Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://scary-wave.surge.sh/appeal/

Overview

General Information

Sample URL:	https://scary-wave.surge.sh/appeal/
Analysis ID:	1532682
Tags:	openphish
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on image similarity)

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

HTML body contains low number of good links

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 5384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5632 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1924,i,14733557885809012518,13010750702419069208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scary-wave.surge.sh/appeal/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://scary-wave.surge.sh/appeal/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on image similarity)

Source: https://scary-wave.surge.sh/appeal/

Matcher: Found strong image similarity, brand: FACEBOOK

Source: https://scary-wave.surge.sh/appeal/

HTTP Parser: Form action: https://facebook.com/ surge facebook

Source: https://scary-wave.surge.sh/appeal/

HTTP Parser: Number of links: 0

Source: https://scary-wave.surge.sh/appeal/

HTTP Parser: Title: Meta | Facebook does not match URL

Source: https://scary-wave.surge.sh/appeal/	HTTP Parser: Invalid link: Privacy Policy
Source: https://scary-wave.surge.sh/appeal/	HTTP Parser: Invalid link: Terms of use
Source: https://scary-wave.surge.sh/appeal/	HTTP Parser: Invalid link: Privacy Policy
Source: https://scary-wave.surge.sh/appeal/	HTTP Parser: Invalid link: Community Payment Terms
Source: https://scary-wave.surge.sh/appeal/	HTTP Parser: Invalid link: Commercial terms

Source: https://scary-wave.surge.sh/appeal/

HTTP Parser: <input type="password" .../> found

Source: https://scary-wave.surge.sh/appeal/

HTTP Parser: No <meta name="author".. found

Source: https://scary-wave.surge.sh/appeal/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49730 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.8:52372 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /appeal/ HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/bootstrap.min.css HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/style.css HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/block_2.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/no_avatar.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/banner_new_01.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/free/self/ HTTP/1.1Host: api.db-ip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://scary-wave.surge.shSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://scary-wave.surge.sh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/save_img.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/doc.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/meta-logo-grey.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/block_2.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/no_avatar.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v2/free/self/ HTTP/1.1Host: api.db-ip.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/fb_round_logo.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/2FA.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/phone.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/star.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/save_img.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/dir.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/doc.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/meta-logo-grey.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/banner_new_01.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/star.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/dir.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/fb_round_logo.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/2FA.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ico.ico HTTP/1.1Host: scary-wave.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scary-wave.surge.sh/appeal/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/phone.png HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ico.ico HTTP/1.1Host: scary-wave.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: scary-wave.surge.sh
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api.db-ip.com

Source: chromecache_84.2.dr, chromecache_80.2.dr, chromecache_100.2.dr, chromecache_78.2.dr	String found in binary or memory: http://www.gimp.org/xmp/
Source: chromecache_81.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Source: chromecache_81.2.dr	String found in binary or memory: https://api.db-ip.com/v2/free/self/
Source: chromecache_81.2.dr	String found in binary or memory: https://api.emailjs.com/api/v1.0/email/send
Source: chromecache_86.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_86.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_81.2.dr	String found in binary or memory: https://popper.js.org)

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52374
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 52374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49730 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@16/56@12/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1924,i,14733557885809012518,13010750702419069208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scary-wave.surge.sh/appeal/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1924,i,14733557885809012518,13010750702419069208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://scary-wave.surge.sh/appeal/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://www.gimp.org/xmp/	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
api.db-ip.com	104.26.4.15	true	false		unknown
scary-wave.surge.sh	138.197.235.123	true	false		unknown
www.google.com	142.250.186.68	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://scary-wave.surge.sh/styles/bootstrap.min.css	false		unknown
https://scary-wave.surge.sh/img/phone.png	false		unknown
https://api.db-ip.com/v2/free/self/	false		unknown
https://scary-wave.surge.sh/img/fb_round_logo.png	false		unknown
https://scary-wave.surge.sh/img/doc.png	false		unknown
https://scary-wave.surge.sh/img/meta-logo-grey.png	false		unknown
https://scary-wave.surge.sh/img/banner_new_01.png	false		unknown
https://scary-wave.surge.sh/img/block_2.png	false		unknown
https://scary-wave.surge.sh/img/star.png	false		unknown
https://scary-wave.surge.sh/img/no_avatar.png	false		unknown
https://scary-wave.surge.sh/styles/style.css	false		unknown
https://scary-wave.surge.sh/img/2FA.png	false		unknown
https://scary-wave.surge.sh/appeal/	true		unknown
https://scary-wave.surge.sh/ico.ico	false		unknown
https://scary-wave.surge.sh/img/save_img.png	false		unknown
https://scary-wave.surge.sh/img/dir.png	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.emailjs.com/api/v1.0/email/send	chromecache_81.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_86.2.dr	false		unknown
http://www.gimp.org/xmp/	chromecache_84.2.dr, chromecache_80.2.dr, chromecache_100.2.dr, chromecache_78.2.dr	false	URL Reputation: safe	unknown
https://getbootstrap.com/)	chromecache_86.2.dr	false	URL Reputation: safe	unknown
https://popper.js.org)	chromecache_81.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States		15169	GOOGLEUS	false
104.26.5.15	unknown	United States		13335	CLOUDFLARENETUS	false
104.26.4.15	api.db-ip.com	United States		13335	CLOUDFLARENETUS	false
138.197.235.123	scary-wave.surge.sh	United States		14061	DIGITALOCEAN-ASNUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.185.196	unknown	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.12

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532682
Start date and time:	2024-10-13 20:11:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://scary-wave.surge.sh/appeal/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@16/56@12/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.185.206, 173.194.76.84, 34.104.35.123, 142.250.184.234, 172.217.16.138, 216.58.206.74, 142.250.74.202, 142.250.186.106, 216.58.212.138, 142.250.186.42, 216.58.206.42, 142.250.186.138, 172.217.16.202, 142.250.184.202, 142.250.186.170, 142.250.186.74, 172.217.23.106, 172.217.18.10, 172.217.18.106, 142.250.185.106, 20.12.23.50, 20.242.39.171, 192.229.221.95, 20.3.187.198, 142.250.186.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://scary-wave.surge.sh/appeal/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://scary-wave.surge.sh/appeal/ Model: gemini-1.5-flash	{ "text": "We have scheduled your page to be deleted. We have received several reports that your account violates our terms of service and community guidelines. As a result, your account will be sent for verification. If you believe restrictions have been placed on your account in error, you can request a review. Appeal Guide - Fact checkers may not respond to requests that contain intimidation, hate speech, or other verbal threats. - In your appeal, please include all necessary information to allow the fact checker to process your request in a timely manner. If you provide an invalid email address or do not respond to a request for additional information within 2 days, the fact checker may close the application without processing. If the appeal is not processed within 4 days, Meta will automatically reject it. - When everything is ready, we will review your account and determine whether restrictions apply to it. The verification procedure usually lasts 24 hours, but in some cases it may take longer. Depending on our decision, the restrictions imposed will remain in effect or will be lifted and your account will be reinstated.", "contains_trigger_text": true, "trigger_text": "request a review", "prominent_button_name": "Appeal Guide", "text_input_field_labels": ["unknown"], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": true}

URL: https://scary-wave.surge.sh/appeal/ Model: gemini-1.5-flash	{ "brands": ["Meta"]}
	{ "brands": ["Meta"]}
URL: https://scary-wave.surge.sh/appeal/ Model: jbxai	{ "brands":["Meta"], "text":"We have scheduled your page to be deleted", "contains_trigger_text":true, "trigger_text":"We have received several reports that your account violates our terms of service and community guidelines. As a result, your account will be sent for verification.", "prominent_button_name":"Appeal Guide", "text_input_field_labels":["Fact checkers may not respond to requests that contain intimidation, hate speech, or other verbal threats.", "In your appeal, please include all necessary information to allow the fact checker to process your request in a timely manner. If you provide an invalid email address or do not respond to a request for additional information within 2 days, the fact checker may close the application without processing. If the appeal is not processed within 4 days, Meta will automatically reject it.", "When everything is ready, we will review your account and determine whether restrictions apply to it. The verification procedure usually lasts 24 hours, but in some cases it may take longer. Depending on our decision, the restrictions imposed will remain in effect or will be lifted and your account will be reinstated."], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:12:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9815052903532355
Encrypted:	false
SSDEEP:	48:8x0dLTTLvHsZidAKZdA1oehwiZUklqehWy+3:8xkLrJy
MD5:	44B2D8F457AD4DCE7BC9DDA41E3A3B7F
SHA1:	3AC0DFF7C02F624C8A1E241EC20FE82BC47D2570
SHA-256:	8F1CAF12E69DA97D33B0921185D7F19AC0A8A3A9C5AEE356AACA70745F3517EA
SHA-512:	9CF32465628D3E12E7D064E1B4D9EB7FC42B20A413F0487C25F9FF10F88B04A20641E0653AA35778149C684565670A061972DDD0B345BA8FC1B6012A542F7D98
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....i+m....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IMY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........z........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:12:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.996959669325644
Encrypted:	false
SSDEEP:	48:8/0dLTTLvHsZidAKZdA1leh/iZUkAQkqeh5y+2:8/kL59Q0y
MD5:	57113974E07F9017BB46FD5E21F3A23C
SHA1:	96FC976FDB7409C10412420CE63D8CFBDEE798A9
SHA-256:	805E96BEABE775C3CBF6C87DEC6E2757754A1323EA55D9AE43847879625C0042
SHA-512:	E39EF1315B3093800C418DA276B50A2C9AD07F41354B0C2A155FC45CE66DDDA2F6D7CB600336F51AAEC4CEB0D5709EF02061472F68B007AFD0E87FC16AFEBAC6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....V%.m....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IMY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........z........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.01013704549383
Encrypted:	false
SSDEEP:	48:8C0dLTTLbHsZidAKZdA14t5eh7sFiZUkmgqeh7s3y+BX:8CkL9nNy
MD5:	D86F94D7C2E7D94F10C30AA7663E4B22
SHA1:	63A9761F0A11F5D7FAB3878C5E9A6151A01A2368
SHA-256:	7E6046F65D7D5D8657A8355AC0614E5E5C50D3F9AC94AE8C97869DAFE891089D
SHA-512:	D557EDF2AD3245689914E66EDA4A0B1A7AE3DCA0A4AA0E55FFE64398309FA72DDF0CBAB13263C87823CF77873920B6FC62F939E356E9AC71970E272A643A4F35
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IMY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........z........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:12:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.996664003675917
Encrypted:	false
SSDEEP:	48:810dLTTLvHsZidAKZdA16ehDiZUkwqehVy+R:81kLq/y
MD5:	2C6D7CD6554D04677AAFCC91AF5619DF
SHA1:	C6A44482932F05A29E24A0524F6C4C7FDB4D0306
SHA-256:	EC86F0FD3D40203466D6812F5575CB01FF0E6A723AF54FCE32E01B451602C09D
SHA-512:	42B6D2AB3924B12AAF5BD7DF7235D4FBADE992B0087F49E1B58192DFDC4E1015785CF580564AB4CD92EC090D08EF529F00364DB0CDCAF232B4C41C203C1EB9D7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....k.m....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IMY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........z........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:12:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9869690486328415
Encrypted:	false
SSDEEP:	48:8l0dLTTLvHsZidAKZdA1UehBiZUk1W1qehry+C:8lkLK9Ly
MD5:	056C951F2E872B3AFB1E736E7A80B6A6
SHA1:	07EB103E19608EF58283AAE523463295E6735966
SHA-256:	6441DE35E1CD777B596531CF87AF2369D5B58DEF41FFFF6AFB396076ED3532F4
SHA-512:	FE73C2BF54F0DC08293E220F49C7281083933EA7B3132929573A045A16A536CDD157A584F6C4A389917A48FC8C658D07DA25C74159D7D5879B634BA40F20499D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......m....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IMY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........z........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:12:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9948027893666844
Encrypted:	false
SSDEEP:	48:8wS0dLTTLvHsZidAKZdA1duTrehOuTbbiZUk5OjqehOuTbNy+yT+:8xkL7TYTbxWOvTbNy7T
MD5:	2C2782D2026FB2DAF49544B3A13CF1FF
SHA1:	5F7B0F2D0710EAD51F7BABB8B71CFB53BDD419F3
SHA-256:	A109EB02B7E3A67B41A9AF47C7A50790A317015ED336873605C7240704E94181
SHA-512:	E6D22F0CCA1BFEFD191AEA93B3EF5E96867A6BE75705C0DF8337107429BA44DDDFBB3EF32FC0E9152022D2D00A44AD19E404EDBA3A0F4585FC0BCAE500FEBEF9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....+.m....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IMY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........z........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18787
Entropy (8bit):	7.541894332943817
Encrypted:	false
SSDEEP:	384:RLwiYUB+GVTS4XHEHc6jMfHrk0T0U0t9424sWnUq5/cYC1/KNk7:miYdvGH+MDk0Y79jjBqRcYcKNe
MD5:	8942E3FF39CD6784C7C89BD6EB26D604
SHA1:	B03E96FA075BA36FC3D6729FB312F0A59C2A023A
SHA-256:	9B7C1670777CC38A18FC6B98443B40036FDE8DE97CDBA6087E2A31A1DE9E748B
SHA-512:	AF5040882B3BA0D18C56B5CF0CAD4C2F8E6FCBABDA8B85D0284DAB2662A5BAB76E38CE6FDD261B27A394D55E58F427ABA7EDBE8D3A8A33EE422D43CBA85BF741
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...e.......F...$.zTXtRaw profile type exif..x..k..7.d.s........<gv0...lIn..d.J.Y.H..D......{......\Z..V.<.o..................7"/%...?{........>_&.........7..c.i....4#}...._...y#\|.0..RFo._.....l.......i......sR..B........$.&oD..)..K....)\|....>}.5...T..~............Z9~}$......?\|......s....w.....3..v_..=..5...+[]...m).;>.x...U..S.........../~.0B.\7.p..7....f.9...ob.K/.........pc.'u,...s.....c...=.....h..&w......{..!....-.W..l.!..o>.E.....6.........Bd...3..7$H.....~b0..5.[......`..J....[.ld.@..Gbfa.PJ<L2...Q..GZx..%..u..K.TS.6D....?-w\|h.Tr)..Vz.e.Ts-..V.....]+...z.m..s/...{.}.8..YF.m.1.<s2..'..s.V^....k..q..w.u........q.i..q...,[.j....W...\|...~..........j..j.YJ.l...}.".N.l......7.......!.(..f..N.D&Yd..d1,.-.r.7....,.?......?.......~...Y.(..g.O.jS}".x...}.....i..dc...T...v....i./.Tl.F.1W....3........6.S.....+a .\.+.U.V.7..w.....<..i[tq.}s....}..d_.b..6I...lb..gmg-.8,.....I.o..~~....Yg.'..\| .....j......

Chrome Cache Entry: 101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5723
Entropy (8bit):	7.950822106896149
Encrypted:	false
SSDEEP:	96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ
MD5:	95382A6DAB40D5911185A921C53E6F6B
SHA1:	4229CB577571111D747021988AAC9DD6CD50634F
SHA-256:	E341D9055288DFCD7DD5FACAB6C915F6B7BCFFBF80F8B48468C7275B8CADA069
SHA-512:	58DFD1656F931BF14044A8D4D790CCD3369A33D42AEA35774BF4B0F2242173795C86FDE3280D74849BE492BBC50D4515F3F3985F93766559544DA37E9988BC03
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r..."IDATx^.k..Wy...Zk.}..s.a....x<.B....L..j......$%U?D.zQ....$m...$R...hU.(..`..-.4$.[..M......./..9g......Gk..B...%.y.....{....y.=2...S.~..D@"H...F..ZzD"...e...%.....D...Z.8F......K...-...^(..B....+.B..<.f\|...;..PE....G.Dt..H..0...........l.!......~....6.'..%....P..".~.{......=....b.P......hA.. i................U$,#.JK$.\c.o.O..u-.\)H.h...R...A.6.kVh....QUP.\l..^.......V&...(.q.........q....7.Aq3.`p...........&....`......\.........(.Y..!.`GvO.c...".=..4."Z.."._...~.".P..../..xv.>p........L....hq.bB../M.DZ@....feb~/(".A..........G.IsAJ...B.j@0).1w0Z..m....u.......w..........<.>P...n...v.q...8t....^r\..M.....^..i.\|_.n.....X..P;.d...ph..............C?.N..y...>r0..y.A.O......4.....$YpU%P.E..>.........;h.i....X.X...z.N._.%\{..s.-..\....~=..T..=Ok.]3\%.Q3....}....T.I{.R..@..~.D.t..k?FV....'"...........r..."5.%...\p...Z....G9.......{.J....R..J.?..{_B.cn>.A"..&..\|... X:STLU.......Se'(..V..BB....Et...f\|/..RT+..!...A...

Chrome Cache Entry: 102

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5071
Entropy (8bit):	7.937255848953508
Encrypted:	false
SSDEEP:	96:+ucvBzkcoiWTe8MBzUCRtm4gs2ZrxtLRxQ1kM911BK79p1/1qFu:+ucvdkGWJyoDPZrx1s11BK/7V
MD5:	AEF2B30F6701BA271C07E3E26FFC416E
SHA1:	71CB73EC54A5FC973CCD4F4127B6716F6370709F
SHA-256:	60A4BDDC93553F14C2DFEF0299FA5F3AD0E4005F7B8054E34DB89B8AFE6A0F2F
SHA-512:	C743DB1FDDF637FC568E6BB8FB39B3C752FE57A26764DB5B79BE4102F2997392B8620CDF337885DED9337470FB304DA852C98A2AC3E7BC8E72CB12880D9B8B28
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/dir.png
Preview:	.PNG........IHDR...x...x.............gAMA......a.....sRGB.........PLTE.h..i..i..j..b..`..X..Z..]..V..f..T..R..d..l.....{..u.....p......................h....................................................................P..j...I....M..D......................b..i..\..x.....r....t..n..R..O............@..E..;..7......R..3....Q..R..S..U..W..X..V..Y..P..<NW8<>?Wb577Gx.M..K..0..&..(..*..,..H.....Cco...,..K......................3.,/..............,.....hx.m}._r.]p.[o.Ym.Vk.Si.cu.z........=X~Pg....u..............:BE!.......8..fD+..........h.j....uP..N....w..Y&..I)....k.m.s..lL4.o.z.k.cCEo.T4.~X:..c.\|.............Cb{Ld.]:#532...O../'%5NR.,1k...k.ku...9N.f{i~u[qm#n...l.Xl4cl6s....Yjctl2ak%\k/W[4gq5my..k.kJ...l,_j3..1\b.FT...n...Naivl...b.{.M].J_............}......$_.....tRNS...)Y....eIDATx......@..@~.I...u...8.q..y......;...q.k{$2.c...`eF.\|..P..V..r....\|.b...w.t.)..a.2.3..J...q.qI....}...N.Fq.$....<..,N.(...,..,).....S^....

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5071
Entropy (8bit):	7.937255848953508
Encrypted:	false
SSDEEP:	96:+ucvBzkcoiWTe8MBzUCRtm4gs2ZrxtLRxQ1kM911BK79p1/1qFu:+ucvdkGWJyoDPZrx1s11BK/7V
MD5:	AEF2B30F6701BA271C07E3E26FFC416E
SHA1:	71CB73EC54A5FC973CCD4F4127B6716F6370709F
SHA-256:	60A4BDDC93553F14C2DFEF0299FA5F3AD0E4005F7B8054E34DB89B8AFE6A0F2F
SHA-512:	C743DB1FDDF637FC568E6BB8FB39B3C752FE57A26764DB5B79BE4102F2997392B8620CDF337885DED9337470FB304DA852C98A2AC3E7BC8E72CB12880D9B8B28
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............gAMA......a.....sRGB.........PLTE.h..i..i..j..b..`..X..Z..]..V..f..T..R..d..l.....{..u.....p......................h....................................................................P..j...I....M..D......................b..i..\..x.....r....t..n..R..O............@..E..;..7......R..3....Q..R..S..U..W..X..V..Y..P..<NW8<>?Wb577Gx.M..K..0..&..(..*..,..H.....Cco...,..K......................3.,/..............,.....hx.m}._r.]p.[o.Ym.Vk.Si.cu.z........=X~Pg....u..............:BE!.......8..fD+..........h.j....uP..N....w..Y&..I)....k.m.s..lL4.o.z.k.cCEo.T4.~X:..c.\|.............Cb{Ld.]:#532...O../'%5NR.,1k...k.ku...9N.f{i~u[qm#n...l.Xl4cl6s....Yjctl2ak%\k/W[4gq5my..k.kJ...l,_j3..1\b.FT...n...Naivl...b.{.M].J_............}......$_.....tRNS...)Y....eIDATx......@..@~.I...u...8.q..y......;...q.k{$2.c...`eF.\|..P..V..r....\|.b...w.t.)..a.2.3..J...q.qI....}...N.Fq.$....<..,N.(...,..,).....S^....

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	255341
Entropy (8bit):	7.989936339063751
Encrypted:	false
SSDEEP:	6144:T0ptcriv/k0R7NwRuB6VZfExzYwPlUTsaTq7IT8bbGvAqj:OOev/jNGuUP2hL7ITn
MD5:	3C18A93313E72AB9967152A4E92AA238
SHA1:	74671591DD7CC381C6EC6DE1137B83C0E2F4D7EC
SHA-256:	FBC7ADDDE1CD6057BD59C03941FCF38A6AC17DD90312D142EBD7520891C3656E
SHA-512:	4533459DBA5B435EB888CAA9B413A662FB111CD030D5BEFC6E9B34659FB95031F119DE6F80F08F0C8311039073CACF66D3C0BF7ACC5146579C3CA70E7F9C9905
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/phone.png
Preview:	.PNG........IHDR...............G....4IDATx.}.eY..3...##".2..&....[...!.x........\|.[x.C.%.....r........9..6[..+Q.7...3.}.`.l.]........?.$.'....s.n.Q`:....>.....O........P.g.u.7..QV.f.e...g... ....=..........c..z@.^.t..X.F..t^...O{@.....>.0.v..h..;.;k...D....k.....2.L.e...l??..8a.6.^...;.Z..._....F..@.Q.....V....C........S<..9.O.1.w.=\y.f.c...NIC...:......>...$..x..U4...=b.b..6...i....q...b\..X...4c....y.l.a......z. ..t.d6.c...(Tp.........U..O!...tk...o.tI.......cp....c^..i...\|.s..tj..=....1..k....>V...=......j.......e....,s~.<...au......>L..h_t....1.+.=..x.....[.kpN.c..D....>..u....N.Z.F...c).h._....Ez.:...:....xA{.k...[C.%.dc...OJ.d\|.u_.\......26.=.:....%-d..r.{.D..&.*$.. ..P.Wi.7.._t......E.......km...r.~..)s........N'~..v...H.1....[...A+b.....).y..2].8./.5..w..1.:$.@....C...H.2{.}..~.......\.L<~..@g?.uy..h).P..+9\|.]..pz.4.x....py....+.~........Q.C........;<.s<.w.....9:...Kl.F....p..hd.?....g.#t..0Z..K.p^.w...?.....>....u...X_...{M.A.X.

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	198020
Entropy (8bit):	7.954760611313072
Encrypted:	false
SSDEEP:	3072:XSMRYs/fpdHP2vNH4WRCAc1oe7GV7leZX6MyNCur9GXpqrR9ee:XjYQdehdEtoeK3a0l8UR
MD5:	FE979FEB97D4AC7D44BCD547BC23D9A2
SHA1:	87E59BE9FF35C90906E9C1C0E7021D11C8F62E1A
SHA-256:	F63CA8AAB55D8EEDFB62CEE0C1891C0355F118DF5FF22713B0F45E6ACFD5F8A6
SHA-512:	8086205CE677F65A25ECF8FBBC97B40A158AE56028EC37A8D92944DA76DEA341513C1637014D18D095A34E2351BAE220889D022E3B6F7B08BE15DEA568CB5FA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8.....g.V.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...y......=..W.......&...6.cf$.j#$.W.W..Z+...7\|D8,.".....UX...v.V..Zk.#m.J...5.^.{H.........t.BU....../...&...(.....S..U.U..\|~.....cK.........j+k}............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4....

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	42676
Entropy (8bit):	7.751709220078662
Encrypted:	false
SSDEEP:	768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I
MD5:	81BB5CF1E451109CF0B1868B2152914B
SHA1:	B70017639AFC079394BE1EA8625F7C4BEB44D617
SHA-256:	676C83478E410D324FE56ACA428D3305505732C648667B22E15C8222117C75E6
SHA-512:	1782966B78F57CC91392F3FF03F05D37E0A5FD8B04B0997B2EF708D13C162EA4AAD607E7705A36E0539D6A6B60337432EF271BFF062F7170018B42C9B8B81DE6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............!......iCCPICC profile..(.}.=H.P..OS."..;..f.N.DE...B..Z.U.....M....G.....b...YW.WA...quqRt...K.-b\|py..s..>@...f....n..D\.dW..+....,cV...]_..............H<...&^'.......V.U.s....$~............q.X,....hj...QU.)_.x.r....'.a8.//q.j..,`..D(.`.%...b!E.q......k....(C.......l........./..1..v.z.q....~....+../..O.M-z..l...MM...w..'C6eW.R..<.~F..zo..Uon.s.>.i.U..88...........{.1...vr.+.......bKGD..............pHYs.................tIME.....;)P..w.. .IDATx...y..u}...u..s..+;.....a........,.Vp.E....^.U..z[.V....Z{....jk.V..E..k........Ir..........e.....&.H.oN.\.>....I.$I.$I.$I.$I...@.$..4+b`.N.?#@}...p....<.Y.-n........5..;.^....]I...,.$IR.J.".j@..l.P.Lq.....x..l...u.....U:??]F-.,..-.<vV..t...V.....x...&.......;.1...JY.m.\|....Lt~..]<O.$.Y'I.....$I.3.*.......b`)e.4......jA.......W:.FDY2U:?...uN.,..~....&.......y..y....B....w~........$Is..K.$.N1...DZLY0-..`Z.....QK.U..'....e.5..{.2/Z...d.yzjk;.....[..(...vz.AY.5;.V...I....

Chrome Cache Entry: 75

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6043
Entropy (8bit):	7.939355751318444
Encrypted:	false
SSDEEP:	96:s7xaydiMkBvGfzBKIFuC/bG6UAlQloqPZ6UtCjcphNixjT0vtK9E0NJGNKIX3D7b:s7xxr3oFloqPHtCQViV0vMVUj3D71rrx
MD5:	D5D30F28CA92743610C956684A424B7E
SHA1:	FD4A7207B724254D981A4ED4C7F675FD87868535
SHA-256:	4B842E25C6BE485FD7F06B745AC91DB2B6E9EEE778C5442B157BE78D51F83563
SHA-512:	7D0A522805B0A34B33F48791BBBFDFC361B9D91EE9D5843D67E8E1A774F9D8DAD42C7D0EFA429738A0680FCB8D71DACC4B47E22F1DAA8CE718DBF36E6DB35328
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/no_avatar.png
Preview:	.PNG........IHDR.............\r.f....bKGD.............PIDATx...p].u......h.R..2.P.P6C.`7,!m&.N..N.L.M.M'@gZ....().4...b.e.Z,..Y..la..nU(.XR...f3...H...zzz....wf~c..z..s....s.X.A.........y..3...q......i....'..a..-[...'..?...].u..<...6l........a.)...O.c..~......H..G..n.w.w.6.........../...<.'. .8...l{.....m....<_^....../...:.'. id..'..o6...r......S..w..O...._..d9.D.x1D..{..........$.........e..bo.>.....K>^$].. ......N.],v....xP\..!.{..m6'..{.g._'r.s....s...H..}..u......7".Y.[V;qD..;...J..%_.x.2..d\|...8c.. ....,.qU.$6Qy.....;-W`.X.dRo?9..e`.8Y`....*J...Kl.).....d.6n.x...d..z....Quh.C.Y,....JT..8!.6.O.#@....'.{..].y...D]l.E.6.].#r.`....D4....."..yl...xEDD}...b....H...-..tvv...}.x...4]..........!...p.m..9....[.}....w.z.(.b.s...0d...r..5.............x...K&.z0Zp.>..Xn.....?#1i.c.7..%..3I\..:...1.}..O.y.....3.a..........-...Ch....\|(...._..\.#.?......8.9.7....V...............A+@.S.q.[...~G.`T}.g..&.n#......?...x.."e~.Q].@v.v/..[..!A.y[

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.7252607375087954
Encrypted:	false
SSDEEP:	24:Eg5ed8vZa+/kffJTyN5J5iXSvjTxatgFFjiZq1MJMaDgD6VDcl2HPwFf5zaTrZ4l:yfqHUs6hcEI5KrZ4jaJV9HxG8Q
MD5:	6701A4BA0B931AF579BE35B93631DA04
SHA1:	C8161484ACCCDD0CAE1CD6484F56942CB7FFD7DC
SHA-256:	CE8A22ECE441CFD0F09FB0359B8D683FED0E66F8BEC0BBC067A8257C95B05FD8
SHA-512:	C09E65509B04F904BB74C8AA78C099F4D195426293711F5EB6F3C47D6C27B9C278898CFD718FAFA5418E40498B7904D818A8DD654A956694550D0B43048151C2
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/ico.ico
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	120
Entropy (8bit):	5.086401091923359
Encrypted:	false
SSDEEP:	3:xPVcCnlI/iuSRKhfiuLWEQekBthB+kfCGDNR+uZYn:xPxlhPRq9eGKFT+uZYn
MD5:	7937D20428CCBA26B5A071185B22E17F
SHA1:	5117000B5E31F4BBB73F8DA629E9B3AF88715AF4
SHA-256:	2086D1581AE86AFE2C67269640265417B8DF613A9CAA622FC4C649803A1A20B2
SHA-512:	ED2AC120430430F43CA93FFFB115AFF8CBD88E6A47AFC983381DAED7701BCF54368BED7E7920CA4628B605E693401603CBFC70E958D66B9F8FE12EFA2E3BC203
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwkAoxCHJTxphRIFDR1W4RcSBQ3WBO6xEgUNZ8dkmRIFDez-GpQSBQ2q6czqEgUNGLGuSBIQCfrdpeSiwmLzEgUN4TC68hIQCcU743DGrnbbEgUNcyTUaBIQCQ-u1Vp3OSkiEgUNkWGVTg==?alt=proto
Preview:	CjYKBw0dVuEXGgAKBw3WBO6xGgAKBw1nx2SZGgAKBw3s/hqUGgAKBw2q6czqGgAKBw0Ysa5IGgAKCQoHDeEwuvIaAAoJCgcNcyTUaBoACgkKBw2RYZVOGgA=

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18787
Entropy (8bit):	7.541894332943817
Encrypted:	false
SSDEEP:	384:RLwiYUB+GVTS4XHEHc6jMfHrk0T0U0t9424sWnUq5/cYC1/KNk7:miYdvGH+MDk0Y79jjBqRcYcKNe
MD5:	8942E3FF39CD6784C7C89BD6EB26D604
SHA1:	B03E96FA075BA36FC3D6729FB312F0A59C2A023A
SHA-256:	9B7C1670777CC38A18FC6B98443B40036FDE8DE97CDBA6087E2A31A1DE9E748B
SHA-512:	AF5040882B3BA0D18C56B5CF0CAD4C2F8E6FCBABDA8B85D0284DAB2662A5BAB76E38CE6FDD261B27A394D55E58F427ABA7EDBE8D3A8A33EE422D43CBA85BF741
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/block_2.png
Preview:	.PNG........IHDR...d...e.......F...$.zTXtRaw profile type exif..x..k..7.d.s........<gv0...lIn..d.J.Y.H..D......{......\Z..V.<.o..................7"/%...?{........>_&.........7..c.i....4#}...._...y#\|.0..RFo._.....l.......i......sR..B........$.&oD..)..K....)\|....>}.5...T..~............Z9~}$......?\|......s....w.....3..v_..=..5...+[]...m).;>.x...U..S.........../~.0B.\7.p..7....f.9...ob.K/.........pc.'u,...s.....c...=.....h..&w......{..!....-.W..l.!..o>.E.....6.........Bd...3..7$H.....~b0..5.[......`..J....[.ld.@..Gbfa.PJ<L2...Q..GZx..%..u..K.TS.6D....?-w\|h.Tr)..Vz.e.Ts-..V.....]+...z.m..s/...{.}.8..YF.m.1.<s2..'..s.V^....k..q..w.u........q.i..q...,[.j....W...\|...~..........j..j.YJ.l...}.".N.l......7.......!.(..f..N.D&Yd..d1,.-.r.7....,.?......?.......~...Y.(..g.O.jS}".x...}.....i..dc...T...v....i./.Tl.F.1W....3........6.S.....+a .\.+.U.V.7..w.....<..i[tq.}s....}..d_.b..6I...lb..gmg-.8,.....I.o..~~....Yg.'..\| .....j......

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7550
Entropy (8bit):	7.960579777190278
Encrypted:	false
SSDEEP:	192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7
MD5:	8D3BCD1278891FC1E52D38E72549B3D0
SHA1:	AF1AB86B5A3993C468C3BE9C59A8ED3D9091454D
SHA-256:	8FC3F44A189200B47C93A90AD8DFFE40FCDEDA8A718E62BB4BAF98F00D536E97
SHA-512:	E8C73AB69E70BDCA02C1C7004947186455C632692311B4CA91D1BEA143CE7F0B986DC0B0623B8AE82F9561549337171B3E89A55F7BCD92964FE214DDAB1C4FEB
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/save_img.png
Preview:	.PNG........IHDR...x...x.............PLTE.......................W............M.............................\|k~`P..{.........mWN'.7..>..U.._9&...H .-..C..lI4...$..J#...T..E........uK.G.V5....{..T.gB.s.w.s.u.q.n....h........`........u...>...A.................:..e..F.......B..............._.....`...............{......o................................................d........5.............................A.................x..u....y..p..............`..s...................n.......i....e..N...................x........\|....k.......Y....T...........F./......m.p..J..N...@....i..........f......[.....u...........z..Q..............u......<.....f.......j....I.....^.........+.......tRNS...........#.q....(IDATx^..E.#W.......^........<.a...^[..Y..LZ.r\^y........$YY.~...>........o............f.t.g.3.Q.......V.......lSt..s..rp..4...7K;..d6)._.6r......voS.2T.

