connection: close x-oss-request-id: 666D325149824C3338AB40EB ETag: "A2F552EE8B265238F44132F9DB63734F" Last-Modified: Mon, 20 May 2024 05:15:50 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3269408903944392935 x-oss-storage-class: Standard Content-MD5: ovVS7osmUjj0QTL522NzTw== x-oss-server-time: 3 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4661 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zlw8%2FNV%2FIaRsA6u512G79ygUeGP4sThbdtpCgzi26DGfzbopUCSokU5s8k7aPJ6%2BuSb4J0kL9Iym3oXMIsoMMXbYmDkpfCTUuRRrmigDHh%2BS0Ltx1AhLXkevs6%2Bk9w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c5d81243a9-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 4b 08 06 00 00 00 38 4e 7a ea 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 15 ae 49 44 41 54 78 5e ed 5c 09 90 5c c5 79 fe fe 7e f7 9b 99 9d 9d 9d d9 59 ed a1 dd d5 2d 84 10 20 c0 e6 b6 8d b1 0d 89 f1 81 31 a4 7c 84 50 71 48 2a c4 36 ae c4 a9 54 51 95 8a e3 18 97 b1 1d 5f c4 ae 72 ac c4 d8 86 14 e0 00 c6 8e 31 3e 14 83 41 5c b6 31 48 20 21 24 74 ed 39 bb b3 d7 dc ef e8 4e 75 cf ae d0 6a 67 76 76 74 10 9c e8 55 4d 69 f5 5e bf 3e be f9 fe ff ff fa ef ee 21 9c ba 96 8c 00 2d b9 e4 a9 82 38 05 56 13 24 38 05 d6 29 b0 9a 40 a0 89 a2 a7 98 f5 fb 02 d6 21 71 c8 a1 12 25 35 cd 89 1b 24 5c 4e dc 02 c0 00 70 26 58 c5 17 54 0c c3 d2 b4 70 44 76 39 2d 2f 35 31 ae 93 52 f4 35 65 d6 de 89 89 78 4b 34 Data Ascii: PNGIHDRKK8NzsRGBIDATx^\\y~Y- 1\|PqH*6TQ_r1>A\1H !$t9NujgvvtUMi^>!-8V$8)@!q%5$\Np&XTpDv9-/51R5exK4
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 06 21 6c 01 d2 08 22 04 51 59 08 e4 88 68 9c 20 b2 00 c4 52 2b 15 10 1c c0 a3 ed 7a fb 63 44 b4 e4 f7 1a d5 7f dc 60 09 21 8c b1 70 ec 6a 12 b4 b6 51 63 b3 cf 5b 05 b0 01 02 6b 04 b0 9c 00 b3 d1 7b 02 f0 08 38 04 c2 cb 04 bc 08 60 aa d1 3b f2 b9 20 b1 bb 5d 6b bf 8f 88 fc a5 94 6f 54 e6 b8 c0 1a 12 43 ae e1 1b 1f 00 a1 b3 51 43 5c e0 34 40 9c 4f a0 7e e0 b8 7c a5 d4 11 fb 01 7a 92 11 76 36 6a 17 02 c3 be e1 df d5 45 c7 ef fc 8f 19 2c 05 14 37 3e 0c 8e f4 62 1d 16 42 ac 06 d1 db 21 b0 ac e1 c0 9a 2d 40 18 81 10 3f 25 a2 3d 8b be ca 90 f1 99 ff dd e3 05 ec 98 c0 92 a6 37 ee 8f 5f bf 18 a3 04 84 0b c1 de 09 88 8d 4d 61 20 4a a0 70 06 d0 62 10 e4 2e f1 55 da 01 e2 3f 22 50 7d e9 20 30 9c 32 52 77 1c 8f 49 36 0d 96 72 e6 e1 d8 b5 8b fa 28 42 9f e0 b8 16 40 6c Data Ascii: !l"QYh R+zcD`!pjQc[k{8`; ]koTCQC\4@O~\|zv6jE,7>bB!-@?%=7_Ma Jpb.U?"P} 02RwI6r(B@l
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: c5 0d 44 b4 e2 c8 46 46 ee fb 73 04 07 7e 8a c2 90 87 40 33 c0 43 1f 91 76 03 c1 78 00 ad c3 44 7b ca 05 9f 2a c0 df ce 11 b6 bb a0 48 88 4a d9 47 30 52 46 71 7f 88 d2 a8 c0 9a 8f 7e 10 89 37 5c 00 70 0f c5 cc 00 0a 23 03 08 b9 80 11 8b 03 ba 85 5d e2 37 28 c4 ca 08 19 10 04 21 7a ba cf c2 99 a7 ff 13 a8 c1 d4 48 08 b1 8f 31 5a 00 8a 14 65 ba ae 7f ad 8d 1a e7 f4 17 35 c3 21 6f e8 5c 83 0c 29 32 e7 5d 5c 20 41 c0 cd 47 83 3d 72 ef f5 e0 e3 8f a3 3c 54 41 a1 c0 51 1c 09 60 16 04 9c b5 26 ec 0e 1d a9 94 0d b8 04 23 61 42 b7 4c 10 0c f8 39 1f c3 0f 65 10 0e fa b0 13 9d e8 bc e9 6f 41 a2 04 c6 74 94 27 46 51 1c 1b 86 ef 79 08 39 30 99 cd 61 d7 b2 5d 68 eb 4b a0 58 f6 b1 f7 40 16 eb 56 a6 70 d1 f9 b7 21 e2 9e d5 88 1c 82 08 5f aa 95 de f1 85 ff 50 97 d9 f5 eb Data Ascii: DFFs~@3CvxD{*HJG0RFq~7\p#]7(!zH1Ze5!o\)2]\ AG=r<TAQ`&#aBL9eoAt'FQy90a]hKX@Vp!_P
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: c3 00 99 06 0a a5 00 22 08 50 ca 17 90 ed e6 d8 ee 87 e8 eb 77 91 cb 07 68 69 05 de 9a ee 41 d7 a8 85 d2 74 19 76 47 0a 91 8e 0e e8 b6 03 d2 4d 30 dd 84 e6 b6 c0 8c 27 61 b8 31 a5 c9 34 d3 84 66 d8 f8 d5 ce 2d 38 eb f2 7f 86 ae 27 9a 66 16 07 df da 61 74 2c d0 60 4b 32 c3 e1 7a 3e 0b 38 0f e2 55 9f 25 d3 bb 3b 9f 78 1e b9 c9 19 58 a6 89 de f5 7d 68 eb 9b bf 8c b8 e3 77 f7 e2 f1 cf fd 1d ba 0a 26 0a 86 83 31 33 c4 08 2f a2 18 f7 31 3e 16 a0 bd 5d 57 2b 89 6b 19 c3 b9 95 56 c4 13 6d 28 cd 14 11 ed 59 86 96 be 5e 98 d1 16 e8 8e 0b 66 ba d0 dc 28 98 61 2b 1d 26 33 a3 12 44 19 45 19 63 80 6e a2 d2 7b 21 04 d5 5f e0 c0 c9 f0 59 cd 44 43 af 90 c7 f3 bf dc 86 e5 ab 56 a0 63 fd 9a 05 df ea f7 ef fc 0b 3c f1 f3 1f 63 68 c0 87 66 00 86 49 0a 1c 1e 02 91 08 61 a5 6b Data Ascii: "PwhiAtvGM0'a14f-8'fat,`K2z>8U%;xX}hw&13/1>]W+kVm(Y^f(a+&3DEcn{!_YDCVc<chfIak
2024-10-13 15:58:59 UTC	1052	IN	Data Raw: 60 6a af c3 98 77 7b 33 07 0d 1a fa ac b9 06 16 df 45 23 fa 2b 07 76 5c bf e7 fe 6f 68 85 a9 49 54 0a 79 84 5e 75 83 b0 8a 66 4a 84 56 bd ac 02 48 29 71 09 d6 ab ac 9a 63 96 ae 69 b0 23 36 9c 96 08 4c 09 96 62 96 0e d3 91 f7 5a 60 46 a2 8a b1 32 3f 3f 17 11 25 23 65 1b d2 af 69 96 a5 16 5f e5 ea 91 64 97 e9 b8 b0 de 78 dd 17 03 8a cc 3b eb 23 d0 38 7f 75 34 1b 97 0c 96 dc 9f 95 f5 b3 37 0a 12 35 0f 04 1c ba f7 b6 3f 1b db fd e2 f2 52 7e 06 7e b1 84 c0 93 0a bb 6a 22 52 33 29 76 a9 7d 55 d2 14 e7 58 35 1f b4 b9 c8 29 4d d1 8a 38 30 6d b3 ea b3 34 06 cb 75 54 a4 b4 63 31 c5 22 09 ae f2 5d 4a 6f c9 a8 38 9b 9e 56 20 bd 3a 5d 8a a4 fb 76 3b 97 7e e4 7b f3 58 75 b2 f7 67 29 19 51 cc f6 84 c6 c2 9d 7f 61 f6 60 e2 c5 3b 6e bd 39 3f 31 41 5e b1 00 bf 54 52 66 a8 Data Ascii: `jw{3E#+v\ohITy^ufJVH)qci#6LbZ`F2??%#ei_dx;#8u475?R~~j"R3)v}UX5)M80m4uTc1"]Jo8V :]v;~{Xug)Qa`;n9?1A^TRf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49921	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	763	OUT	GET /static/img/no_investment.c05fbbd7.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:58:59 UTC	907	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: image/png Content-Length: 5456 Connection: close x-oss-request-id: 67080F31DA25D33736D89E5C ETag: "C05FBBD7BCDD5E14D07E652823720A29" Last-Modified: Tue, 20 Aug 2024 09:32:53 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10940866209506176352 x-oss-storage-class: Standard Content-MD5: wF+717zdXhTQfmUoI3IKKQ== x-oss-server-time: 7 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1372 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kzpyPhr0vR2KiFL3CBn0V7JuIj8Plq%2BdNzqijdaw8yb9TTWXIpqUamdiNM0%2F%2B1A2Sm59Ef3mxg5sMTNxiYSkD21QEVUxdEfMafAgDLBc35jfudEm%2Fv20Fh0E0Nabjw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c65e297286-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:58:59 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 4b 08 06 00 00 00 38 4e 7a ea 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 15 0a 49 44 41 54 78 5e ed 5c 09 90 1c 57 79 fe fe d7 dd 73 ed ec ae 76 77 76 f6 5e 4b 96 64 6c 49 96 0f 49 46 3e 64 63 2c 9b 53 84 18 30 09 0e 08 9b 0a 04 13 1c 02 c5 91 10 42 5c c6 b8 28 08 01 83 9d 22 71 62 ec 04 07 08 18 62 70 99 23 11 d8 d8 b1 53 18 f9 90 8c ef 5b da 95 66 77 f6 98 b3 a7 af 3f f5 bf 9e d1 b5 33 bb b3 d2 ae 71 25 3b 55 b3 dd 3b fd ba fb f5 37 df ff fd c7 7b 6f 08 4b af a6 11 a0 a6 5b 2e 35 c4 12 58 f3 20 c1 12 58 4b 60 cd 03 81 79 34 5d 62 d6 12 58 f3 40 60 1e 4d 7f a7 cc 7a 89 5f 8a 53 99 ba 0c 23 de 6e 11 27 02 0a a2 00 14 80 40 b1 aa b8 4c 25 df 2f 4f 73 9c b3 43 34 54 9e c7 73 2d 4a d3 97 Data Ascii: PNGIHDRKK8NzsRGBIDATx^\Wysvwv^KdlIIF>dc,S0B\("qbbp#S[fw?3q%;U;7{oK[.5X XK`y4]bX@`Mz_S#n'@L%/OsC4Ts-J
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: 83 ba 98 39 45 84 56 30 c7 18 64 10 d8 07 91 cd 8c 3c 11 8d 13 38 0b 80 9b bd 28 83 03 00 77 77 9b dd f7 10 51 d3 e7 cd 75 fd 63 06 8b 99 ad 31 7f ec 62 62 3a 61 ae 9b 55 8f 2f 63 60 0d 18 ab 19 18 22 20 32 d7 79 0c 38 04 bc 04 c2 53 04 fc 16 c0 d4 5c e7 c8 71 26 7e b2 db e8 be 8d 88 dc 66 da cf d5 e6 98 c0 1a e1 91 84 e5 5a ef 02 a1 6f ae 1b 05 8c 93 00 de 4c a0 e5 c0 31 69 a5 c4 11 cf 03 74 bf 22 3c 36 d7 7d c1 18 75 2d f7 d6 7e 3a 76 f1 3f 6a b0 34 50 81 f5 6e 04 48 cf d6 61 66 5e 05 a2 8b c0 e8 9d f3 c1 e6 db 80 b0 0f cc 3f 23 a2 a7 67 3d 55 21 e3 2a f7 5f 8e 15 b0 a3 02 4b 4c 6f dc 1d df 3e 1b a3 18 9c 00 ab 37 03 bc 6e be 18 cc bf 3d ed 66 0e ee 50 8a 8a 0d cf 65 8c a6 ac d4 cd c7 62 92 f3 06 4b 8b b9 3f 76 c9 ac 1a 45 38 8e 03 5c 02 a0 b5 d9 07 e7 Data Ascii: 9EV0d<8(wwQuc1bb:aU/c`" 2y8S\q&~fZoL1it"<6}u-~:v?j4PnHaf^?#g=U!*_KLo>7n=fPebK?vE8\
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: b7 6b 41 d7 26 59 f5 a0 1a 2c ad 5d 02 94 68 64 08 56 c9 ae 60 22 97 d7 82 bf 66 45 0f 36 ad eb 80 a9 e8 56 10 1e 3f 12 14 45 6a 4f 97 d9 75 d3 31 83 35 c1 13 ed 9e e7 7d f8 c8 52 70 a9 1c 5f 15 f8 89 3f 32 4c 52 9a 55 1a 2c d6 a6 28 0f 27 d1 60 f4 9e 1d c0 8d 37 c0 b3 4b c8 3d 74 1f dc e1 7e f4 ad 1a c2 f8 09 c3 70 57 2f 47 bc af 1b c7 ff db 1d 28 dc 7a 07 a4 26 3c 09 c2 d4 27 2e 45 c7 99 a7 1e 00 a5 16 ad 17 5c 03 d6 29 db e1 2b 03 0e 13 6c 28 d8 0c d8 01 c1 0c 3c 0c a0 1c 7a 44 0d 96 0f bb 52 c1 64 be 80 a2 5d c1 71 bd 5d b8 e0 d5 3d 12 ed 3f a7 14 cd 00 45 e0 36 4d f3 6b 9d 34 77 4d 7f 56 66 8d 38 23 1b 2d b2 24 c8 3c ec 35 55 48 9c 61 20 f1 66 43 85 e9 48 8d 55 12 4d cb b7 6c 95 f6 a0 eb ef 6f 40 7e 75 07 fc ce 16 54 da 5b 60 c4 a3 22 c7 08 5c 0f 81 Data Ascii: kA&Y,]hdV`"fE6V?EjOu15}Rp_?2LRU,('`7K=t~pW/G(z&<'.E\)+l(<zDRd]q]=?E6Mk4wMVf8#-$<5UHa fCHUMlo@~uT[`"\
2024-10-13 15:58:59 UTC	1369	IN	Data Raw: e3 fc 80 71 fe be 6c 0b 22 56 5c df f3 20 58 62 8a 1e 02 26 44 8a cf 20 75 e3 97 e1 1c 37 00 f3 35 67 63 62 2c 14 79 9d b2 88 19 d6 12 62 66 74 ff f5 0d 78 ae 9c c4 75 df 7b 00 12 37 c9 71 a9 de 14 8c 90 b9 fa 5d 0d 1b c4 33 6e 4b da 78 43 bc 80 a9 c0 c0 67 b2 cb f0 3a 35 8d f5 fe 64 b5 1f 21 58 05 db c6 f8 74 41 6b f9 a9 ab fb 34 b3 44 bf 18 d8 a1 08 bf ac 03 d6 9c 15 d4 a3 62 16 07 7c 61 66 4a a6 2f b4 68 1d 90 6f 54 07 a4 92 a2 68 8f 08 28 7b 0c 5d bf b8 19 ea e1 c7 80 0f 6e 47 6e 32 03 bb 58 a8 56 0c 74 c4 15 a6 2d 00 d2 37 de 86 bd 0f ee c3 df fe 70 17 22 92 e3 b9 8c 40 29 94 a2 d1 6a 79 26 04 4c da 0a 93 87 4c 1f 67 45 2b 9a 55 77 96 62 78 a3 9a c2 e9 fe 44 18 c2 78 12 c5 4b e8 60 63 3c 97 43 c4 34 b5 c0 af 3f a1 0d 24 0a 4f f5 99 15 20 d8 d1 63 f5 Data Ascii: ql"V\ Xb&D u75gcb,ybftxu{7q]3nKxCg:5d!XtAk4Db\|afJ/hoTh({]nGn2XVt-7p"@)jy&LLgE+UwbxDxK`c<C4?$O c
2024-10-13 15:58:59 UTC	887	IN	Data Raw: e8 4e a3 71 c3 d0 14 79 15 40 ef a9 f5 4a 40 13 13 08 4d 2f 14 ee 90 41 e1 e7 92 f5 2b a5 f4 7e 58 5a 92 ff 0f ff be 84 8d 13 39 1b 3b 7e 3d 8a b8 15 d7 cc b2 4c 43 b3 50 3c de 64 be 88 b1 c9 69 58 11 0b 5b 37 0d 63 e5 50 b2 09 52 f0 2d f5 26 bc 2d f8 b8 a1 f4 a4 d1 88 74 08 18 5d b2 d0 13 d6 04 f4 5c d1 c1 03 8f 4e 21 1a 89 c1 34 24 4b 10 b0 c2 81 88 fd 13 d3 88 45 2c bc f1 ec e5 e8 49 c5 66 9d 73 c9 c0 a3 8a f0 f2 8c 48 0b 20 d5 05 00 75 e7 3a 30 28 01 e6 0f cd 67 e2 5a 13 54 d0 11 fb f8 54 05 4f 3c 6f c3 32 23 da 83 56 5c 07 f9 62 09 fb a7 64 25 0a 61 db 96 15 e8 ee 0c c3 96 06 af 3c 88 ae 27 f0 8c c5 04 7a ae c3 98 f3 f5 f9 2c 34 98 53 b3 6a 9d 98 7d 16 0d 2f 07 68 7b bd 09 6c cd 00 d3 a8 8d 98 e4 48 c6 c6 f3 7b 1d 28 c3 d0 8e 41 d8 35 91 2b 20 57 b2 Data Ascii: Nqy@J@M/A+~XZ9;~=LCP<diX[7cPR-&-t]\N!4$KE,IfsH u:0(gZTTO<o2#V\bd%a<'z,4Sj}/h{lH{(A5+ W

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49918	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 09dd28b8-c01e-008d-23de-1b2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155859Z-17db6f7c8cfgqlr45m385mnngs00000003sg00000000146t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49919	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155859Z-17db6f7c8cfqkqk8bn4ck6f72000000004x00000000062ba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:59 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49922	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155859Z-17db6f7c8cfqxt4wrzg7st2fm8000000053000000000fkhr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:59 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49923	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: f1a7bbb3-001e-00a2-248a-1bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155859Z-17db6f7c8cfgqlr45m385mnngs00000003m000000000dbtg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:59 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49926	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:58:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:58:59 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 9a6afd11-d01e-0049-3e83-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155859Z-17db6f7c8cfgqlr45m385mnngs00000003qg0000000058pc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:58:59 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49931	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:58:59 UTC	754	OUT	GET /static/img/only.b30711a6.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:59:00 UTC	907	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/png Content-Length: 5227 Connection: close x-oss-request-id: 666D31D5CB36F9343940B692 ETag: "B30711A6D73E1488BA77FE950C84503B" Last-Modified: Mon, 20 May 2024 05:15:50 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 14441362308367671269 x-oss-storage-class: Standard Content-MD5: swcRptc+FIi6d/6VDIRQOw== x-oss-server-time: 3 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5330 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4HDRfz0zdIIn2N2mL3kp2Q3HtXMaF1fiZjMVLzXJQfahTPyIdCPQL1y2H%2Fm7tY23j69MhgAe9h6rzhpqdyAaoE8wgD9%2BmPfvvkEoOC8f2nLI%2FTngEru%2FfTjlLhtlWA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088c8fa89c32a-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 4b 08 06 00 00 00 38 4e 7a ea 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 14 25 49 44 41 54 78 5e ed 5c 09 70 1c e5 95 fe 5e 9f 73 68 0e cd 48 23 f9 90 0f d9 06 07 4c 08 60 73 26 dc 84 fb 28 02 4b 52 d9 22 1b bc b5 55 a1 96 6c 92 85 ca 66 6b 6b 43 85 3d 2b 29 d8 cd a6 c8 1e 31 04 8a 04 96 85 c5 60 0c 59 07 f0 6d e3 fb c0 36 60 cb b6 7c 49 f2 48 96 75 6b ae ee b7 f5 ff 3d 3d 33 92 66 46 1a d9 e2 48 a9 5d 5d 1a f7 fc 7d 7d f3 de fb bf f7 bd d7 4d 98 5c c6 8c 00 8d 79 e4 e4 40 4c 82 55 81 11 4c 82 35 09 56 05 08 54 30 74 d2 b2 26 c1 aa 00 81 0a 86 7e 2a 96 d5 da db 5a ab 56 79 a6 a9 19 bb ce 26 3b 4a 44 21 b6 d9 cf 60 83 40 2a 83 2d 02 a5 48 a1 7e 66 ee 56 58 39 65 69 ca 49 ab 2f 71 62 4a Data Ascii: PNGIHDRKK8NzsRGB%IDATx^\p^shH#L`s&(KR"UlfkkC=+)1`Ym6`\|IHuk==3fFH]]}}M\y@LUL5VT0t&~ZVy&;JD!`@-H~fVX9eiI/qbJ