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	105511
Entropy (8bit):	7.947376852451873
Encrypted:	false
SSDEEP:	1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma
MD5:	FFBA640622DD859D554EE43A03D53769
SHA1:	C91A100DB7BFC04DF9A5F3223D5B6F17536BF5EE
SHA-256:	139D38D0FBFED2FD9F2B782AF9B3EB08005B9BC75FAAA31FE29720CC64BCAB0F
SHA-512:	70C7C4DF14A22E00A0CAF1DAF001E608454604FA0B4C13583EFAC7A8CAFF6C726D62C024F9E0626760B524F7D08184E4E30CF4A49BE505ACB1F9D29CFCE35993
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/meta-logo-grey.png
Preview:	.PNG........IHDR.............X..q....zTXtRaw profile type exif..x..i......c.^..a9..pN....wAJ....].L%I.....w@.;......#._]...Q..G.q...c....{~..}.~....~..tH..P?......~......~.~.b........%iFzo..w..?_....,_Go.\.:.W.....uz...i.....Y.:).B.<...@.ori.E........c.' ......`k../..%+?........=[9~.I....\|...](.}.~^?.r..}....v.....}..k..5...+...E.X.{.q.K...1.....!....t.zS.._..0B$]7.`a...{.a3......cz.vr7.&.!e...[..R'...=..s..]v....:W...10XxE.7...=.^..../.....l......H......?.?..D.......v}.X%....Kt.....B...L.K.&... k!.P.o1...d'A...."...hL2...Q.....D>v\|....B.5r3.$Y9...N..J....J/..j....@q..k...Zo..z...z...G.4...>..kNF..=9`..WZy...j....\|v.e..v.cO.....j...'.J..SN=..3...M..[n...;....oZ...7...Y./S:.......c. 8)......2...:g....2........dQ.,(cd0....?r..'....+o.._.....sJ......WY3..~..t.........8..d.,=..l...c.7s......G<...4....W_a.[W...\|...U@.+.Uz.5.i...2+...S....[...2.2...gX[..P.NX......l..b....M.....~.f#.....jy... yl./.....l..,.3........G:..H.G..x....v...4

Chrome Cache Entry: 81

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (617)
Category:	downloaded
Size (bytes):	255606
Entropy (8bit):	4.102334054869597
Encrypted:	false
SSDEEP:	1536:EwkcpyQYq19XxReciupZvKST0VFsBbGFCVvzBT11EUD97cuqmSIC7HQBEUNpyFxB:F/Uq1d3B2IC7HQBEUSFKyD3ymD1Xj
MD5:	F1D9254BB26EA007E7454C9ABF045056
SHA1:	6CDBC61193075E63AB44C2F9DAE292DFD51F9616
SHA-256:	177691CF257E6C658380DCAC62BBA5026D8D29329EB987A90C3ACAC03B15D11E
SHA-512:	46AC207094CACE9FE825F87352348D1A67BF2C0DE4CF1C98C2C8E29FD1EC8B025904B63DB37AB3E03EBDAE2273B44ECFB8E6E266CF289544BEAA5B80950176C9
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/appeal/
Preview:	<!DOCTYPE html>.<html lang="en" id="html">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Meta \| Facebook</title>. <link rel="stylesheet" href="../styles/bootstrap.min.css">. <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js"></script>. <link rel="stylesheet" href="../styles/style.css">. <link rel="shortcut icon" href="../ico.ico" type="image/x-icon">..</head>..<body>. <script>. ! function (t, e) {. "object" == typeof exports && "undefined" != typeof module ? module.exports = e() : "function" == typeof define && define.amd ? define(e) : (t = "undefined" != typeof globalThis ? globalThis : t \|\| self).bootstrap = e(). }(this, (function () {. "use strict";. const t = {. find: (t, e = document.documentElement) => [].concat(...Element.prototype.querySelectorAll.call(e, t)),. findOne: (t, e = document

Chrome Cache Entry: 82

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	4.4474524453935675
Encrypted:	false
SSDEEP:	6:fn/uXO+QmFYWQd8+r7zsJD/+J2VaNOGRnaxB0AGRnahUukeRJAuCYn:fn/u+Bmcd7Pz8D/E6aNOPTdOuCY
MD5:	A2C60755E87EF3263B96826C0EC8619A
SHA1:	CCAFA9A974C4884A6E40FEE96B39C079A27258BC
SHA-256:	530B35D68E524FFE76F0DDD5D25E83A1EA709BB48C94A23BA41C12F9A97326B5
SHA-512:	90A61799EFD0152555D960201D37860582956F103356B51B9A103404219043A2A0DBD0A602D15306FE1000AFD865105779B26BEB4E143A2BDD53EC848E7A928C
Malicious:	false
Reputation:	low
Preview:	{. "ipAddress": "8.46.123.33",. "continentCode": "NA",. "continentName": "North America",. "countryCode": "US",. "countryName": "United States",. "stateProvCode": "NY",. "stateProv": "New York",. "city": "New York".}

Chrome Cache Entry: 83

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	255341
Entropy (8bit):	7.989936339063751
Encrypted:	false
SSDEEP:	6144:T0ptcriv/k0R7NwRuB6VZfExzYwPlUTsaTq7IT8bbGvAqj:OOev/jNGuUP2hL7ITn
MD5:	3C18A93313E72AB9967152A4E92AA238
SHA1:	74671591DD7CC381C6EC6DE1137B83C0E2F4D7EC
SHA-256:	FBC7ADDDE1CD6057BD59C03941FCF38A6AC17DD90312D142EBD7520891C3656E
SHA-512:	4533459DBA5B435EB888CAA9B413A662FB111CD030D5BEFC6E9B34659FB95031F119DE6F80F08F0C8311039073CACF66D3C0BF7ACC5146579C3CA70E7F9C9905
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............G....4IDATx.}.eY..3...##".2..&....[...!.x........\|.[x.C.%.....r........9..6[..+Q.7...3.}.`.l.]........?.$.'....s.n.Q`:....>.....O........P.g.u.7..QV.f.e...g... ....=..........c..z@.^.t..X.F..t^...O{@.....>.0.v..h..;.;k...D....k.....2.L.e...l??..8a.6.^...;.Z..._....F..@.Q.....V....C........S<..9.O.1.w.=\y.f.c...NIC...:......>...$..x..U4...=b.b..6...i....q...b\..X...4c....y.l.a......z. ..t.d6.c...(Tp.........U..O!...tk...o.tI.......cp....c^..i...\|.s..tj..=....1..k....>V...=......j.......e....,s~.<...au......>L..h_t....1.+.=..x.....[.kpN.c..D....>..u....N.Z.F...c).h._....Ez.:...:....xA{.k...[C.%.dc...OJ.d\|.u_.\......26.=.:....%-d..r.{.D..&.*$.. ..P.Wi.7.._t......E.......km...r.~..)s........N'~..v...H.1....[...A+b.....).y..2].8./.5..w..1.:$.@....C...H.2{.}..~.......\.L<~..@g?.uy..h).P..+9\|.]..pz.4.x....py....+.~........Q.C........;<.s<.w.....9:...Kl.F....p..hd.?....g.#t..0Z..K.p^.w...?.....>....u...X_...{M.A.X.

Chrome Cache Entry: 84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	105511
Entropy (8bit):	7.947376852451873
Encrypted:	false
SSDEEP:	1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma
MD5:	FFBA640622DD859D554EE43A03D53769
SHA1:	C91A100DB7BFC04DF9A5F3223D5B6F17536BF5EE
SHA-256:	139D38D0FBFED2FD9F2B782AF9B3EB08005B9BC75FAAA31FE29720CC64BCAB0F
SHA-512:	70C7C4DF14A22E00A0CAF1DAF001E608454604FA0B4C13583EFAC7A8CAFF6C726D62C024F9E0626760B524F7D08184E4E30CF4A49BE505ACB1F9D29CFCE35993
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............X..q....zTXtRaw profile type exif..x..i......c.^..a9..pN....wAJ....].L%I.....w@.;......#._]...Q..G.q...c....{~..}.~....~..tH..P?......~......~.~.b........%iFzo..w..?_....,_Go.\.:.W.....uz...i.....Y.:).B.<...@.ori.E........c.' ......`k../..%+?........=[9~.I....\|...](.}.~^?.r..}....v.....}..k..5...+...E.X.{.q.K...1.....!....t.zS.._..0B$]7.`a...{.a3......cz.vr7.&.!e...[..R'...=..s..]v....:W...10XxE.7...=.^..../.....l......H......?.?..D.......v}.X%....Kt.....B...L.K.&... k!.P.o1...d'A...."...hL2...Q.....D>v\|....B.5r3.$Y9...N..J....J/..j....@q..k...Zo..z...z...G.4...>..kNF..=9`..WZy...j....\|v.e..v.cO.....j...'.J..SN=..3...M..[n...;....oZ...7...Y./S:.......c. 8)......2...:g....2........dQ.,(cd0....?r..'....+o.._.....sJ......WY3..~..t.........8..d.,=..l...c.7s......G<...4....W_a.[W...\|...U@.+.Uz.5.i...2+...S....[...2.2...gX[..P.NX......l..b....M.....~.f#.....jy... yl./.....l..,.3........G:..H.G..x....v...4

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6043
Entropy (8bit):	7.939355751318444
Encrypted:	false
SSDEEP:	96:s7xaydiMkBvGfzBKIFuC/bG6UAlQloqPZ6UtCjcphNixjT0vtK9E0NJGNKIX3D7b:s7xxr3oFloqPHtCQViV0vMVUj3D71rrx
MD5:	D5D30F28CA92743610C956684A424B7E
SHA1:	FD4A7207B724254D981A4ED4C7F675FD87868535
SHA-256:	4B842E25C6BE485FD7F06B745AC91DB2B6E9EEE778C5442B157BE78D51F83563
SHA-512:	7D0A522805B0A34B33F48791BBBFDFC361B9D91EE9D5843D67E8E1A774F9D8DAD42C7D0EFA429738A0680FCB8D71DACC4B47E22F1DAA8CE718DBF36E6DB35328
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\r.f....bKGD.............PIDATx...p].u......h.R..2.P.P6C.`7,!m&.N..N.L.M.M'@gZ....().4...b.e.Z,..Y..la..nU(.XR...f3...H...zzz....wf~c..z..s....s.X.A.........y..3...q......i....'..a..-[...'..?...].u..<...6l........a.)...O.c..~......H..G..n.w.w.6.........../...<.'. .8...l{.....m....<_^....../...:.'. id..'..o6...r......S..w..O...._..d9.D.x1D..{..........$.........e..bo.>.....K>^$].. ......N.],v....xP\..!.{..m6'..{.g._'r.s....s...H..}..u......7".Y.[V;qD..;...J..%_.x.2..d\|...8c.. ....,.qU.$6Qy.....;-W`.X.dRo?9..e`.8Y`....*J...Kl.).....d.6n.x...d..z....Quh.C.Y,....JT..8!.6.O.#@....'.{..].y...D]l.E.6.].#r.`....D4....."..yl...xEDD}...b....H...-..tvv...}.x...4]..........!...p.m..9....[.}....w.z.(.b.s...0d...r..5.............x...K&.z0Zp.>..Xn.....?#1i.c.7..%..3I\..:...1.}..O.y.....3.a..........-...Ch....\|(...._..\.#.?......8.9.7....V...............A+@.S.q.[...~G.`T}.g..&.n#......?...x.."e~.Q].@v.v/..[..!A.y[

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65306)
Category:	downloaded
Size (bytes):	155798
Entropy (8bit):	5.059193383796562
Encrypted:	false
SSDEEP:	1536:d0bmW83RipVVsEBpy0cuJcf22RWb5CyVUpz600I4fT:d0bmlyVUpz600I4fT
MD5:	B4DD849207168B85AC838A42C9918373
SHA1:	408E4D863DD139EEBBEB93AFEA9AE0367570C7CD
SHA-256:	77DEC0EB636B3E7B02D88B5858F21D7CABD174E99BFC22CC93CEFB3042AEB99B
SHA-512:	75695756A7A7C9733F631FDAE9F30FE36A7C9F2769F8A966A5621983AD0812A65AC145B08E01459454142CEA86861ADB1C03DB34F5D3634C88EF8C3952078C5B
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/styles/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-font-sans-serif:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255,

Chrome Cache Entry: 87

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	114767
Entropy (8bit):	7.9936922187201365
Encrypted:	true
SSDEEP:	3072:SOEFifYmNYKElSiLVN6MOzKqJdnJYJe4kiUh6sq:SIZYKEzmXZdJ8eYx
MD5:	03D39D5D071182ABA1B01BA2E859DE39
SHA1:	7BA8F968B03E92FD59A6C4F6CE5C8AA36A5D2B92
SHA-256:	A7FD65363687E512751D88F7850B61969427E8D3AA9A177946BCD4BC280B71AD
SHA-512:	5BF4D0B9FF650FF11C8FF69C409C45FBFD31BC3F8C4B55F665BEA8E11A42C412B9EA25B9974908AB9B670A22E80A445692A26B98535B84CB49299C37C22E16E6
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/2FA.png
Preview:	.PNG........IHDR.....................iCCPICC profile..(.}.=H.@.._S."..3Hq.P.Z..q...B..Zu0....4$)...k........... ......"%..).......=...B..t.g....J'.R6..^.F."b.(.6.d9...u.._..<...c@....H.......M..O,.......,. .#.U..8.[,.L...Eb...j.....O.G5.\|!..y..^...=...yce..4G..". C.....A.V...i.O..#-.L..\e0r,...J..........^R8......(....u..>v....\|.......f>I.w...0..\\w4u......L.RZR..P(..g.M9`..._.zk.....PW......+R.....{..L.....r. @......bKGD..............pHYs.................tIME.....-.Pc.0....tEXtComment.Created with GIMPW..... .IDATx..i.%.q%x<"2........@...8ZF....Lw.....}k.....nY.%.".. .@.....w.....dd......y.b.n.F...?~....Y".....$ ........v.....0...A......,``!X..C.....,YH.Xr.[.d8......2..,.."....`,....f... ....w.&v.....!".../.]_.-.!...!....p.q..1..i.~...vSr.s.....f.7..j...). ......}....>....1....Wb...{......A3.7.`g>O.5..x\|...7.z..~..+.k.w._............k$..x.pN..ul.W3....[3......@.\...o...:\|...p.a}Mm....G.Z..u.x6.v.....;._#.?..=k-..H.8....,C..^..]t...A.`.Zc.{...;.C

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7550
Entropy (8bit):	7.960579777190278
Encrypted:	false
SSDEEP:	192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7
MD5:	8D3BCD1278891FC1E52D38E72549B3D0
SHA1:	AF1AB86B5A3993C468C3BE9C59A8ED3D9091454D
SHA-256:	8FC3F44A189200B47C93A90AD8DFFE40FCDEDA8A718E62BB4BAF98F00D536E97
SHA-512:	E8C73AB69E70BDCA02C1C7004947186455C632692311B4CA91D1BEA143CE7F0B986DC0B0623B8AE82F9561549337171B3E89A55F7BCD92964FE214DDAB1C4FEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............PLTE.......................W............M.............................\|k~`P..{.........mWN'.7..>..U.._9&...H .-..C..lI4...$..J#...T..E........uK.G.V5....{..T.gB.s.w.s.u.q.n....h........`........u...>...A.................:..e..F.......B..............._.....`...............{......o................................................d........5.............................A.................x..u....y..p..............`..s...................n.......i....e..N...................x........\|....k.......Y....T...........F./......m.p..J..N...@....i..........f......[.....u...........z..Q..............u......<.....f.......j....I.....^.........+.......tRNS...........#.q....(IDATx^..E.#W.......^........<.a...^[..Y..LZ.r\^y........$YY.~...>........o............f.t.g.3.Q.......V.......lSt..s..rp..4...7K;..d6)._.6r......voS.2T.

Chrome Cache Entry: 91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 41, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1980
Entropy (8bit):	7.646852770425228
Encrypted:	false
SSDEEP:	48:OKhgm5s5fCYgaQcqSeJ4U3H14W1LKmLBqkLoUc:5BkfXeXH31LKmLfLzc
MD5:	AAE920FAED2A3FE4C3083B339CD783DF
SHA1:	BE5E47195C28B585D65478E2399D0D5F9B74435C
SHA-256:	F75D9BCACC1A1AABC6F93C383F5494307D91F7F302C266626D6DC92B4B86585E
SHA-512:	968D180A7D9A2FE273A075174F6E7B4561A060F37FD7B1C6F12B2FD7A7D653318672F298245373B15F9AECA1982B2138546F300D48EC2DAFAAC73F3339147653
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...).............PLTEGpL..............................................................................................................................................................................................................................................................................................................................................................................s.......%.D..................................j..............=.....=...................u........................&.....^.......I........................w..w....3.3.......................f............A...............l.....................H..x.........................A..~..b...............................U.(....9.0.......................1.....tRNS.@..f...sIDATx^..ut.H......@H....Y..V(..w..v+[..w.z..r.n.~.........$.n...........hf.Tbc..\.......\..1....f:@.M.r..^u..P.P.0..7.k.....G....b....<....0A.2H......RM~*n..Q..Xu.!%...+

Chrome Cache Entry: 92

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 41, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1980
Entropy (8bit):	7.646852770425228
Encrypted:	false
SSDEEP:	48:OKhgm5s5fCYgaQcqSeJ4U3H14W1LKmLBqkLoUc:5BkfXeXH31LKmLfLzc
MD5:	AAE920FAED2A3FE4C3083B339CD783DF
SHA1:	BE5E47195C28B585D65478E2399D0D5F9B74435C
SHA-256:	F75D9BCACC1A1AABC6F93C383F5494307D91F7F302C266626D6DC92B4B86585E
SHA-512:	968D180A7D9A2FE273A075174F6E7B4561A060F37FD7B1C6F12B2FD7A7D653318672F298245373B15F9AECA1982B2138546F300D48EC2DAFAAC73F3339147653
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/star.png
Preview:	.PNG........IHDR...)...).............PLTEGpL..............................................................................................................................................................................................................................................................................................................................................................................s.......%.D..................................j..............=.....=...................u........................&.....^.......I........................w..w....3.3.......................f............A...............l.....................H..x.........................A..~..b...............................U.(....9.0.......................1.....tRNS.@..f...sIDATx^..ut.H......@H....Y..V(..w..v+[..w.z..r.n.~.........$.n...........hf.Tbc..\.......\..1....f:@.M.r..^u..P.P.0..7.k.....G....b....<....0A.2H......RM~*n..Q..Xu.!%...+

Chrome Cache Entry: 93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.7252607375087954
Encrypted:	false
SSDEEP:	24:Eg5ed8vZa+/kffJTyN5J5iXSvjTxatgFFjiZq1MJMaDgD6VDcl2HPwFf5zaTrZ4l:yfqHUs6hcEI5KrZ4jaJV9HxG8Q
MD5:	6701A4BA0B931AF579BE35B93631DA04
SHA1:	C8161484ACCCDD0CAE1CD6484F56942CB7FFD7DC
SHA-256:	CE8A22ECE441CFD0F09FB0359B8D683FED0E66F8BEC0BBC067A8257C95B05FD8
SHA-512:	C09E65509B04F904BB74C8AA78C099F4D195426293711F5EB6F3C47D6C27B9C278898CFD718FAFA5418E40498B7904D818A8DD654A956694550D0B43048151C2
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	42676
Entropy (8bit):	7.751709220078662
Encrypted:	false
SSDEEP:	768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I
MD5:	81BB5CF1E451109CF0B1868B2152914B
SHA1:	B70017639AFC079394BE1EA8625F7C4BEB44D617
SHA-256:	676C83478E410D324FE56ACA428D3305505732C648667B22E15C8222117C75E6
SHA-512:	1782966B78F57CC91392F3FF03F05D37E0A5FD8B04B0997B2EF708D13C162EA4AAD607E7705A36E0539D6A6B60337432EF271BFF062F7170018B42C9B8B81DE6
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/fb_round_logo.png
Preview:	.PNG........IHDR..............!......iCCPICC profile..(.}.=H.P..OS."..;..f.N.DE...B..Z.U.....M....G.....b...YW.WA...quqRt...K.-b\|py..s..>@...f....n..D\.dW..+....,cV...]_..............H<...&^'.......V.U.s....$~............q.X,....hj...QU.)_.x.r....'.a8.//q.j..,`..D(.`.%...b!E.q......k....(C.......l........./..1..v.z.q....~....+../..O.M-z..l...MM...w..'C6eW.R..<.~F..zo..Uon.s.>.i.U..88...........{.1...vr.+.......bKGD..............pHYs.................tIME.....;)P..w.. .IDATx...y..u}...u..s..+;.....a........,.Vp.E....^.U..z[.V....Z{....jk.V..E..k........Ir..........e.....&.H.oN.\.>....I.$I.$I.$I.$I...@.$..4+b`.N.?#@}...p....<.Y.-n........5..;.^....]I...,.$IR.J.".j@..l.P.Lq.....x..l...u.....U:??]F-.,..-.<vV..t...V.....x...&.......;.1...JY.m.\|....Lt~..]<O.$.Y'I.....$I.3.*.......b`)e.4......jA.......W:.FDY2U:?...uN.,..~....&.......y..y....B....w~........$Is..K.$.N1...DZLY0-..`Z.....QK.U..'....e.5..{.2/Z...d.yzjk;.....[..(...vz.AY.5;.V...I....

Chrome Cache Entry: 95

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5723
Entropy (8bit):	7.950822106896149
Encrypted:	false
SSDEEP:	96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ
MD5:	95382A6DAB40D5911185A921C53E6F6B
SHA1:	4229CB577571111D747021988AAC9DD6CD50634F
SHA-256:	E341D9055288DFCD7DD5FACAB6C915F6B7BCFFBF80F8B48468C7275B8CADA069
SHA-512:	58DFD1656F931BF14044A8D4D790CCD3369A33D42AEA35774BF4B0F2242173795C86FDE3280D74849BE492BBC50D4515F3F3985F93766559544DA37E9988BC03
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/doc.png
Preview:	.PNG........IHDR...<...<.....:..r..."IDATx^.k..Wy...Zk.}..s.a....x<.B....L..j......$%U?D.zQ....$m...$R...hU.(..`..-.4$.[..M......./..9g......Gk..B...%.y.....{....y.=2...S.~..D@"H...F..ZzD"...e...%.....D...Z.8F......K...-...^(..B....+.B..<.f\|...;..PE....G.Dt..H..0...........l.!......~....6.'..%....P..".~.{......=....b.P......hA.. i................U$,#.JK$.\c.o.O..u-.\)H.h...R...A.6.kVh....QUP.\l..^.......V&...(.q.........q....7.Aq3.`p...........&....`......\.........(.Y..!.`GvO.c...".=..4."Z.."._...~.".P..../..xv.>p........L....hq.bB../M.DZ@....feb~/(".A..........G.IsAJ...B.j@0).1w0Z..m....u.......w..........<.>P...n...v.q...8t....^r\..M.....^..i.\|_.n.....X..P;.d...ph..............C?.N..y...>r0..y.A.O......4.....$YpU%P.E..>.........;h.i....X.X...z.N._.%\{..s.-..\....~=..T..=Ok.]3\%.Q3....}....T.I{.R..@..~.D.t..k?FV....'"...........r..."5.%...\p...Z....G9.......{.J....R..J.?..{_B.cn>.A"..&..\|... X:STLU.......Se'(..V..BB....Et...f\|/..RT+..!...A...

Chrome Cache Entry: 96

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	198020
Entropy (8bit):	7.954760611313072
Encrypted:	false
SSDEEP:	3072:XSMRYs/fpdHP2vNH4WRCAc1oe7GV7leZX6MyNCur9GXpqrR9ee:XjYQdehdEtoeK3a0l8UR
MD5:	FE979FEB97D4AC7D44BCD547BC23D9A2
SHA1:	87E59BE9FF35C90906E9C1C0E7021D11C8F62E1A
SHA-256:	F63CA8AAB55D8EEDFB62CEE0C1891C0355F118DF5FF22713B0F45E6ACFD5F8A6
SHA-512:	8086205CE677F65A25ECF8FBBC97B40A158AE56028EC37A8D92944DA76DEA341513C1637014D18D095A34E2351BAE220889D022E3B6F7B08BE15DEA568CB5FA2
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/img/banner_new_01.png
Preview:	.PNG........IHDR.......8.....g.V.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...y......=..W.......&...6.cf$.j#$.W.W..Z+...7\|D8,.".....UX...v.V..Zk.#m.J...5.^.{H.........t.BU....../...&...(.....S..U.U..\|~.....cK.........j+k}............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4....

Chrome Cache Entry: 97

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	4.4474524453935675
Encrypted:	false
SSDEEP:	6:fn/uXO+QmFYWQd8+r7zsJD/+J2VaNOGRnaxB0AGRnahUukeRJAuCYn:fn/u+Bmcd7Pz8D/E6aNOPTdOuCY
MD5:	A2C60755E87EF3263B96826C0EC8619A
SHA1:	CCAFA9A974C4884A6E40FEE96B39C079A27258BC
SHA-256:	530B35D68E524FFE76F0DDD5D25E83A1EA709BB48C94A23BA41C12F9A97326B5
SHA-512:	90A61799EFD0152555D960201D37860582956F103356B51B9A103404219043A2A0DBD0A602D15306FE1000AFD865105779B26BEB4E143A2BDD53EC848E7A928C
Malicious:	false
Reputation:	low
URL:	https://api.db-ip.com/v2/free/self/
Preview:	{. "ipAddress": "8.46.123.33",. "continentCode": "NA",. "continentName": "North America",. "countryCode": "US",. "countryName": "United States",. "stateProvCode": "NY",. "stateProv": "New York",. "city": "New York".}

Chrome Cache Entry: 98

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11622
Entropy (8bit):	4.882633051728271
Encrypted:	false
SSDEEP:	192:oylK/i37tsmpFJg9Cxy2EJeG2x3rnhq9AjT7RM3I7rJczpAmlHFKK+fFDPM9VQJ7:lftzlnhx9MYXmOiFCFoV8VQxM
MD5:	D0057BA3BA52BF55A2E251CD40E43978
SHA1:	D69D834434FEEE1DDE288A62F26819F8036CA872
SHA-256:	BFF6093D0A9BB4B155AD4421357237C65D7CFA1E7907A254EE932BA1DAD640A0
SHA-512:	067F910F5D4A42D1C53C72B9E4EE1E2BC7C566153E30E7AC8CA2291730684D90EE5E5296564194710886E424DD44B5913B4E9DB2C7F562C44100A4E586E3DC5A
Malicious:	false
Reputation:	low
URL:	https://scary-wave.surge.sh/styles/style.css
Preview:	#html {. background: rgb(249, 241, 249);. background: linear-gradient(90deg, rgba(249, 241, 249, 1) 0%, rgba(234, 243, 253, 1) 35%, rgba(237, 251, 242, 1) 100%);.}..body {. background: inherit;. height: 100vh;. overflow: hidden;. overflow-y: scroll;.}...row {. height: 100%;.}..#left {.. height: 100vh;. padding: 40px 20px 0 0;. /* padding-bottom: 0; /. / overflow-y: scroll; /. position: sticky;. position: -webkit-sticky;. / ---- /. top: 0;. overflow-y: auto;. / ------- /.}...col-4 {. border-right: 1px solid #DEE3E9;.}..#right {. padding: 40px 20px;.}..#logo {. width: 70px;. / height: 12px; */.}.#utm-ticketId{. margin-bottom: 15px;.}..#show-hide-pass {. width: 28px;. right: 30px;. position: absolute;. cursor: pointer;. transform: scaleX(-1);.}..h1,.h2 {. line-height: 30px;. color: rgb(28, 30, 33);. font-family: Optimistic Display Bold, Helvetica, Arial, sans-serif;.. font-weight: 700;.

Chrome Cache Entry: 99

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	114767
Entropy (8bit):	7.9936922187201365
Encrypted:	true
SSDEEP:	3072:SOEFifYmNYKElSiLVN6MOzKqJdnJYJe4kiUh6sq:SIZYKEzmXZdJ8eYx
MD5:	03D39D5D071182ABA1B01BA2E859DE39
SHA1:	7BA8F968B03E92FD59A6C4F6CE5C8AA36A5D2B92
SHA-256:	A7FD65363687E512751D88F7850B61969427E8D3AA9A177946BCD4BC280B71AD
SHA-512:	5BF4D0B9FF650FF11C8FF69C409C45FBFD31BC3F8C4B55F665BEA8E11A42C412B9EA25B9974908AB9B670A22E80A445692A26B98535B84CB49299C37C22E16E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................iCCPICC profile..(.}.=H.@.._S."..3Hq.P.Z..q...B..Zu0....4$)...k........... ......"%..).......=...B..t.g....J'.R6..^.F."b.(.6.d9...u.._..<...c@....H.......M..O,.......,. .#.U..8.[,.L...Eb...j.....O.G5.\|!..y..^...=...yce..4G..". C.....A.V...i.O..#-.L..\e0r,...J..........^R8......(....u..>v....\|.......f>I.w...0..\\w4u......L.RZR..P(..g.M9`..._.zk.....PW......+R.....{..L.....r. @......bKGD..............pHYs.................tIME.....-.Pc.0....tEXtComment.Created with GIMPW..... .IDATx..i.%.q%x<"2........@...8ZF....Lw.....}k.....nY.%.".. .@.....w.....dd......y.b.n.F...?~....Y".....$ ........v.....0...A......,``!X..C.....,YH.Xr.[.d8......2..,.."....`,....f... ....w.&v.....!".../.]_.-.!...!....p.q..1..i.~...vSr.s.....f.7..j...). ......}....>....1....Wb...{......A3.7.`g>O.5..x\|...7.z..~..+.k.w._............k$..x.pN..ul.W3....[3......@.\...o...:\|...p.a}Mm....G.Z..u.x6.v.....;._#.?..=k-..H.8....,C..^..]t...A.`.Zc.{...;.C

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 20:12:01.997394085 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:01.997488022 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:01.997567892 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.001281023 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.001302958 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.006330967 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.006345034 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.008599997 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.011070013 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.011080980 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.011228085 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.013365984 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.013422012 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.018260956 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.060168028 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.098608971 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.098623037 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.098711014 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.102447987 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.102497101 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.107352018 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.107511044 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.107522964 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.110816956 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.111922979 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.111942053 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.112011909 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.114819050 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.114948988 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.119801998 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.160149097 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.199666977 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.199692011 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.199811935 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.203679085 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.203773022 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.208833933 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.208863974 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.211328983 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.215826988 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.215838909 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.216161966 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.218511105 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.218713045 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.223772049 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.268160105 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.304570913 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.308527946 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.309910059 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.309979916 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.312767982 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.313175917 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.313565969 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.315076113 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.317487955 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.317536116 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.317564964 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.317585945 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.319678068 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.319849014 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.320594072 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.325342894 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.406651020 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.409811974 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.409854889 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.411880970 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.413604021 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.413758993 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.415467978 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.417136908 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.418289900 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.418426037 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.418476105 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.418642044 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.420641899 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.420762062 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.425772905 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.507646084 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.510099888 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.510204077 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.511178970 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.512168884 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.514739990 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.516818047 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.517028093 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.517627001 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.517663956 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.517718077 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.517718077 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.519982100 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.520371914 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.524842978 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.572134972 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.607773066 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.610726118 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.610866070 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.611939907 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.613444090 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.613890886 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.616111040 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.616987944 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.618346930 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.618721008 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.618774891 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.618787050 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.618905067 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.620927095 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.620966911 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.626027107 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.708801985 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.712536097 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.713696957 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.713712931 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.713779926 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.716443062 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.716538906 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.717890978 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.717989922 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.717993975 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.718084097 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.720215082 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.720277071 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.721482038 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.725301981 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.808727026 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.812501907 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.813939095 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.816606045 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.818507910 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.818516016 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.818583965 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.820753098 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.820919991 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.825541019 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.868226051 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.902992010 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.906481028 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.911062956 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.911166906 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.911479950 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.913475037 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.915482998 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.917632103 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.924797058 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.925693035 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:02.925838947 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.928467989 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.928808928 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:02.951158047 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.012635946 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.016269922 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.016427040 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.016592026 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.018770933 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.026711941 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.039875984 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.041984081 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.042056084 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.042179108 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.042624950 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.044342041 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.044517994 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.049370050 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.096247911 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.118079901 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.118087053 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.118202925 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.121726990 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.121830940 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.126893997 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.141844034 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.141860962 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.141966105 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.149806023 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.149970055 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.155008078 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.206520081 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.211246967 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.225209951 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.225229025 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.225311995 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.228049994 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.228072882 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.233314037 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.249238968 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.249412060 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.249497890 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.252082109 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.252222061 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.260386944 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.310906887 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.314049959 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.326026917 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.326237917 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.326299906 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.331935883 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.332500935 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.337304115 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.352672100 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.352725983 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.352787971 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.357580900 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.357902050 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.362731934 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.415222883 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.419342995 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.433103085 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.433150053 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.433229923 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.435736895 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.435826063 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.440859079 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.456696987 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.456716061 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.456768990 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.459321022 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.459409952 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.464660883 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.522716999 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.526429892 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.533006907 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.533175945 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.533248901 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.536222935 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.536853075 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.542577028 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.558315992 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.558325052 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.558386087 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.561080933 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.561152935 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.566179037 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.597187996 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 13, 2024 20:12:03.630959034 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.634448051 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.635756969 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.635840893 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.635863066 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.635942936 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.638230085 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.638282061 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.643208027 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.657922029 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.658082008 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.658139944 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.660818100 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.660909891 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.666342974 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.732820988 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.736309052 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.737092018 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.737154007 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.737418890 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.737474918 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.739881992 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.739908934 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.744765043 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.761039019 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.761183977 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.761240005 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.763729095 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.763833046 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.769825935 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.833973885 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.836921930 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.836939096 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.836977005 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.838042021 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.840131044 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.840876102 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.845473051 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.861884117 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.861938000 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.862034082 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.862186909 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.865127087 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.865209103 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.870177984 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.953722000 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.957123041 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.965456963 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.965493917 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.965677977 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.968096972 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.968125105 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.968178988 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.968570948 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.968600035 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.971101999 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.971191883 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:03.973766088 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:03.976172924 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.054187059 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.058195114 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.065809965 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.066065073 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.066123962 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.067843914 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.068104982 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.068157911 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.069159031 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.069195032 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.071230888 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.071317911 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.074543953 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.077956915 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.156765938 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.160748959 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.166023970 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.169092894 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.171711922 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.171797037 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.173023939 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.173121929 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.176273108 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.176810026 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.181766987 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.224186897 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.254745007 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.258115053 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.259401083 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.261609077 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.264511108 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.266458988 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.270680904 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.273408890 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.275468111 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.275594950 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.275779009 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.275784016 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.275835037 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.278347969 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.279129028 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.283767939 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.325104952 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.358717918 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.359395981 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.359517097 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.363240004 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.363403082 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.368240118 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.368454933 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.372833967 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.375684977 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.378755093 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.378880978 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.379224062 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.381422043 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.381572962 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.386780977 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.463243008 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.463252068 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.463557005 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.467003107 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.467876911 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.472819090 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.477041960 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.478575945 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.478651047 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.478997946 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.479351044 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.481662989 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.482399940 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.486565113 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.528197050 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.567200899 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.567225933 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.567267895 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.576178074 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.576380968 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.576442003 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.579859972 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.579873085 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.579878092 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.580003023 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.614718914 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.614778996 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.616558075 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.616928101 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.619643927 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.621628046 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.621860981 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.656002998 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.660419941 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.708291054 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.711781979 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.711788893 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.711801052 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.711935043 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.713936090 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.713974953 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.714029074 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.714034081 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.714143038 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.717447996 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.717508078 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.718796968 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.722585917 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.722793102 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.723637104 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.754081964 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.757726908 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.800529957 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.804387093 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.816873074 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.816880941 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.816926003 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.819916964 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.820096016 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.825128078 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.851850033 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.862862110 CEST	49671	443	192.168.2.8	204.79.197.203
Oct 13, 2024 20:12:04.894288063 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.899122953 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.905711889 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.905810118 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:04.918540955 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.918587923 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:12:04.918689013 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:12:05.222351074 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 13, 2024 20:12:05.847134113 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 13, 2024 20:12:06.175272942 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 13, 2024 20:12:12.950717926 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:12.950750113 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:12.950845957 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:12.951308012 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:12.951339960 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:12.951417923 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:12.951581001 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:12.951597929 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:12.951975107 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:12.951992035 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:13.234097004 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 13, 2024 20:12:14.374855995 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.375407934 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.375421047 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.375958920 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.376292944 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.376313925 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.377388000 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.377445936 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.379272938 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.379358053 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.379466057 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.379539013 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.381088972 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.381097078 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.381371021 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.381586075 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.421190977 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.421192884 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.421216011 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.466604948 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.678942919 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.678966045 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.678972960 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.678997993 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.679019928 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.679122925 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.679137945 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.679166079 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.679204941 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.703250885 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.703274965 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.703309059 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.703387022 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.703397989 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.703425884 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.745529890 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.756865025 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.758528948 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.758567095 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.759041071 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.759105921 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.759110928 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.771307945 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.771330118 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.771388054 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.771403074 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.771435022 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.771449089 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.794550896 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.794648886 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.794658899 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.795903921 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.795922041 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.795967102 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.795974016 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.796006918 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.797365904 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.797385931 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.797444105 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.797454119 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.803414106 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.837640047 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.839937925 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.839957952 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.840006113 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.840017080 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.840069056 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.840086937 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.887095928 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.887120962 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.887178898 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.887217045 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.887247086 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.887732029 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.887909889 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.887928009 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.887960911 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.887965918 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.887996912 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.888009071 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.888818979 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.888834953 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.888885975 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.888891935 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.888922930 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.888937950 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.889785051 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.889801025 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.889858961 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.889864922 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.889916897 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.890923023 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.890938997 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.890980005 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.890985966 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.891017914 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.891035080 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.891717911 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.891731977 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.891784906 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.891791105 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.891844988 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.891865969 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.939975023 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.939999104 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.940063000 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.940077066 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.940124989 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.940152884 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.940180063 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.940188885 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.940232038 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.940241098 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.940260887 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.940279007 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.940291882 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.940321922 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.956460953 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.956480026 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.956569910 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.956577063 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.956620932 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.979680061 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.979701042 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.979742050 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.979789972 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.979804039 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.979830980 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:14.979835987 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.979873896 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.980602026 CEST	49711	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:14.980618000 CEST	443	49711	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.018120050 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.018131971 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.018167019 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.018192053 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.018276930 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.018276930 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.018300056 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.018362045 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.019577026 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.019627094 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.019680977 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.019687891 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.019706964 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.061027050 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.087236881 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.087305069 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.087373972 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.087388039 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.087452888 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.108592033 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.108642101 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.108745098 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.108760118 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.108783007 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.109328032 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.110188961 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.110230923 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.110269070 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.110279083 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.110340118 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.110340118 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.155064106 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.155114889 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.155184031 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.155209064 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.155226946 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.155257940 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.177917957 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.177967072 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.178060055 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.178078890 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.178097010 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.178185940 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.199179888 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.199227095 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.199305058 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.199320078 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.199404955 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.199404955 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.200176954 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.200218916 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.200293064 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.200299978 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.200320959 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.200350046 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.200423956 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.200431108 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.200552940 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.200890064 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.200900078 CEST	443	49712	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.200938940 CEST	49712	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.206782103 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.206815004 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.207209110 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.207216024 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.207251072 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.207273960 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.207531929 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.207545996 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.207693100 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.207703114 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.349421978 CEST	49719	443	192.168.2.8	142.250.186.68
Oct 13, 2024 20:12:15.349466085 CEST	443	49719	142.250.186.68	192.168.2.8
Oct 13, 2024 20:12:15.349555969 CEST	49719	443	192.168.2.8	142.250.186.68
Oct 13, 2024 20:12:15.349776030 CEST	49719	443	192.168.2.8	142.250.186.68
Oct 13, 2024 20:12:15.349790096 CEST	443	49719	142.250.186.68	192.168.2.8
Oct 13, 2024 20:12:15.449326038 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 13, 2024 20:12:15.456901073 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.457798958 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.457808971 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.458169937 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.459546089 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.459611893 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.459666014 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.502357006 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:15.502394915 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:15.502480984 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:15.504333973 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:15.504368067 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:15.507402897 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.513468981 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.695107937 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.695128918 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.695136070 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.695166111 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.695179939 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.695189953 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.695210934 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.695240021 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.695352077 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.695398092 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.697242022 CEST	49715	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.697262049 CEST	443	49715	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.778450012 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 13, 2024 20:12:15.857650042 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 13, 2024 20:12:15.905939102 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.905996084 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.906136990 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.906153917 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.906308889 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.906316996 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.906642914 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.906997919 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.907062054 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.907156944 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.907186031 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.907258987 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.907618046 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.907670975 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.907737970 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.907748938 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:15.947407007 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:15.947410107 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.002597094 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.002655029 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.002731085 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.003271103 CEST	49722	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.003282070 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.003345966 CEST	49722	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.004184961 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.004231930 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.004250050 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.004323959 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.004380941 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.004539013 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.004559040 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.004720926 CEST	49722	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.004731894 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.004786968 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.005104065 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.005124092 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.005151987 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.005162001 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.006351948 CEST	443	49719	142.250.186.68	192.168.2.8
Oct 13, 2024 20:12:16.007266045 CEST	49719	443	192.168.2.8	142.250.186.68
Oct 13, 2024 20:12:16.007282019 CEST	443	49719	142.250.186.68	192.168.2.8
Oct 13, 2024 20:12:16.008346081 CEST	443	49719	142.250.186.68	192.168.2.8
Oct 13, 2024 20:12:16.008414030 CEST	49719	443	192.168.2.8	142.250.186.68
Oct 13, 2024 20:12:16.009828091 CEST	49719	443	192.168.2.8	142.250.186.68
Oct 13, 2024 20:12:16.009890079 CEST	443	49719	142.250.186.68	192.168.2.8
Oct 13, 2024 20:12:16.059762955 CEST	49719	443	192.168.2.8	142.250.186.68
Oct 13, 2024 20:12:16.059833050 CEST	443	49719	142.250.186.68	192.168.2.8
Oct 13, 2024 20:12:16.112266064 CEST	49719	443	192.168.2.8	142.250.186.68
Oct 13, 2024 20:12:16.158584118 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.158617020 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.158638000 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.158680916 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.158694029 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.158714056 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.158746958 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.158768892 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.165551901 CEST	49718	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.165575027 CEST	443	49718	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.184683084 CEST	49726	443	192.168.2.8	104.26.4.15
Oct 13, 2024 20:12:16.184720993 CEST	443	49726	104.26.4.15	192.168.2.8
Oct 13, 2024 20:12:16.184798002 CEST	49726	443	192.168.2.8	104.26.4.15
Oct 13, 2024 20:12:16.185010910 CEST	49726	443	192.168.2.8	104.26.4.15
Oct 13, 2024 20:12:16.185024023 CEST	443	49726	104.26.4.15	192.168.2.8
Oct 13, 2024 20:12:16.213097095 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.213115931 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.213165998 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.213219881 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.213227987 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.213274002 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.213274002 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.217608929 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.217669964 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.217685938 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.217694998 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.217758894 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.218096972 CEST	49717	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.218102932 CEST	443	49717	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.239859104 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:16.239928961 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:16.251085997 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:16.251108885 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:16.251422882 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:16.293123960 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:16.325016975 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:16.371398926 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:16.418931007 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.418968916 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.419090986 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.419100046 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.419178009 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.419229984 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.419419050 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.419431925 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.419622898 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.419642925 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.567308903 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:16.567389965 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:16.567449093 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:16.567517996 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:16.567536116 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:16.567543030 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:16.567548037 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:16.601995945 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:16.602032900 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:16.602121115 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:16.602448940 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:16.602463007 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:16.690603018 CEST	443	49726	104.26.4.15	192.168.2.8
Oct 13, 2024 20:12:16.691710949 CEST	49726	443	192.168.2.8	104.26.4.15
Oct 13, 2024 20:12:16.691730022 CEST	443	49726	104.26.4.15	192.168.2.8
Oct 13, 2024 20:12:16.692507982 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.692728043 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.692791939 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.692812920 CEST	443	49726	104.26.4.15	192.168.2.8
Oct 13, 2024 20:12:16.692877054 CEST	49726	443	192.168.2.8	104.26.4.15
Oct 13, 2024 20:12:16.693928957 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.694015980 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.694787025 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.694864988 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.695209980 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.695228100 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.697767973 CEST	49726	443	192.168.2.8	104.26.4.15
Oct 13, 2024 20:12:16.697843075 CEST	443	49726	104.26.4.15	192.168.2.8
Oct 13, 2024 20:12:16.697978020 CEST	49726	443	192.168.2.8	104.26.4.15
Oct 13, 2024 20:12:16.697983980 CEST	443	49726	104.26.4.15	192.168.2.8
Oct 13, 2024 20:12:16.704956055 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.705169916 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.705197096 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.705576897 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.705883026 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.705950022 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.706079960 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.717967033 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.718251944 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.718264103 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.718713045 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.718894958 CEST	49722	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.718904972 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.719248056 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.719353914 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.719439983 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.719558954 CEST	49722	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.719623089 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.719880104 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.719968081 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.720128059 CEST	49722	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.720284939 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.720292091 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.737142086 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.747406960 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.752662897 CEST	49726	443	192.168.2.8	104.26.4.15
Oct 13, 2024 20:12:16.767402887 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.769906998 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.893851995 CEST	443	49726	104.26.4.15	192.168.2.8
Oct 13, 2024 20:12:16.893950939 CEST	443	49726	104.26.4.15	192.168.2.8
Oct 13, 2024 20:12:16.894042969 CEST	49726	443	192.168.2.8	104.26.4.15
Oct 13, 2024 20:12:16.896749020 CEST	49726	443	192.168.2.8	104.26.4.15
Oct 13, 2024 20:12:16.896755934 CEST	443	49726	104.26.4.15	192.168.2.8
Oct 13, 2024 20:12:16.921185017 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:16.921207905 CEST	443	49731	104.26.5.15	192.168.2.8
Oct 13, 2024 20:12:16.921345949 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:16.921793938 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:16.921807051 CEST	443	49731	104.26.5.15	192.168.2.8
Oct 13, 2024 20:12:16.980046988 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.980076075 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.980164051 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.980206013 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.981206894 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.981295109 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.982347012 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.982408047 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.982482910 CEST	49722	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:16.982498884 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.982775927 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:16.984657049 CEST	49722	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.020319939 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.020349979 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.020359993 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.020375967 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.020405054 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.020431042 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.020505905 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.020541906 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.020569086 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.041095972 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.041124105 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.041189909 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.041220903 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.041255951 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.041291952 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.054363966 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.054418087 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.054440975 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.054461002 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.054481030 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.054497957 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.054517984 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.054546118 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.054547071 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.054547071 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.054577112 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.054594040 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.077761889 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.077783108 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.077970028 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.077991009 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.078130960 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.089234114 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.089296103 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.089343071 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.089371920 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.089399099 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.128998995 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.129034996 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.129209995 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.129236937 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.130594969 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.130615950 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.130688906 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.130698919 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.130734921 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.132384062 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.132410049 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.132467985 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.132477045 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.132500887 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.146275997 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.146302938 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.146578074 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.146595001 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.147285938 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.150908947 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.154525042 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.169177055 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.169195890 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.169470072 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.169487953 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.171088934 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.171112061 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.171209097 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.171216011 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.171247959 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.172878027 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.172900915 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.172946930 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.172956944 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.173008919 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.173578024 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.178221941 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.178248882 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.178416014 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.178416014 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.178446054 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.179281950 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.191865921 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.193716049 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.193805933 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.193823099 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.193885088 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.193957090 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.210350990 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.217870951 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.217897892 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.218003988 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.218014956 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.218970060 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.218996048 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.219083071 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.219089985 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.219666004 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.219680071 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.219779015 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.219786882 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.221194029 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.221215010 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.221255064 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.221261978 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.221295118 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.221323013 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.222148895 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.222172022 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.222215891 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.222223997 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.222230911 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.222244978 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.222274065 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.222285032 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.222305059 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.222348928 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.283762932 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.283781052 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.284229040 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.284288883 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.284295082 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.284809113 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.284857988 CEST	443	49721	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.284885883 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.284917116 CEST	49721	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.284995079 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.285011053 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.285064936 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.285518885 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.285582066 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.320121050 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.320249081 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.333146095 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.333254099 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.335346937 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.335402966 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.335714102 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.335730076 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.340778112 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.340854883 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.341023922 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.341325998 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.341375113 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.341574907 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.341856956 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.341866016 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.341921091 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.342609882 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.343310118 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.343339920 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.344734907 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.344750881 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.345500946 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.345520973 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.364177942 CEST	49722	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.364255905 CEST	443	49722	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.366365910 CEST	49723	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.366399050 CEST	443	49723	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.367007971 CEST	49724	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.367028952 CEST	443	49724	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.371097088 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.371117115 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.371196985 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.373298883 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.373352051 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.373506069 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.373872042 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.373882055 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.374386072 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.374411106 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.377140999 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:17.377208948 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:17.378526926 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:17.378534079 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:17.378778934 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:17.379811049 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:17.382642984 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.383378029 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.389314890 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.389342070 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.389476061 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.389729977 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.389753103 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.391958952 CEST	49738	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.391968966 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.392096043 CEST	49738	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.392225027 CEST	49738	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.392251015 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.393510103 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.393547058 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.393821001 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.393861055 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.393872023 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.416974068 CEST	443	49731	104.26.5.15	192.168.2.8
Oct 13, 2024 20:12:17.427407026 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:17.437684059 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:17.437700987 CEST	443	49731	104.26.5.15	192.168.2.8
Oct 13, 2024 20:12:17.439002037 CEST	443	49731	104.26.5.15	192.168.2.8
Oct 13, 2024 20:12:17.439203978 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:17.439596891 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:17.439667940 CEST	443	49731	104.26.5.15	192.168.2.8
Oct 13, 2024 20:12:17.439763069 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:17.450697899 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.450752020 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.450901985 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.451375961 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.451396942 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.484694004 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:17.484713078 CEST	443	49731	104.26.5.15	192.168.2.8
Oct 13, 2024 20:12:17.502834082 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.502856016 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.502862930 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.502929926 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.502996922 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.503072023 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.503341913 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.503427982 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.503624916 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.504064083 CEST	49729	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.504101992 CEST	443	49729	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.505696058 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.505728006 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.505737066 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.505791903 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.505809069 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.505872965 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.506023884 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 13, 2024 20:12:17.506418943 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 13, 2024 20:12:17.528327942 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:17.575751066 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.575762987 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.575798988 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.575809956 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.575874090 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.575875044 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.575882912 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.575942039 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.576287985 CEST	49728	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:17.576297998 CEST	443	49728	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:17.582365990 CEST	443	49731	104.26.5.15	192.168.2.8
Oct 13, 2024 20:12:17.582458973 CEST	443	49731	104.26.5.15	192.168.2.8
Oct 13, 2024 20:12:17.582734108 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:17.583817959 CEST	49731	443	192.168.2.8	104.26.5.15
Oct 13, 2024 20:12:17.583823919 CEST	443	49731	104.26.5.15	192.168.2.8
Oct 13, 2024 20:12:17.712876081 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:17.712949991 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:17.713004112 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:17.714538097 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:17.714556932 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:17.714564085 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 13, 2024 20:12:17.714577913 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 13, 2024 20:12:18.042109966 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.042429924 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.042445898 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.042820930 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.043575048 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.043662071 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.044100046 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.044867992 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.045062065 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.045090914 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.045492887 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.045607090 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.045787096 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.045856953 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.045907021 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.045929909 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.046010971 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.047130108 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.047240973 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.047528028 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.047596931 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.047610044 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.065136909 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.065435886 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.065454960 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.066879988 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.066963911 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.067356110 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.067430019 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.067440987 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.067466021 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.088255882 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.088274956 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.091403961 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.091406107 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.102900028 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.103153944 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.103167057 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.103535891 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.103878975 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.103939056 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.104027033 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.113820076 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.114054918 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.114083052 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.115197897 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.115264893 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.115598917 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.115685940 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.115736008 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.115748882 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.117638111 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.118084908 CEST	49738	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.118094921 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.118441105 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.118768930 CEST	49738	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.118834019 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.119028091 CEST	49738	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.119026899 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.119049072 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.123963118 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.124226093 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.124257088 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.125709057 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.125790119 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.126194000 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.126270056 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.126279116 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.136485100 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.151403904 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.159440041 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.163407087 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.168299913 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.168315887 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.168332100 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.177572012 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.177850008 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.177885056 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.178951025 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.179034948 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.179400921 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.179469109 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.179541111 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.179549932 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.214515924 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.231738091 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.283062935 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.301964998 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.301987886 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.302058935 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.302109003 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.302109003 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.303409100 CEST	49736	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.303431988 CEST	443	49736	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.306952000 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.306991100 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.307060003 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.307656050 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.307668924 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.323688984 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.323719025 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.342227936 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.342258930 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.342315912 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.342333078 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.342453957 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.342540979 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.343808889 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.343832016 CEST	443	49737	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.343844891 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.343879938 CEST	49737	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.348206043 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.348229885 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.348243952 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.348490953 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.348506927 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.348556995 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.350071907 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.350097895 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.350106001 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.350126028 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.350131989 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.350138903 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.350150108 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.350171089 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.350202084 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.350251913 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.353415012 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.353425026 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.353442907 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.353497028 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.353523970 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.353579998 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.356399059 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.356425047 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.356432915 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.356470108 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.356486082 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.356503963 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.356940985 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.356986046 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.358073950 CEST	49735	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.358084917 CEST	443	49735	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.359164953 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.359189034 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.359239101 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.359249115 CEST	49738	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.359318972 CEST	49738	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.362761974 CEST	49738	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.362771988 CEST	443	49738	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.367899895 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.367924929 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.368016005 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.368033886 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.368757010 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.368798018 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.368819952 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.368829012 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.368838072 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.368859053 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.368896008 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.369601011 CEST	49733	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.369616985 CEST	443	49733	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.371694088 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.371716022 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.371788979 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.371809006 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.371918917 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.373123884 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.373146057 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.373213053 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.373248100 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.373274088 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.376658916 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.376707077 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.376775026 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.377063036 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.377077103 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.380515099 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.380557060 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.380650043 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.381350994 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.381366014 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.417915106 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.433689117 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.433723927 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.433733940 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.433753014 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.433762074 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.433768034 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.433793068 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.433811903 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.433824062 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.433845997 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.433881044 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.433886051 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.434053898 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.439506054 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.439536095 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.439651966 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.439672947 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.439713955 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.442121983 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.442137957 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.442174911 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.442205906 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.442218065 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.442238092 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.442272902 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.442347050 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.460102081 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.460129976 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.460225105 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.460225105 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.460257053 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.460300922 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.460545063 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.460568905 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.460639954 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.460639954 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.460659027 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.460692883 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.460711956 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.460719109 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.460758924 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.460787058 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.460803032 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.460824966 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.461896896 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.461925983 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.461966991 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.461985111 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.462004900 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.462018013 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.462043047 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.462059975 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.462066889 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.462074041 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.462104082 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.463737965 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.463742018 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.463763952 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.463764906 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.463830948 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.463843107 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.463884115 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.463884115 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.463884115 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.463896036 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.463918924 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.463947058 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.490386009 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.490415096 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.490422964 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.490436077 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.490444899 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.490473986 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.490482092 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.490504980 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.490529060 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.490551949 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.501923084 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.502057076 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.502079010 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.515054941 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.515068054 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.515156031 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.515182972 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.515217066 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.516835928 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.516885996 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.516916990 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.516922951 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.516956091 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.527641058 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.527686119 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.527729988 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.527746916 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.527775049 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.527796030 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.531208038 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.531254053 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.531286955 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.531315088 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.531333923 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.531337023 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.531352043 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.531388044 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.531721115 CEST	49732	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.531735897 CEST	443	49732	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.536426067 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.536458969 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.536529064 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.536787987 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.536803007 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.543411970 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.549556971 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.549587011 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.549663067 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.549696922 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.549720049 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.549746990 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.550220966 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.550239086 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.550297022 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.550303936 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.550354958 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.550354958 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.551429033 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.551455975 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.551537991 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.551538944 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.551548958 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.551592112 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.552417994 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.552437067 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.552500010 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.552508116 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.552547932 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.552548885 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.553484917 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.553507090 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.553549051 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.553551912 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.553570986 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.553575993 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.553678989 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.553880930 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.553894043 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.553915024 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.553965092 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.554898977 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.554924011 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.555027962 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.555027962 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.555035114 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.555073023 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.555901051 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.555931091 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.555989027 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.555989027 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.555996895 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.556039095 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.558893919 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.571626902 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.571703911 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.571715117 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.571743011 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.571758986 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.571789980 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.572276115 CEST	49739	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.572294950 CEST	443	49739	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.577756882 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.577785969 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.577845097 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.577862024 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.577909946 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.577909946 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.598233938 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.598253012 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.598318100 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.598342896 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.598402023 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.609200001 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.609216928 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.609239101 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.609275103 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.609311104 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.609332085 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.609354019 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.609736919 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.609756947 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.609796047 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.609808922 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.609828949 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.609870911 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.611562014 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.611592054 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.611630917 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.611639977 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.611666918 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.611691952 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.618824005 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.618853092 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.618905067 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.618916988 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.618957043 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.618957043 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.639189959 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.639205933 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.639244080 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.639281988 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.639296055 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.639322042 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.639339924 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.639339924 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.639359951 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.640166998 CEST	49734	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.640178919 CEST	443	49734	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.647665024 CEST	49746	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.647706985 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.647800922 CEST	49746	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.648072958 CEST	49746	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.648088932 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.655164957 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.655184031 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.655283928 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.655308962 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.655354023 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.666270971 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.666301966 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.666464090 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.666611910 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.666630030 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.703341961 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.703358889 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.703413010 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.703445911 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.703459024 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.703483105 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.704384089 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.704401970 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.704458952 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.704474926 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.704519987 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.705130100 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.705151081 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.705214024 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.705229044 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.705436945 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.705866098 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.705883980 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.705933094 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.705944061 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.705969095 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.705984116 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.707612038 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.707631111 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.707700014 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.707719088 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.707767010 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.725598097 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.725662947 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.725684881 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.725703955 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.725792885 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.725972891 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.725991964 CEST	443	49740	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:18.725997925 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:18.726047039 CEST	49740	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.002851963 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.003273964 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.003293037 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.004153967 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.004579067 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.004656076 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.004820108 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.051410913 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.064692974 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.066061974 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.066092968 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.067142010 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.067276001 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.073560953 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.074316978 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.074495077 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.074645042 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.074667931 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.074856043 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.074865103 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.075040102 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.075930119 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.076008081 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.076046944 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.120800972 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.121442080 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.121471882 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.244223118 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.244241953 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.244311094 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.244324923 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.244774103 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.245333910 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.245486021 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.245486975 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.245502949 CEST	443	49742	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.245563984 CEST	49742	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.259803057 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.263498068 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.263530970 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.264673948 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.264755964 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.265083075 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.265151978 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.265219927 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.297758102 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.297780037 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.297872066 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.297890902 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.298278093 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.298394918 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.299000025 CEST	49744	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.299019098 CEST	443	49744	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.308238029 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.308249950 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.336587906 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.339747906 CEST	49746	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.339761972 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.340121984 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.343141079 CEST	49746	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.343209028 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.343306065 CEST	49746	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.355113983 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.361354113 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.369369030 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.369383097 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.370476007 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.370615959 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.371020079 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.371078968 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.371114016 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.376502991 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.376529932 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.376538992 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.376569986 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.376606941 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.376633883 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.376668930 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.376688004 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.376718998 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.383408070 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.400135994 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.400155067 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.400233984 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.400264025 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.401057005 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.401133060 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.401134014 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.401191950 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.401886940 CEST	49743	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.401901007 CEST	443	49743	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.411482096 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.417643070 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.417660952 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.464601994 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.569155931 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.569184065 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.569190979 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.569205046 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.569211960 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.569215059 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.569343090 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.569376945 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.569437027 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.572205067 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.572231054 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.572263002 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.572429895 CEST	49746	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.572429895 CEST	49746	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.572460890 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.573518038 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.577363014 CEST	49746	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.594769955 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.594783068 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.594815969 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.594873905 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.594913006 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.594942093 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.594948053 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.594995022 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.596391916 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.596457958 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.596482038 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.596527100 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.596537113 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.596554041 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.596751928 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.596772909 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.596849918 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.663269997 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.663296938 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.663336039 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.663433075 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.663499117 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.663537025 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.685303926 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.685317039 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.685365915 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.685403109 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.685545921 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.685560942 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.685610056 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.688767910 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.688795090 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.688859940 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.688868999 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.688925982 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.690397978 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.690417051 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.690489054 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.690505028 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.724186897 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.732852936 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.732883930 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.733006954 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.733055115 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.733120918 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.733462095 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.733479023 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.733556032 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.733566999 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.733584881 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.733613014 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.758145094 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.758240938 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.758244038 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.758261919 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.758316040 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.760365963 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.768361092 CEST	49746	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.768383980 CEST	443	49746	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.774055004 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.774102926 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.774199009 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.774221897 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.774267912 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.774267912 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.775363922 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.775445938 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.775454044 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.775484085 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.775516987 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.775547981 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.777123928 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.777139902 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.777194023 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.777210951 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.777259111 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.837235928 CEST	49745	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.837291002 CEST	443	49745	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.843234062 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.843256950 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.843333006 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.843364954 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.843409061 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.843409061 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.863823891 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.863842964 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.863945961 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.863960028 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.864005089 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.864814997 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.864830017 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.865062952 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.865072012 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.865148067 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.865730047 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.865746021 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.865802050 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.865809917 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.865855932 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.865855932 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.866734028 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.866775036 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.866813898 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.866821051 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.866904020 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.866904974 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.867680073 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.867723942 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.867778063 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.867778063 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.867790937 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.867835045 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.870791912 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.912434101 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.912456036 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.912580967 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.912606001 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.912657022 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.939836979 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.939860106 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.939965963 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.939981937 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.940033913 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.940707922 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.940722942 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.940785885 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.940805912 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.940850973 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.952894926 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.952950954 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.952970982 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:19.952980042 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:19.953039885 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:20.036267996 CEST	49747	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:20.036307096 CEST	443	49747	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:20.082947016 CEST	49752	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:20.082988977 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:20.083065987 CEST	49752	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:20.085515976 CEST	49752	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:20.085534096 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:20.805421114 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:20.812155008 CEST	49752	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:20.812170029 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:20.812582016 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:20.814256907 CEST	49752	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:20.814328909 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:20.814810038 CEST	49752	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:20.859412909 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:21.047403097 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:21.047431946 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:21.047492981 CEST	49752	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:21.047506094 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:21.047521114 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:21.047580957 CEST	49752	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:21.066524982 CEST	49752	443	192.168.2.8	138.197.235.123
Oct 13, 2024 20:12:21.066545963 CEST	443	49752	138.197.235.123	192.168.2.8
Oct 13, 2024 20:12:25.909574986 CEST	443	49719	142.250.186.68	192.168.2.8
Oct 13, 2024 20:12:25.909646988 CEST	443	49719	142.250.186.68	192.168.2.8
Oct 13, 2024 20:12:25.909836054 CEST	49719	443	192.168.2.8	142.250.186.68
Oct 13, 2024 20:12:27.280764103 CEST	49719	443	192.168.2.8	142.250.186.68
Oct 13, 2024 20:12:27.280800104 CEST	443	49719	142.250.186.68	192.168.2.8
Oct 13, 2024 20:12:56.167851925 CEST	49703	80	192.168.2.8	199.232.214.172
Oct 13, 2024 20:12:56.173249960 CEST	80	49703	199.232.214.172	192.168.2.8
Oct 13, 2024 20:12:56.173324108 CEST	49703	80	192.168.2.8	199.232.214.172
Oct 13, 2024 20:13:03.536083937 CEST	52372	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:13:03.541044950 CEST	53	52372	1.1.1.1	192.168.2.8
Oct 13, 2024 20:13:03.541162968 CEST	52372	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:13:03.541202068 CEST	52372	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:13:03.546103001 CEST	53	52372	1.1.1.1	192.168.2.8
Oct 13, 2024 20:13:04.005156994 CEST	53	52372	1.1.1.1	192.168.2.8
Oct 13, 2024 20:13:04.005806923 CEST	52372	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:13:04.011048079 CEST	53	52372	1.1.1.1	192.168.2.8
Oct 13, 2024 20:13:04.011331081 CEST	52372	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:13:15.561484098 CEST	52374	443	192.168.2.8	142.250.185.196
Oct 13, 2024 20:13:15.561558008 CEST	443	52374	142.250.185.196	192.168.2.8
Oct 13, 2024 20:13:15.561794043 CEST	52374	443	192.168.2.8	142.250.185.196
Oct 13, 2024 20:13:15.561999083 CEST	52374	443	192.168.2.8	142.250.185.196
Oct 13, 2024 20:13:15.562010050 CEST	443	52374	142.250.185.196	192.168.2.8
Oct 13, 2024 20:13:16.597383976 CEST	443	52374	142.250.185.196	192.168.2.8
Oct 13, 2024 20:13:16.597764015 CEST	52374	443	192.168.2.8	142.250.185.196
Oct 13, 2024 20:13:16.597837925 CEST	443	52374	142.250.185.196	192.168.2.8
Oct 13, 2024 20:13:16.598246098 CEST	443	52374	142.250.185.196	192.168.2.8
Oct 13, 2024 20:13:16.598582029 CEST	52374	443	192.168.2.8	142.250.185.196
Oct 13, 2024 20:13:16.598647118 CEST	443	52374	142.250.185.196	192.168.2.8
Oct 13, 2024 20:13:16.652144909 CEST	52374	443	192.168.2.8	142.250.185.196
Oct 13, 2024 20:13:26.132191896 CEST	443	52374	142.250.185.196	192.168.2.8
Oct 13, 2024 20:13:26.132271051 CEST	443	52374	142.250.185.196	192.168.2.8
Oct 13, 2024 20:13:26.132364035 CEST	52374	443	192.168.2.8	142.250.185.196
Oct 13, 2024 20:13:27.280987024 CEST	52374	443	192.168.2.8	142.250.185.196
Oct 13, 2024 20:13:27.281009912 CEST	443	52374	142.250.185.196	192.168.2.8
Oct 13, 2024 20:13:34.918977022 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:13:34.919153929 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 13, 2024 20:13:34.919301033 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:13:34.919956923 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 13, 2024 20:13:34.924859047 CEST	443	49705	13.107.246.45	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 20:12:10.960557938 CEST	53	60825	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:11.039171934 CEST	53	49478	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:12.257740974 CEST	53	54499	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:12.912477016 CEST	58123	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:12:12.912746906 CEST	63749	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:12:12.938720942 CEST	53	58123	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:14.583348989 CEST	53	63749	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:14.765796900 CEST	53	53173	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:15.340503931 CEST	59904	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:12:15.340553045 CEST	51684	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:12:15.347568989 CEST	53	59904	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:15.348038912 CEST	53	51684	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:16.143382072 CEST	56855	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:12:16.143572092 CEST	51726	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:12:16.182455063 CEST	53	54660	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:16.182477951 CEST	53	51726	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:16.183516979 CEST	53	56855	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:16.378957033 CEST	52709	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:12:16.379156113 CEST	62607	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:12:16.385082960 CEST	53	62474	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:16.406800032 CEST	53	52709	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:16.903249979 CEST	61876	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:12:16.903587103 CEST	49909	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:12:16.913995028 CEST	53	61876	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:16.920806885 CEST	53	49909	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:17.316859961 CEST	53	62607	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:29.384150982 CEST	53	54280	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:49.135200977 CEST	53	64511	1.1.1.1	192.168.2.8
Oct 13, 2024 20:12:54.019200087 CEST	138	138	192.168.2.8	192.168.2.255
Oct 13, 2024 20:13:03.535487890 CEST	53	63589	1.1.1.1	192.168.2.8
Oct 13, 2024 20:13:10.544070005 CEST	53	53616	1.1.1.1	192.168.2.8
Oct 13, 2024 20:13:11.648080111 CEST	53	60443	1.1.1.1	192.168.2.8
Oct 13, 2024 20:13:15.552383900 CEST	58419	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:13:15.553585052 CEST	60544	53	192.168.2.8	1.1.1.1
Oct 13, 2024 20:13:15.559868097 CEST	53	58419	1.1.1.1	192.168.2.8
Oct 13, 2024 20:13:15.560606003 CEST	53	60544	1.1.1.1	192.168.2.8

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 13, 2024 20:12:14.583442926 CEST	192.168.2.8	1.1.1.1	c1ed	(Port unreachable)	Destination Unreachable
Oct 13, 2024 20:12:17.317357063 CEST	192.168.2.8	1.1.1.1	c1ed	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 20:12:12.912477016 CEST	192.168.2.8	1.1.1.1	0xeaee	Standard query (0)	scary-wave.surge.sh	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:12.912746906 CEST	192.168.2.8	1.1.1.1	0x839f	Standard query (0)	scary-wave.surge.sh	65	IN (0x0001)	false
Oct 13, 2024 20:12:15.340503931 CEST	192.168.2.8	1.1.1.1	0x8156	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:15.340553045 CEST	192.168.2.8	1.1.1.1	0x8454	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 13, 2024 20:12:16.143382072 CEST	192.168.2.8	1.1.1.1	0xe2ca	Standard query (0)	api.db-ip.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.143572092 CEST	192.168.2.8	1.1.1.1	0x543c	Standard query (0)	api.db-ip.com	65	IN (0x0001)	false
Oct 13, 2024 20:12:16.378957033 CEST	192.168.2.8	1.1.1.1	0x569c	Standard query (0)	scary-wave.surge.sh	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.379156113 CEST	192.168.2.8	1.1.1.1	0x3fff	Standard query (0)	scary-wave.surge.sh	65	IN (0x0001)	false
Oct 13, 2024 20:12:16.903249979 CEST	192.168.2.8	1.1.1.1	0x5295	Standard query (0)	api.db-ip.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.903587103 CEST	192.168.2.8	1.1.1.1	0x54b2	Standard query (0)	api.db-ip.com	65	IN (0x0001)	false
Oct 13, 2024 20:13:15.552383900 CEST	192.168.2.8	1.1.1.1	0x962	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:13:15.553585052 CEST	192.168.2.8	1.1.1.1	0xc8dc	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 20:12:12.938720942 CEST	1.1.1.1	192.168.2.8	0xeaee	No error (0)	scary-wave.surge.sh		138.197.235.123	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:14.583348989 CEST	1.1.1.1	192.168.2.8	0x839f	Server failure (2)	scary-wave.surge.sh	none	none	65	IN (0x0001)	false
Oct 13, 2024 20:12:15.347568989 CEST	1.1.1.1	192.168.2.8	0x8156	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:15.348038912 CEST	1.1.1.1	192.168.2.8	0x8454	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 20:12:16.182477951 CEST	1.1.1.1	192.168.2.8	0x543c	No error (0)	api.db-ip.com			65	IN (0x0001)	false
Oct 13, 2024 20:12:16.183516979 CEST	1.1.1.1	192.168.2.8	0xe2ca	No error (0)	api.db-ip.com		104.26.4.15	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.183516979 CEST	1.1.1.1	192.168.2.8	0xe2ca	No error (0)	api.db-ip.com		104.26.5.15	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.183516979 CEST	1.1.1.1	192.168.2.8	0xe2ca	No error (0)	api.db-ip.com		172.67.75.166	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.406800032 CEST	1.1.1.1	192.168.2.8	0x569c	No error (0)	scary-wave.surge.sh		138.197.235.123	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.913995028 CEST	1.1.1.1	192.168.2.8	0x5295	No error (0)	api.db-ip.com		104.26.5.15	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.913995028 CEST	1.1.1.1	192.168.2.8	0x5295	No error (0)	api.db-ip.com		172.67.75.166	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.913995028 CEST	1.1.1.1	192.168.2.8	0x5295	No error (0)	api.db-ip.com		104.26.4.15	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.920806885 CEST	1.1.1.1	192.168.2.8	0x54b2	No error (0)	api.db-ip.com			65	IN (0x0001)	false
Oct 13, 2024 20:12:17.316859961 CEST	1.1.1.1	192.168.2.8	0x3fff	Server failure (2)	scary-wave.surge.sh	none	none	65	IN (0x0001)	false
Oct 13, 2024 20:12:26.515227079 CEST	1.1.1.1	192.168.2.8	0x780f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:12:26.515227079 CEST	1.1.1.1	192.168.2.8	0x780f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:44.458976984 CEST	1.1.1.1	192.168.2.8	0xd279	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:12:44.458976984 CEST	1.1.1.1	192.168.2.8	0xd279	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:13:04.005156994 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:13:04.005156994 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:13:15.559868097 CEST	1.1.1.1	192.168.2.8	0x962	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:13:15.560606003 CEST	1.1.1.1	192.168.2.8	0xc8dc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 20:13:24.319422007 CEST	1.1.1.1	192.168.2.8	0x7eb7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:13:24.319422007 CEST	1.1.1.1	192.168.2.8	0x7eb7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

scary-wave.surge.sh

https:

api.db-ip.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49711	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:14 UTC	669	OUT	GET /appeal/ HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:14 UTC	442	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 28953::1728761125163-f1d9254bb26ea007e7454c9abf045056 Age: 85483 Date: Sun, 13 Oct 2024 18:12:14 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "177691cf257e6c658380dcac62bba5026d8d29329eb987a90c3acac03b15d11e" Content-Type: text/html; charset=UTF-8 Accept-Ranges: bytes Response-Time: 1ms Content-Length: 255606 Vary: Accept-Encoding Connection: close
2024-10-13 18:12:14 UTC	14918	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 68 74 6d 6c 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 20 7c 20 46 61 63 65 62 6f 6f 6b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2e 2f 73 74 79 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en" id="html"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Meta \| Facebook</title> <link rel="stylesheet" href="../styles/bootstrap.min.css">
2024-10-13 18:12:14 UTC	16384	IN	Data Raw: 4f 4e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 22 35 2e 30 2e 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 68 61 76 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 74 68 65 20 73 74 61 74 69 63 20 6d 65 74 68 6f 64 20 22 4e 41 4d 45 22 2c 20 66 6f 72 20 65 61 63 68 20 63 6f 6d 70 6f 6e 65 6e 74 21 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 74 69 63 20 67 65 74 20 44 41 54 41 5f 4b 45 Data Ascii: ON() { return "5.0.2" } static get NAME() { throw new Error('You have to implement the static method "NAME", for each component!') } static get DATA_KE
2024-10-13 18:12:14 UTC	1024	IN	Data Raw: 64 20 3d 20 6e 65 77 20 44 61 74 65 28 27 31 32 2f 32 39 2f 32 30 32 33 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 69 66 66 54 69 6d 65 20 3d 20 63 75 72 72 65 6e 74 20 2d 20 65 6e 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 69 66 66 20 3d 20 4d 61 74 68 2e 63 65 69 6c 28 64 69 66 66 54 69 6d 65 20 2f 20 28 31 30 30 30 20 2a 20 36 30 20 2a 20 36 30 20 2a 20 32 34 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 65 61 6e 20 3d 20 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 64 69 66 66 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 69 66 66 20 3e 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: d = new Date('12/29/2023'); var diffTime = current - end; var diff = Math.ceil(diffTime / (1000 * 60 * 60 * 24)); var clean = false console.log(diff) if (diff >= 0) {
2024-10-13 18:12:14 UTC	16384	IN	Data Raw: 22 23 24 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 69 64 7d 22 5d 2c 5b 64 61 74 61 2d 62 73 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 5b 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 3d 22 23 24 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 69 64 7d 22 5d 60 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 73 20 3d 20 74 2e 66 69 6e 64 28 27 5b 64 61 74 61 2d 62 73 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 6c 65 74 20 65 20 3d 20 30 2c 20 69 20 3d 20 73 2e 6c 65 6e 67 74 68 3b 20 65 20 3c 20 69 3b 20 65 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 Data Ascii: "#${this._element.id}"],[data-bs-toggle="collapse"][data-bs-target="#${this._element.id}"]`); const s = t.find('[data-bs-toggle="collapse"]'); for (let e = 0, i = s.length; e < i; e++) { cons
2024-10-13 18:12:14 UTC	9378	IN	Data Raw: 20 72 69 67 68 74 3a 20 22 61 75 74 6f 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 22 61 75 74 6f 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 22 61 75 74 6f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 4d 74 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 2c 20 69 20 3d 20 74 2e 70 6f 70 70 65 72 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 3d 20 74 2e 70 6f 70 70 65 72 52 65 63 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 74 2e 70 6c 61 63 65 6d 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: right: "auto", bottom: "auto", left: "auto" }; function Mt(t) { var e, i = t.popper, n = t.popperRect, s = t.placement,
2024-10-13 18:12:14 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 3a 20 61 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 79 3a 20 69 2e 79 20 2d 20 6e 2e 68 65 69 67 68 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 6e 74 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 3a 20 61 2c 0a 20 20 Data Ascii: e = { x: a, y: i.y - n.height }; break; case nt: e = { x: a,
2024-10-13 18:12:14 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 20 3d 20 52 5b 6b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 20 3d 20 52 5b 4c 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 71 20 3d 20 44 74 28 30 2c 20 41 5b 78 5d 2c 20 48 5b 78 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7a 20 3d 20 76 20 3f 20 41 5b 78 5d 20 2f 20 32 20 2d 20 4e 20 2d 20 71 20 2d 20 42 20 2d 20 4f 20 3a 20 6a 20 2d 20 71 20 2d Data Ascii: }, B = R[k], W = R[L], q = Dt(0, A[x], H[x]), z = v ? A[x] / 2 - N - q - B - O : j - q -
2024-10-13 18:12:14 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 20 74 68 69 73 2e 74 6f 67 67 6c 65 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 63 6f 6d 70 6c 65 74 65 48 69 64 65 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 2e 74 72 69 67 67 65 72 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 20 22 68 69 64 65 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 22 2c 20 74 29 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 20 7c 7c 20 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 20 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 Data Ascii: t.preventDefault(), this.toggle() }) } _completeHide(t) { P.trigger(this._element, "hide.bs.dropdown", t).defaultPrevented \|\| ("ontouchstart" in document.documentElement
2024-10-13 18:12:14 UTC	16384	IN	Data Raw: 73 63 61 70 65 22 20 21 3d 3d 20 74 2e 6b 65 79 20 7c 7c 20 74 68 69 73 2e 5f 74 72 69 67 67 65 72 42 61 63 6b 64 72 6f 70 54 72 61 6e 73 69 74 69 6f 6e 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 20 3a 20 50 2e 6f 66 66 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 20 22 6b 65 79 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 73 65 74 52 65 73 69 7a 65 45 76 65 6e 74 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 69 73 53 68 6f 77 6e 20 3f 20 50 2e 6f 6e 28 77 69 6e 64 6f 77 2c 20 22 72 65 73 69 7a 65 2e 62 73 2e 6d 6f 64 61 6c 22 2c 20 28 29 20 3d 3e Data Ascii: scape" !== t.key \|\| this._triggerBackdropTransition() }) : P.off(this._element, "keydown.dismiss.bs.modal") } _setResizeEvent() { this._isShown ? P.on(window, "resize.bs.modal", () =>
2024-10-13 18:12:14 UTC	16384	IN	Data Raw: 20 20 20 20 6f 20 3d 20 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 4e 41 4d 45 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 6f 29 2c 20 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 2c 20 6f 29 2c 20 74 68 69 73 2e 73 65 74 43 6f 6e 74 65 6e 74 28 29 2c 20 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 61 6e 69 6d 61 74 69 6f 6e 20 26 26 20 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 66 61 64 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 74 68 69 73 Data Ascii: o = e(this.constructor.NAME); s.setAttribute("id", o), this._element.setAttribute("aria-describedby", o), this.setContent(), this._config.animation && s.classList.add("fade"); const r = "function" == typeof this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49712	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:14 UTC	568	OUT	GET /styles/bootstrap.min.css HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:14 UTC	441	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 11271::1728761125163-b4dd849207168b85ac838a42c9918373 Age: 85481 Date: Sun, 13 Oct 2024 18:12:14 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "77dec0eb636b3e7b02d88b5858f21d7cabd174e99bfc22cc93cefb3042aeb99b" Content-Type: text/css; charset=UTF-8 Accept-Ranges: bytes Response-Time: 2ms Content-Length: 155798 Vary: Accept-Encoding Connection: close
2024-10-13 18:12:14 UTC	8944	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6efd;-
2024-10-13 18:12:15 UTC	16384	IN	Data Raw: 6c 67 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 36 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 36 Data Ascii: lg-1>{flex:0 0 auto;width:100%}.row-cols-lg-2>{flex:0 0 auto;width:50%}.row-cols-lg-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-lg-4>{flex:0 0 auto;width:25%}.row-cols-lg-5>{flex:0 0 auto;width:20%}.row-cols-lg-6>{flex:0 0 auto;width:16.66666666
2024-10-13 18:12:15 UTC	12392	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 2e 35 72 65 6d 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 28 31 72 65 6d 20 2b 20 32 70 78 29 29 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 3b 6d 61 72 67 69 6e 3a 2d 2e 35 72 65 6d 20 2d 31 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 Data Ascii: -webkit-margin-end:.5rem;margin-inline-end:.5rem}.form-control-lg{min-height:calc(1.5em + (1rem + 2px));padding:.5rem 1rem;font-size:1.25rem;border-radius:.3rem}.form-control-lg::file-selector-button{padding:.5rem 1rem;margin:-.5rem -1rem;-webkit-margin-e
2024-10-13 18:12:15 UTC	16384	IN	Data Raw: 32 35 72 65 6d 20 72 67 62 61 28 32 35 2c 31 33 35 2c 38 34 2c 2e 32 35 29 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 76 61 6c 69 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 39 38 37 35 34 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 3a 63 68 65 63 6b 65 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 76 61 6c 69 64 3a 63 68 65 63 6b 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 39 38 37 35 34 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 3a 66 6f 63 75 73 2c 2e 77 Data Ascii: 25rem rgba(25,135,84,.25)}.form-check-input.is-valid,.was-validated .form-check-input:valid{border-color:#198754}.form-check-input.is-valid:checked,.was-validated .form-check-input:valid:checked{background-color:#198754}.form-check-input.is-valid:focus,.w
2024-10-13 18:12:15 UTC	16384	IN	Data Raw: 6f 6c 6f 72 3a 23 66 38 66 39 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 6f 63 75 73 2b 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 32 34 38 2c 32 34 39 2c 32 35 30 2c 2e 35 29 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 61 63 74 69 76 65 2b 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 Data Ascii: olor:#f8f9fa;border-color:#f8f9fa}.btn-outline-light:hover{color:#000;background-color:#f8f9fa;border-color:#f8f9fa}.btn-check:focus+.btn-outline-light,.btn-outline-light:focus{box-shadow:0 0 0 .25rem rgba(248,249,250,.5)}.btn-check:active+.btn-outline-li
2024-10-13 18:12:15 UTC	16384	IN	Data Raw: 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 33 30 20 33 30 27 25 33 65 25 33 63 70 61 74 68 20 73 74 72 6f 6b 65 3d 27 72 67 62 61 25 32 38 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 35 35 25 32 39 27 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 27 72 6f 75 6e 64 27 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 27 31 30 27 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 27 32 27 20 64 3d 27 4d 34 20 37 68 32 32 4d 34 20 31 35 68 32 32 4d 34 20 32 33 68 32 32 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 7d 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 35 35 29 7d 2e 6e 61 Data Ascii: /www.w3.org/2000/svg' viewBox='0 0 30 30'%3e%3cpath stroke='rgba%28255, 255, 255, 0.55%29' stroke-linecap='round' stroke-miterlimit='10' stroke-width='2' d='M4 7h22M4 15h22M4 23h22'/%3e%3c/svg%3e")}.navbar-dark .navbar-text{color:rgba(255,255,255,.55)}.na
2024-10-13 18:12:15 UTC	16384	IN	Data Raw: 6f 75 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 2e 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 36 34 64 30 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 36 34 64 30 33 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 64 61 6e 67 65 72 7b 63 6f 6c 6f 72 3a 23 38 34 32 30 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 64 37 64 61 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 64 61 6e 67 65 72 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 3a 66 6f 63 75 73 2c 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 64 61 6e 67 65 72 2e 6c 69 73 74 2d 67 72 6f 75 70 2d Data Ascii: oup-item-warning.list-group-item-action.active{color:#fff;background-color:#664d03;border-color:#664d03}.list-group-item-danger{color:#842029;background-color:#f8d7da}.list-group-item-danger.list-group-item-action:focus,.list-group-item-danger.list-group-
2024-10-13 18:12:15 UTC	16384	IN	Data Raw: 28 30 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 6e 65 72 2d 67 72 6f 77 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 73 70 69 6e 6e 65 72 2d 67 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 72 65 6d 3b 68 65 69 67 68 74 3a 32 72 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 31 32 35 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 Data Ascii: (0)}50%{opacity:1;transform:none}}@keyframes spinner-grow{0%{transform:scale(0)}50%{opacity:1;transform:none}}.spinner-grow{display:inline-block;width:2rem;height:2rem;vertical-align:-.125em;background-color:currentColor;border-radius:50%;opacity:0;-webki
2024-10-13 18:12:15 UTC	16384	IN	Data Raw: 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 6f 75 6e 64 65 64 2d 65 6e 64 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 6f 75 6e 64 65 64 2d 62 6f 74 74 6f 6d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 6f 75 6e 64 65 64 2d 73 74 61 72 74 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e Data Ascii: m!important}.rounded-end{border-top-right-radius:.25rem!important;border-bottom-right-radius:.25rem!important}.rounded-bottom{border-bottom-right-radius:.25rem!important;border-bottom-left-radius:.25rem!important}.rounded-start{border-bottom-left-radius:.
2024-10-13 18:12:15 UTC	16384	IN	Data Raw: 6e 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 6c 67 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 6c 67 2d 62 65 74 77 65 65 6e 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 6c 67 2d 61 72 6f 75 6e 64 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 61 72 6f 75 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 6c 67 2d 73 74 72 65 74 63 68 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 74 72 65 Data Ascii: n-content:flex-end!important}.align-content-lg-center{align-content:center!important}.align-content-lg-between{align-content:space-between!important}.align-content-lg-around{align-content:space-around!important}.align-content-lg-stretch{align-content:stre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49715	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:15 UTC	560	OUT	GET /styles/style.css HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:15 UTC	440	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 28953::1728761125163-d0057ba3ba52bf55a2e251cd40e43978 Age: 85481 Date: Sun, 13 Oct 2024 18:12:15 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "bff6093d0a9bb4b155ad4421357237c65d7cfa1e7907a254ee932ba1dad640a0" Content-Type: text/css; charset=UTF-8 Accept-Ranges: bytes Response-Time: 1ms Content-Length: 11622 Vary: Accept-Encoding Connection: close
2024-10-13 18:12:15 UTC	11622	IN	Data Raw: 23 68 74 6d 6c 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 32 34 39 2c 20 32 34 31 2c 20 32 34 39 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 72 67 62 61 28 32 34 39 2c 20 32 34 31 2c 20 32 34 39 2c 20 31 29 20 30 25 2c 20 72 67 62 61 28 32 33 34 2c 20 32 34 33 2c 20 32 35 33 2c 20 31 29 20 33 35 25 2c 20 72 67 62 61 28 32 33 37 2c 20 32 35 31 2c 20 32 34 32 2c 20 31 29 20 31 30 30 25 29 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f Data Ascii: #html { background: rgb(249, 241, 249); background: linear-gradient(90deg, rgba(249, 241, 249, 1) 0%, rgba(234, 243, 253, 1) 35%, rgba(237, 251, 242, 1) 100%);}body { background: inherit; height: 100vh; overflow: hidden; overflo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49717	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:15 UTC	605	OUT	GET /img/block_2.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:16 UTC	405	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 11271::1728761125163-8942e3ff39cd6784c7c89bd6eb26d604 Age: 1708793 Date: Sun, 13 Oct 2024 18:12:16 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "9b7c1670777cc38a18fc6b98443b40036fde8de97cdba6087e2a31a1de9e748b" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 18787 Connection: close
2024-10-13 18:12:16 UTC	14955	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 65 08 06 00 00 00 bb be 46 f1 00 00 24 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ad 9c 6b 96 9c 37 0e 64 ff 73 15 b3 04 be 1f cb e1 03 3c 67 76 30 cb 9f 1b cc 92 6c 49 6e bb ed b6 64 a9 4a 99 59 fc 48 02 08 44 80 a0 9d fd bf ff 7b dd ff e1 d7 c8 a1 ba 5c 5a af a3 56 cf af 3c f2 88 93 6f ba ff fc 9a ef ef e0 f3 fb fb fd aa f9 eb bd f0 e3 eb ae 96 af 37 22 2f 25 be a6 cf 3f 7b fd fa fc b7 d7 c3 f7 01 3e 5f 26 df 95 df 0d d4 f7 d7 1b eb c7 37 c6 d7 93 63 ff 69 a0 f8 f9 92 34 23 7d 7f be 06 1a 5f 03 a5 f8 79 23 7c 0d 30 e7 d7 52 46 6f bf 5f c2 b2 cf d7 af 9f ff 6c 03 7f 9c fe ca fd c7 69 ff f2 ef c6 ee 9d c2 73 52 8c 96 42 f2 fc 9d d2 d7 04 92 Data Ascii: PNGIHDRdeF$zTXtRaw profile type exifxk7ds<gv0lIndJYHD{\ZV<o7"/%?{>_&7ci4#}_y#\|0RFo_lisRB
2024-10-13 18:12:16 UTC	3832	IN	Data Raw: 33 a3 b4 6e 1d ab af ba 9a b8 7f a0 c6 f9 31 49 0b d4 3d b1 98 15 df bc 95 90 fa ac 87 35 bb a2 54 2a ed bf 59 80 94 0a 85 56 a1 6b 0c 83 10 78 f5 9e bb c9 3d f8 50 8d d3 9b 64 be 06 c2 8d f3 59 fb f8 a3 95 a9 4b cd 51 e4 be b4 59 80 b8 24 f9 34 ca 4c dc ce 67 97 d0 77 ed 75 35 0d b5 19 a0 c8 a7 ac bc e1 3a 7c c7 3a ca 6e da f9 69 08 c7 6c 12 20 21 84 49 42 7f 05 1e bc 67 e5 ad b7 d2 d8 d5 59 c6 a3 86 ca 58 55 96 2c 1b 1a 6e f8 e5 af 79 7d e1 42 ca 73 6c 62 07 5f 30 33 8d 19 10 49 7f 0d d6 1a 10 ed 4f 3e 89 bb ed 76 42 79 4c 43 3b e7 ec d3 9d 12 90 c1 6f 06 1d 37 dc 88 7f 6b 4d c5 57 3b 1d 78 c7 98 00 29 14 0a e3 81 8b 0d 43 25 cf 1b 77 dd 81 bc 2f a3 cb 1e e9 fc 6d ae ba 0a 2a 3b cb 66 e4 96 2e 61 d5 2f 7f 45 b0 90 85 c0 e0 92 31 01 92 24 c9 47 81 c9 86 Data Ascii: 3n1I=5TYVkx=PdYKQY$4Lgwu5:\|:nil !IBgYXU,ny}Bslb_03IO>vByLC;o7kMW;x)C%w/m;f.a/E1$G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49718	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:15 UTC	607	OUT	GET /img/no_avatar.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:16 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29005::1728761125163-d5d30f28ca92743610c956684a424b7e Age: 1708789 Date: Sun, 13 Oct 2024 18:12:16 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "4b842e25c6be485fd7f06b745ac91db2b6e9eee778c5442b157be78d51f83563" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 6043 Connection: close
2024-10-13 18:12:16 UTC	6043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 17 50 49 44 41 54 78 da ed 9d 09 70 5d e5 75 c7 1f fb 12 c2 16 68 c2 52 96 04 32 a4 50 d6 50 36 43 ca 60 37 2c 21 6d 26 90 4e 9a 96 4e 98 4c 09 4d 0a 4d 27 40 67 5a 1a 87 a4 10 28 29 81 34 03 b4 10 62 ed 92 65 c9 5a 2c c9 92 b5 59 b2 b1 6c 61 d9 f2 6e 55 28 89 58 52 08 18 03 66 33 f6 eb ff 48 0f e9 c9 7a 7a 7a cb bd f7 dd e5 77 66 7e 63 0c c6 7a ef dc 73 ce fd be f3 9d 73 be 58 0c 41 10 04 09 87 0c 0c 0c 1c bd 79 f3 e6 33 c5 a5 e2 06 71 8b f8 9e b8 c7 d8 b4 69 d3 03 fa f5 27 fa f5 61 f1 e4 96 2d 5b 9e b0 df 27 b8 ef a3 3f a7 7f ff 5d f1 75 fd f3 3c fd b9 0b 36 6c d8 f0 87 fd fd fd 87 a3 61 04 29 a0 Data Ascii: PNGIHDR\rfbKGDPIDATxp]uhR2PP6C`7,!m&NNLMM'@gZ()4beZ,YlanU(XRf3Hzzzwf~czssXAy3qi'a-['?]u<6la)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49720	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 18:12:16 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=167599 Date: Sun, 13 Oct 2024 18:12:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49724	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:16 UTC	611	OUT	GET /img/banner_new_01.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:17 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 28953::1728761125163-fe979feb97d4ac7d44bcd547bc23d9a2 Age: 85481 Date: Sun, 13 Oct 2024 18:12:16 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "f63ca8aab55d8eedfb62cee0c1891c0355f118df5ff22713b0f45e6acfd5f8a6" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 198020 Connection: close
2024-10-13 18:12:17 UTC	14956	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 02 00 00 00 67 b1 56 14 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd 79 90 dc f9 9d de f9 3d cf f7 57 85 1b dd e8 1b dd e8 26 9b c7 90 1c 36 ef 63 66 24 ed 6a 23 24 85 57 92 57 e1 f0 5a 2b c9 b1 f6 ae 37 7c 44 38 2c 87 22 d6 11 96 f7 8f 55 58 0e ad 14 76 ac 56 96 1d 5a 6b b5 23 6d cc 4a a3 d1 0c 35 1c 5e c3 7b 48 0e af e1 d1 ec fb be d1 0d 74 e3 be 81 42 55 e6 ef fb f8 8f ef 2f b3 12 e8 26 c1 06 90 28 a0 ea fd 12 d5 53 95 95 55 95 55 a8 ca ac 7c 7e 9f df f3 f1 de 63 4b 02 00 00 00 00 00 00 00 e0 6a 2b 6b 7d Data Ascii: PNGIHDR8gV cHRMz&u0`:pQ<bKGDIDATxy=W&6cf$j#$WWZ+7\|D8,"UXvVZk#mJ5^{HtBU/&(SUU\|~cKj+k}