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 1e cc 35 20 04 00 78 00 a8 00 2c 00 09 30 7a 41 d4 c1 b0 db 08 74 84 08 c7 01 d8 63 02 80 d1 a7 64 94 57 a2 be e8 b1 31 8d 1f c3 a0 33 06 ab 2d d9 b6 40 53 b4 3b 19 ac 8d 76 3e 66 9e 05 d0 45 00 e6 03 f0 8e 36 de fd 9e 99 91 cd 62 07 01 7c 44 c0 0e 22 6a 1e 6d 7f 02 65 32 76 66 59 bd 59 bf 67 b4 b1 63 f9 fe 8c c0 6a 4f b5 2f 64 e2 5b 08 54 f6 38 cc 38 0f 8c 6b 41 a8 1f cb 45 a5 d2 49 b4 76 b5 a0 a5 f3 04 4e 76 b5 e1 74 df 29 74 0d 74 21 99 4e 00 cc f0 79 fc a8 f2 05 e2 75 a1 d8 ce cb e6 5e b5 b3 36 54 d7 57 ea b8 0c 66 62 fa 5d ad 51 bb 75 2c e7 2e 37 66 dc 60 c5 53 f1 8b 40 b8 bd 1c 50 cc 5c 4f 50 ee 60 f0 8c 72 17 31 98 1c 40 73 fb 21 34 c7 c5 7a 58 02 c4 6c 43 51 14 68 9a 06 c3 30 60 e8 26 4c c3 84 ae 8b cf 86 dc 4e 44 50 58 e9 bb 78 e6 a5 2f cf 8b 9d Data Ascii: 5 x,0zAtcdW13-@S;v>fE6b\|D"jme2vfYYgcjO/d[T88kAEIvNvt)tt!Nyu^6TWfb]Qu,.7f`S@P\OP`r1@s!4zXlCQh0`&LNDPXx/
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: ab d6 13 c3 b5 53 ae 47 3c d5 82 a7 9b ff 0e cd 03 07 a0 2a 23 73 71 cb ce 60 8e 7f 3e be 33 f3 6f 50 63 c4 b0 b1 6b 03 ba ec ae dc cc 98 77 45 0d ba 38 27 a9 e0 24 63 9e 22 72 f5 fc 42 84 b5 00 7e 5f 04 94 c1 1a ad e6 49 22 1a 55 cd 28 6b 59 27 13 27 1b 15 55 f9 e6 f0 13 d8 80 4a 8c 47 97 ef 5e ea df d5 b4 5d ce 7a 91 ea a8 9c 05 05 c1 74 e2 87 33 bd cb 59 6d 98 0b fa 34 1f 6e 99 7e 3b 8e 0e 34 e1 f1 0f 1f 41 da 4e 8f fa c3 1a 8a 89 27 ce 7f 1a 53 bd 33 b0 a6 6b 15 52 48 3b 44 55 73 88 aa 43 68 55 e8 a4 23 91 49 60 8e 75 2e 4c 65 48 92 d1 cf 84 9f 29 8e fc 33 64 b1 2d fb 37 75 9e ba 43 a3 5d 44 59 b0 4a 91 50 9b ed 73 c1 f4 cd f7 3e 5e 81 6d 1f 6f 92 d6 24 2d cb e3 95 8c dc 4d 4b 5c 57 29 a4 05 e2 f3 97 63 57 23 6c 86 b0 78 d3 3d 18 b0 1c 7d 6e 7e 70 01 Data Ascii: SG<*#sq`>3oPckwE8'$c"rB~_I"U(kY''UJG^]zt3Ym4n~;4AN'S3kRH;DUsChU#I`u.LeH)3d-7uC]DYJPs>^mo$-MK\W)cW#lx=}n~p
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 82 c9 fb 7d 55 92 9c ca 59 51 aa 9c 79 71 4f 30 fa ab eb ae 85 57 f7 e0 1b eb 6e 2a 3a f3 d9 6c c1 a7 56 61 51 f4 4a 19 0b 37 74 ac 94 01 db a7 fa f1 eb 2b 96 a1 cf ee c7 8e 81 6d 79 61 30 2b d9 38 ea a9 26 c1 12 ff 14 10 92 e9 34 66 a0 80 6f f1 44 b8 e1 18 02 bc fb 2b b4 f6 b4 60 e9 d6 ff 41 7f 7f 2f c2 a1 08 02 42 7d 10 a2 9f ae 3b 96 25 73 c4 fc 8c 78 4d fd f5 e8 b7 bb f0 83 5d 0f 42 57 c6 d6 37 a2 91 8e 9f 9c f7 6f 68 ac 9a 2f ad 2a 09 21 dd 08 8e 95 17 12 5d a9 d9 54 3c f0 c2 0b 1d 9a 4c bc 67 64 1a f3 71 6b 22 02 fc 58 a8 83 0b 56 da 4a e3 c5 4d cf e1 64 47 2b 02 fe 00 42 a1 6a c9 b7 74 43 a8 0f 5a 5e 0a 16 2a aa e6 c1 dd 33 ee c5 0b c7 7f 81 b7 e3 af a0 c1 33 5b ce aa ad c9 a3 92 73 0d 5f 84 45 4d f7 ce c6 9f cf fe 5b 4c 31 1b b0 b9 fb 7d 9c e6 ce Data Ascii: }UYQyqO0Wn:lVaQJ7t+mya0+8&4foD+`A/B};%sxM]BW7oh/!]T<Lgdqk"XVJMdG+BjtCZ^*33[s_EM[L1}
2024-10-13 15:59:00 UTC	658	IN	Data Raw: 64 8b 50 96 d1 bb 94 81 a5 01 31 54 ce 82 a3 85 10 d4 43 f0 ab 22 45 91 8c ab c8 8c 5f 66 d3 a7 dd cc 26 2e 6d 25 af d4 ce 4b 2f 58 ac 50 e9 36 c9 8c 9d 7e f0 99 35 bf ac 17 e5 b1 86 e9 b3 10 0a 87 24 cf 62 9b a5 8b 66 13 17 04 f4 00 3c 9a 17 3e dd 0f bf 56 25 ff ef d3 fc e3 03 a7 10 37 42 1b db 65 da 24 19 f1 3d fa 9e 25 d7 d1 75 13 db 26 29 ae 49 a8 11 a9 4c 6a 71 a9 06 dc 3d ad bb cf fb fd ce b7 1e f0 18 5e 6a 98 3e 13 a1 48 18 1e 9f d3 ab 45 36 a1 9e a7 a0 c6 a8 95 72 73 36 a1 a9 cc 6a ca 8e e6 03 20 a5 6c 03 ae a1 19 4b 82 14 3c 35 9e 93 56 68 df ce 29 ca b5 76 2f dd f9 ca 7d fb 8f 7e 78 c1 f4 a9 33 28 56 37 05 c1 70 40 82 25 3a 5c 66 72 23 bc 34 a4 8e 37 9e 6b 2e b6 8f c5 c0 2a 85 f0 d9 6a ed 76 af b4 d8 43 03 83 a9 41 e3 57 ab 9e fe 4b 45 51 bc b3 Data Ascii: dP1TC"E_f&.m%K/XP6~5$bf<>V%7Be$=%u&)ILjq=^j>HE6rs6j lK<5Vh)v/}~x3(V7p@%:\fr#47k.*jvCAWKEQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49940	104.21.52.99	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	390	OUT	GET /resource-files/2023-04-13/nP16KABtPQPg42Ti.png HTTP/1.1 Host: cdn.shippinghero.vip Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:59:00 UTC	1275	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/png Content-Length: 9574 Connection: close x-oss-request-id: 667F8B85F53B5C3332ACB53B x-oss-cdn-auth: success ETag: "F0F6FB1C05D7595623686E8778F3559A" Last-Modified: Thu, 13 Apr 2023 09:03:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 16101840501010951116 x-oss-storage-class: Standard Content-MD5: 8Pb7HAXXWVYjaG6HePNVmg== x-oss-server-time: 121 Via: cache9.l2us1[790,790,200-0,M], cache33.l2us1[791,0], ens-cache10.us22[0,0,200-0,H], ens-cache1.us22[0,0] Age: 4650 Ali-Swift-Global-Savetime: 1719634821 X-Cache: HIT TCP_MEM_HIT dirn:-2:-2 X-Swift-SaveTime: Sat, 29 Jun 2024 04:20:21 GMT X-Swift-CacheTime: 2592000 Timing-Allow-Origin: * EagleId: 2ff6179517199199223593493e Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fm3tyTxlxZgJvGw9pJMQ8fnUA7%2F5LdJpnK1zEjFNahKzVTPYmRGZdxAW09gpVOrS0zp3e4Aq0eu%2Bbz%2BCCTuJ4Pg%2BgkMKibGY0UkKM1NJRNHlC3Mzs6vdxTmSOJEicCgCsl9%2Fa56q6w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088ca08320f47-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	94	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 82 08 06 00 00 00 8a 03 10 fd 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 25 18 49 44 41 54 78 9c ed 9d 7b 98 5d 65 7d ef 3f ef 5a 6b df 6f 73 cf 24 99 99 4c 32 09 11 30 21 40 08 46 41 22 Data Ascii: PNGIHDRpHYs%IDATx{]e}?Zkos$L20!@FA"
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 10 bc 71 55 b0 d2 da 3e ed a1 a5 e8 b1 ea e3 39 52 eb 73 aa 56 4f 6d 85 5e d0 d3 5a aa 07 6d 6b 2d 0a 54 2e a2 a8 20 42 e5 18 93 10 08 09 09 04 98 24 93 c9 65 26 73 dd f7 bd d7 ed 3d 7f bc 7b 4f f6 de 33 c9 5c 32 7b f6 24 cc f7 79 56 32 7b ed bd d6 5e 7b fd be eb 7d 7f ef ef 2a a4 94 9c 85 88 00 cb 0b 5b 07 d0 06 74 01 f5 80 1f 08 16 b6 50 61 03 48 17 b6 4c 61 cb 01 23 40 37 70 18 38 04 1c 28 6c c9 39 fa 1d 73 06 71 96 10 a1 19 58 0f 5c 06 6c 04 ce 03 a2 80 04 b4 92 4d 14 3e 5f fa 7f f1 6f 59 d8 a8 f8 df 2d d9 04 90 00 f6 02 5b 80 e7 80 e7 81 81 2a fc a6 39 c5 99 4a 84 08 4a f0 97 02 d7 03 2b 50 4f ba b7 b0 e9 55 fe 7e 07 30 0b 5b 0e d8 0f 3c 06 6c 45 11 e3 8c 1b 31 ce 24 22 44 80 4d c0 ef 01 17 01 61 94 f0 c3 a8 a7 bd 96 70 81 14 8a 14 29 e0 05 e0 df 80 Data Ascii: qU>9RsVOm^Zmk-T. B$e&s={O3\2{$yV2{^{}[tPaHLa#@7p8(l9sqX\lM>_oY-[9JJ+POU~0[<lE1$"DMap)
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: ff 9b 12 7d 40 02 3f 3d 90 e2 7f 3c 3b c0 81 84 45 c0 d0 10 67 e7 82 60 d6 20 25 64 6d 97 e5 51 0f 7f 7b 45 33 ef 59 1e ae b4 9c e6 80 ff 05 7c 1b 65 8c 3a 6d cc 16 11 a2 a8 55 c1 97 29 21 81 2b e1 a1 d7 12 7c fa bf 06 18 cd bb 95 4b a4 05 4c 82 bc 23 a9 f3 69 fc dd 3b 9b b9 f9 9c 28 15 2b ea 1c f0 e7 a8 55 45 e2 74 bf 6b 36 88 e0 41 ad 0a be 57 f8 1b 00 57 4a be b9 3b c1 97 7e 33 48 c6 76 2b 35 e1 05 4c 11 8e 94 04 0d 8d cf bf ad 89 db d7 44 d1 ca ef a3 85 f2 d6 3e 52 f8 7b c6 98 0d 22 bc 1d f8 77 94 62 08 28 95 f6 ee ed 23 dc f3 e2 30 79 5b 2e 4c 05 a7 09 29 55 4c c4 a7 2e 6c e0 33 97 d4 57 06 66 1c 00 3e 02 fc fa 74 be e3 74 89 b0 0e a5 b4 74 15 77 58 ae e4 ef 9e 1f e1 9e 9d a3 98 ce ac af 72 de d4 f0 ea 1a 9f 5a 57 c7 a7 d7 d7 e3 29 9f 27 ba 51 4a fa Data Ascii: }@?=<;Eg` %dmQ{E3Y\|e:mU)!+\|KL#i;(+UEtk6AWWJ;~3Hv+5LD>R{"wb(#0y[.L)UL.l3Wf>tttwXrZW)'QJ
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 65 41 3e 78 4e 84 cb 96 04 f1 e9 a0 09 31 a9 ef 37 a0 6b f8 3d 1a 08 b5 9a a8 56 39 08 af 2e 38 90 b0 f8 f5 b1 2c 1f 5c 15 29 ee 6e 44 c9 7a 42 22 84 50 19 cc 63 1a e5 b6 be 3c 87 92 f6 59 5b b4 62 2a 10 85 9a 8b 59 5b 92 ce 38 48 5b 12 0c e9 5c bd 2a c2 cd 2b c3 6c ea 08 d2 19 55 b5 16 a7 93 c4 d3 9b b2 18 48 5a 20 95 9f a0 5a d5 09 bc 9a e0 50 d2 66 5b 5f be 94 08 1e 94 ac 43 a8 42 e4 65 44 58 4f 49 55 b3 c3 49 9b 5d 83 39 72 b6 fb a6 8b 3e 12 02 74 01 79 07 52 59 1b 27 ef 82 21 78 4b 8b 9f eb 56 44 b8 76 79 88 75 2d aa ca c9 4c 57 52 fb 47 2d 06 32 0e 9a a6 46 8f 6a 29 e2 9a 50 23 d8 ae c1 1c 87 93 36 6d 91 31 91 87 51 32 7f 16 ca 89 f0 db 94 e8 07 db fb 72 1c 49 db e8 6f 92 d1 40 a0 6e 9a 2d 25 f1 bc c4 c9 38 e0 4a 9a eb bd bc 73 55 80 1b 57 46 d8 b8 Data Ascii: eA>xN17k=V9.8,\)nDzB"Pc<Y[bY[8H[\+lUHZ ZPf[_CBeDXOIUI]9r>tyRY'!xKVDvyu-LWRG-2Fj)P#6m1Q2rIo@n-%8JsUWF
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 1b d3 11 ea 29 51 06 e2 a6 c0 72 6b 53 f5 44 a0 9e 7e d3 91 98 ae da 42 42 b0 22 6c b0 6e 89 9f ab 3a 42 5c b7 22 c4 e2 a0 31 eb d7 97 32 5d ba 13 16 77 6f 1f e1 87 2f 8f 92 b5 5c 22 31 0f 19 5b e2 e6 1c fe f0 c2 7a fe fc 1d cd 2c 0d cd 7c da 79 7d d4 e2 58 42 59 14 3d 62 ee a7 06 21 54 b1 b3 b8 59 76 f3 04 50 6f 50 62 48 02 c8 b9 72 f6 2b 3e 4f 72 71 52 aa 65 95 23 95 f0 a5 23 69 f6 6a ac 68 f6 73 cd b2 10 d7 77 85 59 d7 e4 9b fc 64 33 80 23 95 65 f0 bb 7b 13 fc ed f3 c3 0c 8d 58 04 22 3a cd 51 0f c3 59 1b d7 85 4f bf ad 91 cf 6e 68 a4 f9 34 96 9d a0 2c b6 89 a4 85 57 80 56 45 d7 f3 a9 e0 a2 64 5c 81 40 91 08 63 14 c9 5a 12 c7 ad ee 7a e1 44 84 af 44 ba 60 ba 60 d9 2e 3e 0d 96 c7 3c 6c 6a 53 c2 7f c7 92 00 75 be ea 4c 51 12 18 cd 3b 6c 39 96 e3 2f b7 0e Data Ascii: )QrkSD~BB"ln:B\"12]wo/\"1[z,\|y}XBY=b!TYvPoPbHr+>OrqRe##ijhswYd3#e{X":QYOnh4,WVEd\@cZzDD``.><ljSuLQ;l9/
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 91 27 9e b2 58 52 e7 e5 ee 4d 2d 7c 68 55 74 4e 4b 03 be 36 6c 91 97 92 50 8d 87 04 29 5d fc ba c6 e2 68 99 a1 cc 05 0e 1a a8 9e 40 63 44 68 8d 05 f0 eb 72 ce 3c 22 b2 e2 0f 5d 83 90 4f 91 42 ba ca c0 d5 9f 73 39 7a 2c cb 0b fd 39 1e db 97 64 79 9d 17 9f 21 d8 71 3c 4b ce 94 44 fc 3a 5e 43 99 6d 4b cd e3 ba 26 c8 59 2e c9 a4 c5 5b 16 07 f8 da 95 ad 5c d3 31 79 b8 f9 6c a2 3f 63 d3 9d 30 41 68 68 35 f0 38 96 41 4a fc ba a4 35 56 76 0f 5c e0 80 01 1c a2 84 08 ed 01 17 af ae e3 e0 d4 2c 66 71 8c 83 02 82 5e 41 d0 ab 8f b9 a7 47 f2 0e 83 c7 32 80 c0 e3 11 d4 87 8c c2 fc 7f e2 78 01 08 4d 90 ca 39 64 d3 36 6f 5f 1e e2 9e ab 5a b9 a4 a5 3a 1e cc 53 e1 d5 61 93 c1 b8 85 4f 13 a7 9d 26 77 ba 70 10 78 75 9d f6 40 d9 68 ef 02 87 0c a0 87 12 22 2c 0d 0a 82 3e 03 c4 Data Ascii: 'XRM-\|hUtNK6lP)]h@cDhr<"]OBs9z,9dy!q<KD:^CmK&Y.[\1yl?c0Ahh58AJ5Vv\,fq^AG2xM9d6o_Z:SaO&wpxu@h",>
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: c1 02 7e 04 0c 17 77 dc d0 15 e6 8a b6 20 a9 6a 84 36 cf 12 8a 99 be 48 68 8f 7a e8 2c a4 d2 7d e3 a5 11 3e f9 cb 7e 32 a6 4b 43 c4 53 f0 43 9c 1a 9a 26 a8 0f 6a 48 0d be bb 3b ce ef 3f 71 8c a7 7a c7 b5 da 9d 10 b6 2b d9 33 98 af b9 ff 3e 65 ba 5c d1 16 e4 86 f2 42 5f c3 28 d9 8e 63 f6 c9 d6 58 f7 a3 e2 14 00 d5 84 fa ca f6 20 ed f3 7c 05 21 a5 04 bf 46 de 85 27 0e a6 f9 93 5f 1e e7 73 cf 0d 92 cc 4b 1a 42 fa 94 8b 57 49 09 42 08 ea bc 1a 41 9f ce 73 3d 19 3e fc d8 11 be bc 75 98 f8 24 0f 43 da 96 bc 3c 64 d6 d4 ed 6c 3a 92 f6 a8 87 2b db 83 95 f6 94 83 28 d9 8e c3 c9 88 70 18 d5 f3 67 2c 4e e1 dd cb 42 6a 54 c8 cf 4f 5d a1 98 c5 d3 10 d0 f9 7f 47 33 7c fa e9 7e be bd 6b 94 8c e3 d2 10 d4 55 bc e0 34 38 5c fc 6c c0 23 88 86 74 86 b2 0e 7f f5 eb 41 3e fa Data Ascii: ~w j6Hhz,}>~2KCSC&jH;?qz+3>e\B_(cX \|!F'_sKBWIBAs=>u$C<dl:+(pg,NBjTO]G3\|~kU48\l#tA>
2024-10-13 15:59:00 UTC	1266	IN	Data Raw: 01 09 9b 3b 43 7c 69 63 13 e7 35 7a 4b 9d 7a 12 15 5c f2 19 54 a0 49 72 d6 be 7b 96 89 00 aa 93 f0 06 94 02 b9 92 92 78 de e1 9c c3 5d db 87 b9 77 57 9c 8c ed 12 7d 13 06 b6 9c 0c 45 2f 62 d0 d0 b8 63 6d 8c 3b 2f 69 a8 ac 11 2d 81 37 50 8a e1 36 26 88 44 3e ad ef af 02 11 8a b8 18 f8 26 b0 8e 12 5d 24 61 ba fc 68 7f 9a af 6e 1f 66 f7 50 9e a8 57 c3 53 bb ca f5 35 87 4a e5 57 f7 65 4d a3 8f 3f bd a4 81 eb 56 84 2a a3 8f 5d d4 d2 f0 76 60 47 55 ae a3 8a 44 00 78 0b f0 05 e0 46 60 cc 47 ea 48 c9 d6 be 1c df d8 39 ca a3 dd 29 b2 8e 24 36 0b 3d 9c cf 44 c4 4d 95 a2 77 43 57 98 8f ad ab e3 d2 56 3f 7a b9 12 55 ac 73 f4 17 c0 ab d5 ba 8e 6a 13 01 60 29 f0 29 14 9b a3 a5 6f f4 a7 6d 1e e9 4e 71 df 9e 38 3b fa 73 f8 0d 8d 40 0d 7a 26 cf 35 04 2a da 38 67 bb 5c bc Data Ascii: ;C\|ic5zKz\TIr{x]wW}E/bcm;/i-7P6&D>&]$ahnfPWS5JWeM?V]v`GUDxF`GH9)$6=DMwCWV?zUsj`))omNq8;s@z&58g\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49942	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	757	OUT	GET /static/img/no_time.a22c9afd.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:59:00 UTC	910	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/png Content-Length: 4948 Connection: close x-oss-request-id: 6700CE320F2DD037371EA29D ETag: "A22C9AFD98198C14E779579F3B5FE345" Last-Modified: Tue, 20 Aug 2024 09:32:53 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1164701874894545368 x-oss-storage-class: Standard Content-MD5: oiya/ZgZjBTneVefO1/jRQ== x-oss-server-time: 11 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 723 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MM0no%2FF5Bv88elPLpDrgpG7mN1BuDCPZlO4CuKk3U%2FUtg7PWxP9U2sHKa3ZCyhYl5i%2FZL%2FYx8qmBDTkbwWRiRr0%2BvMyL4xM3M3qgTv4%2BMv1t83TFxCuK65uzcwl0Mw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088ca9ed18cdd-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 4b 08 06 00 00 00 38 4e 7a ea 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 13 0e 49 44 41 54 78 5e ed 5c 09 74 54 55 9a fe fe b7 54 25 21 0b 49 25 05 89 44 c2 8e 82 22 2a 88 20 20 0e 6a bb d0 0d c8 41 d0 51 c7 a3 f6 0c d3 2e bd a8 63 bb 74 4b 3b ce b8 35 2e ed 68 4b bb a2 32 6a 3b c8 88 b4 c8 26 2a 88 08 42 d8 b7 20 60 02 89 49 55 20 54 6a 7f ef fd 73 ee 7b 55 95 90 aa 4a 55 05 82 ce 4c de 31 87 58 b9 ef dd 7b bf f7 2f df ff dd 7b 8b d0 75 a5 8d 00 a5 dd b2 ab 21 ba c0 ca c0 08 ba c0 ea 02 2b 03 04 32 68 da 65 59 5d 60 65 80 40 06 4d 7f 50 cb aa e6 ea 6c f2 93 43 96 b3 0b 54 e2 1c 83 0c 3b 00 09 80 21 b1 14 0c 33 f9 74 dd df c4 d9 ec 2e a7 72 7f 06 f3 ea 94 a6 a7 14 ac 7d 8d 8d 05 f9 b9 Data Ascii: PNGIHDRKK8NzsRGBIDATx^\tTUT%!I%D"* jAQ.ctK;5.hK2j;&*B `IU Tjs{UJUL1X{/{u!+2heY]`e@MPlCT;!3t.r}
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 2e 26 42 1e 98 b3 18 24 13 58 07 51 80 19 1e 22 72 11 d8 0d 80 d3 7d 28 83 0d 00 9f 97 28 25 ab 89 28 ed fb 52 3d ff 84 c1 62 66 b5 41 6f 98 4a 4c 03 53 75 16 f9 7b 77 06 ce 04 63 00 03 e5 04 d8 52 dd c7 40 88 80 6a 10 f6 12 b0 03 c0 d1 54 f7 88 bf 33 f1 9e 12 b9 64 01 11 85 d3 69 9f aa cd 09 81 75 98 0f e7 a8 61 f5 3a 10 4a 53 75 64 30 ce 00 78 14 81 2a 80 13 8a 95 82 47 1c 00 e8 2b 89 b0 33 55 bf 60 d4 86 d5 f0 fc 32 3a f1 e0 df 61 b0 4c a0 0c f5 06 18 70 b6 37 60 66 ee 0f a2 cb c0 e8 99 72 62 99 36 20 d4 81 79 29 11 55 b5 7b ab 84 fa b0 14 7e f3 44 01 eb 10 58 c2 f5 5c 61 d7 4d ed 59 14 83 73 c0 d2 d5 00 0f cd 14 83 cc db d3 36 90 f1 11 81 92 53 07 46 6d b1 5a fc c6 89 b8 64 c6 60 99 c1 5c 6f 98 de 6e 8c 22 f4 66 03 d3 01 e4 65 3e f1 0e df e1 21 09 ef Data Ascii: .&B$XQ"r}((%(R=bfAoJLSu{wcR@jT3diua:JSud0x*G+3U`2:aLp7`frb6 y)U{~DX\aMYs6SFmZd`\on"fe>!