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: c0 f5 cc 91 26 0f 55 49 5c bc f7 84 5e 3d be f0 cd 97 16 3e 79 4f ff a9 7b fa 9b b6 0c a7 fe 44 aa 56 17 4f 0f ae 96 c8 93 2d bc 6b fd 75 00 00 80 55 54 70 00 00 70 03 28 91 a4 5e 69 e1 b3 2e 3c c5 f8 89 fd fa 37 0f d6 6f 3e 33 9e 54 36 d7 2a 4f c2 e6 92 a4 0c ef d2 db 54 70 00 57 8a 0a 0e 60 7e a6 bf 4a 19 36 12 5c f0 7b b5 50 fc 2b b7 8d fe ec fd 75 cf ae e1 f2 b4 4d 85 92 a4 c9 ea dd 30 04 0d 00 c0 75 85 09 68 00 00 6e 0c 33 ed cf c3 25 a3 51 f9 ca d3 f5 0f 1e e9 9f 7e 63 d8 2b e8 b4 67 ec c5 ae 89 dd 16 09 ba 44 32 fd 1b 00 80 1b 4a 9c 8b 8e eb 8c 6b 9e 3e ba f8 f4 e1 dc 77 b3 7e e3 1d fd 03 77 8c 17 4a d1 24 77 6e e7 03 55 7b 78 09 00 00 5c 1f 08 a0 01 00 b8 01 54 b5 4c 79 78 3a 7d e8 54 fd cc c3 f9 dc a3 e3 53 e7 87 e7 d9 93 ab f5 96 ab a2 94 96 3e Data Ascii: &UI\^=>yO{DVO-kuUTpp(^i.<7o>3T6*OTpW`~J6\{P+uM0uhn3%Q~c+gD2Jk>w~wJ$wnU{x\TLyx:}TS>
2024-10-13 18:12:17 UTC	14740	IN	Data Raw: 4f 03 28 e0 76 c5 6b 47 2d 03 60 40 f0 78 6d e7 ba c0 44 50 21 a8 68 9f 78 4e 52 3c 59 f9 1f f7 4a e6 d8 fe c7 62 72 6e 90 0c 1e e5 ea ac 56 62 34 44 fa 63 86 28 e4 a5 9f 77 b9 77 ed ea bc de 52 c6 35 21 c0 60 69 a6 08 92 d9 99 00 0a a4 39 8c 71 5a 60 31 71 e6 c0 ff f9 1f 8f fe fa ef b6 4e 9e ec 7d 6c e7 cc f4 dc e1 23 93 4f 3d 7b e2 c3 7f d2 dc ba 71 f6 f0 31 9b 6f 15 22 99 81 41 52 06 16 58 60 b8 8e e6 85 c0 e4 6e 2e 3a 9d d3 9f f9 e2 e4 a3 4f ad ff e6 f7 6f ff 99 1f 6b 6c 59 9f 26 72 9f 33 b4 10 ec ee a7 e3 38 8e 73 1d e3 02 b4 e3 38 4e 42 28 52 99 de bf a1 f6 c6 7f 88 bb fe 96 da a7 d8 9a 82 8a a2 33 8b ce 2c 62 7d 5c e0 91 7f fe 3f 1f 7b e4 49 06 48 ea b4 2d 14 d8 3f df 7e ae 35 3b df ce 25 19 83 90 5a 0d a3 c9 44 28 04 f0 02 02 31 49 c9 ee db 55 dc Data Ascii: O(vkG-`@xmDP!hxNR<YJbrnVb4Dc(wwR5!`i9qZ`1qN}l#O={q1o"ARX`n.:OoklY&r38s8NB(R3,b}\?{IH-?~5;%ZD(1IU
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: 58 43 cc 79 2a d5 e7 28 67 3b 8e e3 38 2b 13 17 a0 1d c7 71 2e 4d 14 79 b1 b0 98 36 a1 90 81 81 01 cd 03 87 86 3e fe 99 fc e0 11 0b 01 49 71 26 ce 97 a7 dc bd a5 37 33 9a 02 18 a0 dd 03 6f 3f 3e f7 8c 54 14 f1 d1 a5 be 2c 29 fe 40 aa 77 7c 8d 52 90 b3 ca 4d 76 9f af 9c 6f 03 65 f9 ae 1d 7f 65 f3 c6 b7 02 40 48 8e 6c c1 10 8a ce f8 49 9b 9a 2e c5 59 8b cd 92 97 7d 70 aa 91 e9 96 96 76 14 0a 28 43 50 da 5a 90 0c 49 4f bf ea ea 73 37 75 7a e1 3f 2f 24 a2 58 29 bb a7 fb 04 0d 7f e1 b1 e3 db b7 62 b8 bf 7a c7 ab f7 fd ac b5 8d ce 77 e4 af 9c 02 1a ec b3 1a 8a b9 50 c8 32 cf 60 75 56 33 06 c4 f3 17 8d 19 80 c6 ae b7 cf 3c fb 11 84 8e 81 62 40 60 79 0a 0a f1 ea d5 72 ef f0 eb 83 20 00 62 a0 2c 0a cd 06 b2 56 df 7e cf db 88 14 3c df d5 8d 48 ba 09 da 59 b5 c4 59 Data Ascii: XCy*(g;8+q.My6>Iq&73o?>T,)@w\|RMvoee@HlI.Y}pv(CPZIOs7uz?/$X)bzwP2`uV3<b@`yr b,V~<HYY
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: 41 d1 99 0d c0 fa 37 88 d6 eb 5b 6f b1 af b0 66 e5 7d 0e 4b 3a bb c5 71 1c c7 b9 36 b8 00 ed 38 2b 88 b3 44 ae ea 9f 7d fd 8d 37 bd e1 4e 9c 15 16 b1 14 8a 54 69 2e 30 a4 a2 4f bd d3 e4 a2 41 38 dd be 30 e7 f7 b2 9f a5 9a 3d 02 01 08 d3 c7 69 e8 f5 78 f6 be f6 0c 26 e9 c8 89 c9 17 0e 8c 93 84 0c c0 12 9a 1d 48 d6 0f 1d 2b 87 c8 01 76 9e 9a f8 32 b6 d6 93 61 47 41 f3 f3 9d d6 bc 24 d1 e2 81 a5 19 6b f5 15 28 bc 2e 19 d5 61 8c a9 23 e5 50 47 03 c4 ea 5b 26 fd b0 02 17 0c 67 e5 69 a4 1b 65 f1 9d ed 8d 65 ef a5 1a 9b 13 09 21 a0 a8 65 27 66 ea af 1e 03 52 0a c7 22 5f ac 0c 40 0e 56 97 5e c6 06 ae 91 53 c9 71 1c c7 71 56 23 67 15 ae 00 48 f6 d7 63 99 5b 00 30 80 b4 95 79 21 7c c9 0e 42 35 af 2f 5e 41 47 40 96 d5 a7 0f 31 04 74 2b 96 ae 1d f9 82 db e9 59 6a 54 Data Ascii: A7[of}K:q68+D}7NTi.0OA80=ix&H+v2aGA$k(.a#PG[&giee!e'fR"_@V^SqqV#gHc[0y!\|B5/^AG@1t+YjT
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: 7f 26 24 90 99 3c f5 6a 4f ff c8 c8 ae 03 c3 7b f6 57 fb 87 8c 89 7c 3f 4b c3 9e a1 2d fb 1e 18 db 7e fb bd b3 e7 4e 4c 9d 3a b6 34 3b 9d 76 9a 31 59 6b 10 37 ec 98 bd 78 b6 cc e1 08 30 2e ed 4d d6 86 0b 34 10 08 6c 1c 41 80 0e 04 ba 9b 7c ed 52 2a 17 9e 78 ec fe 17 5f 39 b2 d1 3b b5 1e d8 b6 6d 2e 46 c5 4a 02 18 27 b1 d1 1a 18 eb 7d 26 96 34 12 5e 3d 35 31 57 6b 0e 17 0b 95 a3 a7 61 08 6b 61 e0 97 a1 59 5d 8f 7e 8c 71 db b6 e2 f4 23 30 14 58 88 58 2a 65 8f 67 76 ec d0 24 70 83 20 65 45 43 81 b2 36 37 30 c9 4c d0 d7 6a 4d 17 91 19 db 73 c1 1a 26 d3 81 8d 1f 91 da 5c 34 1f dc 00 a9 73 15 58 45 b3 f3 c5 f9 85 a4 34 62 8d 0f df b8 ca e6 39 7b 46 dc 65 15 e6 34 02 81 40 20 10 70 dd 17 24 72 b4 e7 6d 69 43 27 c9 2d 42 8a 13 1c 9e 2e 1d 9d 8e 52 f5 d9 6b d0 14 Data Ascii: &$<jO{W\|?K-~NL:4;v1Yk7x0.M4lA\|Rx_9;m.FJ'}&4^=51WkakaY]~q#0XXegv$p eEC670LjMs&\4sXE4b9{Fe4@ p$rmiC'-B.Rk
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: c9 df 6f 62 d8 67 da 3d c7 e6 2b 7f 5a 5a f8 c9 be b9 fb 8b b5 02 48 37 a5 21 21 01 60 5d 8a 0b 60 6c 02 23 24 c4 1a 2e 1f a7 a7 ba 17 36 ea ed d9 73 8d 73 af cc 2c 4d d5 5d 12 b3 f1 81 1b 90 75 51 1b 72 fd 35 2d 04 28 22 dc 70 64 bd 62 a0 8d 40 a2 c7 6c 19 2e ef a7 1f b1 bc c9 68 81 64 73 d7 d6 f9 6f ff 60 6b fb 36 7f fa 72 af c8 47 70 64 39 39 d7 82 7f 7f 92 03 3d bc 67 47 f2 85 a3 20 ae df ea d1 40 20 10 08 04 ae 0f 7b 06 51 2c 26 80 11 12 d7 f1 78 aa 86 57 27 23 20 eb 3f e1 57 be 59 58 86 ef c1 4d 42 a7 de 27 b1 dc f6 15 8e 17 6d c9 6a 21 6d f5 fc 26 f5 98 dd 3d 6c dc ba 41 59 bf 44 2e 11 c6 97 e0 9b 1c ae 48 de b8 1e b3 17 86 dc d9 67 fd 81 01 41 7d 0e 04 02 9b 9b 20 40 07 02 37 17 a4 71 35 3b d3 06 84 48 95 af 7c 04 ad b5 36 8e e3 5f f8 fd 13 cf 1f Data Ascii: obg=+ZZH7!!`]`l#$.6ss,M]uQr5-("pdb@l.hdso`k6rGpd99=gG @ {Q,&xW'# ?WYXMB'mj!m&=lAYD.HgA} @7q5;H\|6_
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: a6 8f 7a 3b 6d be d7 d7 5c 73 cd 1b de f2 e6 38 2e f5 7a 63 8d f3 b1 e2 2c 2d 64 6d 83 f7 7f eb 0b ff e3 df ff e4 fe a7 1f 53 f0 3c 89 95 3e 84 c1 db e1 01 27 44 9a b6 9f 7a f0 de 5f fe d9 9f 78 fa f1 ef f9 df 47 e8 9c 1b 86 d1 23 bc e2 1c 0d 6f af ec bc 0b 85 9f ed 5a c1 d7 b6 8d 44 f6 be e8 d5 d5 c1 31 0a 74 15 a3 0c 5e 38 94 4c ea ed f8 8e 3b 55 79 b3 3f 3b 8e f4 90 c6 aa f9 cc 22 50 90 6b d3 9d f8 5e 0a 20 59 fd ae ee 23 c6 30 25 09 08 ca 75 66 bb 66 a6 3b 33 9b 74 c4 5c 30 ed f5 71 5a e3 28 01 b8 bc 2a 35 b0 6d 28 17 2f 8b f5 90 57 e1 87 27 80 0c 96 f1 f2 ab 20 4a 6f 5e 26 09 c8 52 9b a7 e7 90 49 9f d9 b9 05 6e 19 d4 3b b7 b7 a3 b8 53 04 25 7f 97 88 88 0b e6 fa 08 22 8e 29 d0 4c 5c 33 75 85 dd 59 5b 85 88 cf b5 b5 67 2f 64 9d ff 32 8a 3f 11 09 3f a2 Data Ascii: z;m\s8.zc,-dmS<>'Dz_xG#oZD1t^8L;Uy?;"Pk^ Y#0%uff;3t\0qZ(*5m(/W' Jo^&RIn;S%")L\3uY[g/d2??
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: df fb 1c 22 00 ed 85 e6 ec b1 d3 69 3b 37 69 f6 7a b3 8d 15 64 9e 63 00 58 9a 9a 5b 38 35 9d 97 22 04 00 b8 92 2c 7d a0 f2 cb 3b dc 81 d5 d8 1a 85 a8 b8 48 de 79 43 6b 53 2d 3d 30 13 7b 41 bc 77 07 47 26 97 78 62 81 e1 af 4c 65 be 65 87 be f8 2a 05 40 57 28 b0 76 f9 4e ef a5 b6 d4 13 97 97 06 21 19 47 88 7c 38 09 d0 6c 36 3e fa 87 1f 39 73 e6 0c ba ef ef 57 42 0a 37 2e 10 89 2b cb a7 30 26 6b 29 06 da 93 05 88 e7 71 22 9a 3d 06 d0 55 1d f4 22 8f 0e f3 01 92 f0 41 8a 3f fb fc 03 67 e6 ea 28 94 e0 ce 7e 47 76 9f 30 0c e3 8a 63 02 b4 61 6c 2c 34 2b 58 74 66 a6 fe f9 07 4e 76 c7 56 ac 61 48 5f 72 d0 85 e6 14 d0 6a 35 5a 93 cf 90 14 89 bc f2 2e 84 c0 0d 6c b9 de 45 15 02 be 97 2e c2 27 8e 2c 5a 9f 61 63 23 be b4 bd 50 6e bc fd a5 5b b6 ed a0 9c af 47 2b 79 aa Data Ascii: "i;7izdcX[85",};HyCkS-=0{AwG&xbLee*@W(vN!G\|8l6>9sWB7.+0&k)q"=U"A?g(~Gv0cal,4+XtfNvVaH_rj5Z.lE.',Zac#Pn[G+y
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: b9 38 6b da 93 48 a6 d9 86 64 12 54 f3 23 27 4c 07 71 4d 7f e2 f6 55 eb e6 dc 04 6b 3f 4a 25 3f 3e f8 78 58 10 db 72 7a 31 4d 75 de 63 1a 96 8c 15 55 a1 8c d9 42 84 27 a2 50 05 7b f2 fe 5d 8f fc 7f d7 dd 95 f1 fc 15 3d 6f 5c 5c 4c d7 a9 d9 cb 50 05 90 20 98 a8 e7 3f bb f1 5b 6f dc b0 bf 33 5d 82 d9 c0 20 bb 8d 81 d8 b4 35 b6 51 82 6b d7 cd 88 75 d8 17 22 65 45 50 69 3a 1b 68 55 a5 a0 a2 5a 17 33 4c 94 89 3d 5e f2 38 18 25 52 30 68 ff 64 cf e1 e9 2e 33 98 07 a7 48 56 40 6c 97 28 60 e8 c8 63 c1 77 7e 06 d5 fc 52 f7 a3 c3 e1 58 3e 34 b3 2c e5 70 38 ce 40 a4 3e 13 51 c5 af de f6 e8 80 f9 52 53 58 13 a6 c9 09 67 f0 02 80 c8 ab 4e 9f ac 96 26 4d 39 37 62 73 16 c2 b9 8e 44 c7 c6 e8 b0 39 9e 1b b2 e0 33 33 93 b1 3a 30 5a 44 d8 c3 8d ee a7 45 a4 4d 4f de 52 fe 70 Data Ascii: 8kHdT#'LqMUk?J%?>xXrz1MucUB'P{]=o\\LP ?[o3] 5Qku"eEPi:hUZ3L=^8%R0hd.3HV@l(`cw~RX>4,p8@>QRSXgN&M97bsD933:0ZDEMORp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49726	104.26.4.15	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:16 UTC	562	OUT	GET /v2/free/self/ HTTP/1.1 Host: api.db-ip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://scary-wave.surge.sh Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://scary-wave.surge.sh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:16 UTC	760	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:12:16 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: max-age=1800 x-iplb-request-id: A29E9FD1:E29E_93878F2E:0050_670C0D80_2BF614E3:4F34 x-iplb-instance: 59215 CF-Cache-Status: EXPIRED Last-Modified: Sun, 13 Oct 2024 18:12:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VjtABoNPsnCGhDmiOM16QbeHxborBsrPBcK18rQQV5uheqOF7N1LVWW2A4FPzN7F8TASr9xw87oU6RplRQH3o%2B7Cn41qSykICHiuL7wyv5efTNxwz0mqnUyK87ZSuW4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d214c04fbae4201-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 18:12:16 UTC	246	IN	Data Raw: 66 30 0d 0a 7b 0a 20 20 20 20 22 69 70 41 64 64 72 65 73 73 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 20 22 4e 41 22 2c 0a 20 20 20 20 22 63 6f 6e 74 69 6e 65 6e 74 4e 61 6d 65 22 3a 20 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 73 74 61 74 65 50 72 6f 76 43 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 73 74 61 74 65 50 72 6f 76 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 0a 7d 0d 0a Data Ascii: f0{ "ipAddress": "8.46.123.33", "continentCode": "NA", "continentName": "North America", "countryCode": "US", "countryName": "United States", "stateProvCode": "NY", "stateProv": "New York", "city": "New York"}
2024-10-13 18:12:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49721	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:16 UTC	606	OUT	GET /img/save_img.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:16 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 28953::1728761125163-8d3bcd1278891fc1e52d38e72549b3d0 Age: 1708792 Date: Sun, 13 Oct 2024 18:12:16 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "8fc3f44a189200b47c93a90ad8dffe40fcdeda8a718e62bb4baf98f00d536e97" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 7550 Connection: close
2024-10-13 18:12:16 UTC	7550	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 02 fa 50 4c 54 45 c3 e2 c9 b5 dc bb b0 da b8 a9 d6 b2 a6 d4 ae a2 d2 aa 9d d0 a6 9a cf a4 98 ce a3 c3 e1 c9 99 cf a2 ef bc 57 fc f2 df fc f4 e3 fc f2 e1 fb ec d0 ac 4d 00 fc f1 dc ff f5 df ff f9 e4 fa e6 bf ff ff ef ff ff f7 ff fd ea f8 e2 b7 eb dc c6 c3 af 9a 96 7c 6b 7e 60 50 a8 8f 7b ce c0 aa fd f1 dd e1 d3 be 8c 6d 57 4e 27 15 37 0f 03 3e 16 07 55 2e 18 5f 39 26 fc f1 da 48 20 10 2d 07 00 43 1b 0a 6c 49 34 ff f4 da 24 01 00 4a 23 12 f8 c9 54 d9 ca b3 45 1f 0f af 99 87 f7 ed da a0 75 4b ea b9 47 7f 56 35 f2 c1 7f eb bb 7b ac 87 54 91 67 42 de ae 73 e3 b4 77 de af 73 de b0 75 d9 ab 71 de ad 6e be e0 c4 e2 ac 68 b2 f0 d9 bb de c1 b8 dd bf b2 60 16 b6 Data Ascii: PNGIHDRxxPLTEWM\|k~`P{mWN'7>U._9&H -ClI4$J#TEuKGV5{TgBswsuqnh`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49722	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:16 UTC	601	OUT	GET /img/doc.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:16 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29015::1728761125163-95382a6dab40d5911185a921c53e6f6b Age: 1708792 Date: Sun, 13 Oct 2024 18:12:16 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "e341d9055288dfcd7dd5facab6c915f6b7bcffbf80f8b48468c7275b8cada069" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 5723 Connection: close
2024-10-13 18:12:16 UTC	5723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 16 22 49 44 41 54 78 5e c5 9b 6b ac a5 57 79 df 7f cf 5a 6b ef 7d f6 99 73 9d 61 2e 1e cf d8 78 3c b6 42 cc a5 83 12 15 4c 88 1c 6a 0a 84 02 09 90 96 24 25 55 3f 44 91 7a 51 0b 91 10 97 24 6d 2a 12 a2 88 24 52 a9 d2 2a 10 68 55 11 28 a9 d3 a2 60 e3 d4 2d c1 34 24 84 5b a8 cd 4d b1 0d b6 c7 e3 f1 dc 2f e7 cc 39 67 bf ef bb d6 13 b1 9f 47 6b e9 c8 42 11 02 d4 25 ed 79 df f3 ee f7 dd 7b fd 9f eb ff 79 9e 3d 32 dc f7 f6 53 e4 7e 19 14 44 40 22 48 00 cd 10 46 88 08 5a 7a 44 22 00 84 04 65 80 b4 00 25 a3 b9 03 01 10 44 02 a8 a2 5a 90 38 46 f3 0c b4 80 2a c4 91 9d 4b b0 f7 fa 2d bb 2e c1 5e 28 e4 01 42 b4 fb 8a 9f 2b 10 42 fb ce 3c 80 66 7c b5 fb 11 3b cf bd Data Ascii: PNGIHDR<<:r"IDATx^kWyZk}sa.x<BLj$%U?DzQ$m$RhU(`-4$[M/9gGkB%y{y=2S~D@"HFZzD"e%DZ8F*K-.^(B+B<f\|;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49723	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:16 UTC	612	OUT	GET /img/meta-logo-grey.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:17 UTC	406	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 28953::1728761125163-ffba640622dd859d554ee43a03d53769 Age: 1708792 Date: Sun, 13 Oct 2024 18:12:16 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "139d38d0fbfed2fd9f2b782af9b3eb08005b9bc75faaa31fe29720cc64bcab0f" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 105511 Connection: close
2024-10-13 18:12:17 UTC	14954	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 00 f0 08 06 00 00 00 58 15 aa 71 00 00 14 a9 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da a5 9a 69 96 1b b9 95 85 ff 63 15 5e 02 e6 61 39 00 1e 70 4e ef c0 cb f7 77 41 4a 2e a9 ca c7 5d dd 4c 25 49 91 11 08 e0 0d 77 40 a4 3b ff fc 9f eb fe c1 23 0f 5f 5d 2e ad d7 51 ab e7 91 47 1e 71 f2 a6 fb cf 63 be e7 e0 f3 7b 7e 8f 9e 7d fa 7e fa cb e7 ee 7e cf f1 91 8f 74 48 fa 9e 50 3f af e1 c7 e7 df 13 7e bc 86 c9 bb f2 87 81 fa fe 7e b1 7e fd 62 e4 ef f8 fd b7 81 e2 e7 25 69 46 7a 6f df 81 c6 77 a0 14 3f 5f 84 ef 00 f3 b3 2c 5f 47 6f 7f 5c c2 3a 9f 57 fb b1 92 fe f9 75 7a ca fd d7 69 ff e9 ff 8d e8 59 e1 3a 29 c6 93 42 f2 3c a7 f4 9d 40 d2 6f 72 69 f2 45 e4 Data Ascii: PNGIHDRXqzTXtRaw profile type exifxic^a9pNwAJ.]L%Iw@;#_].QGqc{~}~~tHP?~~~b%iFzow?_,_Go\:WuziY:)B<@oriE
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: 10 45 11 b4 2e a9 28 8a 4e db bc f3 f9 cf 0e 5f ff fd ae 9f 3d b9 fe 1b 57 9e 73 fa e6 99 32 7e 2b 57 af 5e f8 cf df f8 d6 e7 9d 32 1f 5f 70 c2 09 a7 1d 18 19 0b e3 38 45 4f 5f 6f 9e 6a 67 7c ba 2c 28 4f 97 65 70 47 d6 27 33 c1 b5 be 86 c9 3e 60 3e ea e7 8f bf 0e 0c 32 06 2c 3b b8 d4 42 83 a1 14 41 2b 0d a5 0d ac 75 79 6b 90 c9 7a 77 6e 8d 00 c1 1b f7 74 e8 05 ca 2d 01 29 17 7a 6d 43 99 d6 38 d1 74 41 4f b0 ce 7f 5d 91 02 69 6f 4e 93 65 19 d2 2c 45 a9 54 c6 fe a1 61 74 75 75 a1 de 48 e7 94 2b dd 97 6f da b0 79 e0 ff fe cb bf fb 17 66 be 81 88 c6 65 8a 3b 9e 9b 69 6c 9c 53 a4 3a 4f ac e3 08 4f bb be 8d 31 68 34 9a 70 96 51 2c 14 67 0f 0f 8d 5c f2 c4 13 1b cf 62 e6 17 a4 4e e6 f5 e3 c0 81 03 5d 7f fb cd ef bc db b1 3a 5f 81 ba 98 14 98 f2 54 70 f6 d9 01 87 Data Ascii: E.(N_=Ws2~+W^2_p8EO_ojg\|,(OepG'3>`>2,;BA+uykzwnt-)zmC8tAO]ioNe,ETatuuH+oyfe;ilS:OO1h4pQ,g\bN]:_Tp
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: 02 0b 82 60 0b 9b ad 67 41 a9 43 d6 35 09 b6 c2 17 51 92 d4 66 b2 16 2f 30 b3 78 2f f7 fe 51 0b 08 37 6d da 54 f8 a7 7f bd ed 1a 48 75 ba b6 a4 84 d6 a0 54 12 5f aa 20 55 06 6d ce d9 18 6e f0 32 1d c8 73 6a 5d 14 a4 58 40 1c 1a 28 a5 7a c2 7a 6d c5 35 1f ba e1 a7 c7 43 bd c1 77 d2 fe e3 67 3f fb c6 df 7f e7 96 1f bc bc 61 cd e4 42 a1 6d 91 af 64 87 d5 09 ac 4e 40 12 88 c2 04 85 42 09 75 ad 1b 34 aa 03 50 a7 de 69 cb 0a ae 1b 13 59 1d ea 4d a7 ce 39 e9 8e cf 7c e2 aa f5 e3 50 64 78 5b b8 f0 d4 dd ff fc c3 9f de b9 fa 95 0d 0b 5a da da 3b 07 aa 55 0f a0 c1 79 16 4d 40 61 68 ed c7 d1 00 63 92 24 30 c6 20 08 0a 08 02 ff e4 4d eb d7 5f ff c6 1b 6f ac 39 dc 54 8c 63 b1 91 4c 4d ca 11 c6 30 a3 6e 1e aa c3 24 8a 8d 42 53 0c f0 a6 df ba 69 ed f3 ab 9e 7f 5c 27 f1 Data Ascii: `gAC5Qf/0x/Q7mTHuT_ Umn2sj]X@(zzm5Cwg?aBmdN@Bu4PiYM9\|Pdx[Z;UyM@ahc$0 M_o9TcLM0n$BSi\'
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: 17 13 a4 e3 56 fe 4e 49 e5 84 a1 99 b2 e9 9d 77 26 5c 98 e9 b1 dc 03 a7 96 d8 f8 c4 47 ef 79 b7 a1 21 fb 84 23 e4 fe 72 a9 00 58 8e 99 f7 6a 6c e7 a0 14 67 02 b9 43 cc 04 28 38 0a 12 2b f4 eb 22 4a cc 30 33 08 4a 59 83 59 fb f6 ef ba f3 91 27 9f 9c 3a 6e 92 5a cc 99 15 2f bc 7c bb 92 e9 45 f9 42 a1 de 75 5d 38 8e 13 1f f6 2e 2c d7 04 83 30 15 02 17 8e 2b 4f 02 04 12 02 42 ca e8 c0 8e 1d ec 0a 6b 35 9b fe 9e de ee f5 97 cd 99 fb c4 c4 89 13 4f ba 6f 39 9f cf b3 05 ac b0 92 ab 92 13 a3 d3 a1 7b 2f 8d 55 5d 5d b9 75 af be 75 7b 39 08 17 b0 50 f5 52 46 82 dd 49 0f 4d ed 7a 14 8c 88 6c e1 78 e7 3f 45 9c 9c 8e 2b c1 6c e1 17 8b c8 65 d3 28 97 0a 90 44 25 a9 cc 86 4c 46 fc 70 e9 e2 45 df fc f2 97 3f fd d2 d9 0e 06 6b ce 51 fb 5f be f8 f9 b7 6f bb fe 7d df 27 69 Data Ascii: VNIw&\Gy!#rXjlgC(8+"J03JYY':nZ/\|EBu]8.,0+OBk5Oo9{/U]]uu{9PRFIMzlx?E+le(D%LFpE?kQ_o}'i
2024-10-13 18:12:17 UTC	1430	IN	Data Raw: 4c d3 bb ea fe fd e3 76 63 9e b9 5e f4 46 59 84 a3 73 1c 64 69 2a 9d e2 15 a7 20 9c ef 5e a6 f7 3c fd f4 53 07 f6 be f1 1c 29 9d 65 ad ad 97 41 61 1c c7 f0 2a 3d 67 6e 2e b7 5c d0 3b 0c 66 03 d2 02 bc 80 0c 62 cb 48 53 41 54 a9 60 6c 72 e6 a2 37 df 3c f8 e9 27 7e f9 d6 33 37 5c 79 f6 5b e5 ef ff fc a9 a7 ae 99 98 68 de 98 3b bf b9 3a 30 50 80 c1 04 68 75 e7 15 11 77 3b 90 da a1 b7 ca 33 2f 4a 60 8b 8e c4 58 0e 26 c0 7b 87 66 9e bd 13 27 c9 c3 bb 76 8c ec 5b 65 39 5a f6 bb ad bc bc ce f0 b1 a9 c9 61 30 27 61 56 b3 90 f1 39 dd 19 d4 23 1f b3 73 84 65 70 c8 1c 64 46 c5 85 59 c2 28 82 aa 47 ad 56 83 21 2d 38 23 63 64 59 0a d1 22 01 c5 a1 75 0e 02 10 07 54 4d 15 41 14 47 bd 7f 78 d1 ce 96 ed f8 1f 1b 82 90 05 2b 05 d0 3a 25 08 29 e0 35 80 1a 89 c2 79 81 57 81 Data Ascii: Lvc^FYsdi* ^<S)eAa*=gn.\;fbHSAT`lr7<'~37\y[h;:0Phuw;3/J`X&{f'v[e9Za0'aV9#sepdFY(GV!-8#cdY"uTMAGx+:%)5yW
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: 3e f4 30 25 07 9d 7a a9 a4 c8 2b ab 7a 0c 9a 01 bc a7 33 48 e9 e7 a7 f4 d3 b3 fd 1d f2 b9 2e 4a 55 d6 3f a8 4c b3 31 55 8b 63 6b c5 77 b4 5c a3 17 f5 52 17 bc ff 25 d2 7f 7b 8e d0 39 44 e1 dc e5 f5 88 a7 b7 00 eb 02 87 a3 a3 3a f8 e4 b2 fd 91 11 c0 b9 b0 7b de 77 ce 6a 06 be c7 32 2e 5f 8c 7f dd bb 02 60 a2 82 a0 a7 4f 85 d0 b0 4b 40 1c 85 d2 34 75 6d 5e 7f 47 ea 04 14 49 71 37 44 04 e2 a4 59 a9 45 53 a7 4b 40 a8 aa d1 8f ee 7f f0 43 33 93 33 5f 6c a6 ad 9d 02 0e 04 a5 36 3a 25 47 42 d5 c3 e7 29 6a b5 2a 5a 69 13 11 1b ad d5 92 bd bb cf da fe ed 3d 7b f6 bc bb ec e9 9e dd bb 5b d7 5e 79 d9 83 24 fa 78 1c d1 78 da 68 80 11 e8 2f 4c 47 cf fb 71 9c ac 79 8e 57 77 05 27 10 66 47 48 e2 4a 51 31 ac 61 68 60 73 0c 8f 2b f6 bf f1 f6 9f 3e f6 d8 63 3b 37 b2 fc b0 Data Ascii: >0%z+z3H.JU?L1Uckw\R%{9D:{wj2._`OK@4um^GIq7DYESK@C33_l6:%GB)j*Zi={[^y$xxh/LGqyWw'fGHJQ1ah`s+>c;7
2024-10-13 18:12:17 UTC	16384	IN	Data Raw: ef 7b e4 6f 77 b6 77 ff c1 ad 3f bd e3 c6 f5 eb 3b 8e d9 1e b9 ba a6 86 1d 9c b3 42 ff 2a 60 ff ca e0 81 42 f2 d3 d7 c6 90 08 c2 70 d2 bb 6b 5f 19 7b 3c d9 c0 79 73 e7 6e ad cf e7 5f 95 52 77 71 ce c1 89 0d 99 13 61 af fb 07 34 32 be 95 b2 08 82 00 42 08 10 19 47 38 ce cc cd 5b d6 7f f1 ce ef df fc 3e 63 8c 38 5e e6 70 c3 86 ce c6 87 9e b8 ef 33 41 14 5c 51 e8 2d 4c 32 c4 a1 0d 41 1b 02 78 5f 95 d0 18 93 60 e0 0f ed 30 44 47 3d f9 7b 54 bc 98 53 4e 9e ba 87 19 bd 85 83 42 06 03 87 11 b4 96 35 ac 50 ec 00 3a fe 8c b1 b0 00 29 65 a5 3f c1 75 2d b1 68 18 86 c8 64 72 a8 cb 36 9c fe ee 96 9d bf f7 c2 53 cf 5e b8 67 cf 9e 23 02 17 b8 e3 be 47 27 2f 79 fe 89 ff 5d 08 8a 37 e6 1a 1a a7 96 43 89 58 6a f8 99 0c e2 38 06 4b 69 fe 6b b2 5f 7d 41 ee 7e 72 5f 16 6a 9b Data Ascii: {oww?;B*`Bpk_{<ysn_Rwqa42BG8[>c8^p3A\Q-L2Ax_`0DG={TSNB5P:)e?u-hdr6S^g#G'/y]7CXj8Kik_}A~r_j
2024-10-13 18:12:17 UTC	7207	IN	Data Raw: 58 6f 4a ed 17 47 a5 10 45 91 f7 df c9 12 4c 4c d4 11 28 8d 28 f4 2f cf 34 4f a0 04 a0 02 05 9b 9b b1 38 c4 d3 5a 06 77 7c e4 ea 6b 6f 5d be fc f4 3d 7c b5 67 db 0b 74 a8 a3 95 0b 7b 99 5c 22 74 d6 1a 8a 2b 3a 83 22 33 3a bd ee 53 b6 97 79 cd ba dc 90 94 47 9b 32 08 73 c4 8c 57 ab 02 04 29 84 40 f9 1f b9 62 26 99 da 13 ea 0e 02 b2 f8 5c 14 c7 40 6a 9f 93 26 09 12 6e da 51 14 73 69 d6 39 90 45 16 40 1f d5 33 e8 2b 57 2e 1b 26 a2 db ff fc ef ff e9 c5 e7 b7 3c ff c9 28 ea be a2 52 a9 9c 98 65 59 5f 96 19 84 41 80 4a a5 8a 66 92 21 4d b2 56 25 c8 92 81 31 85 fa b8 14 a0 42 e0 25 b3 06 42 14 fd d8 ad e4 9b 2a c7 bb a6 3d 91 af 3f 5f a4 e1 60 41 ae 98 a7 22 80 84 9f 21 f3 cd 86 de a2 40 07 12 ba 0c f0 ad 45 92 a6 70 ce 21 ae 84 10 e4 10 06 be a2 35 31 36 8a 30 Data Ascii: XoJGELL((/4O8Zw\|ko]=\|gt{\"t+:"3:SyG2sW)@b&\@j&nQsi9E@3+W.&<(ReY_AJf!MV%1B%B*=?_`A"!@Ep!5160

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49728	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:17 UTC	358	OUT	GET /img/block_2.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:17 UTC	405	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 11271::1728761125163-8942e3ff39cd6784c7c89bd6eb26d604 Age: 1708795 Date: Sun, 13 Oct 2024 18:12:17 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "9b7c1670777cc38a18fc6b98443b40036fde8de97cdba6087e2a31a1de9e748b" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 18787 Connection: close
2024-10-13 18:12:17 UTC	6240	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 65 08 06 00 00 00 bb be 46 f1 00 00 24 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ad 9c 6b 96 9c 37 0e 64 ff 73 15 b3 04 be 1f cb e1 03 3c 67 76 30 cb 9f 1b cc 92 6c 49 6e bb ed b6 64 a9 4a 99 59 fc 48 02 08 44 80 a0 9d fd bf ff 7b dd ff e1 d7 c8 a1 ba 5c 5a af a3 56 cf af 3c f2 88 93 6f ba ff fc 9a ef ef e0 f3 fb fb fd aa f9 eb bd f0 e3 eb ae 96 af 37 22 2f 25 be a6 cf 3f 7b fd fa fc b7 d7 c3 f7 01 3e 5f 26 df 95 df 0d d4 f7 d7 1b eb c7 37 c6 d7 93 63 ff 69 a0 f8 f9 92 34 23 7d 7f be 06 1a 5f 03 a5 f8 79 23 7c 0d 30 e7 d7 52 46 6f bf 5f c2 b2 cf d7 af 9f ff 6c 03 7f 9c fe ca fd c7 69 ff f2 ef c6 ee 9d c2 73 52 8c 96 42 f2 fc 9d d2 d7 04 92 Data Ascii: PNGIHDRdeF$zTXtRaw profile type exifxk7ds<gv0lIndJYHD{\ZV<o7"/%?{>_&7ci4#}_y#\|0RFo_lisRB
2024-10-13 18:12:17 UTC	12547	IN	Data Raw: 79 13 3d 4b da 29 dc 58 eb 10 57 9f 18 c3 26 e0 2f 42 70 4a 53 d0 83 2c e0 06 68 9a 82 91 22 00 b7 c3 3a fc d1 71 df eb 9e 9d 6a 07 d8 b5 00 ee 67 91 e2 10 b1 49 3b 04 8c 1c 41 21 00 19 36 0f d3 ad 0c bf 50 ef 4c 63 37 0f ce b1 41 f1 1d 72 14 1c 6f 65 75 34 9e 53 4d c7 f7 f9 5b 3b 18 8a 5f 3d a3 80 4c 60 df b7 ce 45 d9 3d 50 d9 23 bb 4d 27 07 5e ed bf 6a 90 26 f7 7d 32 8b ce ca 82 da 1a d5 57 ab ea 18 6b 01 70 ee 69 8e 39 d7 0a ef 36 1d 89 e2 f8 8b 71 de 72 5f 43 80 08 91 0f 4d a7 5b 6a 2e f5 28 ff ab fe 1c 38 38 52 67 81 ad e0 0f e9 a3 99 53 a9 4e e7 92 07 37 68 2f 8b 17 c6 61 ff d8 8c bb db 16 d6 ea 3c fd a8 30 e9 6f eb 6a 95 58 9f a0 cd ea 0e 45 b6 17 7f 8f 7b 95 ee 1a d6 d4 15 8b a1 24 c2 e3 a2 f9 c6 dc d4 35 8c 90 22 c3 bf 65 91 9c 9b 27 c1 cd ac 52 Data Ascii: y=K)XW&/BpJS,h":qjgI;A!6PLc7Aroeu4SM[;_=L`E=P#M'^j&}2Wkpi96qr_CM[j.(88RgSN7h/a<0ojXE{$5"e'R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49729	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:17 UTC	360	OUT	GET /img/no_avatar.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:17 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 28953::1728761125163-d5d30f28ca92743610c956684a424b7e Age: 1708790 Date: Sun, 13 Oct 2024 18:12:17 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "4b842e25c6be485fd7f06b745ac91db2b6e9eee778c5442b157be78d51f83563" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 6043 Connection: close
2024-10-13 18:12:17 UTC	6043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 17 50 49 44 41 54 78 da ed 9d 09 70 5d e5 75 c7 1f fb 12 c2 16 68 c2 52 96 04 32 a4 50 d6 50 36 43 ca 60 37 2c 21 6d 26 90 4e 9a 96 4e 98 4c 09 4d 0a 4d 27 40 67 5a 1a 87 a4 10 28 29 81 34 03 b4 10 62 ed 92 65 c9 5a 2c c9 92 b5 59 b2 b1 6c 61 d9 f2 6e 55 28 89 58 52 08 18 03 66 33 f6 eb ff 48 0f e9 c9 7a 7a 7a cb bd f7 dd e5 77 66 7e 63 0c c6 7a ef dc 73 ce fd be f3 9d 73 be 58 0c 41 10 04 09 87 0c 0c 0c 1c bd 79 f3 e6 33 c5 a5 e2 06 71 8b f8 9e b8 c7 d8 b4 69 d3 03 fa f5 27 fa f5 61 f1 e4 96 2d 5b 9e b0 df 27 b8 ef a3 3f a7 7f ff 5d f1 75 fd f3 3c fd b9 0b 36 6c d8 f0 87 fd fd fd 87 a3 61 04 29 a0 Data Ascii: PNGIHDR\rfbKGDPIDATxp]uhR2PP6C`7,!m&NNLMM'@gZ()4beZ,YlanU(XRf3Hzzzwf~czssXAy3qi'a-['?]u<6la)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49730	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 18:12:17 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=167539 Date: Sun, 13 Oct 2024 18:12:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 18:12:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49731	104.26.5.15	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:17 UTC	350	OUT	GET /v2/free/self/ HTTP/1.1 Host: api.db-ip.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:17 UTC	734	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:12:17 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: max-age=1800 x-iplb-request-id: A29E9FD1:E29E_93878F2E:0050_670C0D81_2BF61500:4F34 x-iplb-instance: 59215 CF-Cache-Status: EXPIRED Last-Modified: Sun, 13 Oct 2024 18:12:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FDD%2FeJ0ILQL2KyPIaAmUphO1%2BfkzGffBBVIkpSNVLYt8DRfT3isTvFbDXUJy82UHtL4GsAeC2xProSgzSqz%2FjMP78wDI3x1x2lByn9VAIhiLyEfBrdQBWe%2F8wJWNcG8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d214c096d6643e8-EWR alt-svc: h3=":443"; ma=86400
2024-10-13 18:12:17 UTC	246	IN	Data Raw: 66 30 0d 0a 7b 0a 20 20 20 20 22 69 70 41 64 64 72 65 73 73 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 20 22 4e 41 22 2c 0a 20 20 20 20 22 63 6f 6e 74 69 6e 65 6e 74 4e 61 6d 65 22 3a 20 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 73 74 61 74 65 50 72 6f 76 43 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 73 74 61 74 65 50 72 6f 76 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 0a 7d 0d 0a Data Ascii: f0{ "ipAddress": "8.46.123.33", "continentCode": "NA", "continentName": "North America", "countryCode": "US", "countryName": "United States", "stateProvCode": "NY", "stateProv": "New York", "city": "New York"}
2024-10-13 18:12:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49733	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:18 UTC	611	OUT	GET /img/fb_round_logo.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:18 UTC	405	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 11271::1728761125163-81bb5cf1e451109cf0b1868b2152914b Age: 1708793 Date: Sun, 13 Oct 2024 18:12:18 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "676c83478e410d324fe56aca428d3305505732c648667b22e15c8222117c75e6" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 42676 Connection: close
2024-10-13 18:12:18 UTC	14955	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 50 14 85 4f 53 b5 22 15 07 3b 88 08 66 a8 4e 16 44 45 04 17 ad 42 11 2a 84 5a a1 55 07 93 97 fe 08 4d 1a 92 14 17 47 c1 b5 e0 e0 cf 62 d5 c1 c5 59 57 07 57 41 10 fc 01 71 75 71 52 74 91 12 ef 4b 0a 2d 62 7c 70 79 1f e7 bd 73 b8 ef 3e 40 a8 95 98 66 b5 8d 02 9a 6e 9b a9 44 5c cc 64 57 c4 d0 2b c2 e8 a0 9a c6 a0 cc 2c 63 56 92 92 f0 5d 5f f7 08 f0 fd 2e c6 b3 fc ef fd b9 ba d5 9c c5 80 80 48 3c c3 0c d3 26 5e 27 9e dc b4 0d ce fb c4 11 56 94 55 e2 73 e2 11 93 1a 24 7e e4 ba e2 f1 1b e7 82 cb 02 cf 8c 98 e9 d4 1c 71 84 58 2c b4 b0 d2 c2 ac 68 6a c4 13 c4 51 55 d3 29 5f c8 78 ac Data Ascii: PNGIHDR!iCCPICC profile(}=HPOS";fNDEB*ZUMGbYWWAquqRtK-b\|pys>@fnD\dW+,cV]_.H<&^'VUs$~qX,hjQU)_x
2024-10-13 18:12:18 UTC	2309	IN	Data Raw: 70 6d bb 92 fc ac 2e ac 2b b9 78 bc d2 07 32 9a fa 0f 00 34 ac dd 4a f9 e3 cf cd 0e df 77 4f bb a3 1a 00 00 d7 f5 bd 19 cd c3 62 99 00 6b 59 b7 d7 9f 4d f2 33 49 6e 53 0d 00 68 56 5d 92 67 ef 6d 0f 7f fa 03 33 ad 56 e5 fa 03 00 e0 06 76 25 f9 d3 dd 5e ff 56 a5 18 71 01 f9 5d cf 25 f9 9c 32 00 40 b3 4a 49 0e ee aa ea 3f f3 b1 d9 72 eb de 4a f7 15 00 c0 ea c8 29 2e 23 c0 ca 77 66 5f e9 be 02 80 31 f9 c2 d3 9d e1 c7 1f e9 b4 55 02 00 60 d5 76 64 34 0b 4b 17 56 04 58 6f fb 40 a4 9a 00 d0 b8 ba 24 0f 1e 69 d5 3f ff c1 d9 6a b6 ed ba 03 00 60 8d 9e 8d bc 22 89 00 2b dd 5e 7f 2e ba af 00 60 2c 66 db c9 cf 7d 70 66 f0 f0 ad 2d dd 57 00 00 6b 37 97 e4 67 ba bd fe b6 cf 2c fc 4b e8 68 4d a9 9d 07 01 a0 61 75 49 3e 70 5f 7b e9 0b 4f cf b4 93 54 2a 02 00 b0 2e 72 8b Data Ascii: pm.+x24JwObkYM3InShV]gm3Vv%^Vq]%2@JI?rJ).#wf_1U`vd4KVXo@$i?j`"+^.`,f}pf-Wk7g,KhMauI>p_{OT*.r
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: e4 66 08 b0 3e 9b e4 88 f3 09 00 9a 57 97 e4 f6 7d ad c1 43 a3 e5 83 22 2c 00 80 ed 67 2e c9 0f 2c 6f a0 37 b5 a6 3a c0 ea f6 fa 47 92 7c c6 05 35 00 8c 47 5d 92 fb 0e 57 e5 be 43 ad a2 1a 00 00 db d6 87 93 3c 36 cd 2f 70 da 3b b0 de 9f e4 3d ce 23 00 18 8f 76 95 3c 71 7b 3b 3b 3a 99 51 0d 00 80 6d eb 9e 24 9f 98 e6 17 38 b5 01 56 b7 d7 6f 25 f9 7c 92 3d ce 23 00 18 8f 99 76 ca 73 f7 b7 97 54 02 60 e3 54 d5 e8 0f c0 34 fd 6a ca 68 37 c2 a9 cd 60 a6 79 b7 a1 7b 93 7c dc 39 04 00 e3 51 4a 72 78 4f 55 1e 38 dc 9a 53 0d 60 85 df 11 65 a9 ce 42 5d 97 9c 5f 18 2d 39 5e 1c 94 f6 d9 f9 cc 94 f2 ce 55 c7 83 3a b9 b8 38 fa dd c2 f5 5d 5c 2a ed fe a5 22 c4 02 a6 cd 33 cb 7f fe c5 34 be b8 69 0e b0 3e 9a e4 21 e7 0f 00 8c 47 5d 92 47 6f 6b 2f de b9 bf 6a 67 73 6c ec Data Ascii: f>W}C",g.,o7:G\|5G]WC<6/p;=#v<q{;;:Qm$8Vo%\|=#vsT`T4jh7`y{\|9QJrxOU8S`eB]_-9^U:8]\*"34i>!G]Gok/jgsl
2024-10-13 18:12:18 UTC	9028	IN	Data Raw: fa ed 69 1c 2e 15 c5 66 51 60 6d a6 4f 54 cf a8 ee 15 05 00 00 00 2b e2 78 f5 fc ea ad a2 d8 3c 0a ac 0d 34 1f 70 f7 c6 ea 45 cd 06 df 01 00 00 c0 b2 7b 6b f5 a7 d3 38 9c 10 c5 e6 51 60 6d a8 69 1c 8e 57 7f 52 bd 4b 1a 00 00 00 2c b9 4f 55 cf 98 c6 e1 1e 51 6c 26 05 d6 06 9b c6 e1 8e 66 5b 09 af 92 06 00 00 00 4b ea e6 ea 69 d3 38 5c 2b 8a cd a5 c0 da 70 d3 38 5c 5e fd 7a 35 49 03 00 00 80 25 73 a4 7a 4e f5 41 51 6c 36 05 16 55 e7 cd 3f 10 1e 10 05 00 00 00 4b e2 54 f5 aa ea 65 d3 38 6c 8b 63 b3 29 b0 68 1a 87 93 d5 4b e7 1f 0c 86 ba 03 00 00 b0 0c ce ab 7e 77 1a 87 23 a2 40 81 45 55 d3 38 1c ae 7e bf fa b0 34 00 00 00 d8 67 57 55 4f 9f c6 e1 66 51 50 0a 2c be c9 34 0e 5f ab 7e a3 32 18 0f 00 00 80 fd 72 47 b3 f2 ea b3 a2 e0 eb 14 58 7c 8b 69 1c 2e 6d 56 Data Ascii: i.fQ`mOT+x<4pE{k8Q`miWRK,OUQl&f[Ki8\+p8\^z5I%szNAQl6U?KTe8lc)hK~w#@EU8~4gWUOfQP,4_~2rGX\|i.mV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49732	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:18 UTC	601	OUT	GET /img/2FA.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:18 UTC	406	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29015::1728761125163-03d39d5d071182aba1b01ba2e859de39 Age: 1708793 Date: Sun, 13 Oct 2024 18:12:18 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "a7fd65363687e512751d88f7850b61969427e8d3aa9a177946bcd4bc280b71ad" Content-Type: image/png Accept-Ranges: bytes Response-Time: 2ms Content-Length: 114767 Connection: close
2024-10-13 18:12:18 UTC	912	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1d 00 00 00 fc 08 06 00 00 00 d3 e7 16 e9 00 00 01 83 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 22 15 07 33 48 71 c8 50 9d 5a 10 15 71 d4 2a 14 a1 42 a8 15 5a 75 30 b9 f4 0b 9a 34 24 29 2e 8e 82 6b c1 c1 8f c5 aa 83 8b b3 ae 0e ae 82 20 f8 01 e2 ea e2 a4 e8 22 25 fe af 29 b4 88 f1 e0 b8 1f ef ee 3d ee de 01 42 a3 c2 74 bb 67 1c d0 0d c7 4a 27 13 52 36 b7 2a 85 5e 11 46 08 22 62 88 28 cc 36 e7 64 39 05 df f1 75 8f 00 5f ef e2 3c cb ff dc 9f 63 40 cb db 0c 08 48 c4 b3 cc b4 1c e2 0d e2 e9 4d c7 e4 bc 4f 2c b2 92 a2 11 9f 13 c7 2c ba 20 f1 23 d7 55 8f df 38 17 5b 2c f0 4c d1 ca a4 e7 89 45 62 a9 d8 c5 6a 17 b3 92 a5 13 4f 11 47 35 dd a0 7c 21 eb b1 c6 79 Data Ascii: PNGIHDRiCCPICC profile(}=H@_S"3HqPZqBZu04$).k "%)=BtgJ'R6^F"b(6d9u_<c@HMO,, #U8[,LEbjOG5\|!y
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 5c df dc fc 6f 04 bc dd 3a 7c 2e e4 d7 9f 70 8e 61 7d 4d 6d 80 94 e2 a8 f9 47 d9 5a 9a ce 75 9a 78 36 fc 76 8f ff ad e7 8f f5 3b 08 5f 23 bf 3f c1 ee 3d 6b 2d 14 09 48 a2 38 16 88 fd ef 2c 43 91 a8 5e 9f aa 5d 74 d3 2e a1 41 d0 60 f4 5a 63 af 7b ec fa 0e 3b dd 43 1b c6 cb f3 57 d0 6c 61 ad 85 61 1b 07 a7 20 09 48 81 de 32 34 d8 39 17 30 20 16 80 60 48 52 80 60 98 de 02 82 e3 fb 61 2b bc db d1 f7 bd df a7 04 60 41 24 41 c4 70 c3 dd 39 19 cc c6 1b 1b 13 9d 0e 21 14 88 18 6c a6 ad 9e 94 72 d2 e9 70 fb 7c 33 a7 83 18 b0 c6 44 27 20 fd 17 fe da b6 9d 5c 10 b4 b6 93 4e d3 9c d3 11 ee 5f f8 cc f0 d8 48 8a cc ea 32 8d f7 6b 13 af af 74 9f e6 ee 9f a4 69 a3 62 66 9e 0f cd 4c ea be ef 21 a5 84 10 02 cc 0c 63 0c ac b5 f1 3d 31 e3 55 cc 1d 7f ee be a7 f7 b2 f4 1e df Data Ascii: \o:\|.pa}MmGZux6v;_#?=k-H8,C^]t.A`Zc{;CWlaa H2490 `HR`a+`A$Ap9!lrp\|3D' \N_H2ktibfL!c=1U
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 37 7a a4 9f 11 2a 74 82 1d d1 49 49 7b 29 c4 1e ad d7 94 9c 61 ba fe 59 93 05 1f fe 82 94 44 a7 ed d0 80 31 09 0a 83 d8 5f ab 1a 47 fc b5 ec 7b c6 10 98 d8 73 50 42 05 16 60 8c 2d 0a 4a ba 63 c9 e8 00 75 7a 9c 9e 81 e0 a8 e9 34 b2 41 05 41 ae 92 0d eb 0d fb 1e 42 65 4e 4d 68 f8 17 1a e1 69 1f cc 86 eb 9d 43 bf 23 45 a0 c2 59 e9 7b 0d a5 14 6e 76 7b 34 52 61 a3 3b 28 06 3a 58 a8 d2 c0 32 30 6f 1d b9 96 d0 88 bb f4 20 a8 29 b1 1d a3 40 5a 62 f3 d6 8c df 31 ea 77 73 91 69 de 59 70 04 95 25 50 60 e8 21 10 9c 9a 51 6a 27 08 c6 64 3d 03 8c 5f 50 f3 de 02 a6 d0 5b 20 ed 81 20 0a a9 b1 da 75 17 ff bb d0 ee 7b 8a 93 52 f2 88 e7 14 06 eb 7f 22 5a 5b 05 42 2b 25 d6 aa c1 bd b6 c1 a3 d5 12 e8 25 96 52 80 8c 01 b8 87 b4 16 52 30 24 99 a8 5b 40 ab 05 5c 2b b8 06 86 15 Data Ascii: 7z*tII{)aYD1_G{sPB`-Jcuz4AABeNMhiC#EY{nv{4Ra;(:X20o )@Zb1wsiYp%P`!Qj'd=_P[ u{R"Z[B+%%RR0$[@\+
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 9a 67 e1 cc 3f d7 73 1c b6 81 b9 2c 19 ae 5f 3d c2 a8 1a 59 6b 6c 60 67 7b 13 a3 83 7d 34 ed 02 a3 42 78 49 5f d2 1a a3 42 e0 ca d1 01 a4 56 28 b8 09 1e 07 bb db d8 dd dc 40 25 cc 88 b9 52 0a 5a 49 14 65 89 ad 2d 8e 4d 6b 40 c5 01 6c 8e 2b 6c 4d 46 90 7a df 58 0e 18 90 1f ed e2 12 a3 92 e1 9d ab 7b 68 14 20 ad 93 d2 d5 2b fb d8 db da 40 55 0a df 12 80 96 10 c5 08 d3 a9 c0 64 73 8a a6 31 81 ab e0 c0 c1 ce 26 b6 a7 63 94 82 f5 02 73 5d 2f 30 1a 8d 30 19 55 d8 da d8 00 e7 46 69 f4 60 7f 0b fb 7b 5b 70 80 97 26 a0 b5 13 3f 82 8b 95 e0 b4 3b cf 84 10 28 cb 12 45 c1 d0 5c 6a 9c 9f 9f e3 f8 d9 73 cc a5 f1 d0 71 08 44 7c ad 17 dc 89 f7 b5 cb dc 28 a5 51 5a ce 10 ec f9 c7 89 81 17 c2 7b 40 d4 f3 85 ff db 79 49 80 19 8f 08 21 18 9a d6 e9 08 a8 25 b3 49 00 28 98 c2 Data Ascii: g?s,_=Ykl`g{}4BxI_BV(@%RZIe-Mk@l+lMFzX{h +@Uds1&cs]/00UFi`{[p&?;(E\jsqD\|(QZ{@yI!%I(
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 68 ad 45 97 b1 4d 36 6a 73 c4 fe 61 e7 1c 36 9b 4d f3 82 e6 84 a3 63 17 f5 92 23 b1 26 73 5e 9e 87 dc ea bd 26 2c 56 95 c1 3d 22 13 28 07 69 0d 59 59 e2 9d 1c 83 a4 d4 60 da 18 50 d5 ec 8d 6b 37 6f ce 59 a9 99 e9 35 51 8d 5a 4d 1a da 2c ad d0 07 b5 50 32 20 9c 78 a0 82 a8 7f 60 52 c9 05 dd 09 a8 3f 87 d8 73 b8 91 30 ee 5f 41 f6 df 02 18 00 72 29 73 66 9d eb e7 f8 6b 10 97 09 07 d2 89 a4 7a 84 8c ca 87 c5 ed c8 fa 1f fc 18 10 b8 61 87 f1 e6 15 e4 d5 5f b0 7b f5 67 d0 f5 57 b8 77 ef 12 4f 2e 04 e7 17 06 b4 db 82 79 04 e0 30 c8 2d 06 19 a1 a4 be 3c 68 2d ec 69 8f 91 4d ca ec 99 15 a6 23 f4 9b 1e b6 23 d0 e0 60 bb 0d 70 3e 02 e6 16 e3 f5 35 f6 c3 1b b8 fd 8d 2f 3d 90 81 84 36 4a 49 42 5e 23 58 33 f9 f5 1f 31 40 73 a2 89 86 8c 62 6e cf ad c9 6b e4 79 91 a9 45 Data Ascii: hEM6jsa6Mc#&s^&,V="(iYY`Pk7oY5QZM,P2 x`R?s0_Ar)sfkza_{gWwO.y0-<h-iM##`p>5/=6JIB^#X31@sbnkyE
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 8c ac 35 2d 47 63 1b 7b 61 35 a6 71 5e 97 e3 5c 86 34 e8 74 34 e4 65 17 8b e5 fb f2 a7 15 9d 3c 7a b4 6d f0 3a 17 d6 b5 b9 20 32 e2 fc 21 6b 2d 8b c8 65 5b 7a 27 56 17 38 3c 43 64 e2 c6 9d bb 01 0a 91 f7 55 cc c1 48 00 8b 54 10 ef e5 d6 88 e5 ef c5 c7 17 09 fc 2e cf 69 b4 4f ab 3a af 44 94 89 70 b5 36 47 3c d7 45 7a 1d 8d 06 08 4b 9d 95 ba 3b e4 1c 7f b2 ee 5e 71 76 30 db dc 70 a4 ea c4 82 58 72 89 14 3e 56 59 d1 f9 7e 34 8f 9b d0 12 1f 6b a4 c4 d8 81 c6 a9 3e 02 4a e1 7d dd 57 17 8b 07 76 9f ab 5c 5f aa fe fb 00 27 43 48 6e 1d e6 b3 fc 8e de 1c 72 4d 55 ce be 55 f9 90 fe fe 2a 54 9e b2 0e ee 0b f8 a9 da dc db 94 47 d6 6d c5 8d 39 2d 29 69 f2 3e eb e8 be ec 57 72 22 40 b6 48 cd e7 8c a8 fe cd 13 49 3d e1 91 5c 23 84 a1 0a 0e ae 99 ca a0 2c 71 6f de 70 f7 Data Ascii: 5-Gc{a5q^\4t4e<zm: 2!k-e[z'V8<CdUHT.iO:Dp6G<EzK;^qv0pXr>VY~4k>J}Wv\_'CHnrMUU*TGm9-)i>Wr"@HI=\#,qop
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 19 1f bf 7b 93 ab 5b 63 f6 b7 76 70 d6 80 d4 5e e8 4c d4 41 d9 35 f7 8d 75 41 0d 36 d0 72 1b 50 1b 4a 15 36 2a 77 d8 ee 9c 17 5d fb 7a 35 de 5d 94 d4 f3 52 dd 0d d4 db 3d 18 71 1b 52 f3 5c aa cd ff 1c f0 09 59 17 2f 39 ef 5a e5 ac 66 ce 88 33 25 72 d9 36 5e 1a 13 f2 7f f4 12 43 fb 32 d4 0d 91 36 be 34 61 fc 10 ac ee 9d 73 08 25 51 32 78 f4 18 df 41 93 02 31 5d 5e 44 5c 32 4e cd e7 fe 3d db 94 2e 9d 10 c1 4a c1 97 31 eb f3 22 94 6a 5e b7 55 85 71 0e 2d 25 42 29 44 54 60 75 42 34 db 11 e1 bc aa a0 58 5b 3b ca d7 7f ab b0 3d c2 ef c4 fa be b5 13 6e 5d fa 31 75 f9 2c 7c df 89 48 cc 40 0a af 2c 1c 65 39 ea e4 93 f6 e8 d7 a7 28 63 c6 31 2b 38 03 ab 04 b2 e2 41 57 0f e2 96 00 d4 9a 7e 24 e7 d3 f0 a2 43 d8 eb 0c a6 fa e6 18 20 ba ac cb c3 48 91 a7 ba 0c e8 54 49 Data Ascii: {[cvp^LA5uA6rPJ6*w]z5]R=qR\Y/9Zf3%r6^C264as%Q2xA1]^D\2N=.J1"j^Uq-%B)DT`uB4X[;=n]1u,\|H@,e9(c1+8AW~$C HTI
2024-10-13 18:12:18 UTC	15551	IN	Data Raw: 6f d6 0b e6 7f d8 c0 e3 d0 1c 9c cc b5 92 a1 c6 a1 7c 9e cb 7c c7 f6 cd 84 54 59 7a 7f f8 8c b0 c8 11 1c e2 01 52 d0 be 7b b1 26 e8 15 be 2b 1a 1c ce 10 da ab de 2d 07 16 ed 43 89 e2 52 92 ff 5c 72 b7 b4 bc be f4 91 ae 29 25 49 82 b9 fd cf d7 80 21 93 6c c8 13 ac 9c 30 5c 93 8f 28 05 6f 4b c6 63 ae c9 12 bc 57 88 68 ca e9 98 98 f9 a8 b2 e7 4a 6d 10 ed ed 00 cf 0b 72 cd ed 70 ad f4 90 0a 12 05 66 7f 8d 59 5d 2b 8f 5c c7 50 2e 1f f8 e9 ef 43 a9 15 ab 32 e8 6b 5e 35 4b 02 89 12 c4 57 0a ac f2 ef b3 be 48 92 6f d9 67 26 ec 33 13 eb e1 74 eb 67 16 eb 22 46 57 de aa fd 2e 8e ab 41 ec da da 42 39 2e 4c 74 4a 7c 4b af 08 06 e5 18 d5 ac 04 04 0b 62 f7 4f b6 97 90 cb 73 6c 9e 3f c6 ee c5 13 ac 21 68 34 80 41 d0 ae 57 ce 80 30 3d e7 7b c6 43 6f 6a dd 4e 55 f4 c3 18 Data Ascii: o\|\|TYzR{&+-CR\r)%I!l0\(oKcWhJmrpfY]+\P.C2k^5KWHog&3tg"FW.AB9.LtJ\|KbOsl?!h4AW0={CojNU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49734	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:18 UTC	603	OUT	GET /img/phone.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:18 UTC	406	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 11271::1728761125163-3c18a93313e72ab9967152a4e92aa238 Age: 1708791 Date: Sun, 13 Oct 2024 18:12:18 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "fbc7addde1cd6057bd59c03941fcf38a6ac17dd90312d142ebd7520891c3656e" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 255341 Connection: close
2024-10-13 18:12:18 UTC	14954	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 18 08 06 00 00 00 cc 10 47 90 00 03 e5 34 49 44 41 54 78 da ac 7d d9 8e 65 59 92 d5 b2 33 dc d9 c3 23 23 22 b3 32 aa ba 26 c8 ae 12 ad a6 5b aa 06 1a 21 90 78 84 1f e0 03 e0 0f 80 97 7c e3 5b 78 e5 43 e0 a5 25 ba 2a bb 86 cc ca b1 72 8c c9 c3 c3 fd fa 9d ce 39 86 db 36 5b b2 ad 2b 51 8c 37 e2 e8 de 33 ec 7d f6 60 db 6c d9 b4 5d f4 cb 7f f7 15 80 0b fc 3f 7f 24 be 27 00 0a a0 89 73 fe 6e 01 51 60 3a 01 cd c2 af e9 3e ca f1 19 f5 f2 ac 4f fa f8 d9 fa b9 1e e3 99 0e 50 ab 67 e5 75 8d 37 80 0e 51 56 80 66 e9 65 d4 eb f2 67 ae bd ac 2a 20 12 ed e9 01 3d 00 cd 06 90 0e 98 b6 d1 8e c9 ef 63 8a ba 7a 40 e6 5e e7 74 0b ff 58 db 46 7f 87 74 5e 0f e0 cf 4f 7b 40 ed de de db d9 3e 04 30 d8 b3 76 ee Data Ascii: PNGIHDRG4IDATx}eY3##"2&[!x\|[xC%r96[+Q73}`l]?$'snQ`:>OPgu7QVfeg =cz@^tXFt^O{@>0v
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 31 5c 25 e3 b1 25 cf dc 96 a4 18 bf d0 d2 df a1 00 4a 01 f0 b2 0f d4 5b b4 9f c9 98 55 de 03 8a 73 a0 38 05 5c 8f c5 c9 df 47 fd f8 cf d0 bf f8 0c ed f5 1d 74 39 61 bf 3c 41 96 6d 83 be 6f 41 fb c8 e0 51 8b 69 73 b0 6e 99 d2 1a 04 04 0d df 82 f6 c4 d8 99 3c fa 00 a8 39 30 81 53 ac 50 a3 0a 65 dc 0e a5 26 87 20 dc 2b d4 e1 59 1f 80 e5 32 78 07 8e 21 2c 5c c9 4d 00 88 a4 d1 96 9e 1d 4a 92 6d 7d 98 ae 6a ec d3 15 ae d7 f7 71 f5 ee 63 d4 e7 b7 d1 d7 bb a8 c6 73 64 fb 27 a0 00 84 ed 5c 18 19 d1 62 11 7a aa e7 9b 18 c0 4a 2a 74 d0 b9 a9 d7 73 66 b8 98 b1 79 22 3a 83 c4 26 93 28 2d 8b 1e c2 6c d7 88 31 7b 3a b7 6d 6c ae d1 b9 05 43 6d 62 2a b9 b1 b0 88 38 77 28 d0 c6 48 92 a1 50 2f e0 67 cf 80 57 5f 80 4f 9f 01 8b a5 8c f1 3c 16 86 be 22 50 a6 e3 7f ce 00 74 d1 Data Ascii: 1\%%J[Us8\Gt9a<AmoAQisn<90SPe& +Y2x!,\MJm}jqcsd'\bzJtsfy":&(-l1{:mlCmb8w(HP/gW_O<"Pt
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 7b af bd be f5 ad 75 ef 1c c3 cf bf 4d 16 59 81 c5 bd 27 fe dd 94 78 99 81 d6 34 7d 14 10 8e 16 08 77 8e 10 3f bc 2d a0 2f de 39 04 5d 5f 82 e2 20 c9 13 68 ad c4 0d fc f0 12 45 a8 30 0d e0 d7 79 71 f3 77 7a a1 5c ca 69 13 b0 01 b0 eb 41 65 87 e2 2c 61 f2 7e 85 f9 07 35 96 1f 1d a2 ba 5d 83 67 13 ac 9f 95 b8 fc dd 80 ed 4b 12 cc 56 cc a3 e0 b6 20 bf 3d b2 f5 67 1a 83 bf ef 2e 07 8f c1 de 30 f8 f6 99 45 2c 8a 7c 2e 5c ed 20 5e 5f 82 bf f8 1c 7c ef 17 e0 2f 7f 0b 34 6b 50 5d 01 f3 05 68 3e 33 8f 46 5b 20 32 5f c9 14 1e ac 12 d0 e7 2e 5d f3 65 23 2a d5 27 94 6d 4c c9 99 bd d6 11 6c 1d b6 d9 03 50 6d 5d 88 4c 4f a8 c0 8b 24 7b 77 6a a9 40 05 50 df 55 c0 36 3c 37 5b ac 28 d7 02 ee e4 77 99 17 fd d9 a1 21 29 48 74 89 47 98 09 a3 88 a4 c0 c0 9b 00 3d 4c 00 c3 5a Data Ascii: {uMY'x4}w?-/9]_ hE0yqwz\iAe,a~5]gKV =g.0E,\|.\ ^_\|/4kP]h>3F[ 2_.]e#*'mLlPm]LO${wj@PU6<7[(w!)HtG=LZ
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 12 0c 5f 51 f8 a3 ff 6e c1 34 f6 3d d2 bc 44 9a 26 70 46 fc 0e 7e 63 36 c9 44 ad ac 49 d9 08 28 e4 be b0 c6 ae 73 d3 b8 5d ea f3 54 eb 64 90 6c 72 35 5c 4a 53 07 78 10 8d ad 6c cf ab 15 80 02 b3 b4 67 4d 74 5b 60 f7 ba b3 47 a6 9b ae 4d 8b 7c 69 d1 8c d3 c8 33 b7 e8 35 da bd 31 32 14 4e b2 9d 98 34 6c d5 4e a6 bc 69 e3 c3 5c 99 b4 94 81 e9 13 c0 fc e3 d2 60 42 c3 b9 36 7c cc 3e a3 60 ae 7d 53 01 e0 ee 55 d3 1e 36 6e 2d 63 91 91 97 26 11 b0 26 0f 22 03 bf ec e5 70 d7 ed d9 e4 b6 0d c0 c2 7d 90 0a 8c f8 ed 42 03 38 02 ed b5 c9 13 8c 1d 24 6f 0a b2 73 8d a6 a6 79 26 54 f3 7b c0 8d 53 f4 5c 61 99 2f 84 d9 5b 63 2a d7 fa 1a 3b 01 7e 17 b4 14 52 45 fd 76 0b ad e6 51 23 d7 e7 02 3d 06 24 01 69 6b a8 d6 af 67 cd 09 4e 66 db f6 1e dd c4 55 5e 60 52 ae 71 e3 a9 6f Data Ascii: _Qn4=D&pF~c6DI(s]Tdlr5\JSxlgMt[`GM\|i3512N4lNi\`B6\|>`}SU6n-c&&"p}B8$osy&T{S\a/[c*;~REvQ#=$ikgNfU^`Rqo
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 8d 66 cd 68 04 f4 49 fa 06 b9 3c b2 17 60 38 e0 20 4d 22 20 4d d9 60 4e e2 1c a8 37 12 5b 18 6f 1a 59 f3 c1 f4 80 10 36 f0 92 bf 41 dd b1 3b d2 80 73 7e 2f 4d 20 6b d6 59 06 03 38 a8 e6 c0 98 c0 82 4c ad 95 73 81 96 f4 0b b7 10 ab 13 59 9e a8 a0 81 d2 d9 07 d2 78 b9 2d df 58 0f f1 2c 0c 65 cf a3 78 1e de d1 29 ba 99 70 be 7e 83 d5 c5 4f ac ec f6 48 35 25 cd d6 c0 dd c1 67 ce 95 80 b6 32 99 65 1b f8 b8 11 f0 a5 ed fd 76 f0 b4 4f 83 31 43 03 52 7f 38 03 88 00 34 26 4d 96 51 be 55 61 f6 f1 67 1a 99 26 df c1 66 e2 ec 5d ba 37 06 16 93 32 84 5e b2 4b 1b 70 35 43 22 74 16 73 b6 33 3b 92 51 98 29 f5 16 fc 46 06 59 1e 3e 03 78 d6 c7 eb 1f 81 c4 67 ef ce 01 4d a5 53 31 86 90 54 cf 11 ec 9b 83 b7 4d c5 be 51 05 00 13 6c 5a 1e db 29 c6 aa 36 17 06 ae 8d e1 63 33 4b Data Ascii: fhI<`8 M" M`N7[oY6A;s~/M kY8LsYx-X,ex)p~OH5%g2evO1CR84&MQUag&f]72^Kp5C"ts3;Q)FY>xgMS1TMQlZ)6c3K
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 60 61 d5 1a 67 1b d9 99 fb 6a be e0 5a 9b 1a cd 78 d4 2e 8c ac 93 5d 11 6e 1a c8 8b 85 72 74 23 33 3c b9 68 d9 6c e6 5a 42 5e 2c 96 55 5e 15 8b dc 59 3f c2 83 9f 12 e2 84 af f7 61 c0 90 18 10 96 af 55 63 e6 d6 72 a6 19 90 ff f4 02 d0 34 6f 7a 3d b9 ff 9f bd 6d 4b 9c e9 33 ca f5 00 d7 97 a2 61 4f b2 f1 1c 6b 95 2c a8 39 b4 27 8f c8 b6 ee 55 e9 cc 60 fa 33 6f 7c 1e 2f bf f4 6b b8 7b ff 6b 18 ce 1e 63 3b 5c e2 a3 e3 43 4c 79 8b fd 78 17 ab 32 a2 a3 09 8f e8 be 68 fe 1a ce c2 b2 01 30 86 f0 5c d8 bb 87 e5 bb 98 d1 59 1e 30 c9 ed 35 0e b8 e0 4f b4 b9 04 6b dc e2 8f c1 20 d9 fe 80 b5 5c 3f c1 1d 61 f3 4e a1 e5 e6 06 45 4a b6 db b2 c3 4c ad 9a 54 9b 06 31 ab 41 b4 82 44 01 93 fe 78 23 a0 92 41 78 82 db 48 56 a2 b8 c3 1f e1 1a 67 b8 36 16 b3 61 e0 a4 7d 82 d5 f6 Data Ascii: `agjZx.]nrt#3<hlZB^,U^Y?aUcr4oz=mK3aOk,9'U`3o\|/k{kc;\CLyx2h0\Y05Ok \?aNEJLT1ADx#AxHVg6a}
2024-10-13 18:12:18 UTC	8782	IN	Data Raw: 4e 71 05 e4 38 0f 8e bc 71 e4 09 b5 83 76 ce 71 bc 9a ee fb 1c 05 20 2a 2b 22 fe 7a 67 ee 54 5d 9b 78 1c dd df b1 b8 f0 26 94 0d f7 25 9b 7c 88 3b dc 38 9f 63 5c 80 87 4c f6 a7 6d 4e 6a 3d 0e 91 f9 bd 11 af 9d 1b d3 66 50 92 43 5b 96 05 70 52 f0 92 f8 b9 3c 0f 98 e1 8c f8 cc c4 a7 bc 21 91 1d f0 4a 77 82 72 c9 68 38 21 d0 f1 ef 17 72 1b cf d7 f5 46 18 19 28 a7 c9 97 64 7a f5 40 70 a8 d4 46 12 8c 2d 4b a0 2d 0b 28 64 ca 3c b5 0b ad ad 8d b6 ff 5e 94 6e c9 46 7a 03 54 6a f6 93 70 6e 64 99 37 c6 8d 25 83 4a 33 ea 8a 0d 5b a7 82 44 9d e4 32 73 5d e8 c8 c0 6d 22 fb 18 ae 1f 82 19 8a 9e e6 ec 6e d2 ad 06 8a 6d fe f3 0a 5f 48 9d 64 ba b6 bf 11 b3 0d 93 5e bc cf e1 26 e4 76 41 34 77 8a 64 9b 3f 20 c0 dd 1f 82 94 27 88 05 67 8a b0 7e 32 44 21 f8 9f a8 79 2b 07 68 Data Ascii: Nq8qvq *+"zgT]x&%\|;8c\LmNj=fPC[pR<!Jwrh8!rF(dz@pF-K-(d<^nFzTjpnd7%J3[D2s]m"nm_Hd^&vA4wd? 'g~2D!y+h