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 33 11 f5 11 9d d0 e6 5d 08 dd f7 04 d6 7d b5 1e bb d9 8b 1b c7 5f 8a aa 46 37 7a 3c f3 24 b2 0a 0b 21 c9 8a a5 b4 b3 00 8b 4d ab 12 2e c8 91 f8 a4 b7 01 ca 72 49 0b 2c 21 be 5b 17 83 c0 90 c1 c8 5a b2 0c 8d 1f fe 0d ee 86 46 f8 4b ca 70 c4 eb 42 d1 4f 26 60 ec 9c 87 92 72 39 66 de 2f 49 14 07 8a e8 45 51 94 3f 15 51 6a 4d bf 5d cb 3a 1c 3a 7c be 4a ea 15 6d 51 37 18 85 04 fc 32 a6 1e 30 c3 ff e8 cb a8 53 80 c1 ce 62 d4 ce 7b 07 4d 37 cc 44 8f 8b c7 43 56 d4 c8 04 c4 54 2d a5 49 04 ee 38 b0 4c eb d2 2d 2b 8b c4 ab 16 cb b2 c0 8a 02 66 83 01 f9 d9 17 50 bd 6e 03 ba dd 77 07 6a bf ad c1 d0 5b a6 a1 e8 78 72 da 76 d8 4c 84 a7 13 c9 3b 61 0e 7f 5c 66 2b db 90 ca ba da 05 ab 3e 58 3f 8d 24 3a 23 0e 2c 83 c7 10 d1 e5 6d 3f 97 dd 4d 90 67 3f 87 4d 35 87 50 f1 e4 Data Ascii: 3]}_F7z<$!M.rI,![ZFKpBO&`r9f/IEQ?QjM]::\|JmQ720Sb{M7DCVT-I8L-+fPnwj[xrvL;a\f+>X?$:#,m?Mg?M5P
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 06 f8 48 4d 18 b5 ae 18 d7 32 60 68 1a f4 f9 ff 09 9e 39 c3 e4 5e d6 b6 ac 16 b0 2c a0 c4 65 98 35 62 71 bd 0b df dd f7 3b e0 96 19 18 f0 9b db d2 02 ab 53 b2 61 a6 3c cb 1c e9 bd 8f e1 e0 a7 ab d1 fd e5 17 61 cb cf b7 78 96 c8 88 b1 00 2f ca 1d 51 fb b5 29 a2 23 75 a1 49 46 37 6f 81 26 74 ac 21 67 c2 23 11 be 70 b9 e1 0b 08 11 c6 8a 5f a6 7b 46 61 31 eb 27 1d 30 cb 2a 09 03 4b 72 31 69 cc d9 66 db a4 8b 23 9d c1 b3 98 39 bb 41 6b 48 9f c1 8b fc f6 c1 27 38 f2 d4 5c 78 a6 4d 86 e3 a7 57 9b 41 5e 0c da 9c 5c 6b 0d cb 54 19 5a c7 2d 8b b5 9b 2e 29 1a bf f9 16 f4 6b a7 e3 3b 43 c7 f2 7d 07 22 c4 b6 b5 8d 59 84 44 b8 b8 60 f3 a2 9f de c5 45 b8 a8 a2 0c 65 dd ec f0 04 3d 28 3c 3d 5e aa e9 34 06 2f e6 57 9f 61 6d 88 26 0f 02 d7 fc 13 6a 25 09 ce e7 e7 40 b6 d9 Data Ascii: HM2`h9^,e5bq;Sa<ax/Q)#uIF7o&t!g#p_{Fa1'0*Kr1if#9AkH'8\xMWA^\kTZ-.)k;C}"YD`Ee=(<=^4/Wam&j%@
2024-10-13 15:59:00 UTC	382	IN	Data Raw: f1 67 b9 31 af 72 aa ce 38 59 39 9d 17 95 31 58 e2 a1 f5 5a fd b5 ff 5b 77 2b 3b 15 67 c2 cc d8 69 60 a5 b7 0f 5e 64 49 9c c2 7d f0 f8 28 d1 0e bf 18 08 3f c4 3e f8 68 e7 5d 27 2c d2 b1 c5 56 6d 32 39 bb 03 c6 60 03 7c e1 c9 3a bb 23 81 d6 26 da 6f 95 80 23 fc f0 67 77 a2 83 da b6 6d 9b cd 39 d8 39 25 93 53 61 86 c1 43 88 a8 7f a6 a7 c2 98 b9 4a 92 48 ac 1a a7 7d 2a ac 7e 57 fd 07 43 87 0e 3d 29 c7 82 3b 14 e0 13 19 60 7d b8 7e 6c 47 ce 1b 12 c8 a1 33 17 4b 84 3c 4e 70 de 50 26 72 71 07 cf 1b 76 34 eb 25 73 b0 93 06 96 e8 40 9c 64 cd 52 78 52 32 e2 9a a1 97 77 a8 b9 20 9c 01 8d 7e bc 27 59 5b cf aa eb 8c 74 07 de b1 28 be a5 42 e9 42 59 91 cf ed 3a 7d 9f 26 80 42 0f ab 0d d7 9e a5 40 19 06 42 d9 c9 fa 5e 07 30 0e 6b d0 36 97 aa a5 5b d3 dd c7 9e e6 90 93 Data Ascii: g1r8Y91XZ[w+;gi`^dI}(?>h]',Vm29`\|:#&o#gwm99%SaCJH}*~WC=);`}~lG3K<NpP&rqv4%s@dRxR2w ~'Y[t(BBY:}&B@B^0k6[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49949	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	818	OUT	GET /static/img/Earning.5193259d.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga=GA1.2.1012192315.1728835136; _gid=GA1.2.972001485.1728835139; _gat_gtag_UA_255502036_2=1
2024-10-13 15:59:00 UTC	903	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/png Content-Length: 5216 Connection: close x-oss-request-id: 66833E6F36F90D3234AB396D ETag: "5193259D70E36577812CC3F2C983F411" Last-Modified: Fri, 21 Jun 2024 09:03:37 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1806953326693834096 x-oss-storage-class: Standard Content-MD5: UZMlnXDjZXeBLMPyyYP0EQ== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 326 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MZKZuvYauTHAWkI857mbx3rfVW64AmLhXMv05qN8YN%2B30Mn5p7xMvSGrSGdsW4yYEhROJp0IUdR0N%2BGktFVwpGAC87Qss3QD%2BNBN9EOCYoq0nHkt9063da5KYKSvhg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088cbc8e50f70-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 4b 08 06 00 00 00 38 4e 7a ea 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 14 1a 49 44 41 54 78 5e ed 5c 09 70 1b e7 75 fe de 62 71 11 04 c0 13 bc c4 43 a4 4e 4a b6 ac c3 8a 2c c9 96 15 1f 89 63 2b 71 4e d7 49 e3 d4 f6 b4 33 75 d2 b8 c9 64 9a 4e a6 47 3a 99 66 72 74 ea 69 a6 47 d2 8e 9d 49 da 34 b1 63 37 69 14 db f1 15 db b2 23 c5 b6 44 45 12 75 98 22 25 1e 20 48 02 20 89 fb dc dd d7 f9 17 00 2f 00 24 40 89 a9 93 e1 6f 89 b4 76 ff fd 8f 6f bf f7 fe f7 bf f7 fe 25 ac 96 92 11 a0 92 6b ae 56 c4 2a 58 65 90 60 15 ac 55 b0 ca 40 a0 8c aa ab cc 5a 05 ab 0c 04 ca a8 ba ca ac 55 b0 ca 40 a0 8c aa ff 2f cc 1a 0b 8f d5 1b 2a 2d 2d 06 45 6b d0 48 ab 25 22 27 6b 6c 63 b0 89 40 06 06 ab 04 4a 91 44 Data Ascii: PNGIHDRKK8NzsRGBIDATx^\pubqCNJ,c+qNI3udNG:frtiGI4c7i#DEu"% H /$@ovo%kVXe`U@ZU@/--EkH%"'klc@JD
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 98 b1 86 c1 ed 04 a9 11 cc 75 20 d8 01 58 00 18 00 a8 00 12 60 84 41 e4 67 68 e3 04 1a 22 82 1b 80 56 12 00 8c 88 a4 48 4f d6 56 d4 8e 94 54 bf 84 4a 57 0c d6 78 72 7c ab 2c c9 87 18 2c 2f d5 1f 33 77 00 b4 1d c0 26 00 d6 a5 ea 17 b8 1f 07 70 01 e0 93 44 34 b8 d4 f3 04 52 14 4d 39 dc 68 6e ec 5d aa 6e 29 f7 af 08 2c 5f ca b7 8b 89 df 4b a0 45 db 61 46 37 18 37 83 d0 58 ca a0 8a d5 61 c6 6c 4f 8c 71 10 5e 21 c2 b9 c5 da 64 30 13 d3 2f ea 4d f5 c7 af a4 6f f1 ec b2 c1 f2 a6 bc db 41 b8 73 31 a0 98 b9 91 20 dd c5 e0 36 6f 44 41 ef d0 04 a2 b1 04 54 4d 85 a6 89 69 68 10 00 70 e6 07 c4 7f e2 8f f8 31 73 5d fc 4b d3 90 4a 26 b0 c6 69 c1 81 dd d7 40 96 85 a4 66 0b 63 04 c4 87 89 68 bc 28 c8 99 c6 9f 76 99 5c 27 af 04 b0 65 81 e5 4d 78 d7 c3 80 8f 11 48 2a d2 39 Data Ascii: u X`Agh"VHOVTJWxr\|,,/3w&pD4RM9hn]n),_KEaF77XalOq^!d0/MoAs1 6oDATMihp1s]KJ&i@fch(v\'eMxH*9
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: be 88 80 a2 21 34 3d 8d e1 e1 11 dc d4 d9 84 63 23 7e 7c e1 be f7 a1 a6 aa b0 4b 5f 55 35 24 12 49 10 49 a8 a8 30 47 99 f0 0f 52 c6 fd 33 af 68 aa f6 83 06 4b c3 a5 a5 5e fc a2 60 15 33 42 35 d6 36 12 66 41 1c 1c 9c 80 db e3 c5 de 3d 5b f2 b6 2b af 0d 4c 63 13 25 d1 50 25 8c d2 b9 2b 5e 6e d3 3c bb 95 c9 6d a4 f5 df 59 23 30 ad a8 90 24 c2 a0 3f 08 7f 3c 85 b1 c9 00 8e f4 9c c6 27 df bd 0b 47 07 c6 f0 d0 bd ef 59 b8 4f 2c 3a 67 02 fe 0b 84 be 85 15 4a 35 52 17 05 cb ab 78 1f 20 26 7d fd 9d 5f e8 10 33 5f 9f bb 16 0e c7 90 48 a4 50 5f 5f 95 57 f3 c7 27 c7 70 b3 93 e0 9a 51 f0 3a 87 90 52 35 9c 19 1a c3 96 35 2e 98 64 43 9e dd 55 8c 71 12 11 be fa 3f cf e3 6f 3f f3 07 4b 11 a1 d0 fd e3 44 f8 d9 c2 1b 4c 3c ea 92 5d 8f 2d d5 60 51 b0 be cc 5f 96 1e 52 1e fa Data Ascii: !4=c#~\|K_U5$II0GR3hK^`3B56fA=[+Lc%P%+^n<mY#0$?<'GYO,:gJ5Rx &}_3_HP__W'pQ:R55.dCUq?o?KDL<]-`Q_R
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 68 bc 61 2b ac 6b 1b f4 d5 6e f0 d9 a3 70 c8 b6 4c 60 36 e7 9e d6 34 8c 0c 5c 42 3c 1a 85 c9 64 46 da c8 68 7d ff 5e 8c 1f 7e 13 8e 8e 46 ac bb f7 dd 20 83 b4 32 46 a9 70 cf f8 14 df d2 db 1d 11 bb 3c f6 cf 48 45 02 fa e0 a5 0a 17 b8 f3 5e 8c 9d f8 05 2a e3 6f c0 ac 07 4b 19 a3 97 dd 88 05 93 68 da fb 41 d4 b6 6c 84 b1 a6 2b 0b 56 ce 13 91 51 ee 94 d2 90 3c e5 81 92 4e 81 55 86 aa 28 88 07 43 a8 da b3 11 b6 56 17 20 11 7e f5 cd ef a1 ad 7d 2d 2a 1c 76 5d a7 09 37 8e d0 6b fd bd 67 61 32 1a 61 30 18 c0 75 36 34 ee ee c6 d4 f3 bf 81 b9 da 81 ae 3f bd 43 d4 5d 99 ed 8e 18 7a b1 8d 34 33 de 0f 60 57 6e e5 e0 53 ff 8d c4 c4 c5 8c 58 90 01 e8 7e 08 21 cf 20 d2 e7 1f 85 bd 46 c4 0b 19 13 23 e3 80 aa 40 ea b8 03 0d 8d 0e d8 3a 6e 9a 65 d5 1c 86 51 20 85 d8 05 8f Data Ascii: ha+knpL`64\B<dFh}^~F 2Fp<HE^oKhAl+VQ<NU(CV ~}-v]7kga2a0u64?C]z43`WnSX~! F#@:neQ
2024-10-13 15:59:00 UTC	643	IN	Data Raw: 94 0f 04 e0 1e 1c d4 f7 83 b1 54 1c 5d 7f 78 1b 26 9f 39 01 83 86 f4 b5 5f bc e7 6b 72 85 39 bd 10 ac 52 e3 84 f9 cf 15 e2 68 91 6b 2f f3 cb 72 77 7a eb 83 12 2d 92 26 29 e1 3e f0 6c 0a f7 6f 86 a7 21 fb bc d8 bc a6 69 d6 2d b3 30 7b 66 66 41 5c b0 00 64 c7 21 80 14 ab 5f 3a 99 c6 d4 d0 18 de e8 e9 c3 0d 6d 6b 90 f6 87 10 18 f7 21 14 0c e8 ab 30 d5 57 a2 79 ff b5 ec fb f9 71 d8 5c d5 9e 6d 5f bc e7 3b 79 53 61 78 7b 8d bd 8f 1e a4 83 2b 9b 26 29 3a 16 de 88 94 92 7a b0 78 02 2e 99 09 3c 93 80 1b 8c a5 f0 c4 33 47 f1 c0 fe eb b2 db 9b 0c 32 79 2b e3 1c 00 67 32 bc 17 30 51 00 f2 e4 6b 6f 62 dd 35 1b b0 67 6b 97 9e 1e 1e 19 f7 23 e2 9b 46 3a 9a 40 8a d5 4b 48 a5 2f 07 cf 0e cb 35 5d ad e3 5d 77 ee 99 97 97 25 12 70 4d b2 e9 51 07 39 26 cb e0 c8 4c d5 25 b3 Data Ascii: T]x&9_kr9Rhk/rwz-&)>lo!i-0{ffA\d!_:mk!0Wyq\m_;ySax{+&):zx.<3G2y+g20Qkob5gk#F:@KH/5]]w%pMQ9&L%

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49944	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:59:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6ee6cdcb-a01e-006f-4687-1b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155900Z-17db6f7c8cf6qp7g7r97wxgbqc00000004dg00000000a2wy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:59:00 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49943	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:59:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 4b275f89-001e-0049-42aa-1c5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155900Z-17db6f7c8cf6f7vv3recfp4a6w0000000270000000004hq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:59:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49951	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	513	OUT	GET /static/img/qipao.ed43cd4f.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:59:00 UTC	922	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/png Content-Length: 55074 Connection: close x-oss-request-id: 666D31CE4562B7343434AC88 ETag: "ED43CD4FAEC430DEA22831297A7035CE" Last-Modified: Mon, 20 May 2024 05:15:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13645825189673648035 x-oss-storage-class: Standard Content-MD5: 7UPNT67EMN6iKDEpenA1zg== x-oss-server-time: 6 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6334 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pFAQ%2Bf2ZXLDcbCabJy%2Br9VPHyQ1v9kp6%2BTFRsV4DO7Db7%2Fq3v23olLDysI0wrc%2BGWT%2B7yi7hjp3Poq2DtuvzV1s%2BUSo2n2cbdA0Pt3%2BJTx%2FAFIiEnOgaV%2FZ%2B1FqG3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088cc4b5943aa-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	447	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9e 00 00 00 c6 08 06 00 00 00 7b 34 80 20 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 5b ac 6e 4b 76 1e 54 73 5d f6 de 67 9f ee f4 25 1d df ba dd ed b6 db 17 88 14 09 01 b1 93 a0 20 c8 cd 21 3c 80 21 04 14 de 50 b8 df a4 24 3c 84 04 12 12 84 20 11 c4 98 20 20 10 01 0a 42 11 12 e1 25 41 28 5c 04 02 c5 96 fc 80 40 bc 21 02 6e db 9d b8 db ed b6 cf 75 ef b5 d6 3f d1 a8 aa 51 f5 8d 51 63 54 d5 9c ff bf f6 39 67 9f b9 fa b2 d7 fa ff aa 51 63 7c e3 3a eb 36 97 70 fc 1c 08 7c 08 11 58 d7 f5 93 21 84 df 1d 42 f8 b1 10 c2 0f 87 10 de 08 21 fc 3b cb b2 fc 91 0f 21 bb 07 4b 07 02 07 02 07 02 07 02 07 02 07 02 13 08 2c 13 6d 8e 26 07 02 af 0c 81 75 5d bf 33 84 f0 07 42 08 ff 58 08 Data Ascii: PNGIHDR{4 sRGB IDATx^[nKvTs]g% !<!P$< B%A(\@!nu?QQcT9gQc\|:6p\|X!B!;!K,m&u]3BX
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: e3 e7 40 e0 40 e0 40 e0 40 e0 40 e0 40 e0 23 86 c0 51 78 7e c4 14 f6 3a b0 9b f7 71 fe 78 08 e1 1f 0c 81 6b ca 10 5e ac 6b f8 da fd 1a de 3a a5 0f 69 43 e7 a7 ae 42 f8 e2 ed 15 8b fd 57 97 65 f9 8d af 03 06 87 0c 07 02 07 02 07 02 07 02 07 02 1f 47 04 8e c2 f3 e3 a8 f5 0f 48 e6 75 5d c9 de 7e 5f 08 e1 df c4 65 f5 87 35 84 af 3f 9c c2 37 1e 12 63 54 70 b2 61 7e e1 66 09 9f be 2e 66 fa 27 8e 53 ed 1f 90 f2 8e 61 0f 04 0e 04 0e 04 0e 04 0e 04 2e 80 c0 51 78 5e 00 c4 83 c4 18 81 75 5d 7f 28 84 f0 1f 86 10 7e 33 b6 fe d6 c3 1a fe fa fd 1a ee 55 c1 49 6d c8 38 7f e8 c9 55 a8 75 67 f8 91 65 59 7e 6a 3c da d1 e2 40 e0 40 e0 40 e0 40 e0 40 e0 40 e0 c3 88 c0 51 78 7e 18 b5 f2 1a f1 b4 ae 2b 6d d3 fc fd 21 84 3f 16 42 78 c6 a2 f1 b2 3a ed e3 c4 1f 5e 62 a7 cf 3e 71 Data Ascii: @@@@@@#Qx~:qxk^k:iCBWeGHu]~_e5?7cTpa~f.f'Sa.Qx^u](~3UIm8UugeY~j<@@@@@@Qx~+m!?Bx:^b>q
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: d6 f7 0f d9 a7 dc 1b d8 96 10 de 5c 42 f8 62 5d 66 ff 7f 97 65 f9 f2 6b 04 ef 21 ca 81 c0 81 c0 81 c0 81 c0 81 c0 81 40 46 e0 28 3c 3f e6 a6 b0 ae eb df 17 42 f8 0f 42 08 df ce 50 d0 65 f0 74 62 fd bd 93 01 0e 57 9c 7c 7a 5d ed db c4 3b 95 b0 08 d5 94 68 c9 9e 0a 56 6a 43 af c8 fc 6c 5d 66 ff f1 65 59 fe c5 8f b9 5a 0e f1 0f 04 0e 04 0e 04 0e 04 0e 04 5e 4b 04 8e c2 f3 b5 54 eb 58 a8 3c cb f9 a7 43 08 bf 17 5b 7f eb e1 14 7e c1 bc 0c 9e 2a 45 6a 99 cb 49 ae 2a f1 5f 3d ac b5 1f 54 b5 a1 02 f4 7b 6f af c2 d3 ba cc fe 5b 97 65 f9 1f c6 12 1c 2d 0e 04 0e 04 0e 04 0e 04 0e 04 0e 04 3e 6a 08 1c 85 e7 47 4d 63 17 e0 77 5d d7 df 13 42 f8 77 43 08 df c6 e4 ee d6 35 fc f5 fb 53 78 a7 79 fd 50 36 91 38 b3 a9 4e 14 c1 ec 67 a4 a3 0f 1c e9 cf 90 f7 dc 97 5e 52 f4 03 Data Ascii: \Bb]fek!@F(<?BBPetbW\|z];hVjCl]feYZ^KTX<C[~EjI_=T{o[e->jGMcw]BwC5SxyP68Ng^R
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 84 f0 f4 ca 85 ed a7 42 08 ff f2 39 af b6 ee 67 62 47 ee 7c 72 fa c7 43 08 74 90 a5 fc 90 bc ef ad 0f e1 ed d3 43 78 67 7d 08 54 22 e3 8f 97 d8 13 4c de cf 24 8b 06 81 fa 91 54 00 8f 84 fc 68 47 9f 71 fc 6c d2 9b 0e d6 68 29 65 6d 52 f9 b4 da 0d cd d0 c0 20 c9 28 31 4c 9f d1 a7 76 71 38 e3 80 e3 36 68 ee 3e e7 ba 36 b3 1c c5 fb 6c 26 21 72 e8 a9 d0 ec 2f 3c 7a 89 c8 fa ce 4d 2a e9 0e fe f2 13 e3 40 fc 0c f5 54 f9 dc 93 00 c7 fa d9 f6 30 e6 f9 43 cf 87 86 f6 aa 92 46 2f 3e 70 8c b0 fc 14 03 ac 8e 25 2d 7f 35 20 c3 ed b3 05 f9 51 f2 98 c1 55 cb 3d 1b 5b 9a 04 01 f7 e3 62 82 f5 da cd 8c 6b ad 85 78 49 74 93 4d e7 c1 ad 42 40 eb 40 d8 be 13 fb 47 38 f7 ec b1 9f 4f 7c ab d4 63 6a 6f 9c 89 37 16 0d af 38 e2 b8 b6 97 5f 8b 1f 1d 75 35 d6 d6 58 5e 7c 71 e3 17 e8 Data Ascii: B9gbG\|rCtCxg}T"L$ThGqlh)emR (1Lvq86h>6l&!r/<zM*@T0CF/>p%-5 QU=[bkxItMB@@G8O\|cjo78_u5X^\|q