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: a9 89 6c c2 53 c9 05 88 73 9d f0 c4 05 c8 5c 7d 24 d7 04 b8 68 58 52 e8 36 22 d2 ab 82 10 91 b5 7d c6 f4 1e f5 21 ae d9 10 b5 ee 58 8a 19 4b 74 ff 9a d5 47 1a 99 23 ab 99 13 8a 9d f4 dc 31 dd 29 5a ea 5e 4e 8f 51 de 99 90 bf 36 40 8e 8b 95 77 8f 7d 62 b8 ee 80 1b d9 99 72 09 39 81 eb 02 93 dd cf ee 7b f5 74 86 dc 02 d2 dd c9 d8 81 de cb 83 52 08 70 7a 8f 37 2b 4f a9 1f 91 64 4c 65 89 06 1b a5 2e ca 4b 5b 0c ee 5f 51 4b 81 e4 a5 cf 63 d3 f3 95 cb 38 48 a9 1b 31 f4 1f 03 5c 94 94 4c 2f 08 89 f0 f2 fa 78 74 d6 8a f4 06 74 3c bd 42 22 28 7f b8 6b 13 4a f8 7d c1 9b 45 4c 23 18 c0 df 23 01 9f 69 cc 9a 9f c6 a4 52 af d0 d9 1a 75 40 41 7c 95 0e e8 a1 2e 0e 24 7b ba ca 7c 0e 99 df 89 41 ca ca df c6 04 19 68 ec 4f 83 f2 e6 a4 91 d6 c0 70 cb 57 d1 13 7d ab 90 09 ea Data Ascii: lSs\}$hXR6"}!XKtG#1)Z^NQ6@w}br9{tRpz7+OdLe.K[_QKc8H1\L/xtt<B"(kJ}EL##iRu@A\|.${\|AhOpW}
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 19 7a 6d ea c0 f6 30 4a b6 c1 38 9b 31 b9 e9 3a 7b 6f d8 e8 a6 d2 b0 14 e0 e1 3d c5 4f 7e 0b f0 f4 cd 15 7e ea a9 82 57 ef 6c f1 b9 0f 2e f1 45 6f 04 1e bb 16 03 ec 12 3a 64 20 25 03 7c b9 9f ce 2d 89 1c 50 24 fc ce ab 0d fe c7 c7 47 e0 32 4d b2 0d a9 b8 51 e1 76 13 09 23 6e fc 9e f0 37 7f 6e c0 9f fb fc 39 a4 d9 da b6 f9 be 17 89 92 5d aa 3a 84 81 58 fe f8 63 5b fc ca f7 34 f8 a1 8f 0a 7e ec 63 05 b8 dd 4c a0 12 cb 04 2c 2e 00 87 77 80 b3 53 a0 ed dc 5e 6a 3d 01 c1 31 2b 46 75 b6 b5 59 42 cb 60 9d d2 22 d6 8d ec e0 65 33 14 44 0e 33 4a a6 d9 32 49 83 2a 7e 2d ac 60 64 ea f6 7e f9 33 c7 78 c7 fb 1f c2 63 4f 5e 03 6e db b8 4a a1 3b 4c 2b 24 02 51 e7 23 ac 0c cb 2c 4b b8 c6 0c e2 dd 83 60 f9 73 26 28 b7 7a f4 b7 32 16 f3 30 a7 7d bd 25 d0 a2 6b 1f 13 fc 98 Data Ascii: zm0J81:{o=O~~Wl.Eo:d %\|-P$G2MQv#n7n9]:Xc[4~cL,.wS^j=1+FuYB`"e3D3J2I*~-`d~3xcO^nJ;L+$Q#,K`s&(z20}%k
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 4a ea b4 b2 09 dd e2 98 a6 af 96 3d 1a 14 3e 45 e6 14 8e 53 54 6e 25 13 76 6a 65 09 ed 1f a9 14 b2 1e f4 f1 f3 09 be a8 6b 54 f5 08 ff 8d b1 2f eb 99 ec ba ae 5b fb dc a9 a6 6f e8 81 dd 64 93 dd a4 48 99 9a 1c 43 56 e4 c8 cc 60 13 81 9d d8 30 04 1b 30 22 20 41 60 23 01 8c 38 42 a2 97 24 0f 7e 4a de 82 bc f8 27 08 0a 90 20 79 08 8c 20 08 12 20 81 5f e4 d8 82 20 cb 86 28 29 b2 06 d2 e2 d0 6c b2 d9 fd cd 5f 55 dd ba f7 9e 1d e1 ec bd b1 c0 46 24 76 11 cd ef fb 6a b8 55 75 87 73 d6 59 7b ed b5 36 fd 54 b4 5f 4d 25 78 ac 9b 79 fc 39 d0 13 a6 12 3e 9a 25 6f 36 b1 40 f8 09 3a 28 4c 11 69 c9 60 77 df 86 c0 7c a3 13 fa 7e 87 07 27 65 b1 c7 b2 fe 68 c7 85 e2 67 20 58 03 cd a3 a5 68 8c 9e 18 22 4d e9 b6 ff f9 db a7 78 e5 5f 1c e1 8b 5f bb 89 2f fd 59 8b 3f fa ee 1a Data Ascii: J=>ESTn%vjekT/[odHCV`00" A`#8B$~J' y _ ()l_UF$vjUusY{6T_M%xy9>%o6@:(Li`w\|~'ehg Xh"Mx__/Y?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49736	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:18 UTC	602	OUT	GET /img/star.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:18 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 11271::1728761125163-aae920faed2a3fe4c3083b339cd783df Age: 1708792 Date: Sun, 13 Oct 2024 18:12:18 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "f75d9bcacc1a1aabc6f93c383f5494307d91f7f302c266626d6dc92b4b86585e" Content-Type: image/png Accept-Ranges: bytes Response-Time: 0ms Content-Length: 1980 Connection: close
2024-10-13 18:12:18 UTC	1980	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 29 08 03 00 00 00 9f be f0 c4 00 00 02 f7 50 4c 54 45 47 70 4c ab dd f8 cb e8 fa c9 e6 f9 c9 e7 fa b6 e1 f9 c8 e8 fb c8 e7 fa cd e8 fa cc e8 fa bc e3 fa ae de f8 c3 e5 fa ca e8 fa c1 f1 ff a9 dc f8 bb e3 f9 a5 db f7 f3 ad 00 f2 ab 00 aa dd f8 a8 dc f8 a6 db f8 a1 d9 f6 ac de f8 c8 e8 fd a6 db f7 ad dd f7 c9 e8 fa bf e4 fa c5 e6 fa b0 df f8 a7 dc f8 c7 e9 ff c7 e7 fa b4 e0 f9 b8 e1 f9 f1 a9 00 bf f4 ff a3 d9 f6 c4 ed ff cc e9 fb c2 ef ff b3 df f8 c7 ea fc fa a3 00 c8 e7 f9 c6 eb ff a9 dd f8 ba e2 f9 f3 af 00 c0 f3 ff cb e9 fb f4 b0 00 b2 df f8 af df f8 a7 db f8 c6 ea ff c8 e7 fb c0 e5 f9 bd e3 f9 be e4 fa f6 a4 00 c5 ec ff a3 da f7 aa dc f7 f3 ac 00 b8 e2 f9 b8 e1 f8 b1 df f9 c2 e5 f9 b3 Data Ascii: PNGIHDR))PLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49737	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:18 UTC	359	OUT	GET /img/save_img.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:18 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29005::1728761125163-8d3bcd1278891fc1e52d38e72549b3d0 Age: 1708794 Date: Sun, 13 Oct 2024 18:12:18 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "8fc3f44a189200b47c93a90ad8dffe40fcdeda8a718e62bb4baf98f00d536e97" Content-Type: image/png Accept-Ranges: bytes Response-Time: 3ms Content-Length: 7550 Connection: close
2024-10-13 18:12:18 UTC	7550	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 02 fa 50 4c 54 45 c3 e2 c9 b5 dc bb b0 da b8 a9 d6 b2 a6 d4 ae a2 d2 aa 9d d0 a6 9a cf a4 98 ce a3 c3 e1 c9 99 cf a2 ef bc 57 fc f2 df fc f4 e3 fc f2 e1 fb ec d0 ac 4d 00 fc f1 dc ff f5 df ff f9 e4 fa e6 bf ff ff ef ff ff f7 ff fd ea f8 e2 b7 eb dc c6 c3 af 9a 96 7c 6b 7e 60 50 a8 8f 7b ce c0 aa fd f1 dd e1 d3 be 8c 6d 57 4e 27 15 37 0f 03 3e 16 07 55 2e 18 5f 39 26 fc f1 da 48 20 10 2d 07 00 43 1b 0a 6c 49 34 ff f4 da 24 01 00 4a 23 12 f8 c9 54 d9 ca b3 45 1f 0f af 99 87 f7 ed da a0 75 4b ea b9 47 7f 56 35 f2 c1 7f eb bb 7b ac 87 54 91 67 42 de ae 73 e3 b4 77 de af 73 de b0 75 d9 ab 71 de ad 6e be e0 c4 e2 ac 68 b2 f0 d9 bb de c1 b8 dd bf b2 60 16 b6 Data Ascii: PNGIHDRxxPLTEWM\|k~`P{mWN'7>U._9&H -ClI4$J#TEuKGV5{TgBswsuqnh`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49735	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:18 UTC	601	OUT	GET /img/dir.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:18 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29005::1728761125163-aef2b30f6701ba271c07e3e26ffc416e Age: 1708792 Date: Sun, 13 Oct 2024 18:12:18 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "60a4bddc93553f14c2dfef0299fa5f3ad0e4005f7b8054e34db89b8afe6a0f2f" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 5071 Connection: close
2024-10-13 18:12:18 UTC	5071	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 fa 50 4c 54 45 9a 68 aa 9a 69 a9 9b 69 aa 9c 6a aa 96 62 aa 94 60 a9 8e 58 a9 90 5a a9 92 5d a9 8d 56 a9 99 66 aa 8b 54 a8 8a 52 a8 98 64 aa 9e 6c aa ad 80 ac a9 7b ac a5 75 ab b2 87 ac a1 70 ab b5 8b ad bb 93 ad b8 8e ad c1 9b ae b0 84 ac be 96 ae c6 a0 ae 9a 68 aa e1 c4 b1 f7 ec b5 ff ec b4 fd ea b4 ff ee b4 ff f1 b3 ff f4 b5 f5 e2 b3 e5 c9 b2 ef d5 b2 ff f9 b5 fb e5 b4 ff fb b5 ff f6 b5 fd e9 b4 ff ff b6 ff ea b4 ff f1 b6 fe ec b4 ff fe b6 ff ef b4 ff f7 b5 f1 e1 b1 d2 b1 b0 ff f2 b6 ff f0 b3 ff eb b4 ff fd b5 ca a7 af 88 50 a8 9b 6a aa f7 e6 b4 84 49 a8 e9 ce Data Ascii: PNGIHDRxxgAMAasRGBPLTEhiijb`XZ]VfTRdl{uphPjI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49738	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:18 UTC	354	OUT	GET /img/doc.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:18 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29005::1728761125163-95382a6dab40d5911185a921c53e6f6b Age: 1708794 Date: Sun, 13 Oct 2024 18:12:18 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "e341d9055288dfcd7dd5facab6c915f6b7bcffbf80f8b48468c7275b8cada069" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 5723 Connection: close
2024-10-13 18:12:18 UTC	5723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 16 22 49 44 41 54 78 5e c5 9b 6b ac a5 57 79 df 7f cf 5a 6b ef 7d f6 99 73 9d 61 2e 1e cf d8 78 3c b6 42 cc a5 83 12 15 4c 88 1c 6a 0a 84 02 09 90 96 24 25 55 3f 44 91 7a 51 0b 91 10 97 24 6d 2a 12 a2 88 24 52 a9 d2 2a 10 68 55 11 28 a9 d3 a2 60 e3 d4 2d c1 34 24 84 5b a8 cd 4d b1 0d b6 c7 e3 f1 dc 2f e7 cc 39 67 bf ef bb d6 13 b1 9f 47 6b e9 c8 42 11 02 d4 25 ed 79 df f3 ee f7 dd 7b fd 9f eb ff 79 9e 3d 32 dc f7 f6 53 e4 7e 19 14 44 40 22 48 00 cd 10 46 88 08 5a 7a 44 22 00 84 04 65 80 b4 00 25 a3 b9 03 01 10 44 02 a8 a2 5a 90 38 46 f3 0c b4 80 2a c4 91 9d 4b b0 f7 fa 2d bb 2e c1 5e 28 e4 01 42 b4 fb 8a 9f 2b 10 42 fb ce 3c 80 66 7c b5 fb 11 3b cf bd Data Ascii: PNGIHDR<<:r"IDATx^kWyZk}sa.x<BLj$%U?DzQ$m$RhU(`-4$[M/9gGkB%y{y=2S~D@"HFZzD"e%DZ8F*K-.^(B+B<f\|;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49739	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:18 UTC	365	OUT	GET /img/meta-logo-grey.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:18 UTC	406	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29015::1728761125163-ffba640622dd859d554ee43a03d53769 Age: 1708794 Date: Sun, 13 Oct 2024 18:12:18 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "139d38d0fbfed2fd9f2b782af9b3eb08005b9bc75faaa31fe29720cc64bcab0f" Content-Type: image/png Accept-Ranges: bytes Response-Time: 0ms Content-Length: 105511 Connection: close
2024-10-13 18:12:18 UTC	14954	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 00 f0 08 06 00 00 00 58 15 aa 71 00 00 14 a9 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da a5 9a 69 96 1b b9 95 85 ff 63 15 5e 02 e6 61 39 00 1e 70 4e ef c0 cb f7 77 41 4a 2e a9 ca c7 5d dd 4c 25 49 91 11 08 e0 0d 77 40 a4 3b ff fc 9f eb fe c1 23 0f 5f 5d 2e ad d7 51 ab e7 91 47 1e 71 f2 a6 fb cf 63 be e7 e0 f3 7b 7e 8f 9e 7d fa 7e fa cb e7 ee 7e cf f1 91 8f 74 48 fa 9e 50 3f af e1 c7 e7 df 13 7e bc 86 c9 bb f2 87 81 fa fe 7e b1 7e fd 62 e4 ef f8 fd b7 81 e2 e7 25 69 46 7a 6f df 81 c6 77 a0 14 3f 5f 84 ef 00 f3 b3 2c 5f 47 6f 7f 5c c2 3a 9f 57 fb b1 92 fe f9 75 7a ca fd d7 69 ff e9 ff 8d e8 59 e1 3a 29 c6 93 42 f2 3c a7 f4 9d 40 d2 6f 72 69 f2 45 e4 Data Ascii: PNGIHDRXqzTXtRaw profile type exifxic^a9pNwAJ.]L%Iw@;#_].QGqc{~}~~tHP?~~~b%iFzow?_,_Go\:WuziY:)B<@oriE
2024-10-13 18:12:18 UTC	2262	IN	Data Raw: 10 45 11 b4 2e a9 28 8a 4e db bc f3 f9 cf 0e 5f ff fd ae 9f 3d b9 fe 1b 57 9e 73 fa e6 99 32 7e 2b 57 af 5e f8 cf df f8 d6 e7 9d 32 1f 5f 70 c2 09 a7 1d 18 19 0b e3 38 45 4f 5f 6f 9e 6a 67 7c ba 2c 28 4f 97 65 70 47 d6 27 33 c1 b5 be 86 c9 3e 60 3e ea e7 8f bf 0e 0c 32 06 2c 3b b8 d4 42 83 a1 14 41 2b 0d a5 0d ac 75 79 6b 90 c9 7a 77 6e 8d 00 c1 1b f7 74 e8 05 ca 2d 01 29 17 7a 6d 43 99 d6 38 d1 74 41 4f b0 ce 7f 5d 91 02 69 6f 4e 93 65 19 d2 2c 45 a9 54 c6 fe a1 61 74 75 75 a1 de 48 e7 94 2b dd 97 6f da b0 79 e0 ff fe cb bf fb 17 66 be 81 88 c6 65 8a 3b 9e 9b 69 6c 9c 53 a4 3a 4f ac e3 08 4f bb be 8d 31 68 34 9a 70 96 51 2c 14 67 0f 0f 8d 5c f2 c4 13 1b cf 62 e6 17 a4 4e e6 f5 e3 c0 81 03 5d 7f fb cd ef bc db b1 3a 5f 81 ba 98 14 98 f2 54 70 f6 d9 01 87 Data Ascii: E.(N_=Ws2~+W^2_p8EO_ojg\|,(OepG'3>`>2,;BA+uykzwnt-)zmC8tAO]ioNe,ETatuuH+oyfe;ilS:OO1h4pQ,g\bN]:_Tp
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 31 88 7d eb ac ce ae c0 fe d6 4a 93 5d 82 89 da 5f f7 3d 61 7d 46 8f 53 0a 5a 29 2e 14 8c ec 8e 08 c2 5b 55 10 de 7d f7 fa 25 d7 ff e4 bb 7f d4 df db ff 81 b4 3a 7e c2 e0 81 21 cc 99 3b 0f 7d bd b3 50 ab d5 a0 4c 80 b0 18 a1 25 9f 14 11 e2 38 06 29 9a b2 cb ff 4a d2 c1 94 32 7e 67 d8 4e ce 5e 4a ab f6 eb 4d 4d 09 6c 39 5c 4e 36 97 27 e6 dc 4d ab b5 02 75 2f 12 30 be 65 84 4f 41 6a 89 1c 2f 86 7c af 44 9e b6 84 25 4c ee 3c b7 85 15 ac c5 00 00 20 00 49 44 41 54 ff 3e 4f 4b 4b cc 7b f3 b1 05 c2 30 82 ce 0d 68 ea 69 13 41 10 a0 bb dc d3 0b 97 5d f2 d4 a3 6b ff ec 3a ad bf cc cc 0f 1f 2f 51 f8 f8 d6 ad 8b ff e5 9b 3f fc c3 d4 da 0f 56 ba 7a 17 d4 aa 0d a4 49 13 a9 05 54 10 00 a4 11 27 19 88 34 82 40 c1 97 e6 68 5f 0b e9 b2 5c cc fa 94 cf 96 99 8b cb 2c b2 fc Data Ascii: 1}J]_=a}FSZ).[U}%:~!;}PL%8)J2~gN^JMMl9\N6'Mu/0eOAj/\|D%L< IDAT>OKK{0hiA]k:/Q?VzIT'4@h_\,
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: c6 14 2d b4 d4 4a c4 15 26 2b 95 5f 48 d5 6b 45 be 5e b2 9c 48 f7 67 89 21 e7 41 5a 0f ba e9 d1 1a 40 f9 05 10 31 fc a0 40 4a be f7 70 ec a8 cc 2b 78 f4 d1 47 a7 85 f5 68 61 58 ab 4d ed e8 e8 40 18 86 2e c7 45 bb c4 fc ac 56 da 21 5d 96 0c 18 1d 83 b5 41 4b b9 35 da bb 67 cf da 79 27 cf b9 e3 da 2b ae d8 3e 0e 2d 80 0f 9c 73 ce be 33 e7 be ff 9e 40 aa a5 02 bc bb da df 8b 40 a5 0b 96 0f 4f 84 d0 e5 70 0e de 38 19 18 61 66 94 4a 25 f8 7e 10 b6 b6 77 ac bb 68 e1 b9 e3 e5 0e c6 d0 7e e5 57 7e fd 0d 4b df b5 f8 00 00 20 00 49 44 41 54 df c3 32 18 bd 5b ee c7 98 19 fa dc d0 7a 90 19 a5 d4 05 71 09 51 62 60 d8 a2 d2 d2 36 b9 ab ab fb b2 67 5f dc 38 f5 44 1f 6b 9f 48 4b 80 a9 09 28 8c ec 39 7e 87 de 3a 21 ac ae 45 d4 d1 81 64 a8 c3 e6 b4 b3 4f 5b ca 26 5e 06 6b Data Ascii: -J&+_HkE^Hg!AZ@1@Jp+xGhaXM@.EV!]AK5gy'+>-s3@@Op8afJ%~wh~W~K IDAT2[zqQb`6g_8DkHK(9~:!EdO[&^k
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 1d 30 89 29 07 f7 ef 68 3d 1f e6 d2 5a 4b a7 f7 f3 0d 31 8f 8d 64 c0 47 6e bf e2 d0 ec 29 53 7f c4 6c 5f 2f f9 a5 92 88 49 b6 29 26 91 89 c2 11 3b 24 e1 96 c0 fa 92 a4 4c f4 9a a9 ac 01 29 23 76 47 21 04 a4 ab a6 f5 f5 f7 de fd 2f ff f2 e8 b4 b3 f5 4c 5e 7a 69 5b fb 8e cd 3b 3e 99 4a 65 e7 15 cb 65 95 4e a7 51 2c 16 2b d0 bb 20 08 e0 2a 09 58 33 b4 ba 52 db 8b 05 51 03 d5 8b e0 7b c5 62 11 d6 da 23 24 9c d7 ae b9 72 d1 f3 63 41 a0 93 b6 fd cc c3 f6 89 8e dd d1 2c 04 b1 23 ce 0e 7e 6e e5 ca 75 6d 7b 77 ec fa 78 ca 4b 5d 2a 85 74 82 20 18 a6 c5 63 60 9f 7a 64 db f9 98 2f 26 1d 09 00 00 20 00 49 44 41 54 c1 60 12 dc 67 b3 59 18 1b a2 54 2a 70 ae be 7e 87 36 7a d9 03 7f f0 a5 5f bd 57 82 c1 64 3c 70 ef 92 7d 0b e6 be ef bb ae eb 2c 93 84 43 89 fd 0d 2d 57 aa Data Ascii: 0)h=ZK1dGn)Sl_/I)&;$L)#vG!/L^zi[;>JeeNQ,+ X3RQ{b#$rcA,#~num{wxK]t c`zd/& IDAT`gYT*p~6z_Wd<p},C-W
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: b7 3e f1 89 4f bc b9 16 f6 d6 9b d9 1b be d4 6d 9e b3 b2 b6 ac 98 4e 0c a7 11 d3 ec 3c ad a2 8f 7d ef 09 14 17 3e 5a d2 73 cd e7 31 05 20 b1 d2 7f 58 8a ab 94 eb 52 96 4f ee c2 a9 5d 3d d5 c7 05 ef 35 4e 0c c7 aa ab 9a a1 94 34 66 a6 07 55 d5 6c 18 d5 dc 25 73 8a 8d 50 23 50 55 e3 33 24 4a c4 bd dd 3c da 91 34 38 fe f9 0a 7a b4 dc 1f 2e ae d9 80 90 f3 5a 25 59 17 5d 76 45 75 10 7f fb d5 bf 3e b2 fc 7b 2f ea 89 74 c9 b8 31 e7 7c 7d 1a 55 08 1b ad ac 46 44 11 78 fe ec 61 a7 72 3f e1 14 a5 31 00 58 bd f3 2d 5b 33 0d 9c 06 eb 9d c9 c9 6d 4f 3e f5 cc 1f 11 9b 6b d4 98 ba 89 13 10 33 14 84 dc 2f 6e 86 63 be 6c 12 23 cc 0d a6 ad 06 36 6d 1a d4 15 5c 22 9f 00 00 20 00 49 44 41 54 56 73 66 ef 85 17 9e f3 8d cb cf 3f 63 c5 c8 4a 89 48 6e ba e9 ba a7 54 f0 b3 88 ed Data Ascii: >OmN<}>Zs1 XRO]=5N4fUl%sP#PU3$J<48z.Z%Y]vEu>{/t1\|}UFDxar?1X-[3mO>k3/ncl#6m\" IDATVsf?cJHnT
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: d4 d4 aa 4f 3a 21 49 2c 54 db 17 23 63 ab 82 06 83 5e fd 83 29 c6 18 32 19 cb 6a 5a 2a 05 70 bd 0c 1c 27 83 28 d6 e0 22 3b b9 1c b3 eb 9f 5e fc c2 d7 ff eb 27 f7 9e 71 38 a5 51 ee 79 64 c9 c4 97 5f 7a fd 2b 65 19 5e ef 38 7c 6c ac 15 84 e3 24 c1 a0 ee eb 0d 34 ac f6 da cf f6 90 b2 99 09 c1 91 50 cb ab 30 28 bf 35 fd cc e9 2b 4e 04 5b a2 7d 6e 52 23 15 c3 91 31 64 a7 d5 54 07 84 fd a5 23 de bb 7d 72 00 04 46 44 2a 3c 3a 89 85 f3 ce 3b 7d 53 5d 5d e6 15 28 b3 5b cb 08 80 85 5b 55 72 e1 a4 fb 05 83 b5 41 c0 60 88 19 4a 2e 46 22 d1 ec cd 61 4f 7b 7b b6 a9 75 cc 79 6f ad 5d ff 07 4f de f4 e3 f3 8e f7 a0 70 f9 f2 f5 0d ff 72 d3 cd 57 be f0 d2 f2 7f 6a 6e 1d 73 b9 97 cd 8f eb e9 2e 37 34 b5 8e 9d fe e6 5b eb bf f8 a7 a2 03 da 00 00 20 00 49 44 41 54 c3 5f 3d 70 Data Ascii: O:!I,T#c^)2jZp'(";^'q8Qyd_z+e^8\|l$4P0(5+N[}nR#1dT#}rFD<:;}S]]([[UrA`J.F"aO{{uyo]OprWjns.74[ IDAT_=p
2024-10-13 18:12:18 UTC	6375	IN	Data Raw: 28 92 52 a2 d5 ec ad 24 c8 11 04 94 cf 36 43 15 33 81 0a 50 fe f7 e4 ae 48 76 c2 81 1c c1 16 c9 4f 0b 0b 49 0e 81 90 d0 4a 21 90 3a 73 81 49 8f fa d3 e4 3b 66 36 ad 5d bb 65 f0 be c7 1e 78 7c f8 c0 f0 35 42 e9 e5 7d bd b5 85 59 ea 2a 13 63 e3 08 a3 0a e6 0c f4 21 cd 32 58 32 b0 ce c0 e4 be 1d 4d 06 1a 6a 86 3a a4 2d 9e 3c d9 59 2d a4 23 5b 7f 5f f9 58 6c 51 49 c2 91 03 04 f9 aa 6d 11 75 10 39 a0 68 09 cd 9d 01 19 3f 6b 26 a5 9f 69 12 d2 fb 08 56 ab 31 9a 0d af 99 50 eb aa 01 d6 a2 d1 a8 a3 5a a9 59 e5 ec d0 c8 c4 f8 e6 6a 14 3e 7c c1 b2 77 7f f7 dc 77 9f b9 75 c5 b9 e7 8e fe da 0d 37 bc 2d 1e 9b cf 7c fc aa 1d 37 df 79 ff df ff f0 47 0f 8e 4e 8e 1e bc be af 7f e0 ec 2c 4d 7a c6 47 87 31 d0 df 03 63 7c cb b4 31 fe 5a 6b a5 e0 88 20 0d 00 55 6a 4f cc e8 ce Data Ascii: (R$6C3PHvOIJ!:sI;f6]ex\|5B}Y*c!2X2Mj:-<Y-#[_XlQImu9h?k&iV1PZYj>\|wwu7-\|7yGN,MzG1c\|1Zk UjO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49740	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:18 UTC	364	OUT	GET /img/banner_new_01.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:18 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29015::1728761125163-fe979feb97d4ac7d44bcd547bc23d9a2 Age: 85482 Date: Sun, 13 Oct 2024 18:12:18 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "f63ca8aab55d8eedfb62cee0c1891c0355f118df5ff22713b0f45e6acfd5f8a6" Content-Type: image/png Accept-Ranges: bytes Response-Time: 0ms Content-Length: 198020 Connection: close
2024-10-13 18:12:18 UTC	14956	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 02 00 00 00 67 b1 56 14 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd 79 90 dc f9 9d de f9 3d cf f7 57 85 1b dd e8 1b dd e8 26 9b c7 90 1c 36 ef 63 66 24 ed 6a 23 24 85 57 92 57 e1 f0 5a 2b c9 b1 f6 ae 37 7c 44 38 2c 87 22 d6 11 96 f7 8f 55 58 0e ad 14 76 ac 56 96 1d 5a 6b b5 23 6d cc 4a a3 d1 0c 35 1c 5e c3 7b 48 0e af e1 d1 ec fb be d1 0d 74 e3 be 81 42 55 e6 ef fb f8 8f ef 2f b3 12 e8 26 c1 06 90 28 a0 ea fd 12 d5 53 95 95 55 95 55 a8 ca ac 7c 7e 9f df f3 f1 de 63 4b 02 00 00 00 00 00 00 00 e0 6a 2b 6b 7d Data Ascii: PNGIHDR8gV cHRMz&u0`:pQ<bKGDIDATxy=W&6cf$j#$WWZ+7\|D8,"UXvVZk#mJ5^{HtBU/&(SUU\|~cKj+k}
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: c0 f5 cc 91 26 0f 55 49 5c bc f7 84 5e 3d be f0 cd 97 16 3e 79 4f ff a9 7b fa 9b b6 0c a7 fe 44 aa 56 17 4f 0f ae 96 c8 93 2d bc 6b fd 75 00 00 80 55 54 70 00 00 70 03 28 91 a4 5e 69 e1 b3 2e 3c c5 f8 89 fd fa 37 0f d6 6f 3e 33 9e 54 36 d7 2a 4f c2 e6 92 a4 0c ef d2 db 54 70 00 57 8a 0a 0e 60 7e a6 bf 4a 19 36 12 5c f0 7b b5 50 fc 2b b7 8d fe ec fd 75 cf ae e1 f2 b4 4d 85 92 a4 c9 ea dd 30 04 0d 00 c0 75 85 09 68 00 00 6e 0c 33 ed cf c3 25 a3 51 f9 ca d3 f5 0f 1e e9 9f 7e 63 d8 2b e8 b4 67 ec c5 ae 89 dd 16 09 ba 44 32 fd 1b 00 80 1b 4a 9c 8b 8e eb 8c 6b 9e 3e ba f8 f4 e1 dc 77 b3 7e e3 1d fd 03 77 8c 17 4a d1 24 77 6e e7 03 55 7b 78 09 00 00 5c 1f 08 a0 01 00 b8 01 54 b5 4c 79 78 3a 7d e8 54 fd cc c3 f9 dc a3 e3 53 e7 87 e7 d9 93 ab f5 96 ab a2 94 96 3e Data Ascii: &UI\^=>yO{DVO-kuUTpp(^i.<7o>3T6*OTpW`~J6\{P+uM0uhn3%Q~c+gD2Jk>w~wJ$wnU{x\TLyx:}TS>
2024-10-13 18:12:18 UTC	11436	IN	Data Raw: 4f 03 28 e0 76 c5 6b 47 2d 03 60 40 f0 78 6d e7 ba c0 44 50 21 a8 68 9f 78 4e 52 3c 59 f9 1f f7 4a e6 d8 fe c7 62 72 6e 90 0c 1e e5 ea ac 56 62 34 44 fa 63 86 28 e4 a5 9f 77 b9 77 ed ea bc de 52 c6 35 21 c0 60 69 a6 08 92 d9 99 00 0a a4 39 8c 71 5a 60 31 71 e6 c0 ff f9 1f 8f fe fa ef b6 4e 9e ec 7d 6c e7 cc f4 dc e1 23 93 4f 3d 7b e2 c3 7f d2 dc ba 71 f6 f0 31 9b 6f 15 22 99 81 41 52 06 16 58 60 b8 8e e6 85 c0 e4 6e 2e 3a 9d d3 9f f9 e2 e4 a3 4f ad ff e6 f7 6f ff 99 1f 6b 6c 59 9f 26 72 9f 33 b4 10 ec ee a7 e3 38 8e 73 1d e3 02 b4 e3 38 4e 42 28 52 99 de bf a1 f6 c6 7f 88 bb fe 96 da a7 d8 9a 82 8a a2 33 8b ce 2c 62 7d 5c e0 91 7f fe 3f 1f 7b e4 49 06 48 ea b4 2d 14 d8 3f df 7e ae 35 3b df ce 25 19 83 90 5a 0d a3 c9 44 28 04 f0 02 02 31 49 c9 ee db 55 dc Data Ascii: O(vkG-`@xmDP!hxNR<YJbrnVb4Dc(wwR5!`i9qZ`1qN}l#O={q1o"ARX`n.:OoklY&r38s8NB(R3,b}\?{IH-?~5;%ZD(1IU
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 3b be a9 6f 64 97 c5 f6 32 2a fe 5f 3a fe 10 a4 4e 79 1d bd ac 97 41 1a 21 a1 d0 b1 27 4e 5e ec 85 c9 06 d6 35 06 c7 fa 10 47 74 94 22 7b 2d cc cd 95 47 c6 eb 24 c7 71 9c 95 8f 0b d0 8e e3 38 97 20 16 b5 19 58 f4 94 fe 8d 35 6b de f2 8b 3f bf fb 83 df f8 c8 3f fb 85 f1 27 9e 3c cb 44 52 39 a3 21 c6 76 73 92 75 a0 0e f6 c7 5e c5 5e ed c5 72 24 d5 b8 6c cf ac 32 f2 ce 19 51 18 19 6b d8 d7 dc d3 ce 1a 31 41 39 8d 67 31 55 de dd 6a a4 de c5 a2 0e 37 8e de bb 76 ed 6d 28 ed db 06 52 08 93 13 71 fc a0 24 4b 13 0e bb b3 13 2f 8b 94 ff 9c 05 76 50 58 0b 23 e3 67 65 17 f6 a8 1a 4b 29 45 55 7a 49 68 4c a9 39 8b d9 c1 b8 fd 68 7f ae 9e 37 fe 6c a0 3a c5 f0 c7 3e 33 bf 75 93 fa 1b f1 78 16 58 e6 95 0c 83 86 ea 00 40 4a 34 a9 80 e0 6b 2b 67 55 12 8a 78 5d 27 5f 7f 73 Data Ascii: ;od2*_:NyA!'N^5Gt"{-G$q8 X5k??'<DR9!vsu^^r$l2Qk1A9g1Uj7vm(Rq$K/vPX#geK)EUzIhL9h7l:>3uxX@J4k+gUx]'_s
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 04 6d dd d6 f7 ad 7f 6d 37 52 9c fe 52 6a d0 2a 0b a4 d1 9d 43 59 3d 3b f6 e4 b8 7a e4 de 2c 16 fd c0 cc f8 dc f1 67 4e bd f4 f0 a1 e7 3f fa d2 c1 4f 1f 3a f6 c4 78 67 ba 33 bc 7d 28 cb 0d d5 fe 10 3d 97 d3 88 91 1b 94 d5 c9 aa 02 43 2b 1f e9 b0 46 32 20 03 29 1a 60 34 03 18 60 b2 be a9 e6 d6 33 7d db 8d 46 04 74 53 a1 bd f1 db 71 1c 67 f9 f1 0c 68 c7 59 41 28 90 d6 9d 82 bd 71 c3 da 5b 6f de 79 f4 e8 f1 d5 b2 5e be f0 0b 13 8c 90 85 99 63 59 ff 1a c2 0a c0 28 88 84 a9 cc bc 8d f7 3d 35 31 b3 ef e5 e3 f7 ec d9 5c 76 d8 a5 38 dc 25 8c 20 a8 16 21 f5 83 87 59 04 20 5c 1f 51 27 ce 95 10 53 59 7a 06 00 82 04 1a 73 da f5 a9 ce 8e 75 76 74 1b 8e 6f b6 b9 01 89 94 85 60 56 d4 10 18 e3 64 9a 2f bc 32 b5 ee ce 25 dc 99 22 89 49 04 b0 6e d0 d3 9f 1d 07 52 ec 43 48 Data Ascii: mm7RRj*CY=;z,gN?O:xg3}(=C+F2 )`4`3}FtSqghYA(q[oy^cY(=51\v8% !Y \Q'SYzsuvto`Vd/2%"InRCH
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: 69 9e 35 a9 99 1a 9f 3c 57 be 6b 5b 7b 67 5f 42 e3 e3 53 2c bb 6c 50 03 40 48 0c 22 a5 8d c1 4b 4b a7 4a 8b 67 fd 3a 45 c8 c0 07 b3 25 96 3f ff f4 90 a5 31 c2 c3 77 6d 7b e2 de ed c6 c2 7a b3 3c 2c 8d 6b 14 43 d2 9a e2 f4 c5 f1 73 5f f9 f5 e6 f2 52 54 2c 0d 6d db b3 f5 c0 1d 7d 5b 76 16 8b 45 78 5f 85 b2 3e 25 ae 09 e7 9e 91 c2 ff fa ed 23 3f f5 be 81 5f fa d2 7c f9 b6 47 07 07 fa b0 32 1b 24 59 91 4c 18 08 04 02 d7 95 20 40 07 02 5d 8c a5 cf 12 7e e2 1d 0f 54 ab e5 7a bd b9 ce 4d 02 df 6e c8 4e bf 95 54 31 b6 8d 39 d8 c4 7b a2 e1 5a 14 fa 87 98 2e cd 4b 62 fb e4 4b e7 1f be 6b 17 56 3a 47 68 55 3e 7d ae 78 fe d2 f5 e9 0d 9e c9 dc aa d7 bd d6 6c 45 43 5a 46 fd 83 c8 15 7c 72 26 59 00 56 6a b5 51 ab a9 56 67 ab a9 24 41 d6 dd 3c a7 38 fb c5 7a 59 12 f7 eb Data Ascii: i5<Wk[{g_BS,lP@H"KKJg:E%?1wm{z<,kCs_RT,m}[vEx_>%#?_\|G2$YL @]~TzMnNT19{Z.KbKkV:GhU>}xlECZF\|r&YVjQVg$A<8zY
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: e8 98 b7 7e f8 3d 17 14 d7 6d 7b c1 08 b2 ab 7d cd f9 90 6b f6 8c 92 99 d9 c1 40 d0 4d 51 d2 f9 0f d7 9f 84 8e d9 c3 52 c6 dd 6f c8 05 15 bf da ee fd 47 0b 5b 3e 34 7d e0 2f ce ed fd c5 a5 a1 6f b6 4b b1 25 0c c9 c8 85 4d 1b d0 f8 33 66 a9 cb aa a2 59 70 c7 8a f7 f5 0d 1c dd ab 4c 3a e7 71 3d 5c 1d 22 8c 29 18 b0 36 d7 3a 73 e1 68 82 24 5a ef cf dd ad 8c 3c 57 ff 06 e0 fa 5b c2 5c fb 5b 90 8c 7b aa f5 03 7b 65 e8 ba a2 af cd a1 6f 09 4b 3c b0 c7 7d 58 e9 dc 43 18 5c 07 02 81 40 60 d3 41 d2 5a 0b 60 ef 50 62 09 49 b2 4c 0b 1e 64 9d eb 22 f0 b5 29 33 51 33 99 c6 e7 44 46 00 41 7d ee 42 94 58 4d 2c d1 99 2a b2 c8 e6 e1 1e 54 8a fe 09 57 b7 1d 17 05 ce b4 bd 38 c7 fa fc f2 3c 9f 78 61 05 60 a9 69 4e cd 16 ae 4f a4 5e 9e 2d 3d 49 64 ae fe 58 02 81 40 a0 fb 08 Data Ascii: ~=m{}k@MQRoG[>4}/oK%M3fYpL:q=\")6:sh$Z<W[\[{{eoK<}XC\@`AZ`PbILd")3Q3DFA}BXM,*TW8<xa`iNO^-=IdX@
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: b2 c9 d9 67 33 8b 89 a3 ae c8 a1 96 91 9a de b2 35 a9 95 14 00 44 53 40 20 c1 a8 21 9c 6f fb d1 7a bf 06 fb 35 ae 26 92 30 ca db 63 22 42 41 02 11 65 7e b5 cc ef dd 11 44 1d 9f 3b be f8 4b 9f 78 26 55 e4 fd 11 c2 09 d1 98 79 2e 9d 3d 06 25 04 9a cd f0 bb 12 5b dc b5 5a 25 24 fb 85 34 16 1b a7 9f ac 6e bf 7d d9 f2 7f f8 85 43 ef 7e d9 ce 3d 3b 06 f3 b7 87 29 03 59 01 cc 5e 7f 05 86 61 18 2f 14 13 a0 0d c3 00 20 e2 98 4f 15 13 91 72 29 7a d9 cd 9b 1f da 3f 5d 90 47 11 e4 54 a6 ed f9 93 ca 36 44 25 73 22 b8 ea 48 54 db d4 eb bd b8 72 f8 68 8b 65 4a 93 af 3d e8 00 a4 f3 87 92 e9 23 d0 14 02 d5 7a e3 d4 e3 f1 de 11 89 2b 79 15 11 5f b6 d1 3f 70 ce 55 2b a5 38 8e 6a 95 52 29 76 d5 6a b9 56 29 3b e7 86 87 6b 91 c3 c8 f0 40 c9 c9 e0 50 a5 54 2a 0d 55 ab 51 24 00 Data Ascii: g35DS@ !oz5&0c"BAe~D;Kx&Uy.=%[Z%$4n}C~=;)Y^a/ Or)z?]GT6D%s"HTrheJ=#z+y_?pU+8jR)vjV);k@PT*UQ$
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: f8 ed f4 eb 5c 6c 77 29 7a 22 52 29 2d 33 62 77 1e 7b 2b b4 ff a8 ef 7c fb db 9f fb b3 3f 4f d3 bc 10 e2 da 13 43 d7 16 82 a8 70 36 ea 1a 6d b1 87 f3 24 2d 4e 43 71 00 20 ee 02 4f a1 dc 46 9d bd 5b 84 48 53 fe fa 1f 7f f9 d1 a7 8e fa 45 c2 81 e2 85 ae d3 30 0c e3 4a b0 3e 04 26 c3 30 2e 94 65 c3 ec 24 23 44 24 1f 3b 38 fb e4 e1 39 40 45 64 5d 94 19 f4 ac bc c4 29 92 76 63 f2 69 e4 33 34 21 80 0e d5 ca 3f f7 13 1f a8 94 23 ef 0b 28 36 ce 2c 86 c3 30 0c c3 e8 73 8a 41 c3 59 bd 3b bc ae fc f1 b7 96 7e c7 3f 2f 50 21 08 47 a6 69 ab 7d 7a ff d1 fa f4 bc 48 88 33 5e a3 c2 4d ff 43 42 05 69 ab 3d 73 e8 44 63 7a a1 d0 fa 4a 01 08 71 5b fc 8d 0f 0e fe c7 2d 72 cc 0b 9a 3e 8e c3 c7 74 64 2e 81 9e ee 80 93 c8 61 73 0d dd 35 75 57 e3 74 11 e9 a4 91 fb f3 34 85 3c 79 Data Ascii: \lw)z"R)-3bw{+\|?OCp6m$-NCq OF[HSE0J>&0.e$#D$;89@Ed])vci34!?#(6,0sAY;~?/P!Gi}zH3^MCBi=sDczJq[-r>td.as5uWt4<y