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 5d 3f 1b 42 f8 9f b8 e8 24 26 7e e9 f4 32 7c eb 44 77 8e d6 1f 77 56 85 e2 79 31 a0 cb a8 a9 ee 79 93 ec 9a c5 4e 46 cd 9f 33 e2 b9 91 76 b7 57 9b b0 76 c3 68 62 e5 f1 54 c7 e5 bd 7d 36 ce e8 94 18 3c 4c 94 c1 7a f4 b8 d6 c9 b7 51 a0 9c 75 5e 4d a7 86 8c 44 a1 87 01 07 17 1d 18 75 40 d0 89 d0 0b fa 56 bf 5a be f5 f6 10 aa a7 41 e7 44 a3 87 89 eb 1b c6 65 57 5a a7 b1 2f cc a0 cb 72 93 83 82 6f dd 35 42 4b 1b c2 53 99 a5 b7 91 f0 b7 ea b9 97 70 8b 5d aa 71 50 cf 28 89 29 15 14 14 25 f9 c0 e3 a3 8d 0f 2e 09 59 65 a8 e5 67 f5 e0 9d 65 5f 9a 4f c6 09 65 e4 c4 e9 45 3d cf 2e 3c 3b 45 5d 58 c9 5f fb 93 4e da 16 1f 96 bd a1 2c 98 74 2c fd 69 fb 40 74 87 d1 de c8 b4 22 c9 e5 dc 61 d9 e0 08 3b 4b 06 c4 d5 a3 d9 e8 51 35 b4 72 82 b6 f9 9e 37 7a f6 6d c5 72 3b 76 fa Data Ascii: ]?B$&~2\|DwwVy1yNF3vWvhbT}6<LzQu^MDu@VZADeWZ/ro5BKSp]qP()%.Yege_OeE=.<;E]X_N,t,i@t"a;KQ5r7zmr;v
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 16 f6 9e 70 cb 16 75 be b0 62 a5 b5 5a 81 71 1a 71 d2 85 91 87 bf e5 7e 5e 8e 43 d9 74 ec d4 3e 62 15 32 66 71 63 e8 4d f0 4e be c6 0f a1 93 b1 5c f8 73 66 4c c4 c6 fc 87 e0 07 3e b3 ec 3d 96 6b 86 92 08 ff 38 cb 99 89 45 32 6c 27 da c7 d4 7e d4 d2 2e 83 59 c6 05 9e ad fc 51 b0 66 6c 50 19 7c ff e5 42 6f 03 4a ff 3b ad a7 b8 24 4d 4c c6 7f e3 7f eb 0e 49 91 c7 01 3c 5e a6 a6 19 43 fa 0f c9 b9 84 ab 7c 42 ff 2a a4 cf 59 e0 ca 44 2f 67 75 73 ae 3a 43 e0 d9 90 ce 73 a8 16 d2 d3 c3 a9 c6 3c 5d 07 94 19 69 15 ff bf f3 26 84 4f d6 03 47 74 cf e7 af d5 97 cc 37 55 c6 ba ae 74 1b fd df 4f b4 e8 ca a4 9f 7d 78 6f e2 e4 7a 43 46 62 e2 26 c4 41 3f 8d ac fb f7 98 8e 08 16 e8 8d 4d 04 30 9e b4 ac 71 67 93 3c 3f 73 e8 f6 18 5d 34 3f 53 72 8f 65 9e 21 23 5e eb 8e 86 ef Data Ascii: pubZqq~^Ct>b2fqcMN\sfL>=k8E2l'~.YQflP\|BoJ;$MLI<^C\|B*YD/gus:Cs<]i&OGt7UtO}xozCFb&A?M0qg<?s]4?Sre!#^
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: de 4f c4 88 ed 1b 84 c3 e5 f4 89 78 2e 8d 19 07 35 b0 48 2c 26 fe 75 9e c2 82 bc f8 f0 60 ff 54 79 40 c9 b6 c2 cc 14 36 58 56 e5 8a 3a d1 26 0c 65 01 27 1e a8 d9 07 a0 58 29 96 a1 b0 8b 7f f6 f6 86 3a 7b 49 b9 38 90 be 84 11 28 c7 22 6b 4f 5c b1 c7 24 b9 c0 16 79 06 dd b3 dd 95 1a 96 31 04 ac 74 91 26 8a 81 ce de c8 1a 83 73 0c 85 a4 80 0f 2a 3a 6f eb 88 c9 31 cc 2b 02 45 ff 26 86 d7 f8 dd 0b 5d 45 cf 68 af ca 47 d8 3e b0 c0 d5 f7 da 62 a1 17 bb 83 d3 37 51 d1 7c 30 4b f6 87 66 88 b1 09 17 0d 04 ab 19 04 9d 43 30 e3 08 7f c0 c0 93 15 15 bf 57 3e 59 c2 ab 55 b4 aa 14 86 36 6f e5 57 ce 67 ed 76 2a 25 2f 28 0a f7 aa eb bc 16 65 b3 ee fa 54 be 21 ed 2b ef 83 64 df cc 5f c6 b9 bb bc bf bf 84 50 8c af 86 bf a1 7d 5b 21 9f f1 88 7c 37 89 77 8d cb e6 34 b3 79 bf Data Ascii: Ox.5H,&u`Ty@6XV:&e'X):{I8("kO\$y1t&s:o1+E&]EhG>b7Q\|0KfC0W>YU6oWgv%/(eT!+d_P}[!\|7w4y
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 8d 79 2a 3d 58 0f 86 56 4c 2d 31 b3 ae 65 16 7f d5 df 69 3c 70 c2 38 7f d7 ec 4f 56 93 ca 28 9b 70 e7 78 f5 90 5c 8f 8e 77 73 c2 d5 79 68 1f 4d 4c b1 e2 0a fb 20 c7 57 0b 3b ba fe 27 9c e2 52 3a cd 72 c6 e5 74 43 4e d3 36 8d bd c7 b1 1d f8 0c 6e 15 72 c3 1d c7 f5 93 b1 0f 49 c5 29 2b 3f 16 f3 89 74 e4 86 67 cc 69 c5 7c b8 c4 82 7a 85 0a cf 5b 2e 40 63 15 88 46 ea ef 09 b5 64 b2 52 ac 76 83 32 fb c9 f3 d8 65 38 da 9b 1a 02 5d af 44 87 8d f2 cf 1f 5c 96 e5 4f 25 f1 d6 f5 7f 0d 21 fc 26 fa fd eb a7 f7 c5 6b 31 75 4c b2 6c 42 04 10 91 2d a1 f0 44 d0 b5 84 18 78 e2 00 bc 71 08 b2 a1 42 c0 f3 45 db 97 db 0b eb 75 52 47 19 ca 89 b5 fc a1 18 2b 7f 19 81 03 7d ea 71 a5 aa 8d 18 53 36 a4 19 1b 40 ac 20 69 e1 a7 71 43 5c e3 77 a9 cc 48 3f b5 10 b5 74 ca 5d 1b 55 e4 Data Ascii: y*=XVL-1ei<p8OV(px\wsyhML W;'R:rtCN6nrI)+?tgi\|z[.@cFdRv2e8]D\O%!&k1uLlB-DxqBEuRG+}qS6@ iqC\wH?t]U
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 98 69 b3 95 9f 5e 7b 9d 03 74 5b bd 15 b0 e1 4f c5 a0 31 6f 6d 0b b4 af f4 ad 24 ba c5 37 a4 26 c6 5b d6 da d1 2a 7f 96 9d ec 91 cf f3 07 1c db d2 fb 8c 2d d8 fd ca ae d9 06 49 7b 83 99 65 05 bd 8c 38 ce 34 33 bc 8f b0 bc 14 8d 2d 38 cf 8c b9 57 57 8d 6f cd 9c 59 30 40 f2 78 d4 9f a3 2f 6c 71 d3 19 0c ba 31 7e a4 d8 89 6c de e3 77 e4 e3 f1 7b 58 56 e6 e1 a8 c6 a0 e5 75 8b 76 cf da c7 e2 a4 65 75 2a 38 e3 85 ef 54 e6 c4 45 a7 4a d5 7a 8c d3 a7 d9 b9 f5 48 57 2c db 8c 1d 5a 36 31 f2 07 94 d7 b7 85 ee 59 fc 48 a2 67 47 a8 43 7a 3f 14 15 9f 34 03 4a d7 30 e9 78 7f 96 3d e6 ce 58 7c 32 ce f4 fe f6 4f 5d 17 1d fd 11 2a 3c ff cb 10 c2 3f 4c cc 7f 23 ee ef a4 99 d0 5e f8 1e 9b 06 b7 d0 4a 95 bb 0c 6b da 43 23 40 a3 ec 3f ac e5 ab 55 71 bf 9d 33 77 a8 43 77 fa 5b Data Ascii: i^{t[O1om$7&[-I{e843-8WWoY0@x/lq1~lw{XVuveu8TEJzHW,Z61YHgGCz?4J0x=X\|2O]*<?L#^JkC#@?Uq3wCw[
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 55 60 53 a6 e0 34 d2 45 8c 0c 69 9c 68 59 6f 5c 58 ec 9b bf f6 c6 12 88 22 90 83 48 67 d1 d3 25 71 7a 46 4d 61 27 b5 df eb a3 fd 3d c5 9a 6d 3d ca e8 fb 91 0e ad 30 60 25 65 8f ce 14 f6 ea d0 4a b2 05 f4 59 7c 74 b4 ec 94 53 62 6b 2f ec b1 be 0f 49 84 7a 7b 72 f7 6a d0 4b f0 1a b3 91 2f cf c4 97 42 c3 a9 0a 66 c6 98 e5 6b 96 d6 a5 db 8d 6c 56 e3 34 1a bf f7 bd ed eb 3e 07 56 5e 6b 43 8b bc d4 9c c3 3b 9d 93 c6 9f 5e 8e 98 e1 eb b4 3e 84 97 bc b4 9e 09 6b ef 99 b1 a9 56 da 1a 15 b4 bc 16 cf d6 83 45 af 9d 8b ae ba d7 b3 67 07 9e 4e f9 e1 74 d6 27 47 b6 c6 91 87 eb 71 3a 6c 44 cb ee 4f af 9f 04 3a 84 e4 45 ab a9 18 0a 9d a9 70 3f 9d d6 f0 e5 67 e5 58 fb 03 15 9e 45 13 5c 78 8e 18 ae df 4f b1 50 8a 9a 96 ee de 70 e8 71 68 d0 1b 24 62 49 e9 b1 f8 19 85 8f 1e Data Ascii: U`S4EihYo\X"Hg%qzFMa'=m=0`%eJY\|tSbk/Iz{rjK/BfklV4>V^kC;^>kVEgNt'Gq:lDO:Ep?gXE\xOPpqh$bI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49952	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	516	OUT	GET /static/img/button-2.1f146b37.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:59:00 UTC	918	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/png Content-Length: 25026 Connection: close x-oss-request-id: 66FFB61406F3A43231077919 ETag: "1F146B37A4DF36275C83DB80263261F5" Last-Modified: Tue, 20 Aug 2024 09:32:40 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6714988187595907596 x-oss-storage-class: Standard Content-MD5: HxRrN6TfNidcg9uAJjJh9Q== x-oss-server-time: 5 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 326 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8yPEbZNXQSMN1RudJxsv%2FSDJA%2FIrQ9dg7z0%2BpIb%2BovWfWg9bw1PpXz6zLac%2F2ILScv3nP8r6F%2F8jDdi8oHCuG%2F%2F2YzdxSM1B6ecjLrD4n0oxk8IRX2E1m%2FMZ4J%2Bz7w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088cc49b543d0-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	451	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 4e 00 00 00 58 08 06 00 00 00 03 49 78 5a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ed 7d fb f3 6d c9 55 d7 3e 77 32 99 99 24 12 29 0c 22 56 44 41 2d 45 4b 28 83 82 8a 94 22 e0 7f 80 8f 04 41 c4 f7 0b f1 01 46 12 22 26 11 31 e5 a3 7c a2 a2 85 86 c2 f0 b0 7c 05 d4 1f c1 68 7c 02 42 40 29 35 4a 9c 2a cc 68 85 44 26 f3 c8 dc 7b ac dd bd d6 ea cf fa f4 5a dd bd cf f7 7b 87 b9 99 73 2b 93 ef 39 fb f4 ee c7 7a 7c d6 67 77 af ee 7d da 06 ff ce e7 f3 43 4f 6c 4f 3c f6 7f b7 67 1f 79 64 7b f8 25 77 b6 3b 77 ee 6c db 69 74 cf f5 b7 ab 04 ae 12 b8 4a e0 2a 81 ab 04 ae 12 b8 4a e0 41 91 c0 bd 6d 3b df db ee dd 7b 66 fb c8 73 1f b7 bd f4 99 57 6d af 7a ea 74 3a dd cd fa 1f 92 a0 6f 3d Data Ascii: PNGIHDRNXIxZsRGB IDATx^}mU>w2$)"VDA-EK("AF"&1\|\|h\|B@)5JhD&{Z{s+9z\|gw}COlO<gyd{%w;wlitJJAm;{fsWmzt:o=
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 92 c0 5f 75 5d 9e 7b 90 d5 7a ed fb 55 02 57 09 5c 25 70 95 c0 55 02 57 09 dc 0f 09 ec cb 76 af da 5e fe c4 9e f3 54 88 d3 ff 3c ff f8 c7 9e b6 8f 3c 36 6a ec 1d 3f fa 2d 9f fa f8 93 ef 7d dd b3 f7 9e fd 55 db 76 7e f5 b6 9d 1f d9 6f 3e 6d a7 ed ce a9 6e b5 b3 ff e4 fb 1d d9 80 77 0a 7f af 93 5d 7a 8f fb 2c f3 60 51 e6 fa 75 4b df fd 30 89 6b 9d 0f ac 04 ce e2 44 0f ec 00 7c c7 a3 e1 9c cf db b6 63 c8 fe 9b fe ab 4f 7c 25 83 b3 5d 83 ef fb e5 52 5e 2a 3c ed bf 29 c8 c0 75 bb 19 2b d7 72 d8 19 ee 58 f4 1d 87 a2 fd e2 7a ad 6e fd c1 7a 2a 77 eb 77 be ce 0a 1e 35 d0 cb b4 34 2b 7d d6 ae e3 df 91 f9 e0 7d a5 9c ab 80 b4 b2 2b cb 29 49 8a c3 70 cf a6 b4 5d b1 aa 28 f8 28 d7 9c 04 66 e2 18 0c a0 76 b7 75 ba 76 65 8f 5c 32 98 d3 69 ab dd 6e 9d 6c cd 45 0a bc 0f Data Ascii: _u]{zUW\%pUWv^T<<6j?-}Uv~o>mnw]z,`QuK0kD\|cO\|%]R^<)u+rXznzww54+}}+)Ip]((fvuve\2inlE
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: f9 03 8c 40 73 67 4a e2 98 00 6f c6 0e d8 d4 6e c0 03 56 64 58 e7 02 94 d4 d7 ac 1d 8d 18 32 47 28 66 25 b9 4a 6d 0a 64 5e 3d db 17 dc a1 41 dc 86 2b 1f 2c e7 2e 24 4c 41 93 17 2b 3f eb dc ba c0 23 82 99 b9 21 5a bf 96 71 3e 8b 37 96 cf 2d f9 b0 9a 8f da 96 a7 60 fa c4 60 bd 4e e4 81 e4 08 db d7 25 39 e5 a3 f5 7b 9d 2b 6c f9 4c 75 f6 69 bf be cf 38 95 cf 42 82 ca 0c 94 7e 86 65 bb 42 a2 ca 3d b5 1e 24 55 fb 1d bf e0 a7 fc c2 5f ff 45 3f ef 4b df c3 1a 7d 6e bb 77 f7 f4 3f ce 4f fc 8c 28 bf e9 cf fd f0 5b df fa f4 dd a7 bf 38 24 48 36 e3 54 97 ec 1a 51 aa 33 4f 78 4f f9 0c 65 0a 59 82 32 98 07 a5 09 7b 8e 44 91 93 5e 42 96 2e b9 67 ee 71 d7 12 57 09 dc 5c 02 2b a1 9b 71 46 bf 5f 8c c7 a3 6e 73 30 c8 ca 32 93 00 50 b5 40 6e 75 41 76 77 79 5a d4 a7 70 49 5d Data Ascii: @sgJonVdX2G(f%Jmd^=A+,.$LA+?#!Zq>7-``N%9{+lLui8B~eB=$U_E?K}nw?O([8$H6TQ3OxOeY2{D^B.gqW\+qF_ns02P@nuAvwyZpI]
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: ed b9 e0 1e cd 79 7a cb 6b de f6 33 7b d5 be 6c 4b 89 d3 9f 29 c4 e9 b4 3d 04 c9 e0 9e 44 9d b6 3d a3 5c 97 ee f6 bf 56 56 97 ea 64 59 cf 48 17 2e f3 e1 2e 3c dd 81 17 25 89 c3 11 08 3c 80 10 13 56 48 c7 0c 30 23 b2 80 56 d2 ac f5 fe 21 e2 08 90 8e f6 3f 73 ea 59 3d d1 7d 97 90 c9 8c 7c 8d ea ef da 21 c8 70 68 e7 43 98 ba a5 86 39 fe b5 35 db 6f 29 cf 9e 73 dd f5 65 b9 2d 17 7c 9e 60 37 d8 c1 96 b5 8c 71 18 e3 2b ad 04 b9 9c 07 7d 3a c7 c3 2a bb 20 a6 41 89 d1 19 76 dc d9 3d c9 c9 78 cf 87 ff 25 72 89 78 7b c4 f1 6e ae 50 26 ae 6a 4b fc 97 00 4f 49 93 76 20 e2 c3 52 05 12 a5 52 9c 1f d4 c0 7c ed e3 2a 51 3a 64 fa 2c d5 15 89 52 b0 4d 66 13 57 6a 9a 9a 93 11 51 58 fe 70 72 66 d6 70 68 f0 a1 a9 44 76 16 c5 bf fe f1 86 4a 8d b8 93 2b 1a 9c 1e ab c4 51 59 33 Data Ascii: yzk3{lK)=D=\VVdYH..<%<VH0#V!?sY=}\|!phC95o)se-\|`7q+}:* Av=x%rx{nP&jKOIv RR\|*Q:d,RMfWjQXprfphDvJ+QY3
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: d5 8e 44 a5 f9 dc 80 63 d6 1b 7c 1b 8e 42 0e 76 47 9a 0e df 57 38 c3 cd ae db 8b d4 53 ce c5 68 d5 fb c1 65 b5 64 7a 58 d3 cf 82 8c 67 45 70 f5 1e 63 06 1e 06 2f d7 f9 68 35 57 75 da e1 1e 95 54 16 28 93 96 db 04 c4 c9 c8 53 70 a8 a5 9b 71 aa 79 4c fb 0c d3 5e a7 27 4a b2 ab ae 10 a5 9d 58 9d b6 bb 7b 2e 93 e4 3e 19 d1 72 4b 75 e7 ed cd 9f d1 13 a7 e2 5a d9 71 04 7f f6 3d 5f f3 b8 5b 6a 2b 4b 71 95 f8 ec 7f 95 38 71 ae 93 5d 57 c2 25 79 52 48 b4 0a 81 b2 1d 76 72 f2 38 1d 3d a0 2f 10 56 f2 d4 fd 65 20 09 0c 63 e5 41 22 ab 26 f0 bf 70 73 d0 8c 17 45 bf b3 09 95 3e 24 15 d9 18 90 d0 cb 58 4b 1f e5 3e 37 56 e9 bc 5d a3 17 6a e3 ac 03 1e 6d af fd c0 1d 34 e5 1a 9f 6d 46 82 2d fe 04 d7 18 1c 7a 5f e2 50 84 fb 7b 63 cf 0b ee 98 6e d6 42 9b c9 f4 a9 66 a3 58 31 Data Ascii: Dc\|BvGW8ShedzXgEpc/h5WuT(SpqyL^'JX{.>rKuZq=_[j+Kq8q]W%yRHvr8=/Ve cA"&psE>$XK>7V]jm4mF-z_P{cnBfX1
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 61 0a 20 2e 65 20 72 3f 16 27 3a c4 a8 fc 6a 84 4e e4 1c a2 aa 3c ec 70 17 f6 e3 36 ba 4d 0e 83 b7 cf 4c 4f 16 59 55 04 d9 b1 1b b2 c8 06 97 ca 53 a2 5a 64 0c 09 5c b6 0e 2f a0 e1 6c 87 ed 98 83 c5 6a 1c 6b 0f 4f 00 f9 ab 23 4f cb b5 d6 35 d2 4a ff a0 5b d8 c3 fd 73 f9 af 08 4f f2 9c 2c 39 bc 2e a0 b7 77 d3 c1 6e ba 7b 6d e9 0e f3 96 f4 b4 70 24 53 e5 c0 4b 26 57 74 de 93 12 af bf f0 cb fe c6 d1 5d 75 f1 39 4e ba 14 a7 09 df 3a b3 e4 72 9e 28 a1 bc 90 24 99 99 aa 9f db 91 04 fb f7 dd 98 74 a6 69 af 4f 9d 04 67 9a d0 5f 19 c3 6f ac 5d 0c 3e eb 76 76 6b cd a2 a1 72 60 ee 7f e3 28 23 dd 10 b6 5f ef 8f 56 d5 2f ec ee 28 02 b2 87 b1 92 b0 49 94 eb 24 50 b9 9e 46 01 86 c1 15 40 71 86 e3 b5 ee 59 a4 8e 58 03 43 f7 ed 45 3e 17 88 61 f0 99 29 76 a4 4b 2a c0 60 d8 Data Ascii: a .e r?':jN<p6MLOYUSZd\/ljkO#O5J[sO,9.wn{mp$SK&Wt]u9N:r($tiOg_o]>vvkr`(#_V/(I$PF@qYXCE>a)vK*`
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: e6 bc 04 dd a5 db 1a 8d a5 07 91 39 67 1d 4f 7c dc 05 2a 7a b2 2f b7 d0 72 af 83 16 c2 84 9b 73 81 c8 eb 32 5f 6e ad d9 18 c8 31 6d 47 60 e4 a3 60 5f 2e 55 46 c4 ec 5a f5 c6 72 68 95 2e 9c 06 84 b0 5d 88 2d bc 34 d7 ab 6f dd 93 d0 5d ea e7 9e 8a da ce 3d 98 27 aa 66 25 e4 bb ac 70 e8 7e 44 f9 ec 7c 53 e3 8a 48 07 08 a4 9d fb 21 33 88 f5 d9 a3 47 85 2e 79 7f 80 ea 08 61 b1 1c 23 db 98 c9 ac 1a b4 42 88 a9 82 01 3e fa 4e 1b 79 fd ce 4e 3f 90 22 d7 e4 18 0c 0e bd fa d8 57 af f7 ef 09 c5 65 3a c5 e1 dd b6 75 32 53 73 9b 34 71 5c 97 d3 ec 68 02 f7 12 5f 25 41 4c 9c f8 74 f1 f6 c2 5f 3d 24 b3 d6 57 cb fd 95 cf fa 5b c7 66 9c de fa 83 6f 28 07 60 2a 61 b2 23 04 94 40 e1 4c 12 bd ec 57 67 90 f0 c4 70 9c 65 d2 a4 f0 5d 67 ba 5c 57 3e 03 e9 d7 df 7a de 53 35 2d 21 Data Ascii: 9gO\|z/rs2_n1mG``_.UFZrh.]-4o]='f%p~D\|SH!3G.ya#B>NyN?"We:u2Ss4q\h_%ALt_=$W[fo(`a#@LWgpe]g\W>zS5-!
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: bf a5 0e 5b 96 6b b3 4a 65 17 9d 08 48 db 32 57 84 3c 27 7d 50 aa 45 1d bd a0 2b 0d 40 fd c1 8d b8 45 5a 01 36 42 92 a6 be 1c 0a 16 40 37 73 2e 87 20 60 a0 60 24 ce b5 34 cf 46 ec d3 76 e5 74 1e 32 0b af 87 bd 7d fd 06 18 86 b9 11 f9 53 c7 cb 32 87 0e b7 f0 28 d4 4c 3d de f5 79 01 77 ac 7c e7 fe c8 6f 6c 82 27 8a a4 34 90 08 84 21 62 3b 08 0d 64 c0 01 26 56 42 eb 47 0b b8 99 6c 8e c9 0c 25 1d 7d 0e c3 e4 8a a0 99 13 64 7e 00 04 42 7d 5d 97 88 da e2 fc cc 34 03 9d 10 64 b0 be 5d 1c 88 60 21 15 a3 39 a6 4c 51 c9 77 8e 68 60 03 2b 89 be 4e a4 30 9c 19 01 69 92 61 5b ed 8d ad 2f 01 9b 2c 00 93 bb e0 36 32 a9 65 68 ec 42 be 7b a4 aa 7d f3 8a 70 fd 45 e8 c4 1d f6 51 df f4 20 d1 cc b9 e4 9e c8 75 6d 38 dd ce c7 3e 06 f5 cb b6 81 9d 26 a6 e9 70 01 6e 2b 7d 92 1f Data Ascii: [kJeH2W<'}PE+@EZ6B@7s. ``$4Fvt2}S2(L=yw\|ol'4!b;d&VBGl%}d~B}]4d]`!9LQwh`+N0ia[/,62ehB{}pEQ um8>&pn+}
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: d5 33 ae ea 3f 86 37 96 73 57 a5 04 ea 76 7f 7b 09 4e 64 ce b5 3e b6 62 18 48 f9 89 5a 45 75 d1 cf a8 37 fd 5c ee 86 2a 46 22 09 31 3e 98 ad 72 fa 71 a4 a7 d6 60 69 37 d1 f9 69 4a 8a 28 90 b5 3c 27 95 bd 48 07 97 f0 60 a7 5d 19 16 ec ce d3 59 a5 fd 2e bb 2e f7 d6 6b 9e 48 15 92 25 64 eb ef 7d f6 df 3d 46 9c be fa fb 5f ff b8 06 0e 3b 84 12 ce 54 da 85 ec f3 93 60 f9 4d ac c3 5e d8 ab c4 b8 2c fd b5 fb f6 fa f7 3c 28 33 21 20 52 aa 13 56 66 67 4f 23 b4 0a e6 21 d0 de cc 80 e0 a0 db d2 1e 90 15 98 6d 74 4f 95 b5 5f 19 bd 50 16 36 89 f8 60 8d 08 b4 2a 77 fd d9 83 70 dd e2 ad 4d 5b 0f 18 51 18 ec 31 d1 28 0a 04 30 94 ce 5d a5 7c 1f 63 6b c9 36 c9 5f 4b 70 16 19 96 c1 31 c5 ce 18 47 23 1b b2 17 46 9b 0d 16 a0 98 01 98 af 3d 42 d4 bc 57 ac 23 d5 93 01 90 0a 88 Data Ascii: 3?7sWv{Nd>bHZEu7\F"1>rq`i7iJ(<'H`]Y..kH%d}=F_;T`M^,<(3! RVfgO#!mtO_P6`wpM[Q1(0]\|ck6_Kp1G#F=BW#
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: c5 e1 5c 14 58 8e 4b 30 6b 98 e3 c3 ad b7 19 34 0c 15 3e 94 84 3d 66 d6 11 19 15 ca db 2d 0c d5 73 bf 64 68 92 ca a3 ee 75 99 f5 98 c9 83 ed fb 2e 36 c3 b0 97 5b aa 43 b1 20 71 39 26 78 da 8f cf 20 1b f4 9b 3b 67 fa ad 4b 28 f5 67 90 3f 3f 74 64 3e 37 8e 3c 21 c5 04 98 83 91 81 ed 9b 4c 38 dc c9 8c 5e 80 2d 1a 57 4b 2d 18 24 52 67 a0 90 e1 04 ba 16 04 22 69 37 28 47 c7 c6 d9 57 8f a5 26 3e ec 8e 16 21 fb 16 68 b5 60 70 98 fc a5 e6 d1 1c 41 fb df 26 cc eb c9 ef 16 f0 b0 8e 00 cb d4 ac b8 58 6c af 11 18 f6 3a 0f e5 4c ea b3 32 18 0b 4a f5 99 60 f5 0e d0 35 a9 dd 89 5f 7e 3b 62 19 55 16 42 74 82 d9 45 98 38 01 9b 5d 6c 21 d8 98 82 38 ca e2 69 9e 8d b9 28 b1 f3 3a a8 10 31 e9 d2 58 4b ff e2 b5 cc 91 61 8c f1 14 7b 61 a3 07 e1 b7 df eb 45 fc ae c8 e5 f3 a0 04 Data Ascii: \XK0k4>=f-sdhu.6[C q9&x ;gK(g??td>7<!L8^-WK-$Rg"i7(GW&>!h`pA&Xl:L2J`5_~;bUBtE8]l!8i(:1XKa{aE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49953	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	515	OUT	GET /static/img/bg2_new.2df68bf4.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:59:00 UTC	906	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/png Content-Length: 235388 Connection: close x-oss-request-id: 666D31CE49824C39399D80E6 ETag: "2DF68BF46FE2CFC505D7799C988600CE" Last-Modified: Mon, 20 May 2024 05:15:42 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9691332695670020262 x-oss-storage-class: Standard Content-MD5: LfaL9G/iz8UF13mcmIYAzg== x-oss-server-time: 4 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3669 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dUgIlCg0Acjkbhnve2z5%2FY73CHnTBYkSXxf8HksVnM8tDpXsMeGB0B4G6kqc%2BMy3DUByMQ0roN3xNzKtWmyenmgYfewyTysc6tHgEPwXufL1%2BrvPKrcpzHBHc8heaw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088cc78284328-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 77 00 00 0c 2c 08 06 00 00 00 59 5e 92 0a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 3b 8c 2d 49 b3 2e 54 ab 7b ef 99 3d 8f 73 e0 9e 2b 21 10 12 16 42 02 1b 03 f0 70 c0 c1 40 98 80 87 78 09 e1 82 01 12 42 c2 01 17 21 74 41 58 08 4c c0 c0 01 07 0f 61 e0 a2 2b 21 2c 24 04 3a e7 7f cf fc 33 fb d5 bd 50 66 56 56 45 46 c5 33 2b 6b bd 3a fa bf e7 4e ef 5e 99 91 11 5f 44 7c 11 95 95 ab ea 34 75 fc 9c cf e7 a7 69 9a fe 89 69 9a fe e9 69 9a fe f1 69 9a fe 91 69 9a fe 81 69 9a fe 62 9a a6 77 1d 22 63 8a 0f 81 f3 34 4d a7 79 0a fc dd 27 a5 6f f4 a5 d7 f3 6a d9 ab 5f ef 3c af 7e 31 be 45 e0 de 70 e7 f4 1d 61 c7 d7 69 9a 7e 9a a6 e9 ff 9d a6 e9 ff 9c a6 e9 7f 9f a6 e9 7f 99 a6 e9 Data Ascii: PNGIHDRw,Y^sRGB IDATx^;-I.T{=s+!Bp@xB!tAXLa+!,$:3PfVVEF3+k:N^_D\|4uiiiiiibw"c4My'oj_<~1Epai~
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: f7 f3 f9 fc 2f 4e d3 f4 9f 4e d3 f4 57 89 c4 7f 7d f9 75 fa f4 fa 29 53 79 fc 04 02 81 40 20 10 08 1c 8b c0 d3 74 9a be 7d fa 76 fa ee f9 bb 4c fa d3 34 fd 6e 9a a6 7f fb 74 3a fd b7 d2 ca 2c b9 9f cf e7 f7 e9 32 60 9a a6 7f f5 f5 fc 3a fd f9 e5 cf d3 c7 d7 4f c7 5a 11 d2 03 81 40 20 10 08 04 58 04 3e 3c 7d 3b fd f0 fc c3 f4 74 4a b7 3d a7 ff 32 6d 93 9f 4e a7 d4 d1 6f 7e 48 72 3f 9f cf df 4f d3 f4 df 4d d3 f4 cf 7e 7c f9 38 fd fc f2 e7 d8 72 89 80 0b 04 02 81 40 e0 06 10 48 5b 37 3f 3e ff 30 7d 78 fe 90 b4 f9 9f a6 69 fa 17 4e a7 d3 2f 58 b5 0d b9 cf 1d fb ff 78 3e 9f ff 99 9f 5f 7e 8e 6e fd 06 9c 19 2a 04 02 81 40 20 80 11 48 5d fc 8f cf 3f a6 fd f8 ff 79 9a a6 7f 0e 77 f0 14 b9 ff 9d f3 f9 fc af fd f1 eb 9f a6 2f 67 b2 db 0f 94 03 81 40 20 10 08 04 6e Data Ascii: /NNW}u)Sy@ t}vL4nt:,2`:OZ@ X><};tJ=2mNo~Hr?OM~\|8r@H[7?>0}xiN/Xx>_~n*@ H]?yw/g@ n
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: b5 8c 9b 67 d5 68 9d bf bb 73 b7 2f 69 1f d9 5e da ae 61 d6 5e 19 c0 2b 05 4d f6 b5 ae 2a 34 bd 68 47 6a b3 b4 cf 47 87 d5 b1 1b 0d 34 f9 6a 34 64 d5 69 0c 56 db 14 4e 7f 81 97 d8 9e ce 9d d3 dd aa ab 75 1c a5 53 5f c9 e2 57 b4 e9 e2 9b 6f 93 09 48 0c b5 93 de f9 d6 7c b1 c8 85 63 2c e3 b5 b5 f7 c8 30 91 bb 67 01 cb d8 6b 51 6d 05 b2 47 47 6a 8e 27 64 25 b2 92 f4 d1 48 ae fd dc a3 51 a1 18 69 2b cd 82 93 16 9c 7c 0a b6 25 dc 26 c7 af 91 67 46 42 23 5d f1 59 3b 73 38 9e f2 13 4f fe 7a 06 c0 e2 51 64 c3 ff 7f bb ab 2f 79 de be 5d 6a a7 7e 5b 5c ca e8 fb 7c 43 ef 55 ef 5d 41 ce eb f5 53 e8 0f 5b ac c2 c8 2f 1e 68 7d ba ca de c6 9b 37 12 e9 32 3e 93 bb af de 68 21 80 a5 d5 50 4c 46 68 61 ad 05 0d 34 c3 32 16 93 5f 82 19 26 5d 4f 52 48 84 5a 3f ab a9 d8 ee 75 Data Ascii: ghs/i^a^+M*4hGjG4j4diVNuS_WoH\|c,0gkQmGGj'd%HQi+\|%&gFB#]Y;s8OzQd/y]j~[\\|CU]AS[/h}72>h!PLFha42_&]ORHZ?u
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 8b 41 8c 09 e5 5b ce de 6d e2 b6 24 03 7d 2e c5 ab 5c 94 b7 8d 12 65 2b c6 94 8b 27 f8 77 29 46 b9 58 a1 74 e5 49 b9 52 ce 36 f7 a4 f8 a5 70 83 7e e4 f0 e2 e2 85 cb 1d 8a 5b 60 cc 62 79 38 5f 30 c6 54 9c 50 6b 53 72 30 19 c3 a2 c8 ad cb e5 95 96 5f 14 07 68 31 38 7b f2 6f 9a 6d 19 09 10 9c c8 38 48 38 e2 a0 fe 2e 25 0f 95 e0 14 f1 69 ba 7a 48 4a 1a ab 25 3a be d2 91 82 d0 4a 5e 54 a7 2b 05 19 f7 19 97 78 12 e9 52 f6 70 f8 73 05 49 f3 39 4c 44 ac bb e6 6b 8d 2c bd c9 85 09 94 d3 9d 4a 68 2d 06 3d 9f 53 84 0f e3 c0 eb 4b 4b ac 71 45 81 c2 a4 87 d0 3c f6 4b 79 cf 11 9c 85 73 a4 62 af c5 29 ce 05 58 4c 30 a1 53 c5 17 8f f7 e2 d1 3b be e8 72 2a e4 ce 25 a9 16 50 bd 8b bf a5 79 16 b2 92 82 ec d1 b1 d2 f0 d9 63 bf 55 b6 a5 b8 7b 8b 90 b5 c8 ec b1 4f 9a eb 29 c8 Data Ascii: A[m$}.\e+'w)FXtIR6p~[`by8_0TPkSr0_h18{om8H8.%izHJ%:J^T+xRpsI9LDk,Jh-=SKKqE<Kysb)XL0S;r*%PycU{O)
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 8a 2d c5 37 85 db 28 16 e0 31 a2 fd 0e ff 5a e4 69 fe a9 3c 88 e3 1b 72 4f 1e 93 c8 1d 27 04 0c 19 0c 5c 9b 4c b4 63 e0 e2 eb fc d6 5d d5 88 b2 76 4b 5b db 20 a6 bb 4f 1c bc d0 8e 36 c0 56 37 48 c9 47 05 09 0e 10 68 0f 74 04 b6 19 93 8e f4 94 4a ca 99 92 9e 34 be 6d 31 86 e4 48 fb b7 22 bf 7e ca 05 0b 57 54 a5 e4 97 12 0e 27 0b 67 3f 4d dc 6d a9 a9 e4 50 c6 6e d3 99 8a 25 2a 4e d6 b5 b6 8d c2 6a 67 f9 ac 46 23 2e 40 14 99 f0 1a b5 31 09 13 93 6b 7c a0 8e dc a6 64 d5 15 27 ba dd b7 ad 8d 98 aa 60 01 c3 6b 6d 69 6d 4b 5c 18 7b ad 33 b6 e6 6b d5 ab ca 2f b1 00 ff b5 72 15 fc 64 1d b1 e5 18 29 2e d7 ec 81 57 38 2b 73 42 b9 38 7f 28 4e e1 f8 c2 e2 4f c8 07 70 2d 96 dc a1 f2 18 38 8e 2c 30 18 6d f2 d7 aa b4 0d 77 58 3d 71 07 44 39 a2 0d a2 6d 61 a8 c5 42 23 8d Data Ascii: -7(1Zi<rO'\Lc]vK[ O6V7HGhtJ4m1H"~WT'g?MmPn%*NjgF#.@1k\|d'`kmimK\{3k/rd).W8+sB8(NOp-8,0mwX=qD9maB#
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 84 ae 81 d5 11 a8 86 cc 40 60 37 02 c7 90 fb ad 27 fc ad eb b7 db ad 21 e0 cd 21 10 31 fd e6 5c ae 19 7c 0c b9 6b ab c6 e7 6f 0f 81 20 9f 2e 9f 53 b0 dd 05 94 50 c9 bb 50 b8 cb 3d c7 4c 1a 84 97 9f dc 07 2d 7c 0c 2a 3b a5 3e b2 6d 3b a1 d9 4c b7 62 65 1d 37 5a bf 90 77 18 02 e1 d2 c3 a0 1d 2a d8 4f ee d2 f2 1e af 7b c6 72 6b 7a bb 83 34 3e fd 9c 87 62 38 56 d8 08 5c c6 6a 14 d2 6e 19 81 5b 88 e9 88 d9 9b 8c 90 b1 e4 7e b4 89 6f 21 88 de 82 8d 47 c7 49 c8 f7 23 10 71 37 9d 4e d3 74 be e5 c6 cf e9 d5 b1 e4 7e a3 01 72 a3 6a dd fe 19 78 ef 95 91 33 f8 c8 ad 9e 4b 5e 59 dd 6c 60 ec 05 f2 06 e7 1f 8c 75 97 78 c7 24 c7 50 27 f8 07 4a fe cd e7 df 9e eb 36 05 bb 4c cf fa 3d 73 9c b0 c4 f0 9d 08 ec f1 91 67 ae 34 d6 2a c7 5b 68 1c db 15 56 15 76 a2 bd 9d 7e b5 85 Data Ascii: @`7'!!1\\|ko .SPP=L-\|;>m;Lbe7ZwO{rkz4>b8V\jn[~o!GI#q7Nt~rjx3K^Yl`ux$P'J6L=sg4*[hVv~
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: d4 0c 0b 84 ad 8a 30 ae 01 8a 4f 44 1c 98 34 21 50 e0 81 7d 83 0d 61 18 b2 68 31 ab 2b 03 19 8a e2 d6 65 8e 50 50 52 0c aa 6f a7 01 1f 51 b1 a9 e2 83 da d1 4d 7b 21 29 05 3e db 0c 13 e6 71 37 0d 1a d2 16 8c 59 44 cf bf e0 50 a4 da 5b f8 37 d3 5d 2e a4 7f b3 66 05 49 b2 1f e6 0a 60 cd 46 0f 4b 28 99 9c 8a 04 39 03 c9 e8 62 b6 49 90 ba 87 66 d3 9f c0 34 43 d9 63 23 b1 28 bb 1f 62 c0 c3 30 44 32 73 7b 64 87 11 e8 c9 13 09 70 92 9a 57 e1 a7 df 7e fa dd 19 9c 31 04 a2 a8 a0 b5 2a 6b 08 01 33 90 12 41 50 cd bd 25 48 1c 64 bb 98 c2 05 25 57 b8 7a d6 80 b2 b8 42 6b 61 06 8c 3f d4 85 20 c3 c6 c6 b6 6f 28 9b ee d4 b5 6e 2d ae b8 12 40 fc 37 55 82 0f 8c 86 9c d1 7a 62 ac 28 77 76 b9 15 b3 4c 22 56 ba 48 ae 66 19 41 f8 b5 58 71 77 35 c9 62 06 8b 02 8e 3b 62 4f 02 17 Data Ascii: 0OD4!P}ah1+ePPRoQM{!)>q7YDP[7].fI`FK(9bIf4Cc#(b0D2s{dpW~1*k3AP%Hd%WzBka? o(n-@7Uzb(wvL"VHfAXqw5b;bO
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 87 4b 38 0f 76 de 82 83 f5 a0 12 1c 13 22 d6 c7 1a 6b 1c 59 49 3a 53 fe d2 48 48 23 6d ae 81 e0 ec f0 34 0c 12 77 30 b7 ca d8 43 56 9c 6f 2c f9 49 15 14 ca 8f d4 76 b3 85 e7 28 ac b4 86 03 ae cf 34 65 ed 9e bb a7 f2 e3 4e 42 0a 4a aa da 70 46 43 b9 54 e0 53 eb 5a 88 55 4b 1a 49 86 e4 48 ab f3 ac c4 a5 05 34 fe 5c 2a c6 52 e2 61 9c b5 fb 22 14 f9 5b 6d f7 04 af 16 47 1a 39 6b 04 cb 91 df 5e 5c 71 b2 71 85 9a 8b 03 5c 70 a9 84 95 0a 70 fa 8c 23 2a 6b 21 e0 62 af ca c6 eb e3 bc 80 57 85 1c f9 62 3d a9 7f 43 3d 38 9b b9 46 41 e3 0c ae 58 61 1b 47 c4 36 c5 29 52 23 42 f1 a4 15 8b 3a 0e e0 7e 6a f6 dc 39 72 a7 02 15 83 a4 05 16 05 9e f5 92 84 ab f6 9c e1 54 02 63 e3 a9 64 a4 6e d8 49 80 4b 44 c4 e9 a0 5d 42 42 9c a8 e4 a1 48 80 2b 4c 5c c0 72 49 4a d9 83 65 e3 Data Ascii: K8v"kYI:SHH#m4w0CVo,Iv(4eNBJpFCTSZUKIH4\Ra"[mG9k^\qq\pp#k!bWb=C=8FAXaG6)R#B:~j9rTcdnIKD]BBH+L\rIJe
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 72 e7 1c 4e 29 24 2a 09 1e 3d 03 1f 31 53 e5 7b 1c 68 59 67 6f a0 52 f3 c7 85 eb 11 da dd 86 cc 5e 8c 7a e7 f5 58 bd 77 ad bd f3 7b 74 3e 62 ce d1 79 74 2b 38 1d a5 07 27 77 d4 7a 49 ce 42 ee 16 a1 96 31 de 40 3a 42 a6 57 07 6d bc ac e3 9e 4f b5 95 fb 3f f7 e2 ea 1d af 69 a6 25 7f 9a bf 67 6f 76 84 be 9a 8e 1e fd 7a f5 e9 99 d7 33 27 e1 6d b5 b7 57 be 16 13 5a b3 b7 67 5d cb 5c 3c 86 9a 63 91 73 2f 5b 71 1b 72 87 c6 b5 86 9e a6 d3 74 36 25 a4 04 22 96 6f 49 f2 23 aa 9c c7 89 65 2c 46 63 4b 4e 92 6d 96 c0 da 9b 1c 5c 02 d7 b5 47 05 73 af 9e d4 95 96 24 4b d2 bb da aa c5 8f 66 33 1f ef 3c 19 6a 32 bd f8 f4 c4 f7 3a 87 9e bd 4f e6 6a 81 96 27 1a 16 d2 e7 9a 0d 3d 24 ea 43 83 f7 14 17 7b 5c 1e 6b 38 c1 dc dc 93 8f da dc 9a 0f 69 5c 26 77 6a 02 65 84 94 48 69 Data Ascii: rN)$*=1S{hYgoR^zXw{t>byt+8'wzIB1@:BWmO?i%govz3'mWZg]\<cs/[qrt6%"oI#e,FcKNm\Gs$Kf3<j2:Oj'=$C{\k8i\&wjeHi
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 58 62 7c 20 10 08 04 02 81 80 17 81 20 77 2f 62 31 3e 10 08 04 02 81 3b 40 20 c8 fd 0e 9c 14 2a 06 02 81 40 20 e0 45 20 c8 dd 8b 58 8c 0f 04 02 81 40 e0 0e 10 08 72 bf 03 27 85 8a 81 40 20 10 08 78 11 08 72 f7 22 16 e3 03 81 40 20 10 b8 03 04 82 dc ef c0 49 a1 62 20 10 08 04 02 5e 04 82 dc bd 88 c5 f8 40 20 10 08 04 ee 00 81 20 f7 3b 70 52 a8 18 08 04 02 81 80 17 81 20 77 2f 62 31 3e 10 08 04 02 81 3b 40 20 c8 fd 0e 9c 14 2a 06 02 81 40 20 e0 45 20 c8 dd 8b 58 8c 0f 04 02 81 40 e0 0e 10 08 72 3f e0 9d 51 77 e0 f7 50 31 10 08 04 1e 1c 81 20 f7 07 77 70 98 17 08 04 02 6f 13 81 20 f7 b7 e9 f7 b0 3a 10 08 04 1e 1c 81 20 f7 3b 73 f0 d8 17 71 dd 99 f1 03 d4 0d fc 06 80 18 22 ee 02 81 ab 90 fb 5b 4a b0 b7 64 eb 5d 44 7c 28 29 22 10 f1 fa 38 01 32 84 dc 2d 6f 35 Data Ascii: Xb\| w/b1>;@ @ E X@r'@ xr"@ Ib ^@ ;pR w/b1>;@ @ E X@r?QwP1 wpo : ;sq"[Jd]D\|()"82-o5

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49945	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:59:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155900Z-17db6f7c8cfbr2wt66emzt78g400000004rg0000000028gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:59:00 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49946	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:59:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a84dc0aa-d01e-002b-1b83-1b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155900Z-17db6f7c8cfhrxld7punfw920n00000003rg00000000fxnr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:59:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49957	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	519	OUT	GET /static/img/background1.5d83944f.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:59:00 UTC	906	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/png Content-Length: 55021 Connection: close x-oss-request-id: 666D32512319383135881E4D ETag: "5D83944FD444D1F802CB50F5761FF538" Last-Modified: Mon, 20 May 2024 05:15:41 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 824868142431419627 x-oss-storage-class: Standard Content-MD5: XYOUT9RE0fgCy1D1dh/1OA== x-oss-server-time: 4 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5335 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xMAeKji%2B31BFsdPgDRToQCpiXCkvfJ0UkIxlzX7c1i96fhDsOgA2FpSFohLcfd0g60cECE538p1td6iXHw%2Bt2NvE32VfvFfsv2RlTs44Dna20YuYE3OWoC%2FzmK%2BEIA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088ccaba143e6-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 03 a0 08 06 00 00 00 14 02 41 e9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 5f ac 5d 49 be df b5 f6 3e a7 fb f4 8c bb c7 f1 cc 35 33 6d 48 88 1d dd 0b 78 1a a4 84 a7 f0 40 10 e9 17 20 ca 03 a2 45 32 42 08 25 90 08 11 50 5a 6a 29 28 8a d2 dd 21 8a 40 8c 74 23 02 42 89 92 28 02 34 09 6a c4 43 88 c2 4b 07 25 3c 90 a7 24 12 b8 8d 72 47 69 47 b9 e0 b9 57 ce 8c f1 4c fb de 39 d3 c7 7b a3 b5 56 fd aa be f5 ab df af aa d6 3e 7f bc f7 f1 d7 d2 4c db 7b af 55 f5 ab cf ef ef aa 5d 55 6b 35 f0 0f 09 90 00 09 90 00 09 90 00 09 90 00 09 90 40 37 81 55 f7 95 bc 90 04 48 80 04 48 80 04 48 80 04 48 80 04 48 60 60 01 4d 23 20 01 12 20 01 12 20 01 12 20 01 12 20 81 05 04 58 40 Data Ascii: PNGIHDRAsRGB IDATx^_]I>53mHx@ E2B%PZj)(!@t#B(4jCK%<$rGiGWL9{V>L{U]Uk5@7UHHHHH``M# X@
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 12 20 01 12 20 01 16 d0 b4 01 12 20 01 12 20 01 12 20 01 12 20 01 12 58 40 80 05 f4 02 58 bc 94 04 48 80 04 48 80 04 48 80 04 48 80 04 58 40 d3 06 48 80 04 48 80 04 48 80 04 48 80 04 48 60 01 81 c3 2a a0 b7 db 4b 95 77 3b 0c c3 a5 76 50 51 cc cb ec 7b 81 bd c4 4b b5 bc 2f 53 fe cb ee fb b2 db df 85 3f ef 99 09 50 37 7d 96 60 71 3a 2f bb 56 9b e7 6d 1f 47 86 6d 5d 64 bb 7d f4 96 5f 75 15 32 5e 45 1f cb 47 7e 98 77 5c 34 4b af bd 5d fa d9 e5 9e c3 d4 42 90 7a b5 1a 87 7c 10 7f 5e 56 bd 58 87 d3 51 28 9f a7 80 b3 82 f1 12 23 ad 5d 2b 9a bf 08 b0 ad 04 25 05 c4 f8 df 56 7f d2 d6 45 71 d3 c5 4b 2f 93 5e ce ad f6 f4 78 7b 58 59 32 23 3b d4 5d 4f ff b5 a4 ee f1 b6 0c bf 97 c9 ae f7 a2 2c 7a bc c8 b1 57 8e d6 75 ad ef f5 38 96 5c df c3 b5 47 77 07 11 9d 17 08 d9 Data Ascii: X@XHHHHX@HHHHH`*Kw;vPQ{K/S?P7}`q:/VmGm]d}_u2^EG~w\4K]Bz\|^VXQ(#]+%VEqK/^x{XY2#;]O,zWu8\Gw
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: a6 ab 85 f4 15 17 d1 8b 8a d0 a5 8e 9d 5d 6f cc 3a e3 8c f3 58 38 63 d1 3c 16 cc cf 7e f0 6c 35 96 79 37 5f ff 71 94 f3 8b d7 6e ac be a9 04 f9 55 f8 f7 f8 1d fe 7b 17 99 a5 fd 5a 3b 56 3f f8 99 f7 77 91 a7 57 4e 7d 9d fc db fb 7c 97 f1 d6 ee a9 c9 69 71 ea 1d 97 d5 67 8b 69 ef d8 7a da 39 8f 9c a3 1c 4b ef f7 f4 e6 b5 e5 b5 5f 6b a7 b7 ad 1e fb 46 d6 3d 3c 6b fa 6c 8d e5 32 6d a1 35 0e cf 1f 2d ff 6d d9 fb 52 9b d0 fa da e5 fe de f1 59 e3 6c f5 d7 1a 6f 8f 3f f6 c4 a9 25 f6 d8 b2 ff 1a 8f 1e 59 2e 4b 27 2d d6 3d 31 a5 d5 46 ef f8 7a c7 d8 ea cf 92 79 89 7e 96 da 4f 2d 8e 8c 6d 8d f9 da f2 5b b4 7d f9 bb 97 db b5 fc b5 d8 d7 13 17 7b 6c 7b 89 de 7a 98 ed a2 df de b1 f4 d4 44 35 1d b4 e4 7f f3 cb e7 b1 90 fe da cf be b6 fd e5 e1 97 87 9b 6f df dc fe f0 6c Data Ascii: ]o:X8c<~l5y7_qnU{Z;V?wWN}\|iqgiz9K_kF=<kl2m5-mRYlo?%Y.K'-=1Fzy~O-m[}{l{zD5ol
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: aa 5d 7e 09 dd c7 ee 7a db 6e 5d d7 fa fe 3c b6 d6 73 ef cb ee bf 47 c6 a5 d7 4c 3e 36 de e4 2c 7f 6d 8d b9 f5 bd 25 cf 2e f7 2c 36 a6 f9 86 d5 f1 d1 34 1b fd e3 d3 61 f8 e2 67 49 98 17 db 2f ff d2 5f fc fe 9f fa 8f 86 6f 0c 9b ed f3 ed 66 3c e2 ee dd cf df dd 8c eb a1 e3 5a e8 a9 81 d1 71 2f ee 8f b8 e4 c5 b5 08 1b 07 65 f6 79 7b 7b bb fe d1 b4 69 f0 6c fd 87 fe b9 ff f0 f7 be 71 f4 c6 5f 90 0e 97 15 cf 9d 62 d6 8a b7 5e 65 7b 05 47 ef fd 28 6a f3 9e e6 05 ce c0 1b 11 35 36 ab db 37 12 58 af 08 d3 75 bd 17 77 e8 cb 1d 82 d3 47 4d b7 57 fd e0 55 f4 d7 e0 e2 d9 94 b4 b3 2b d6 25 f7 d5 ae cd 74 e1 5d 58 b1 a5 1e fe 2d fb e9 1e 4b e7 85 4d 7b 81 62 a8 b3 c9 0e ab be 9c 4b b4 af f4 aa 68 51 2c 3a af e8 bd 31 29 f4 d3 cb 3c da cd 98 04 5b c5 6b 5e a3 63 bd be Data Ascii: ]~zn]<sGL>6,m%.,64agI/_of<Zq/ey{{ilq_b^e{G(j567XuwGMWU+%t]X-KM{bKhQ,:1)<[k^c
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 03 09 30 58 e8 ab 00 1d 1d 40 66 d8 91 8b f2 40 61 19 e5 30 82 17 26 c3 cc 16 8a 0a 31 e8 5b 64 83 ef f5 c3 4c 1c 9e fa 35 00 63 4e ec ab a1 af fc 27 80 bc 2a c6 7e 31 60 45 0c 98 8c 14 f3 a2 f0 b0 a2 b5 99 09 12 a5 c2 8e 95 3f 58 f2 69 3f 89 e6 62 46 4f e3 e7 06 2d 67 16 31 c1 26 6b b6 aa fb 52 be 6b 05 7b 6d 43 f2 4b 4f 4c 22 d0 9f f6 e1 c2 e7 83 98 28 ba fe 7d 36 b2 0b e3 b5 1e 98 b3 64 00 5c d0 ef 10 83 55 44 59 71 24 d3 ab a8 1b ed 07 93 0d 38 4d 1c b7 b6 03 f1 19 6d eb d0 0e f6 89 05 b8 4e 8e 99 6d 83 7d 66 f7 68 99 ad 7e 33 67 2f ff 91 d9 ae 1e 3b 8e 19 8b c0 8a 0f 59 c5 45 c1 de 88 8b 52 f4 a0 bf c6 b6 e0 61 31 8b 27 10 0c f0 a1 66 62 a7 f3 01 c6 33 83 09 c6 fe 58 20 43 33 92 07 5d 3f 70 da cc 26 5f f0 a1 17 f3 5f 4d 6f c1 10 24 9f 4c 4c d4 a4 42 Data Ascii: 0X@f@a0&1[dL5cN'*~1`E?Xi?bFO-g1&kRk{mCKOL"(}6d\UDYq$8MmNm}fh~3g/;YERa1'fb3X C3]?p&__Mo$LLB
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: d9 3a ca d5 27 28 5b b8 6f 97 61 c5 7b 5a 37 7b df 37 75 07 82 aa 36 4c 35 e3 58 cf 53 b0 d4 6c a8 35 d6 5e bd f7 b6 d3 73 5d cd 2f 7a e5 b1 ae ab 25 62 fc ce e5 de 23 bc d1 71 ad df f3 8e a7 66 23 a6 8f b7 0c cf 3a 52 4e f9 5d 8f cc 4b 51 2d bd de 93 a1 65 3b 3a 86 d4 ec a4 f5 9d d7 97 dc 87 cb a3 96 f6 bb 24 96 4c 09 bd 63 22 06 af e9 91 67 09 63 91 01 c7 5e 93 a9 47 de 5a ff 0b 19 37 bb eb c9 2d e7 89 c1 d3 bd 20 45 a6 df a6 74 6d 8f 6b c5 98 9a 5f c4 ef 3a e4 10 4e 12 77 7a fc 4d af be f0 fc 0a 19 b5 96 16 a2 be ba c6 16 3a d5 d7 86 7f af de 78 7d f8 f5 17 eb a9 88 1e ff 6c 86 ed 5f fb 0b bf f4 27 fe ed 1f de fc fa 8b 53 6b 1d f4 5e 15 d0 95 f5 cf e3 9b 07 ff 83 5f f8 e3 7f 67 18 56 ff ec 57 57 67 c3 d7 8e c2 b9 cf 3d 8a 43 45 59 4a ec 09 52 da b8 6a Data Ascii: :'([oa{Z7{7u6L5XSl5^s]/z%b#qf#:RN]KQ-e;:$Lc"gc^GZ7- Etmk_:NwzM:x}l_'Sk^_gVWWg=CEYJRj
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 9c da 9c ef f2 02 aa 76 d8 b1 3d 09 2b fa 91 d6 2a 08 d1 01 ca 04 63 2b c9 2f a8 75 a8 c9 83 84 76 66 ef df ba 88 cf 1e 2f 83 48 da a4 fa 0a 39 fb 7d ee 7e d0 cb 4f b5 2f 59 c7 ef 8b 5f f7 f2 31 e4 85 ac 0e 3a 16 77 7b 3c 25 5f 8b 61 6f f2 b5 ec 56 7d 66 c6 d2 9e 60 3d b3 12 fb 6f 73 b4 d8 6a 7f f0 a6 07 ac 87 3e eb 5e 3d 5e 9d b0 2c 6b f7 7c be c7 1f 2d 1b c5 98 51 b3 59 2b 21 20 53 6f cc e2 71 7a 46 d5 4a a4 56 cc c3 88 a7 bf ef b9 de f7 a5 d2 07 bc 07 54 95 b4 a2 c7 d7 c6 94 fb 54 f2 13 1d df 74 4c 44 3b b1 ec cb 8b a1 b5 58 a9 e7 b2 b5 bf d4 fc ce ce 11 e9 8e d6 64 86 95 43 5a f7 58 76 88 7a 4c b6 23 b9 28 95 e4 9a 83 f6 0b db 07 f2 fb 2d c6 ad 18 e3 8d 49 c7 56 cb 96 f2 f1 26 4f f3 ec bb e6 13 35 7f c6 ef b4 9d 89 5c 9e be 6b b6 88 f7 6a fb b6 fc cf Data Ascii: v=+*c+/uvf/H9}~O/Y_1:w{<%_aoV}f`=osj>^=^,k\|-QY+! SoqzFJVTTtLD;XdCZXvzL#(-IV&O5\kj
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 2a af cb 3a 17 1d 71 b6 28 d8 55 2c d2 ad 24 15 6d cf 90 a0 b8 be 72 1c d8 04 26 df 01 6d da 72 a6 0b b8 a2 6a 97 4a 81 3a b9 eb c4 63 e8 bb f8 c8 3a fd 06 13 63 a5 cd ec 97 27 2b c1 a3 0d 18 36 9f 3d 28 59 b2 76 b2 c8 f2 4a cb ee 33 39 80 3b 26 ce e9 1a a3 70 85 f8 34 89 ab c6 64 3e 7c 18 51 b8 39 6e a3 ed ac c0 31 e2 75 b7 df eb b8 5f c4 98 4a 6c ab d9 93 95 4f 6a 71 ce 1a 83 a7 3b af 1d f8 3c cb 69 63 db 86 dd 16 85 8f e6 ac c6 67 e6 c9 8e 31 95 b1 c9 3e 9d c1 8d 0b a1 8f f4 fd 6a 58 6d b7 c3 16 0d 0c 0f 08 00 3f b1 6d 50 2b ae 23 d2 7b f5 41 68 ca 64 59 b1 8f a8 8e 9a 8e 51 6f ba 2d 27 d7 c6 e2 58 eb db c9 49 d1 6f 55 5f f9 a1 08 de 69 1c e5 e7 a6 8d 9c c7 3f 4d 86 ea c9 bd 27 ae 6b 3d d5 64 6a b4 17 c7 08 66 63 cd 40 df 79 7e b4 39 be 7d bc 79 70 68 Data Ascii: *:q(U,$mr&mrjJ:c:c'+6=(YvJ39;&p4d>\|Q9n1u_JlOjq;<icg1>jXm?mP+#{AhdYQo-'XIoU_i?M'k=djfc@y~9}yph
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: bf 60 a4 e1 46 8c 7b da 9e 0d 2e 45 d0 11 20 e3 61 e4 e1 25 89 7a 31 65 74 aa 2c e9 e4 2d 79 a7 3e a4 cf cb 87 87 29 81 1b 8b d0 6b fa 4d c3 0d f6 62 3d 68 65 45 90 3c 98 e4 a0 c5 ee 62 b1 18 99 cf 47 5d 45 19 82 cf 4f 6b fe c0 69 33 19 e1 c1 0e 3f c7 3e 52 78 9b e5 d0 e9 2b 89 ac f4 1a 6f 0c 65 5f 56 a4 e6 3a 98 e2 72 d4 61 fa ae e0 39 8d 49 66 37 53 88 9a 43 bf 4e b2 2a f9 54 de 7c 9d 8d 3d 2e b3 54 7e 5d 51 6e fa 2a d9 0a ea 41 c6 56 ea 06 5c 10 96 7b 87 da 30 98 f3 3c de fc 47 6d 2c 91 73 5e 59 38 57 4b cc f1 3b ab ec c0 b4 50 b8 2f 8c 3f c5 be 5c fb 4a ab c1 16 db 47 68 4e f7 a1 ba 32 3f c0 97 f7 e4 0e 52 3c 83 89 2f d4 7e 0d c4 da de 8d 51 c1 b6 64 52 03 7d 5d c5 c5 cc 0f 61 0c d1 87 f0 7a eb 57 21 d8 27 33 ed 37 80 8d 33 b3 78 16 3f eb 2c 5c e5 37 Data Ascii: `F{.E a%z1et,-y>)kMb=heE<bG]EOki3?>Rx+oe_V:ra9If7SCNT\|=.T~]QnAV\{0<Gm,s^Y8WK;P/?\JGhN2?R</~QdR}]azW!'373x?,\7
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: e1 05 79 ef 5e cf 17 6b fd 5b 0f d7 9e 5d b6 3e af f1 a9 e9 70 96 cf 5a e3 5c 26 15 d1 8b c5 cc 0a f0 fa 7a 2d 47 eb df 7a 4c 35 9f d5 fd db fe 90 5f 55 ef bf a4 56 b6 69 93 ad f9 13 c6 7d 2b a9 7b 71 c6 f2 37 2f a6 79 c9 b6 2e ad 45 30 8f 3c 2d 3b 6a 7d ef 8d 1d 2d d0 1a bf a7 a7 9e b8 d5 8a 11 b5 98 88 76 2e 91 b4 be bd d5 23 af 1f 70 25 26 da 36 e6 e5 40 6b c2 05 e3 af 57 24 b6 f4 d2 8a c5 18 cb 65 a1 61 a8 12 61 b1 e0 3c 76 2b 47 6b 8e b5 f8 81 31 a3 67 6c 35 ab b5 ec a3 37 76 e9 76 bd 02 fa e0 d6 40 e3 29 1c d9 1a 68 73 06 3a 99 4e cd 31 3d 03 eb 09 8f d8 43 be 29 48 52 53 52 45 fa d9 7e 5c bb 25 1b 6c d2 75 18 10 e5 2e dc cc 94 07 83 5c ba e9 5e 25 70 b1 7d cc f8 89 df 0a 30 b5 20 ae d3 ad be 1f 47 e3 6d ad 2c 8b 79 3d eb 20 e1 0a d8 c1 f0 50 be 96 Data Ascii: y^k[]>pZ\&z-GzL5_UVi}+{q7/y.E0<-;j}-v.#p%&6@kW$eaa<v+Gk1gl57vv@)hs:N1=C)HRSRE~\%lu.\^%p}0 Gm,y= P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49958	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	825	OUT	GET /static/img/millions_users.81f2b3d3.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga=GA1.2.1012192315.1728835136; _gid=GA1.2.972001485.1728835139; _gat_gtag_UA_255502036_2=1
2024-10-13 15:59:00 UTC	907	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/png Content-Length: 5264 Connection: close x-oss-request-id: 666D31D649824C31315ACBE6 ETag: "81F2B3D309B38A2D0B1145BD8AEDAE53" Last-Modified: Mon, 20 May 2024 05:15:50 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 16684709283849376231 x-oss-storage-class: Standard Content-MD5: gfKz0wmzii0LEUW9iu2uUw== x-oss-server-time: 1 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2962 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=igDHCxnl7DQ8CSh%2B%2BlZt8PR2EPqL5G%2B44mAqcLLtNjivTUTO7PC1%2BEWLe8ohQ476t7ZCxStMVtPnTLPMfR7C2QRV9POVSt037okLL6bMx6crDYn2SCfJ8KCG8inDJw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088cccb4642d8-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 4b 08 06 00 00 00 38 4e 7a ea 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 14 4a 49 44 41 54 78 5e ed 9c 79 90 65 55 7d c7 3f e7 de fb f6 5e 66 7a 79 d3 dd b3 30 64 66 a0 c1 41 d9 33 30 80 6c ee e0 42 02 16 82 51 a2 60 69 a2 60 b0 34 a5 18 92 98 45 ab 92 98 68 4c 95 fe 81 62 12 ab 40 c5 88 10 35 14 c8 a2 80 71 94 82 81 61 9d bd 97 99 d7 ef bd ee b7 dd fd 9e 93 3a b7 67 d8 fa 75 bf f7 7a 16 49 d2 b7 ea 55 77 bd 7b ee 59 be f7 7b 7e bf ef ef 77 ce 79 82 a5 ab 6d 04 44 db 25 97 0a b2 04 56 07 24 58 02 6b 09 ac 0e 10 e8 a0 e8 12 b3 96 c0 ea 00 81 0e 8a fe 56 99 b5 57 ed cd 08 47 f4 9b 66 a6 37 21 54 56 0a 99 02 0c 40 1a ca f0 02 25 ec 28 72 2a 2a a3 4a ab c5 6a a7 83 71 1d 91 a2 47 15 ac ed Data Ascii: PNGIHDRKK8NzsRGBJIDATx^yeU}?^fzy0dfA30lBQ`i`4EhLb@5qa:guzIUw{Y{~wymD%V$XkVWGf7!TV@%(r**JjqG
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: a2 5f 29 35 20 04 dd 28 95 56 08 53 a0 22 84 70 95 a2 26 84 28 0a 54 09 50 ed 56 aa 50 12 78 70 d0 1a fc b9 10 a2 ed e7 5a d5 7f c8 60 29 a5 12 53 d1 d4 65 42 89 e3 5a 35 76 e0 fe 32 05 27 a2 d8 a0 60 b5 80 64 ab e7 14 f8 02 f6 22 78 5e c0 36 60 a6 d5 33 fa be 12 ea b9 41 73 f0 0e 21 44 d0 4e f9 56 65 0e 09 ac 09 35 91 4d 04 89 f7 21 18 6e d5 90 54 9c 00 6a 93 40 ac 85 43 b2 95 5a 47 ec 02 f1 a8 21 78 ba 55 bb 28 26 83 44 f0 9d 11 71 e8 c6 7f d1 60 c5 40 c9 c4 fb 91 e4 17 ea b0 52 6a 3d 42 bc 19 c5 50 cb 81 75 5a 40 b0 0f a5 fe 4b 08 f1 c2 82 8f 1a 14 02 23 f8 d7 43 05 6c 51 60 e9 a9 57 0c 8a 1f 58 88 51 0a 95 45 19 97 80 da d8 29 06 9d 97 17 4f 22 e4 5d 02 31 bf 74 50 4c 0e 24 06 6e 3d 94 29 d9 31 58 b1 31 8f a6 ae 58 d0 46 09 8e 51 92 2b 80 ee ce 07 be Data Ascii: _)5 (VS"p&(TPVPxpZ`)SeBZ5v2'`d"x^6`3As!DNVe5M!nTj@CZG!xU(&Dq`@Rj=BPuZ@K#ClQ`WXQE)O"]1tPL$n=)1X1XFQ+
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 67 eb c2 28 a4 ee d4 f9 c5 ee f5 e4 96 9d cf f2 de 8b 10 86 a4 b0 e3 53 94 b2 5f c0 24 42 e7 80 c7 0a 25 bc 50 62 18 46 3c 1d 6d c7 a5 56 ab 11 f8 3e bd 81 47 9f d0 da 5b 71 e6 da 11 1e dd f1 37 5c 7e fc 49 5c 79 d9 9f 60 99 56 ab 31 be 78 5f 29 f5 53 c3 10 bf 78 f5 03 4a aa a7 f3 a9 fc f7 5a 55 b4 30 58 7e e1 7a 21 44 cf 9c ca 15 1f 00 d6 45 12 ee 9d c8 50 8a b4 bd 31 48 1c d0 42 86 fb 45 32 66 89 34 13 84 32 e4 c1 27 a6 58 b6 ee 6e 0e e6 e0 92 a6 49 b9 e1 33 5e a9 91 4c 58 84 61 c8 44 a9 4a cd 76 48 5a 16 89 54 12 c7 f5 98 2a 95 71 1d 9b b4 ef b1 21 9d 88 c1 4f 99 26 d2 df c3 ca d4 77 f9 d0 3b 6f 66 74 c3 a9 ad c6 f8 f2 fb db 85 e0 d6 b9 e3 51 d5 7c 32 ff 4f ad 2a 9a 17 2c bd 00 9a 0a 53 37 36 b1 57 42 2a 3e a7 33 9c db ab 16 8f 94 92 98 a6 19 4f 17 53 Data Ascii: g(S_$B%PbF<mV>G[q7\~I\y`V1x_)SxJZU0X~z!DEP1HBE2f42'XnI3^LXaDJvHZTq!O&w;oftQ\|2O,S76WB*>3OS
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 74 b1 88 5d b7 71 5d 2f 9e 86 81 94 08 c3 c4 b4 12 a4 d2 19 d6 9c 7a 01 eb df 74 f9 d1 f5 86 ad 75 96 e2 5b 2f 24 f0 94 f6 55 c4 cc d2 60 69 a6 e9 37 3f e3 78 b3 b1 62 3a 39 eb 09 23 49 a9 a1 81 f2 e3 ff 35 60 53 0d 9b f5 89 6b 49 d5 7e 15 27 01 35 60 81 b6 5b 3e 5c d3 7f 35 eb f3 ab e9 1d 5a 49 22 d7 4d e8 db b8 f5 2a 9e a3 8d bb 1f 07 df b1 71 97 0a 3f 08 71 1a 0e e5 42 95 9e d1 4d 9c f2 ae 38 19 d2 fc 3a 12 3a 4b 29 95 99 0a a7 16 54 f0 ff b9 5b f1 82 ad 53 31 90 30 45 cc 32 6d 04 0d 29 63 9b a4 c5 aa b6 67 fa ed 37 bc 80 19 c7 27 50 50 73 3c f6 97 2b 94 aa 35 aa 6a 8a b7 f6 5c 17 4b 83 46 0d c2 60 d6 1b fe d9 c9 37 33 d0 b7 9c ae ae 5e 02 bb 41 65 ff 18 a5 fd 13 54 2b 35 6c db 8d b3 13 fa e3 c5 01 b8 c4 4c 26 63 1d 36 7a ee db 38 ee cd 7a c9 72 ee a5 Data Ascii: t]q]/ztu[/$U`i7?xb:9#I5`SkI~'5`[>\5ZI"M*q?qBM8::K)T[S10E2m)cg7'PPs<+5j\KF`73^AeT+5lL&c6z8zr
2024-10-13 15:59:00 UTC	695	IN	Data Raw: 62 8f e8 ba 2e 61 10 20 b5 17 d4 eb 8a 61 c8 6a e3 87 14 8b eb c8 e6 d6 d1 27 42 3e 75 41 8e d1 ee 19 72 cb 07 e2 5c 95 5b 2b 63 57 cb b8 76 9d d0 d7 00 e9 6c c3 2c 51 74 6a 5a 45 11 93 fb 66 98 ca 6d 60 f5 eb cf a4 67 59 4f 24 23 79 5b 2a 95 dc 95 c9 e5 a2 54 22 21 93 e9 a4 d4 8c d2 60 09 43 b4 cc 5f bd da e8 b7 0d 96 de 9f 55 0a 4a d7 29 a1 9a 1e 08 50 a8 53 50 cd f7 67 79 7e c8 af 77 4d b3 65 77 85 27 b6 ef 67 d7 78 29 0e ac 53 e9 34 96 95 a0 2f 9b e2 d4 be 2e 8a e3 63 f4 75 c1 87 af 3e 9f fe be 2e 6a 33 d3 38 85 dd e0 56 e2 3d 10 ca 77 f0 5d 27 8e 0d 63 09 21 0d 7c 65 12 92 24 4a 2f a3 77 64 2d 23 ab 56 92 cd 65 95 30 8c 1f 1a 06 8f 59 86 35 bb 28 a0 c3 30 63 f6 9f 23 be 3f 2b 96 11 76 69 55 94 38 f4 9d 7f 8e 17 b2 67 a2 42 e4 2b 4c d7 25 9d 32 49 e7 Data Ascii: b.a aj'B>uAr\[+cWvl,QtjZEfm`gYO$#y[*T"!`C_UJ)PSPgy~wMew'gx)S4/.cu>.j38V=w]'c!\|e$J/wd-#Ve0Y5(0c#?+viU8gB+L%2I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49959	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	827	OUT	GET /static/img/register_header1.833f0960.jpg HTTP/1.1 Host: h5.g7or.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h5.g7or.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga=GA1.2.1012192315.1728835136; _gid=GA1.2.972001485.1728835139; _gat_gtag_UA_255502036_2=1
2024-10-13 15:59:00 UTC	909	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/jpeg Content-Length: 30174 Connection: close x-oss-request-id: 666D325172154E383459C352 ETag: "833F0960A696CF075E6DC43A8133DC85" Last-Modified: Mon, 20 May 2024 05:15:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10652879380408089110 x-oss-storage-class: Standard Content-MD5: gz8JYKaWzwdebcQ6gTPchQ== x-oss-server-time: 2 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2293 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GbAF2D6kl3dApZL1Gfv%2FfEiJt5jUJ%2Bp7n6fttlfQOGcqA7Is6RQ2N9NG7uwRCRf0%2FNn0m5CljmICZhWk8%2BtqNLUQtq7ZzQigr9O6ze8bDx6w4fzYfNUO9xCJPXwVWQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088ccced90f83-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	460	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILEmntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 Data Ascii: ffY[XYZ -mlucenUS Google Inc. 2016C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 04 6a d1 cf 71 80 10 bb 8f da 0a aa 65 70 24 d1 4f 6a e0 62 02 a8 02 14 05 8c e9 d3 a3 2c e9 d3 a7 40 0e 9d 3a 74 00 e9 d3 a7 40 0e 9d 3a 74 00 e9 d3 a7 40 0e 9d 3a 74 00 e3 23 56 5c b4 92 60 aa 0e 60 26 46 09 cf 53 88 cb 62 13 1f d6 21 1c c4 40 12 b8 31 a4 7f 58 76 4f 6e 60 09 c4 06 86 1e 0c 6e 73 1c 63 0f 06 22 90 b9 c4 46 3c 44 24 62 34 b6 44 43 38 98 dd d8 ce 4c e3 c6 32 38 90 2e ae b1 53 e9 a9 e4 f7 8f 11 d0 12 1e a8 ce 07 33 91 aa 3b 00 8b cc 8c aa c2 96 fc e1 7a cf cc ea 7a 88 b7 0c aa 99 7f 04 cb 48 ca 53 fc 26 35 f3 0a 65 2a 27 b9 4f 70 22 a3 d6 52 46 d5 55 ed 89 e0 4a 5a fa 8d 5b 8a 95 70 15 5b 38 c0 8b 75 a8 3a 69 74 e9 a0 e0 3e 5c 8e c8 96 91 1c 89 35 6f 69 2b 94 0d b8 03 d8 85 17 aa 29 86 a5 90 dd 4a 6b 7d 95 1f eb 22 e4 67 18 32 da aa 84 b7 Data Ascii: jqep$Ojb,@:t@:t@:t#V\``&FSb!@1XvOn`nsc"F<D$b4DC8L28.S3;zzHS&5e*'Op"RFUJZ[p[8u:it>\5oi+)Jk}"g2
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 79 95 b5 2b 8a 6a d4 b6 36 d6 3e e5 f1 fc a4 57 ba ae 89 87 50 c4 36 e0 3a cc 28 ae 2b d3 c5 35 0b 51 47 ed 3d 77 f3 2a c9 a2 d2 c2 f5 69 5a d5 a1 51 b6 83 86 5c 9c e3 12 6e 99 52 95 77 a8 4b 90 a7 cf cc a1 a0 c8 6a a0 ac 85 5b 24 0c f5 99 36 da f0 d9 5e 55 42 a3 07 90 31 c7 11 58 a8 b9 fa 28 95 98 a9 24 1e b3 27 d0 62 bb 48 e9 48 90 ea ea 14 af c5 2a d4 d1 50 ed c1 55 ff 00 99 36 88 55 b3 dd db 13 15 95 45 dd 7a c8 8b 4e 9a ba b6 e5 dc 78 ea 47 76 75 b4 35 03 0c 86 db 8c 77 20 d2 a8 f8 66 65 ec 60 19 23 eb 03 4c 29 20 a9 ec 7d e3 b2 6a 89 35 36 35 98 a8 a0 06 65 00 81 f3 2b 90 1f ac 3e 7a 93 4d 74 36 c0 53 4e 13 82 7e 44 a7 b9 ae a8 c4 ab 1c e7 88 32 a2 5d dc d9 fd 2b 43 55 d8 16 3c e3 3d 4a 0a d7 3b 49 00 fb 7a cc 79 bd aa ea 54 b3 10 47 93 20 5d ba 8a Data Ascii: y+j6>WP6:(+5QG=wiZQ\nRwKj[$6^UB1X($'bHHPU6UEzNxGvu5w fe`#L) }j565e+>zMt6SN~D2]+CU<=J;IzyTG ]
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 12 ad 2f a9 41 c5 44 f9 1d 89 34 cd 23 91 32 3b 08 17 e1 4c 90 60 9d 72 0e 7a 88 d0 c5 fa 9e be d7 a6 99 fd dd f1 33 c1 95 97 68 27 3c e3 3e 25 c7 aa d5 d2 f8 71 ed db 81 28 a9 01 83 9e f3 9f b8 96 88 1c 0b 64 27 05 a3 6a 03 53 3b 47 2a 33 88 40 a0 ee 38 e4 1d b0 d4 6d dc ae 4a e3 03 00 18 9b a3 48 c2 c8 14 a8 16 a8 10 8d ac a0 31 60 3b ea 58 3d ba 35 06 52 09 18 ea 15 29 15 af 86 00 06 18 12 56 c0 57 8e 39 f1 32 e4 74 7c 46 40 53 ac 6d f7 b2 aa 38 c7 b4 7f 0f ff 00 73 95 4b d5 3b 4e 00 6e f3 e4 09 7f 71 a6 8a 8c cf 4c 60 b1 e5 7c 1f bc 02 69 75 81 24 a2 a3 03 95 3d 89 a2 99 1f 01 44 96 2f 53 d9 96 5f 76 46 46 3f a7 da 4e b4 b0 ad ed 52 cc 00 39 c9 13 41 43 4f fa 68 03 3e ec 71 d4 92 28 ae 7a 89 e5 05 80 83 4e c2 98 50 ac 77 10 7b 30 cb a6 da ab 6e 14 94 Data Ascii: /AD4#2;L`rz3h'<>%q(d'jS;G*3@8mJH1`;X=5R)VW92t\|F@Sm8sK;NnqL`\|iu$=D/S_vFF?NR9ACOh>q(zNPw{0n
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: d7 32 20 ac 49 ef 1f 68 ff 00 d4 78 00 e6 30 16 a3 9c 90 0c 6d 26 da d1 8c d9 31 01 2a 73 98 84 4b 35 36 8f 10 0f 70 59 88 1d 41 ee 27 cc 6e 0e ef 88 58 0f 3c f7 98 c3 d7 da 3c f5 dc 4e 3f 31 0c 8f 1a 44 52 63 73 cc a2 50 a2 38 8d ca 47 c8 8c ce 22 86 81 71 ec b1 d3 1b 75 9a 8f f6 92 24 c9 5f a5 37 fa 75 13 fd af 99 2e e2 ba 50 a2 ce e7 01 46 60 39 3a 07 77 76 96 b4 4b b1 19 fe 11 f2 66 62 ee e2 b5 db 97 63 f8 1e 00 80 bf d4 5e e2 eb 73 9c 03 fb 57 e0 46 35 ca 35 33 43 70 56 65 e5 be 23 38 b2 4f 93 22 de 6a 89 4e 97 d1 0f 80 3b 39 ec cc 55 c6 a3 56 ea e5 9c d4 0c 29 b9 1b 60 75 5b d3 71 77 52 d9 6a 7b d5 ca ab 13 8e a2 53 d3 c3 53 4a aa 49 6f e2 19 f3 34 8a 33 5b e8 3a 5b d2 d4 bd d5 13 65 55 3d f8 61 2e ed 10 51 51 8e c4 8d 6c 8a 14 02 39 1e 65 85 25 1b Data Ascii: 2 Ihx0m&1*sK56pYA'nX<<N?1DRcsP8G"qu$_7u.PF`9:wvKfbc^sWF553CpVe#8O"jN;9UV)`u[qwRj{SSJIo43[:[eU=a.QQl9e%
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 2e 45 f5 bb f0 1d 58 fd 8c 70 b9 53 d1 07 ed 28 c6 9d 52 97 08 14 29 39 27 a3 26 d1 5d 8a 32 3d c7 b3 10 52 2c be a8 da 49 6e 31 2b 13 5a b7 7b 83 48 be d6 24 80 a7 b3 89 20 02 c0 f2 44 0a 69 16 ab 72 2e 76 03 54 7f 11 89 df a0 d7 b1 f5 77 bb 6e da 70 3c 40 94 66 c9 20 e4 f8 f8 96 1b 30 3a 82 75 c3 70 23 26 ca c3 a7 ef 67 fa 8d 90 df 10 c9 63 42 dd 02 2a 2e 00 ec f3 1f 72 cc 84 10 7f 33 37 ac 6b 77 76 8e 12 9d b5 56 50 7d cd 8c 8f b7 52 a3 0b 26 73 a3 48 94 e9 6e 60 11 72 4e 49 f9 87 5a 34 df 2d d9 f0 44 f3 e6 d5 75 bb 75 15 d1 0b 2b 60 ed c6 00 fb 7f 79 6d 69 ea 0b bb 6b 85 4d 42 de a5 20 ea 1b 24 71 29 ae 26 77 cb a3 7b 6d 59 93 18 27 1e 44 9f 4e e0 b1 e7 a9 45 46 b7 d4 45 7a 7c 86 f3 2d a8 29 da 22 e4 4b 45 9d 22 1c 60 ff 00 28 0b cb 25 6a 4c ea 39 03 Data Ascii: .EXpS(R)9'&]2=R,In1+Z{H$ Dir.vTwnp<@f 0:up#&gcB*.r37kwvVP}R&sHn`rNIZ4-Duu+`ymikMB $q)&w{mY'DNEFEz\|-)"KE"`(%jL9
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: a9 03 04 c9 c0 f1 f7 95 d6 67 14 50 e4 90 44 9e 9c 89 9b 3d 48 86 10 8b 04 a6 19 79 12 0b 1c 3a 8f 11 a2 3f a8 12 28 8b 88 9f 98 40 07 83 18 1c 8a 33 93 e2 19 aa 28 5c c8 b5 2b aa 29 20 8c 89 57 79 ab 25 3a 44 96 c1 1c e2 34 65 24 59 55 be 4a 64 f2 30 25 1d de b8 bb 9b 0f e7 18 1d 4a 3d 43 58 ad 59 31 4b 80 c3 b0 73 05 6d 41 df de e7 3f 39 f2 63 b0 e2 5a fe b7 eb 1e 09 6c f7 21 dc b3 32 b0 23 88 50 e9 44 70 00 20 78 90 6e ee d5 0e 09 1b 7c f3 18 24 56 57 7a f4 cb 7d 36 0d 91 ce 7c 4a e3 78 e8 c6 a0 3f ea 21 18 27 ec 64 ca f7 14 da b6 15 d4 13 f7 ee 57 5c d2 a9 51 5c d3 3b 97 3f 89 26 a9 9e 97 a4 de 2d cd 9d 27 65 c3 32 83 2e 16 8a 31 19 5c cc 77 a4 ee 3e a5 82 02 a4 32 9d a5 4f 89 b8 b6 f7 2a f9 33 36 cd a8 19 a0 08 c4 8a f6 7e ff 00 db fd a5 c6 ce 20 99 Data Ascii: gPD=Hy:?(@3(\+) Wy%:D4e$YUJd0%J=CXY1KsmA?9cZl!2#PDp xn\|$VWz}6\|Jx?!'dW\Q\;?&-'e2.1\w>2O*36~
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 4d 8e 8f e9 1d 3a 86 9b 4a ea e2 dd 6a 56 65 dc 4b 73 8f e5 28 6e fd 47 4e d6 ea ea 8d 1a 28 89 4f da a1 7f 88 cd 5a f4 8c 63 2f 6c ae d6 6e ee 7d 3d 58 d1 17 f5 ea 1a 94 c1 5d cc 58 7c 18 0d 17 57 af 71 a9 50 61 76 d4 6a e7 0e ca 71 c7 e2 47 d6 19 b5 6b 9a 44 10 0a a6 39 e7 9f 89 73 e9 2f 43 d9 7a 96 8d c2 54 bb ab 6d 7b 49 b6 fb 08 1c 7f f7 39 b2 25 47 4e 3b bd 1b 4f 44 7a aa a5 d6 ad 7b 65 5e a9 ab 4e 9b 60 55 3d 19 e8 06 a0 65 18 20 af 79 13 c9 6e 7f c3 cd 73 d2 b4 5e f7 d3 da 8b 57 a9 9d d5 28 55 50 55 c0 ff 00 bc d0 7a 33 d6 23 57 2f 65 79 41 ad 75 0a 5f f5 28 30 23 f9 8c f8 9c cd 1d 11 d1 b9 27 8c c7 29 83 43 b9 72 01 8f 5e e6 66 81 94 f1 17 3c 46 03 38 9c 40 02 78 8a 00 81 2f f0 0c 7a b1 c0 cc 00 20 fb ce 88 0c 5e 31 00 10 c4 cc 51 cf e6 71 1e 31 Data Ascii: M:JjVeKs(nGN(OZc/ln}=X]X\|WqPavjqGkD9s/CzTm{I9%GN;ODz{e^N`U=e yns^W(UPUz3#W/eyAu_(0#')Cr^f<F8@x/z ^1Qq1
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 2a e9 cb 55 d6 e1 14 25 51 82 00 38 04 cb 2a 0b 5f 58 d2 6b db 5c d1 6d d4 97 da d8 f3 34 92 bd 91 17 c5 d1 ef c9 51 2b 51 57 43 95 61 91 33 ba bf a6 a8 de dd 53 be b6 73 6d 7d 4b 84 ac 80 67 1f 07 e4 40 fa 03 51 ad 7f e9 9a 1f a9 6d d5 69 7b 18 fc 90 71 ff 00 69 a8 2b 99 c7 2d 1d 71 d9 98 a3 ad 5f 68 e0 a6 b1 40 9a 63 8f d4 53 19 5f e6 3c 4b 8b 1d 4e d3 52 52 f6 95 d6 aa 8e ca f8 93 2a d1 4a d4 ca 55 50 ca c3 04 11 99 16 cb 4b b4 d3 d9 9a d2 8a d2 dd fb b6 f0 0c 96 34 89 c3 81 3b b1 38 8e 23 54 e1 b0 64 95 42 10 41 e7 a8 45 33 88 c8 88 06 3a 80 0f f3 98 a3 98 dc c5 06 00 38 71 3b b9 c0 ce 80 0d 3d 44 19 cc 79 c4 e0 bc 76 20 05 93 d0 ad 9d c4 96 3f 99 1d ab 57 a6 78 2c 31 f3 27 35 ed b2 8c 9a ca 07 e6 05 af ed ea e5 51 1a a0 f9 0b c4 b3 65 2e 3f d2 07 47 Data Ascii: U%Q8_Xk\m4Q+QWCa3Ssm}Kg@Qmi{qi+-q_h@cS_<KNRR*JUPK4;8#TdBAE3:8q;=Dyv ?Wx,1'5Qe.?G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49961	104.21.44.152	443	3604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:59:00 UTC	519	OUT	GET /static/img/background3.8cb66a81.png HTTP/1.1 Host: h5.g7or.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1012192315.1728835136; _ga_M2HTT1MWZ4=GS1.1.1728835135.1.0.1728835135.0.0.0; _ga_5RJY6ZKWY8=GS1.1.1728835135.1.0.1728835135.0.0.0
2024-10-13 15:59:00 UTC	912	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:59:00 GMT Content-Type: image/png Content-Length: 36933 Connection: close x-oss-request-id: 666D32511E3C923038248B7C ETag: "8CB66A81237E072DE84020DBF7646C01" Last-Modified: Mon, 20 May 2024 05:15:41 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11188607835476758800 x-oss-storage-class: Standard Content-MD5: jLZqgSN+By3oQCDb92RsAQ== x-oss-server-time: 8 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2544 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tB05AuWjWmSKCpeSkIVkBRhDQRV7RbvjXSjx%2FKXVWY%2FoxK1ERJbGJK%2BKupQaVq0Z%2B8fkUOYkHbaCEJA%2B3gcTFWRDHWB7KvN5cLgOCR%2B0LtIILoVMII3OvkFoAgUQqg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2088ccfd0a0f79-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 15:59:00 UTC	457	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 04 40 08 06 00 00 00 c7 e1 64 e5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec dd 5f 6c 64 db 9a 18 f4 bd 77 d5 bd 75 67 dc 3d a6 ee 8d 35 73 1d 12 c5 46 33 04 b7 41 ca f0 c4 0b 41 c4 2f 10 94 87 88 86 a4 05 28 9a 81 44 88 80 d2 52 4b a0 28 9a 6e 87 28 02 71 a4 44 04 84 12 25 51 04 e8 24 d0 c0 43 88 e0 c5 83 12 1e c8 53 12 09 dc 46 99 51 ec 28 03 be 19 39 77 0a df 69 cf dc 9a 5b b5 37 5a 6e ef 73 ea d6 a9 2a ef 2a d7 9f bd 76 fd 2c 8d 7a e6 78 d7 de 6b fd f6 67 fb cb ca b7 be 95 26 be 08 10 20 40 80 00 01 02 04 08 10 a8 2c 90 56 be d2 85 04 08 10 20 40 80 00 01 02 04 08 24 12 68 41 40 80 00 01 02 04 08 10 20 40 60 0e 01 09 f4 1c 58 2e 25 40 80 00 01 02 04 08 10 20 Data Ascii: PNGIHDR@dsRGB IDATx^_ldwug=5sF3AA/(DRK(n(qD%Q$CSFQ(9wi[7Zns**v,zxkg& @,V @$hA@ @`X.%@
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 04 e6 10 88 2f 81 2e 8a 89 63 2e 92 24 89 6f 32 73 bc a9 9a 5c 1a 9c c3 d7 aa ac 9f fa 1e 9f fa f9 9a 30 af 75 18 75 30 2b c7 b0 ea b1 4c ba ff aa 9f 39 e9 65 ae f2 99 b3 ee bd aa e7 3e 76 df c7 be 5f 1a 55 bd 6e ad 3f 20 0b 3c 6c de 79 cc 7b fd 02 43 aa dd 47 9e fa b7 64 99 66 cb bc d7 28 f4 53 ef fb d4 cf d7 ed a5 57 9e 4f 9a 96 e1 51 b7 29 fc d0 78 56 95 07 3d 7d d2 53 12 e5 69 37 ae f2 62 a6 5d 33 fe df 57 f5 07 68 f4 be 4f fd e5 31 ee 50 65 fe 55 5e ca f8 18 ab 06 48 15 db 55 b9 4e fa e3 3b 2d 21 7b 2c 51 9b 27 16 26 fd a2 7c ec bd ce 93 c0 3d f6 4e ab 7e 7f fc 37 51 78 a7 8f 7d b6 4a ac cc 73 4d 15 d7 45 e2 63 52 bc 4e 7a d6 53 ff 1f 7d 55 c6 3f 4f a2 5c 75 8c f3 fc 5c 2d f2 4e e7 f9 4c 95 d8 9e e5 3c 2d f6 c7 3f 53 35 0e 66 bd 93 45 df 57 18 4b 55 Data Ascii: /.c.$o2s\0uu0+L9e>v_Un? <ly{CGdf(SWOQ)xV=}Si7b]3WhO1PeU^HUN;-!{,Q'&\|=N~7Qx}JsMEcRNzS}U?O\u\-NL<-?S5fEWKU
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: bc df 69 f1 3a 2d b6 c7 e7 39 6a 3b 29 ee ab c4 fe f8 bc e7 fd 1d f1 d8 58 17 89 91 79 5c 66 fd ce 9c 66 32 cd 65 da ef 9d 45 7f c7 55 f9 dc 3c 7f 1b 16 fd bd 38 6b be d3 7e 5f 3e f6 bb ae ea ef 86 59 d7 3d 36 f7 59 71 f0 d8 df 8d aa 71 5c 65 0c 93 fe c6 4e 7b fe bc 31 57 f5 e7 e7 29 d7 cd fa 19 99 f6 3b a5 ca ef 8e 49 f1 3d fe df aa fe 4e 9e f6 fb 77 7c ec bb df fe de 0f 25 d1 df 1d 94 49 f5 a7 04 bb 4c a8 43 32 3d 9e 48 ff 50 69 c7 1a 93 e8 f5 26 d0 23 89 73 90 3a 4d 4e d3 d1 15 e7 90 38 8f 26 cd 21 61 be fd ce 6d 1a 52 e4 bb af 7f 2f dd 7f 10 ff f8 b5 9d fb 71 ff 78 92 24 bf 3c e3 a7 78 fc fb b3 fe ef d1 ef 85 ff 3d 7c 4d ba 77 79 dd 63 cf 9e f5 cb a5 ca 3d 66 8d a1 bc f7 a4 31 4c 1b 57 d5 f9 8d 8f 7b de 79 3e 36 b7 f1 71 4c 7b 7f b3 9e 3b 6d de e5 d8 Data Ascii: i:-9j;)Xy\ff2eEU<8k~_>Y=6Yqq\eN{1W);I=Nw\|%ILC2=HPi&#s:MN8&!amR/qx$<x=\|Mwyc=f1LW{y>6qL{;m
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 8b bb d1 7a e8 55 ac 42 2f 3f 81 9e b8 fa dc cb 42 bb ba 50 ba f1 7b 0e fe e0 8f ff e4 8f fe 93 7f 3b 4d d3 6e 40 0a 65 1b df fc 91 aa 5c ae 23 40 80 00 01 02 04 08 10 20 90 24 bf f2 eb 5f 96 73 84 ee 1c bf f4 6b 7f f7 a7 ff fb ab 3f f7 cb 65 29 47 f7 b2 fb c5 2a f4 17 09 ef 92 56 a1 57 96 40 87 d5 e7 a3 f7 47 69 68 59 17 56 9f d3 9b 34 4b 9e 27 d9 cf fc d4 1f fb cf 5b 49 eb 67 c3 8b 0f 1b 06 f7 76 d4 3c fb 21 20 40 80 00 01 02 04 08 10 98 4f 20 d4 44 df dc 7d b9 b1 70 98 0c ff c2 5f fc 85 3f f1 1f 24 bf 9a e4 c5 5e 91 af 72 15 7a a5 09 74 d8 3c d8 3d fc 72 f5 f9 0f fc e4 9b df fa ad ce fe ff 55 1e 92 12 56 9e 75 db 98 2f 58 5c 4d 80 00 01 02 04 08 10 20 f0 49 20 6c 28 0c 2b d1 e1 2b 4d 92 1f dc f4 af ff e9 bf f4 8b 9f fd 83 b0 0a dd bf 3d ce 4f 1e 56 a1 Data Ascii: zUB/?BP{;Mn@e\#@ $_sk?e)G*VW@GihYV4K'[Igv<! @O D}p_?$^rzt<=rUVu/X\M I l(++M=OV
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 43 02 dd 3b ec 65 4a 38 36 19 46 9e 4d 80 00 01 02 04 08 10 d8 1e 81 59 9b 08 a3 ea 03 dd d9 ed 67 da d8 6d 4f e0 9a 29 01 02 04 08 10 20 40 60 53 02 8d 49 a0 75 e1 d8 54 08 79 2e 01 02 04 08 10 20 40 60 bb 04 a2 4f a0 cb 1a 68 09 f4 76 05 ae d9 12 20 40 80 00 01 02 04 36 25 30 ab 8d 9d 12 8e 4d bd 15 cf 25 40 80 00 01 02 04 08 10 a8 ad 40 95 4d 84 b5 6e 63 67 05 ba b6 b1 65 60 04 08 10 20 40 80 00 81 46 0a 54 49 a0 6b d9 85 a3 48 92 e4 34 39 4d 1d e5 dd c8 b8 34 29 02 04 08 10 20 40 80 40 6d 05 a6 25 d0 c7 b7 9d fc ec b2 9b bf 78 79 51 d4 32 81 0e a2 ef 24 d0 b5 0d 2c 03 23 40 80 00 01 02 04 08 34 55 a0 ca 0a 74 ed 4a 38 8a a2 48 d3 b1 04 5a 1b bb a6 86 a8 79 11 20 40 80 00 01 02 04 ea 25 50 25 81 ae fd 0a f4 89 83 54 ea 15 55 46 43 80 00 01 02 04 08 10 Data Ascii: C;eJ86FMYgmO) @`SIuTy. @`Ohv @6%0M%@@Mncge` @FTIkH49M4) @@m%xyQ2$,#@4UtJ8HZy @%P%TUFC
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 02 04 08 10 20 40 80 00 81 c7 05 66 ad 40 f7 2e bb f9 8b 87 15 e8 fb 3b d5 79 05 5a 09 c7 e3 2f db 15 04 08 10 20 40 80 00 01 02 4f 17 88 f2 20 95 a4 28 ee b7 33 96 07 a9 8c 96 70 58 81 7e 7a 50 b8 03 01 02 04 08 10 20 40 80 c0 74 81 c6 94 70 74 76 fb 99 93 08 85 3a 01 02 04 08 10 20 40 80 c0 aa 05 66 25 d0 a3 9b 08 ef c7 51 e7 12 0e 09 f4 aa 43 c5 fd 09 10 20 40 80 00 01 02 04 82 40 63 56 a0 d5 40 0b 68 02 04 08 10 20 40 80 00 81 75 08 cc 3a 48 25 aa 4d 84 56 a0 d7 11 2e 9e 41 80 00 01 02 04 08 10 20 d0 98 15 68 09 b4 60 26 40 80 00 01 02 04 08 10 58 87 40 b4 5d 38 02 ce 68 1f 68 09 f4 3a c2 c5 33 08 10 20 40 80 00 01 02 04 ac 40 8b 01 02 04 08 10 20 40 80 00 01 02 73 08 44 9b 40 8f f6 81 3e 39 ec 65 e7 da d8 cd f1 da 5d 4a 80 00 01 02 04 08 10 20 b0 a8 Data Ascii: @f@.;yZ/ @O (3pX~zP @tptv: @f%QC @@cV@h @u:H%MV.A h`&@X@]8hh:3 @@ @sD@>9e]J
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 49 10 20 40 80 00 01 02 04 ea 28 30 ad 06 7a f4 28 ef 5a 76 e1 98 76 90 8a 04 ba 8e 61 66 4c 04 08 10 20 40 80 00 81 e6 08 4c 5b 81 1e 4f a0 43 be 9a a6 69 f8 67 e1 af 74 e1 4f 8e 7f b0 28 ee ef 35 da 07 5a 0d f4 d2 74 dd 88 00 01 02 04 08 10 20 40 60 86 40 b4 2b d0 e3 09 b4 2e 1c e2 9c 00 01 02 04 08 10 20 40 60 1d 02 55 56 a0 a3 69 63 17 6a a0 1d e5 bd 8e b0 f1 0c 02 04 08 10 20 40 80 c0 f6 0a 4c 5a 81 3e d8 6b e7 e7 b7 9d bc 77 d9 cd 5f bc bc 28 6a 59 03 3d be 02 ad 84 63 7b 83 d8 cc 09 10 20 40 80 00 01 02 eb 14 68 4c 09 87 04 7a 9d 61 e3 59 04 08 10 20 40 80 00 81 ed 15 68 4c 02 1d 6a a0 95 70 6c 6f 20 9b 39 01 02 04 08 10 20 40 60 5d 02 8d 49 a0 ad 40 af 2b 64 3c 87 00 01 02 04 08 10 20 b0 dd 02 b3 4e 22 3c b9 ec e6 17 b1 d4 40 5b 81 de ee 40 36 7b Data Ascii: I @(0z(ZvvafL @L[OCigtO(5Zt @`@+. @`UVicj @LZ>kw_(jY=c{ @hLzaY @hLjplo 9 @`]I@+d< N"<@[@6{
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 9f 5d dd 0c 32 7d a0 9b 1d b0 66 47 80 00 01 02 04 08 10 d8 b4 c0 b4 1a e8 ce 6d 27 ef c6 72 12 a1 a3 bc 37 1d 46 9e 4f 80 00 01 02 04 08 10 d8 1e 81 49 2b d0 07 0f 9b 08 a3 39 ca 5b 0d f4 f6 04 ac 99 12 20 40 80 00 01 02 04 36 2d 50 a5 84 a3 d6 9b 08 8f de 1f a5 67 87 bd ac b3 db cf f4 81 de 74 38 79 3e 01 02 04 08 10 20 40 a0 f9 02 d1 27 d0 1f de 1f a5 4a 38 9a 1f a8 66 48 80 00 01 02 04 08 10 a8 8b 40 b4 5d 38 8a 24 49 4e 93 d3 d4 0a 74 5d 42 c9 38 08 10 20 40 80 00 01 02 db 21 30 ab 06 3a 8a 36 76 e3 09 f4 fe ce 30 7b 75 f0 e6 63 f9 fa f6 9f 6f c7 8b 34 4b 02 04 08 10 20 40 80 00 81 f5 08 8c 26 d0 9f 5f 7d f6 ec fa ae 95 0f f6 da 79 3f 96 93 08 25 d0 eb 09 14 4f 21 40 80 00 01 02 04 08 10 f8 24 10 7d 0d b4 12 0e a1 4c 80 00 01 02 04 08 10 20 b0 4e 01 Data Ascii: ]2}fGm'r7FOI+9[ @6-Pgt8y> @'J8fH@]8$INt]B8 @!0:6v0{uco4K @&_}y?%O!@$}L N
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 70 88 5e 02 04 08 10 20 40 80 00 81 4d 08 44 9b 40 8f ae 40 8f d6 40 0f 77 86 d9 2b 47 79 6f 22 96 3c 93 00 01 02 04 08 10 20 b0 15 02 55 da d8 d5 be 84 a3 4c a0 95 70 6c 45 cc 9a 24 01 02 04 08 10 20 40 60 a3 02 d3 6a a0 fb b7 9d bc 77 d9 cd 5f bc bc 28 6a 9d 40 1f bd 3f 4a cf 0e 7b 99 93 08 37 1a 47 1e 4e 80 00 01 02 04 08 10 d8 1a 81 c6 95 70 5c ef 0c b3 d7 4a 38 b6 26 80 4d 94 00 01 02 04 08 10 20 b0 6e 01 09 f4 ba c5 3d 8f 00 01 02 04 08 10 20 40 20 6a 81 49 27 11 5e ed b5 f3 d1 12 8e 5a 76 e1 08 ea 65 1b 3b 35 d0 51 c7 a0 c1 13 20 40 80 00 01 02 04 a2 12 a8 52 03 5d eb 04 3a d4 40 f7 0e 7b d9 f9 6e 3f 3b 70 90 4a 54 c1 67 b0 04 08 10 20 40 80 00 81 18 05 1a 55 c2 a1 0b 47 8c 21 68 cc 04 08 10 20 40 80 00 81 b8 04 aa 1c e5 5d eb 2e 1c 1f de 1f a5 27 Data Ascii: p^ @MD@@@w+Gyo"< ULplE$ @`jw_(j@?J{7GNp\J8&M n= @ jI'^Zve;5Q @R]:@{n?;pJTg @UG!h @].'
2024-10-13 15:59:00 UTC	1369	IN	Data Raw: 01 02 04 1a 25 50 35 81 2e 92 24 49 d3 34 fc b3 f0 d7 7d e7 8c a5 7c 8d 74 e1 28 13 68 6d ec 96 22 eb 26 04 08 10 20 40 80 00 01 02 8f 08 54 4d a0 ef 6f 53 a7 04 3a a4 f2 a7 c9 69 2a 81 16 e3 04 08 10 20 40 80 00 01 02 eb 14 98 b5 89 b0 a7 06 7a 9d af c2 b3 08 10 20 40 80 00 01 02 04 62 10 98 b5 02 5d 76 e1 78 9b bc fd 74 70 49 9d 56 a0 c3 78 26 1d a4 a2 06 3a 86 b0 33 46 02 04 08 10 20 40 80 40 bc 02 d1 1e a4 32 5e c2 a1 8d 5d bc 41 68 e4 04 08 10 20 40 80 00 81 98 04 66 b5 b1 eb 5e 76 f3 8b 97 17 45 54 2b d0 fa 40 c7 14 7e c6 4a 80 00 01 02 04 08 10 88 4f 20 da 15 68 25 1c f1 05 9b 11 13 20 40 80 00 01 02 04 9a 20 30 ad 06 fa 38 96 83 54 c6 fb 40 5b 81 6e 42 58 9a 03 01 02 04 08 10 20 40 a0 be 02 d1 b6 b1 2b 57 a0 47 db d8 1d dc 0c b2 eb 9d 61 f6 fa e0 Data Ascii: %P5.$I4}\|t(hm"& @TMoS:i* @z @b]vxtpIVx&:3F @@2^]Ah @f^vET+@~JO h% @ 08T@[nBX @+WGa

Target ID:	0
Start time:	11:58:39
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:58:41
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,8860286179167095346,6853340784234321705,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:58:44
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://server.h74w.com/invite/12536668"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: server.h74w.com	Virustotal: Detection: 11%	Perma Link
Source: cdn.shippinghero.vip	Virustotal: Detection: 11%	Perma Link
Source: https://h5.g7or.com/index.html	Virustotal: Detection: 9%	Perma Link

Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	Matcher: Template: facebook matched
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	Matcher: Template: facebook matched
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	Matcher: Template: facebook matched
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	Matcher: Template: facebook matched

Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No favicon
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No favicon
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No favicon
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No favicon
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No favicon
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No favicon

Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="author".. found
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="author".. found
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="author".. found
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="author".. found
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="author".. found
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="author".. found

Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="copyright".. found
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="copyright".. found
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="copyright".. found
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="copyright".. found
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="copyright".. found
Source: https://h5.g7or.com/index.html#/pages/active/active?inviter=12536668&domain=h5.g7or.com&landing=h5.s7gx.com	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27

Source: chromecache_138.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},kk:function(){e=Ab()},sd:function(){d()}}};var hc=la(["data-gtm-yt-inspected-"]),YC=["www.youtube.com","www.youtube-nocookie.com"],ZC,$C=!1; equals www.youtube.com (Youtube)
Source: chromecache_138.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=EA(a,c,e);V(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return V(122),!0;if(d&&f){for(var m=Lb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},HA=function(){var a=[],b=function(c){return qb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_138.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={nh:e,lh:f,mh:g,Xh:k,Yh:m,Ie:n,Eb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(iD(w,"iframe_api")\|\|iD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!$C&&gD(x[A],p.Ie))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_179.2.dr, chromecache_125.2.dr, chromecache_121.2.dr, chromecache_155.2.dr, chromecache_113.2.dr, chromecache_136.2.dr	String found in binary or memory: return b}WC.F="internal.enableAutoEventOnTimer";var hc=la(["data-gtm-yt-inspected-"]),YC=["www.youtube.com","www.youtube-nocookie.com"],ZC,$C=!1; equals www.youtube.com (Youtube)
Source: chromecache_138.2.dr, chromecache_200.2.dr, chromecache_151.2.dr, chromecache_181.2.dr, chromecache_106.2.dr, chromecache_169.2.dr	String found in binary or memory: var kC=function(a,b,c,d,e){var f=bA("fsl",c?"nv.mwt":"mwt",0),g;g=c?bA("fsl","nv.ids",[]):bA("fsl","ids",[]);if(!g.length)return!0;var k=gA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);V(121);if(m==="https://www.facebook.com/tr/")return V(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Oy(k,Qy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: server.h74w.com
Source: global traffic	DNS traffic detected: DNS query: h5.g7or.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: server.e9sg.com
Source: global traffic	DNS traffic detected: DNS query: cdn.shippinghero.vip
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://server.h74w.com/invite/12536668

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Windows Analysis Report
https://server.h74w.com/invite/12536668