2024-10-13 18:12:18 UTC	16384	IN	Data Raw: e0 8c 86 0e 66 b0 a2 2d 6b f8 8f 97 ce 99 4f 2d 7a 9f a1 83 2f a8 18 1f 0c 8f 80 d2 d4 e4 e4 e8 40 68 0e 63 eb 40 54 0a f9 17 ee f9 e6 b3 df fd d2 b3 df f9 ca 73 df fd da 89 7d 4f 02 84 53 bb 72 91 9a 7a 82 aa 04 0a 62 6f 56 2b bf 36 fb 64 01 00 81 aa 96 a6 8e 0f ec ff 8f 6a 71 0c f1 ef cb 3c 07 2f 6e e7 db 6e 07 b6 b4 8d ff f2 ee 87 fb 32 d3 8b fe ae 8e 33 a1 64 5d 38 10 15 a2 54 70 aa c3 63 06 98 21 a4 01 43 b4 32 d9 e8 96 9e 0e 09 ca d1 48 62 3c a0 89 6d 78 cd 5c bb f3 c5 6d 09 54 40 df ed df 5a 1b e5 2a 53 3a fe 7c 70 e0 0b d5 ef 7e a0 f2 ad 77 54 ef fd 90 9e b8 07 7e 05 00 49 d3 8d e7 0e 87 a3 f9 71 02 b4 c3 b1 02 b9 f5 e1 e3 f1 b8 0c 1b ce a9 cb eb fb 2e 41 65 3a 18 3b 64 4f c1 e6 7e 32 25 b2 e9 ae cd e6 47 b2 09 6b 0b b8 20 67 52 56 d5 17 8f 4f 7a Data Ascii: f-kO-z/@hc@Ts}OSrzboV+6djq</nn23d]8Tpc!C2Hb<mx\mT@Z*S:\|p~wT~Iq.Ae:;dO~2%Gk gRVOz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49742	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:19 UTC	355	OUT	GET /img/star.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:19 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 28953::1728761125163-aae920faed2a3fe4c3083b339cd783df Age: 1708793 Date: Sun, 13 Oct 2024 18:12:19 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "f75d9bcacc1a1aabc6f93c383f5494307d91f7f302c266626d6dc92b4b86585e" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 1980 Connection: close
2024-10-13 18:12:19 UTC	1980	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 29 08 03 00 00 00 9f be f0 c4 00 00 02 f7 50 4c 54 45 47 70 4c ab dd f8 cb e8 fa c9 e6 f9 c9 e7 fa b6 e1 f9 c8 e8 fb c8 e7 fa cd e8 fa cc e8 fa bc e3 fa ae de f8 c3 e5 fa ca e8 fa c1 f1 ff a9 dc f8 bb e3 f9 a5 db f7 f3 ad 00 f2 ab 00 aa dd f8 a8 dc f8 a6 db f8 a1 d9 f6 ac de f8 c8 e8 fd a6 db f7 ad dd f7 c9 e8 fa bf e4 fa c5 e6 fa b0 df f8 a7 dc f8 c7 e9 ff c7 e7 fa b4 e0 f9 b8 e1 f9 f1 a9 00 bf f4 ff a3 d9 f6 c4 ed ff cc e9 fb c2 ef ff b3 df f8 c7 ea fc fa a3 00 c8 e7 f9 c6 eb ff a9 dd f8 ba e2 f9 f3 af 00 c0 f3 ff cb e9 fb f4 b0 00 b2 df f8 af df f8 a7 db f8 c6 ea ff c8 e7 fb c0 e5 f9 bd e3 f9 be e4 fa f6 a4 00 c5 ec ff a3 da f7 aa dc f7 f3 ac 00 b8 e2 f9 b8 e1 f8 b1 df f9 c2 e5 f9 b3 Data Ascii: PNGIHDR))PLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49744	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:19 UTC	354	OUT	GET /img/dir.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:19 UTC	404	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29015::1728761125163-aef2b30f6701ba271c07e3e26ffc416e Age: 1708793 Date: Sun, 13 Oct 2024 18:12:19 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "60a4bddc93553f14c2dfef0299fa5f3ad0e4005f7b8054e34db89b8afe6a0f2f" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 5071 Connection: close
2024-10-13 18:12:19 UTC	5071	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 fa 50 4c 54 45 9a 68 aa 9a 69 a9 9b 69 aa 9c 6a aa 96 62 aa 94 60 a9 8e 58 a9 90 5a a9 92 5d a9 8d 56 a9 99 66 aa 8b 54 a8 8a 52 a8 98 64 aa 9e 6c aa ad 80 ac a9 7b ac a5 75 ab b2 87 ac a1 70 ab b5 8b ad bb 93 ad b8 8e ad c1 9b ae b0 84 ac be 96 ae c6 a0 ae 9a 68 aa e1 c4 b1 f7 ec b5 ff ec b4 fd ea b4 ff ee b4 ff f1 b3 ff f4 b5 f5 e2 b3 e5 c9 b2 ef d5 b2 ff f9 b5 fb e5 b4 ff fb b5 ff f6 b5 fd e9 b4 ff ff b6 ff ea b4 ff f1 b6 fe ec b4 ff fe b6 ff ef b4 ff f7 b5 f1 e1 b1 d2 b1 b0 ff f2 b6 ff f0 b3 ff eb b4 ff fd b5 ca a7 af 88 50 a8 9b 6a aa f7 e6 b4 84 49 a8 e9 ce Data Ascii: PNGIHDRxxgAMAasRGBPLTEhiijb`XZ]VfTRdl{uphPjI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49743	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:19 UTC	364	OUT	GET /img/fb_round_logo.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:19 UTC	405	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29005::1728761125163-81bb5cf1e451109cf0b1868b2152914b Age: 1708794 Date: Sun, 13 Oct 2024 18:12:19 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "676c83478e410d324fe56aca428d3305505732c648667b22e15c8222117c75e6" Content-Type: image/png Accept-Ranges: bytes Response-Time: 0ms Content-Length: 42676 Connection: close
2024-10-13 18:12:19 UTC	14955	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 50 14 85 4f 53 b5 22 15 07 3b 88 08 66 a8 4e 16 44 45 04 17 ad 42 11 2a 84 5a a1 55 07 93 97 fe 08 4d 1a 92 14 17 47 c1 b5 e0 e0 cf 62 d5 c1 c5 59 57 07 57 41 10 fc 01 71 75 71 52 74 91 12 ef 4b 0a 2d 62 7c 70 79 1f e7 bd 73 b8 ef 3e 40 a8 95 98 66 b5 8d 02 9a 6e 9b a9 44 5c cc 64 57 c4 d0 2b c2 e8 a0 9a c6 a0 cc 2c 63 56 92 92 f0 5d 5f f7 08 f0 fd 2e c6 b3 fc ef fd b9 ba d5 9c c5 80 80 48 3c c3 0c d3 26 5e 27 9e dc b4 0d ce fb c4 11 56 94 55 e2 73 e2 11 93 1a 24 7e e4 ba e2 f1 1b e7 82 cb 02 cf 8c 98 e9 d4 1c 71 84 58 2c b4 b0 d2 c2 ac 68 6a c4 13 c4 51 55 d3 29 5f c8 78 ac Data Ascii: PNGIHDR!iCCPICC profile(}=HPOS";fNDEB*ZUMGbYWWAquqRtK-b\|pys>@fnD\dW+,cV]_.H<&^'VUs$~qX,hjQU)_x
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: 70 6d bb 92 fc ac 2e ac 2b b9 78 bc d2 07 32 9a fa 0f 00 34 ac dd 4a f9 e3 cf cd 0e df 77 4f bb a3 1a 00 00 d7 f5 bd 19 cd c3 62 99 00 6b 59 b7 d7 9f 4d f2 33 49 6e 53 0d 00 68 56 5d 92 67 ef 6d 0f 7f fa 03 33 ad 56 e5 fa 03 00 e0 06 76 25 f9 d3 dd 5e ff 56 a5 18 71 01 f9 5d cf 25 f9 9c 32 00 40 b3 4a 49 0e ee aa ea 3f f3 b1 d9 72 eb de 4a f7 15 00 c0 ea c8 29 2e 23 c0 ca 77 66 5f e9 be 02 80 31 f9 c2 d3 9d e1 c7 1f e9 b4 55 02 00 60 d5 76 64 34 0b 4b 17 56 04 58 6f fb 40 a4 9a 00 d0 b8 ba 24 0f 1e 69 d5 3f ff c1 d9 6a b6 ed ba 03 00 60 8d 9e 8d bc 22 89 00 2b dd 5e 7f 2e ba af 00 60 2c 66 db c9 cf 7d 70 66 f0 f0 ad 2d dd 57 00 00 6b 37 97 e4 67 ba bd fe b6 cf 2c fc 4b e8 68 4d a9 9d 07 01 a0 61 75 49 3e 70 5f 7b e9 0b 4f cf b4 93 54 2a 02 00 b0 2e 72 8b Data Ascii: pm.+x24JwObkYM3InShV]gm3Vv%^Vq]%2@JI?rJ).#wf_1U`vd4KVXo@$i?j`"+^.`,f}pf-Wk7g,KhMauI>p_{OT*.r
2024-10-13 18:12:19 UTC	11337	IN	Data Raw: c0 32 38 59 bd ce ea ab 19 05 d6 37 5c 98 55 58 00 00 00 c0 72 b8 32 b3 af fe 3d 05 d6 dc 7c 15 d6 cb ab fb a4 01 00 00 00 ec a3 53 d5 6b a6 71 b8 51 14 33 0a ac 6f 75 51 4e 24 04 00 00 00 f6 d7 67 ab b7 8a e1 1b 14 58 df 64 1a 87 07 9a cd c2 b2 0a 0b 00 00 00 d8 0f 27 aa 97 58 7d f5 ad 14 58 df e9 c2 ea 5d 62 00 00 00 00 f6 c1 25 e9 25 be 83 02 eb db cc 57 61 bd b4 ba 4d 1a 00 00 00 c0 1e 3a 5a bd 6a 1a 07 9d c4 b7 51 60 7d 77 97 a6 ed 04 00 00 00 f6 d6 c7 aa 77 8a e1 3b 29 b0 be 8b 69 1c 8e 36 9b 85 75 8b 34 00 00 00 80 3d 70 b8 fa f3 69 1c ee 10 c5 77 52 60 3d b4 4b ab 37 8a 01 00 00 00 d8 03 17 55 e7 8b e1 bb 53 60 3d 84 69 1c 4e 56 af a9 6e 90 06 00 00 00 b0 8b ee 6d 76 f2 e0 bd a2 f8 ee 14 58 0f ef 8a 66 25 16 00 00 00 c0 6e f9 c0 fc 0f 0f 41 81 f5 Data Ascii: 28Y7\UXr2=\|SkqQ3ouQN$gXd'X}X]b%%WaM:ZjQ`}ww;)i6u4=piwR`=K7US`=iNVnmvXf%nA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49745	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:19 UTC	354	OUT	GET /img/2FA.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:19 UTC	406	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29015::1728761125163-03d39d5d071182aba1b01ba2e859de39 Age: 1708795 Date: Sun, 13 Oct 2024 18:12:19 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "a7fd65363687e512751d88f7850b61969427e8d3aa9a177946bcd4bc280b71ad" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 114767 Connection: close
2024-10-13 18:12:19 UTC	14954	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1d 00 00 00 fc 08 06 00 00 00 d3 e7 16 e9 00 00 01 83 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 22 15 07 33 48 71 c8 50 9d 5a 10 15 71 d4 2a 14 a1 42 a8 15 5a 75 30 b9 f4 0b 9a 34 24 29 2e 8e 82 6b c1 c1 8f c5 aa 83 8b b3 ae 0e ae 82 20 f8 01 e2 ea e2 a4 e8 22 25 fe af 29 b4 88 f1 e0 b8 1f ef ee 3d ee de 01 42 a3 c2 74 bb 67 1c d0 0d c7 4a 27 13 52 36 b7 2a 85 5e 11 46 08 22 62 88 28 cc 36 e7 64 39 05 df f1 75 8f 00 5f ef e2 3c cb ff dc 9f 63 40 cb db 0c 08 48 c4 b3 cc b4 1c e2 0d e2 e9 4d c7 e4 bc 4f 2c b2 92 a2 11 9f 13 c7 2c ba 20 f1 23 d7 55 8f df 38 17 5b 2c f0 4c d1 ca a4 e7 89 45 62 a9 d8 c5 6a 17 b3 92 a5 13 4f 11 47 35 dd a0 7c 21 eb b1 c6 79 Data Ascii: PNGIHDRiCCPICC profile(}=H@_S"3HqPZqBZu04$).k "%)=BtgJ'R6^F"b(6d9u_<c@HMO,, #U8[,LEbjOG5\|!y
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: ee 2d 20 87 e3 12 c9 82 d3 61 bd d3 31 a4 3d e2 f9 24 e9 16 86 19 9d 47 7a 7c b0 88 e7 e5 b8 15 32 96 10 0f e9 15 7d 90 5e 69 9a 05 b4 ee 46 08 07 60 61 0c c3 f4 1a eb c5 72 34 2f 56 eb 05 1e 3c 78 80 b3 b3 53 2c 97 4b 6c b7 b7 1e 00 08 5c 1a 40 29 e1 8f e3 9e ab 7f 05 5f 00 e5 52 06 be a1 5b 2a ae 25 c4 b0 4d c5 b7 d2 df e5 5b e1 79 30 14 5c 32 df ff 2d 6c 21 64 b1 11 5b 6c 38 99 29 f3 a6 62 63 e1 3c 29 3d 4e b6 ff 74 0b 7f 7c 29 68 f4 be 24 8a da 1d e1 73 e1 30 2a 2f cd ed f1 8f 20 42 16 03 9e f9 2e b1 ae c9 22 17 09 9f cc 1c 7b c7 d4 c4 1d 4b bc c3 83 34 cf 84 ad 98 23 b5 4e 21 55 b5 80 3e fd 4d 09 c9 c8 1b 5a 56 6d 57 c6 f9 cc ed d3 1b 23 1d 93 f0 1b bd 7d ce 7f aa 42 63 6e 1f 53 30 d1 94 f6 fc 31 3a 22 c7 68 53 90 17 3a aa 19 eb 9a e2 e1 31 ce 4d f8 Data Ascii: - a1=$Gz\|2}^iF`ar4/V<xS,Kl\@)_R[%M[y0\2-l!d[l8)bc<)=Nt\|)h$s0/ B."{K4#N!U>MZVmW#}BcnS01:"hS:1M
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: 5b e2 50 8f 34 a5 32 9a e5 cf 24 8e df d0 e4 8a 83 f7 42 7e 4c aa f7 3a b4 8f 87 90 93 df 47 c8 67 24 2c cf c3 cd 90 2b 30 18 fb f5 71 c5 d0 2c e6 38 39 7e 86 8b f3 33 6c 4d 46 d8 de d9 c5 d9 d9 19 66 17 2f 31 7b 75 0a 06 23 a9 5c d7 12 5c 70 a8 b6 c1 e9 8b e7 68 16 73 6c 6d 4c 31 1a 4d a0 b5 44 3d 9f a3 59 cc a1 65 03 b2 3a 32 75 bd c0 8b e7 4f f0 ea f4 18 90 12 57 af 1c a1 e2 1c 75 5d e3 f4 e4 18 e7 67 27 d8 9c 4c 20 55 0d 26 4b b4 f5 1c 27 2f 9e 63 7e 39 c3 ce ee 36 b6 b6 37 50 01 98 5d 9c a3 9e 5f c2 0c b7 01 05 03 ea 79 8b 8b b3 57 98 cf 2f 21 db 1a 37 ae bf 83 82 33 70 d2 98 5f ce 50 cf 2f ad 0a 28 50 37 0d 8a b2 c0 e5 e5 05 66 e7 67 a8 e7 33 ec ee ec e1 f0 60 1f e7 e7 17 38 79 71 8c 8b b3 97 a8 0a 81 a6 59 40 09 a3 d9 c1 d8 6a 52 a5 b3 18 68 9a c6 Data Ascii: [P42$B~L:Gg$,+0q,89~3lMFf/1{u#\\phslmL1MD=Ye:2uOWu]g'L U&K'/c~967P]_yW/!73p_P/(P7fg3`8yqY@jRh
2024-10-13 18:12:19 UTC	3662	IN	Data Raw: 66 f4 9d c1 ae db c3 99 1d 9c 00 1d 13 b6 74 83 13 bd 42 7f fb 02 ee ea cf b8 7e f1 47 c8 e5 0b e8 f5 15 70 fd 08 b4 fb 18 f6 ec 31 68 fb 18 dd f6 21 c6 ee 0c 1b 6b 30 32 40 e8 61 05 90 71 c0 a0 06 a3 25 48 07 98 6d 87 71 bc 45 a7 53 07 4e ca f0 49 30 32 c3 c8 bb 0d 47 26 7f ac 0e 0a 65 c0 85 a0 8b 66 68 08 d2 3d 18 7f a0 3c 9b d7 6a 90 78 cd c7 69 86 10 c7 c4 28 6e 25 33 2e 8b 36 b7 26 04 44 fb 71 f0 fb 63 bd 02 25 e0 13 32 c5 64 fc 99 23 1d 11 55 20 a6 c3 72 46 f4 97 d1 d0 ad a4 41 7b 25 20 27 aa 7e 20 90 53 28 07 f5 5a 95 24 9f 1b 17 6b 11 bf e0 1f a0 eb d9 b3 ac ea 5c b8 f0 bd de 37 c4 85 73 33 e6 81 98 fa 40 c1 a3 e0 fe 31 46 82 28 23 dd 85 31 50 89 eb 2b 02 02 10 df af c1 d1 d6 cf a9 61 3f 83 d6 53 8b 47 d1 6a 69 9d e6 e5 3a 77 32 06 14 65 4b ed 4c Data Ascii: ftB~Gp1h!k02@aq%HmqESNI02G&efh=<jxi(n%3.6&Dqc%2d#U rFA{% '~ S(Z$k\7s3@1F(#1P+a?SGji:w2eKL
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: 82 2c 10 64 be 4b e1 9d 78 1f 7d f8 31 06 21 b3 6c cf 4b 4b 3a 89 a6 51 2a be c4 9f 31 3c 03 46 d5 ab 72 aa 67 bc 78 0d 0d 2f b2 c5 c4 e8 47 46 6f 18 86 18 22 04 09 82 66 44 c0 a8 8c 91 3b 38 43 d8 c8 0e c2 02 d0 e8 7f e0 d5 60 81 1e 42 16 44 83 6f 91 85 82 55 00 92 d0 34 fb 7d 9f 9f 65 38 5d 43 77 5d 6b d1 5a 1c 24 47 78 24 2d 91 f9 8f b9 57 5b 9c b6 b4 00 ba b1 ca bf 58 4a 54 66 73 06 2f 6b 63 c4 f9 2b 9f ff e6 49 d9 a1 a0 65 dc 9f 7c ee ae f9 52 45 c5 eb da 79 af 29 76 d7 24 15 4c 6c c0 48 14 0e 9e ad 6f 2d ae 5f 79 2e f3 84 32 1e 77 5e 71 a8 ad 9b aa 0a 93 1b d3 61 72 21 cf cb 57 b9 ac 86 64 41 87 31 06 14 a8 19 30 31 f1 0a 41 47 e4 74 80 2a 17 4f 27 05 cb 92 53 10 cb 23 ad 01 29 98 c8 84 e5 01 96 dd 27 55 4e 00 14 1d 77 4d 1d 8a 78 d0 a5 6e 7c 22 4a Data Ascii: ,dKx}1!lKK:Q1<Frgx/GFo"fD;8C`BDoU4}e8]Cw]kZ$Gx$-W[XJTfs/kc+Ie\|REy)v$LlHo-_y.2w^qar!WdA101AGtO'S#)'UNwMxn\|"J
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: 38 7b 9f f2 f0 16 d3 6f ef 31 7b f5 84 c5 d1 2b ec 74 8e b3 25 47 8b d7 98 c5 b7 cc 5e 57 ec 14 19 db 45 4e 36 9f 91 4d e7 18 a3 79 79 fc 9c 9d 77 3e 26 9f 4f d8 15 bb 4c 4a 85 39 7e 89 31 57 20 bb c4 cc 8c 21 db e5 d5 9b 13 3e fb f2 2f 7c f9 e5 97 ec ee ee f2 1b 0b aa 18 53 14 05 ce 39 ce a6 73 9c 9b f1 e7 bf dc e5 0f 7f f8 03 27 b3 05 3b fb 57 98 4c 46 9c 4e 67 28 a9 41 38 1e 3e fe 86 ff ff bf fd 13 c6 18 3e fa e8 23 6e dd 79 df 07 56 a5 38 3b 9b 33 9f cf f9 e3 27 9f f3 c9 27 9f 90 eb 0d c6 bf dc a2 d0 19 a3 b1 06 e5 38 99 4f 79 f0 e4 31 9f 7c f2 39 77 ef df e7 7f fd df fe 33 2a ff 19 57 2f ef 52 d9 05 55 59 52 2e 16 7c 79 f7 01 ff f0 0f ff c0 c2 cc f8 c5 af 7f 4e 56 8c b9 72 e5 8a 2f 35 bb 08 ec 27 45 01 be bf 0c dc bc 2c 3d d8 91 12 a1 c0 d9 a5 52 b1 Data Ascii: 8{o1{+t%G^WEN6Myyw>&OLJ9~1W !>/\|S9s';WLFNg(A8>>#nyV8;3''8Oy1\|9w3*W/RUYR.\|yNVr/5'E,=R
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: d2 fb 98 de 2c e8 20 4e e4 c1 25 28 62 d2 f8 bc d4 ad 9a 95 e0 da 41 c7 38 5d 51 fd a6 4d 11 81 38 55 c8 de a4 c5 07 4a 3d 79 8d 37 55 90 cb 89 60 b5 f2 51 4e 32 ab 91 d6 6a bd ee 55 72 1b 1c 47 21 1a 50 bd 01 a1 34 5f 7b 6a 08 94 06 45 b4 43 45 c7 c5 10 78 70 21 44 f1 24 07 d1 3e c0 f6 48 9e 6f fb 68 c8 95 26 2e 5f 3d c7 c3 cf 3f 75 5d 2b 7d 0f 03 b8 60 c2 5a 88 a8 a8 ae 9a 5a b2 87 f3 bf 32 2b 28 b3 c2 16 40 bb 3a c2 0f 7e f8 01 7e f0 c3 0f 00 fd 15 a9 7f 7d 05 24 d3 61 18 b0 dd 6e b1 dd 6e a1 d8 00 ca 5d b3 c1 6e 62 d6 fe 7a 9c 18 c2 5c f7 87 37 99 dd 2b 8d 86 cc 91 79 78 a3 a0 e3 50 e7 4f 9a 53 94 13 81 37 ab 6f e9 30 07 88 75 ad ba ec 32 cb a6 69 8a 8a bc 25 22 ac 80 5f cb 18 d2 21 c5 b4 77 ef a5 3a 16 73 3a 3f b5 f9 a3 34 cf 2f b5 51 8f e8 6c 4d a2 Data Ascii: , N%(bA8]QM8UJ=y7U`QN2jUrG!P4_{jECExp!D$>Hoh&._=?u]+}`ZZ2+(@:~~}$ann]nbz\7+yxPOS7o0u2i%"_!w:s:?4/QlM
2024-10-13 18:12:19 UTC	14231	IN	Data Raw: 13 74 4c 17 bd e9 6b 14 a6 3b 3e 30 17 c5 ab 4a c6 69 f9 60 4a 61 b9 da 05 c9 bd 4d 6a c1 51 ae 23 5f f2 53 29 7d 4e 5e de a9 05 01 b5 7d a8 75 9f a4 e5 a9 00 f5 87 36 4e 66 a7 cd 10 24 88 97 98 d2 45 25 56 df 9b af 14 26 4a 71 b9 1d f1 1c e4 96 1c 64 fd bb 89 40 0a de 1e 7e 70 2e 95 ca 4d 32 4a 00 23 02 74 1b ec 5e be c0 8b 07 f7 31 9c bf c0 a9 12 c8 d0 7b 87 d5 35 fa be df 83 e0 d2 ee 92 6f 7b d0 01 9f f0 93 df cf 20 7d ee d4 07 bd bc 31 3b aa df 30 38 73 b9 93 9b b7 71 fc fd 0f f0 ce cf 7f 8e db 37 6e a2 5b dd 40 43 0a eb b3 97 d8 7d d2 e0 72 fb 1c bb 73 81 e1 1e 2d 59 f4 dd 0e 16 03 2c 09 98 8c 0b ec b4 81 55 da 29 94 76 3b 5c 75 16 ba 13 ac db 16 3b 0d 6c 9b 13 dc 78 ef 03 bc f3 b3 ff 09 c7 3f fc 3b 5c 98 1b d8 ea 13 0c 7a 05 05 81 c2 10 83 8e ab ab Data Ascii: tLk;>0Ji`JaMjQ#_S)}N^}u6Nf$E%V&Jqd@~p.M2J#t^1{5o{ }1;08sq7n[@C}rs-Y,U)v;\u;lx?;\z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49746	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:19 UTC	597	OUT	GET /ico.ico HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scary-wave.surge.sh/appeal/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:19 UTC	430	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29015::1728761125163-6701a4ba0b931af579be35b93631da04 Age: 1708665 Date: Sun, 13 Oct 2024 18:12:19 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "ce8a22ece441cfd0f09fb0359b8d683fed0e66f8bec0bbc067a8257c95b05fd8" Content-Type: image/x-icon Accept-Ranges: bytes Response-Time: 0ms Content-Length: 5430 Vary: Accept-Encoding Connection: close
2024-10-13 18:12:19 UTC	2152	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: h& ( h ffgd@`efffffep`fffffff
2024-10-13 18:12:19 UTC	3278	IN	Data Raw: e0 ff ff ff ff ff db db db ff db db db ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff e6 e6 e6 ff e6 e6 e6 ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 68 08 20 00 00 00 00 00 00 00 00 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: fffffffffffeh ffffffffffffffffffffffh effffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49747	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:19 UTC	356	OUT	GET /img/phone.png HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:19 UTC	406	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 29005::1728761125163-3c18a93313e72ab9967152a4e92aa238 Age: 1708793 Date: Sun, 13 Oct 2024 18:12:19 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "fbc7addde1cd6057bd59c03941fcf38a6ac17dd90312d142ebd7520891c3656e" Content-Type: image/png Accept-Ranges: bytes Response-Time: 1ms Content-Length: 255341 Connection: close
2024-10-13 18:12:19 UTC	12088	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 18 08 06 00 00 00 cc 10 47 90 00 03 e5 34 49 44 41 54 78 da ac 7d d9 8e 65 59 92 d5 b2 33 dc d9 c3 23 23 22 b3 32 aa ba 26 c8 ae 12 ad a6 5b aa 06 1a 21 90 78 84 1f e0 03 e0 0f 80 97 7c e3 5b 78 e5 43 e0 a5 25 ba 2a bb 86 cc ca b1 72 8c c9 c3 c3 fd fa 9d ce 39 86 db 36 5b b2 ad 2b 51 8c 37 e2 e8 de 33 ec 7d f6 60 db 6c d9 b4 5d f4 cb 7f f7 15 80 0b fc 3f 7f 24 be 27 00 0a a0 89 73 fe 6e 01 51 60 3a 01 cd c2 af e9 3e ca f1 19 f5 f2 ac 4f fa f8 d9 fa b9 1e e3 99 0e 50 ab 67 e5 75 8d 37 80 0e 51 56 80 66 e9 65 d4 eb f2 67 ae bd ac 2a 20 12 ed e9 01 3d 00 cd 06 90 0e 98 b6 d1 8e c9 ef 63 8a ba 7a 40 e6 5e e7 74 0b ff 58 db 46 7f 87 74 5e 0f e0 cf 4f 7b 40 ed de de db d9 3e 04 30 d8 b3 76 ee Data Ascii: PNGIHDRG4IDATx}eY3##"2&[!x\|[xC%r96[+Q73}`l]?$'snQ`:>OPgu7QVfeg =cz@^tXFt^O{@>0v
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: 3b 60 38 eb 0e 4e 27 a6 a4 f9 0b c9 38 ea 07 13 b1 de 38 91 61 b0 ed 33 5c bc f1 60 e1 df 27 93 a2 4d f0 03 0d a0 1e 87 62 7a 91 6a c4 2e a3 53 01 6b 36 30 6f 04 70 a9 e6 3b 8e d3 8d 55 3c 54 5b ba 1f 00 1d ba 6b fb cc ea 77 79 18 63 de fa 4b cb fa d6 05 4f 15 2d 74 74 ce 62 74 20 09 41 d0 8e de a5 1c 73 f4 29 38 cd 71 86 97 e6 a9 50 ce bf 15 ee a2 71 6b b4 ec 3c d7 c6 aa 16 b4 f9 1a 3c fa b1 b0 80 cd 31 a8 0b fb c5 24 97 d8 41 9f 68 a3 77 e4 f3 76 57 72 3e ec 94 c0 e8 10 9b 77 63 ac 5e 7e 86 e2 fc 21 e6 d7 1f a3 9f 74 18 73 87 8e aa e0 fd d7 23 c3 0c 87 e8 90 07 66 af 43 76 03 f8 c2 f3 b7 71 16 bc fe 08 8c 06 65 00 79 39 82 6e 30 44 bf 01 08 af df e5 93 c0 24 4e 78 1d 12 44 1c 33 f6 71 1d 58 c3 86 24 1d c4 8d 1b 3c 7d f2 33 9c cc ee e0 93 df ff 1f 28 0f Data Ascii: ;`8N'88a3\`'Mbzj.Sk60op;U<T[kwycKO-ttbt As)8qPqk<<1$AhwvWr>wc^~!ts#fCvqey9n0D$NxD3qX$<}3(
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: 77 07 cd 04 4e ad 68 82 6c 32 c9 4c 5f ff 24 33 b2 f1 d0 bb 8c 55 53 58 2c 41 c3 25 10 4a db 87 05 98 52 da 39 18 36 b0 dc 67 90 3c d5 60 12 ed e5 3b 17 32 d9 38 40 75 cb 81 0c b2 e3 64 45 59 2a eb 37 26 fd ca eb 06 74 70 0b 74 74 1b 34 3f 01 cd 0f 81 ba 91 05 08 ef 06 d3 4c 0e fa f1 0a d3 f8 ed 8c ed 7b ba 40 fa 6a 85 74 de e8 0a b7 e0 ef 96 ed eb 7a f0 a6 93 cf 46 b3 1a e1 fe 09 e2 0f 5e 40 7c eb 1e e2 9b 77 10 5e 3c 02 35 d2 45 a7 60 af b3 26 0e fe ff 78 be 54 28 03 38 7c f5 6d 00 e0 6f cf be f5 00 36 0c 74 a3 cc fd e5 83 0a f3 f7 2a 2c df 8b 58 bc 31 43 f5 52 03 2c 22 3a 9e e1 e6 bc c6 f5 e3 84 ed 25 4b 33 49 11 19 b1 24 75 37 10 3b 9f bc f0 34 60 e7 80 50 7f d2 a4 0c 04 f6 72 f1 b7 37 d4 26 e8 f1 ca 0a 54 cf 74 fc f8 fa 2b f0 87 3f 45 fa f0 4f 80 b3 Data Ascii: wNhl2L_$3USX,A%JR96g<`;28@udEY7&tptt4?L{@jtzF^@\|w^<5E`&xT(8\|mo6t,X1CR,":%K3I$u7;4`Pr7&Tt+?EO
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: ea 43 1f c6 4f ff b5 9f c4 d1 fe 1e 7e e3 b7 bf 8e a2 2a f0 ab df 98 e3 2f 7d 64 c0 ad 67 07 e0 bc 8a ef 66 16 20 e4 66 e3 a1 0d 1c 4d b0 ca d0 1e 53 c4 c8 c5 39 9c 46 16 53 cd b5 ce e2 0c a4 79 fc af 62 db fa 59 9b cd fa 2e e3 fc 0f ce 31 3d 38 c6 fe 87 1e c5 d0 b5 00 5f 8f 83 9b a9 91 79 bf 03 b7 2d d2 41 8d f4 81 13 30 cf dd ef 30 ce 11 b0 be c7 bd e5 ee ce e5 2e 15 81 fe 3d 95 51 94 c7 12 05 89 bc 56 8d 60 9a 9a 35 d3 4e 7f 33 01 85 24 9f 69 77 f1 d2 4a cb 0a 36 39 ed 89 27 20 52 e3 d2 8d 98 d4 83 a3 29 20 92 7d ac dc 2a 96 53 56 ee 7d 4c f7 29 6f 81 e9 47 01 c9 2b 7f 20 13 3d da bd ae f6 2d 93 a7 95 65 24 06 ea 27 bc 63 d5 00 e6 ce c6 a3 c2 c7 c1 18 b3 90 dd 81 60 a4 91 f6 c9 75 f2 71 2e 18 2a f6 fd 2d e4 ef 3b d8 77 90 1f af b7 ce fc 86 23 44 9e a2 Data Ascii: CO~/}dgf fMS9FSybY.1=8_y-A00.=QV`5N3$iwJ69' R) }SV}L)oG+ =-e$'c`uq.*-;w#D
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: 46 0e 70 ec 6c b5 97 87 53 41 52 0d 1e 12 d8 7c a1 5e d3 f7 50 21 4b c3 c6 95 d4 f5 67 52 78 2d 20 c9 e0 fd 84 27 3a 7f 64 e9 dc 15 4f bf ac 08 dc 54 78 a3 b0 74 04 c6 af e8 47 00 41 80 d9 f7 f9 6b 7c ce df 9a 39 73 a5 26 d2 16 17 b3 17 f6 af b1 c6 0d 48 13 4a c3 bd 98 3d 5f e0 16 4b ec 64 df 7c 7f e7 bc 53 cf 21 48 b3 89 b5 9e 2f f1 8d ed fb 96 96 b2 fe 23 3a 79 7d 84 34 b9 d8 f2 49 81 12 48 98 4a 06 69 1c de b8 44 77 f6 16 b3 87 3f 03 f7 1b 60 b4 fc d8 e1 bd 80 21 9d 85 6e a4 e4 e0 f4 3b d3 2c 00 45 75 a1 40 82 87 60 ab f2 4e 3d 01 19 01 f4 42 90 ea 39 b2 1e 88 1d 09 1f 65 6b a0 72 e7 a5 8e 60 df 2c 55 84 ab 95 2c e7 1e 78 ae 3b 8b 93 40 b4 6d ba 5d bd 20 08 50 61 2d 33 6b c4 52 19 84 1d 73 2b 01 5a fe 91 cd c6 5f 03 e8 a3 04 eb 9a 45 b6 f2 81 05 cd 7b Data Ascii: FplSAR\|^P!KgRx- ':dOTxtGAk\|9s&HJ=_Kd\|S!H/#:y}4IHJiDw?`!n;,Eu@`N=B9ekr`,U,x;@m] Pa-3kRs+Z_E{
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: d6 d5 df 90 16 a0 6d 72 2b 1a bd 96 7d 8c 77 06 44 a3 e9 a2 09 46 30 1a a7 2a e6 1c 8b 8c ed a5 7e d8 65 43 25 aa 52 61 b4 5e 27 95 d8 3e 97 6c bd 9f f7 63 f5 d9 22 de 2d 92 3d 22 33 dc 1b 9e e2 12 31 71 b1 c8 95 cf b6 8c c8 b4 df a7 06 b1 8b b8 47 7f 7f d3 8c 74 ef 05 d0 ed 33 f0 55 31 1f c9 62 12 01 d3 e5 8e 49 75 a3 ad 19 45 8f 6e f4 6c ec 9f 02 3b bd df 15 5f ac a8 1e 15 6c d1 82 24 8b 11 5b 07 87 b1 f4 94 64 ff 68 cc 03 93 20 db 8b de ad 98 7c 61 35 eb df e7 84 34 a2 17 6d de 96 77 02 ac 9c 65 9b a8 17 2d de 88 5e f4 78 00 04 48 cd d4 e1 86 c4 60 59 f5 74 c4 78 be bc 2f c0 ee cd f4 e3 62 ae dc 62 42 01 89 ae 8f 40 de 49 2c fb 3e 62 25 ec df c7 74 57 98 be fb fc 21 ce f1 4c f6 39 a1 93 fd 7c 8c 3b d8 d3 46 9e e3 e5 e3 02 92 a6 91 4c 8d 71 80 59 19 3c Data Ascii: mr+}wDF0*~eC%Ra^'>lc"-="31qGt3U1bIuEnl;_l$[dh \|a54mwe-^xH`Ytx/bbB@I,>b%tW!L9\|;FLqY<
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: 51 77 6c 98 b3 52 78 6a c5 c0 6f be 88 a3 4f 2e 75 c9 b7 12 76 23 d8 8c d0 f0 1c 1b 1d cb 4f 68 e6 1c 57 66 03 7a 3e 3f f9 36 60 af a5 5a 04 1e 8d 2d 40 3c 67 fb 1a a5 de 60 08 22 f5 24 05 23 48 14 76 42 48 91 11 1c 7a 59 d1 38 83 00 36 c0 79 18 a2 31 46 aa 19 75 6a 49 cd 54 53 5d de a5 00 27 06 48 38 18 22 65 6e ac fb 36 4a 8b 33 80 96 06 08 dd 83 8e aa ef 28 03 30 23 7a 2a 68 ba d6 86 84 b9 81 73 67 3f 1b 60 f9 00 c8 a3 6a 04 d9 73 81 5f 58 ba d2 b9 5d 43 1e e7 48 56 f5 bc f2 85 95 8f f1 d6 30 07 c0 16 f7 d1 c1 89 0a ec 34 b6 0e db fa 64 1d e3 00 7a 2f e3 ea f6 f3 8d 7d 8f e6 c9 39 7c a9 e3 69 f7 48 5f 3f 7e 6b f9 e9 14 9d bc 70 09 91 35 bd f1 9d 80 cd a8 74 cc 2b dd 79 f1 06 85 d0 0b 87 af 61 c5 50 95 0a 14 1c 37 ed 04 28 f1 73 db 81 60 80 f7 1a d4 d4 Data Ascii: QwlRxjoO.uv#OhWfz>?6`Z-@<g`"$#HvBHzY86y1FujITS]'H8"en6J3(0#z*hsg?`js_X]CHV04dz/}9\|iH_?~kp5t+yaP7(s`
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: 31 30 9b 59 fa f1 dc 60 c6 e8 d2 bb 9d 8f 78 8c a5 75 56 61 ea 89 38 02 48 15 4c 9f 8f 68 7c 0e 04 83 58 81 5f b2 7a e6 49 26 c0 fa b9 b1 b3 18 e2 1d d5 d1 98 90 0e ed ef 9d 6f fa be 5d 73 20 51 4c fb 36 f1 ef df 9f 03 d3 a5 fd bf 5b 58 0e f0 f6 74 7c 2c b5 5e 22 e9 e3 3c 50 70 6b e8 33 39 82 bf 6e bc af b9 87 bc e5 00 cf ff f7 67 f1 f5 df fe 3e 2e 3d 40 f0 f7 26 0c a0 5b bf d8 10 96 92 00 90 88 83 33 d6 5f d4 48 0e 55 58 40 89 62 db 0f ff ef ca 94 32 02 76 04 6b 86 74 1b bc 78 b7 c5 5f fd f5 43 fc f0 85 6e 8c 5d c4 9e da 62 6e 7d 3e ee ff 67 bf 0c 7c f6 c9 84 5f fa 9b 3d fe f9 5f 07 64 22 d0 ad a2 8e 74 e2 a6 b5 a9 ab b1 70 92 f8 7d 9a 8e 9a c2 54 c5 49 95 16 1f 79 bc e0 57 1f 3f c2 53 4f 34 16 fc 7b 9a f0 0b 1f 04 fe d6 7b 05 e8 e3 d8 82 d9 be d2 10 bc Data Ascii: 10Y`xuVa8HLh\|X_zI&o]s QL6[Xt\|,^"<Ppk39ng>.=@&[3_HUX@b2vktx_Cn]bn}>g\|_=_d"tp}TIyW?SO4{{
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: f9 ce 2a d6 ad ab 3b a3 2a 0f a3 39 0d 94 e1 9d 74 32 a7 0f a2 b4 1c 94 f3 09 cd ad cd 71 9f 9a c2 66 9f 31 6c da bb df e0 01 41 a1 95 6c b8 7f 4c d8 4f bd 1f 52 35 f0 c3 bb a3 85 5e 80 16 0b c7 f7 c2 06 8b 48 d2 09 b6 84 9d ce c7 4c 3e 18 6e 52 4b 84 be 62 71 a3 a3 39 7c 1b a9 23 9d 3a 66 ad 21 61 4a 02 e9 5f be 0d 1c 9f 99 49 f2 a2 9d 9a 1b 7e fd 23 9f 40 e3 e5 db 52 d4 9b 5f ad 84 4b 90 85 b0 75 e1 24 38 91 f5 4b ad 40 c1 f4 39 15 85 2a 87 7b 2b 55 53 3f 98 c7 82 cd 76 40 b7 9c bb 29 74 c6 6c be 08 83 66 96 e3 78 c9 60 a3 85 96 7a b0 ac be a3 f7 fb 42 dd 9f 88 ff fe 04 69 1b a4 e5 65 00 09 1f 7b 09 f8 ab 3f b1 c4 07 7e 7c 06 ec 39 7b 2f c2 6e 95 92 3d 9e c4 59 a3 a6 01 96 2b b3 46 39 3b 31 6d de 30 4c c0 31 9f 66 bc fd 07 b7 f8 f1 df 58 fb 04 71 05 84 Data Ascii: ;9t2qf1lAlLOR5^HL>nRKbq9\|#:f!aJ_I~#@R_Ku$8K@9*{+US?v@)tlfx`zBie{?~\|9{/n=Y+F9;1m0L1fXq
2024-10-13 18:12:19 UTC	16384	IN	Data Raw: 04 84 fe 56 e1 1b c4 64 8a 6c 83 84 eb 45 a2 24 1b c0 c2 0d 28 0f dc de a4 82 ce 5e b0 b2 64 c5 92 b5 67 90 fa 7e 5a 5b 89 ab b0 89 ea db 6e 01 4f d8 50 33 76 8e 72 7b 30 8f de 2c 33 72 35 2c c9 cd 4d 2f 1d 44 79 c0 f6 74 6c 00 88 4d 02 0e cc a7 e8 80 2b ef 61 2b b4 02 d6 4d d4 9b ba 32 30 4a f9 ce 93 ed 2f 81 bd a6 ec fb de d8 d1 f1 be 33 81 9d 1d 43 77 38 e7 ca 4b 99 a0 31 1a cd 1e 66 9c 9a 42 e7 e6 40 6a 38 f5 ce e5 67 d9 32 0f f5 96 fd eb b6 ef 7d 95 88 69 e0 f6 bd bc 4a a1 ec 9e bf 9f 9f 77 69 06 9e cc 0d a8 33 d5 38 5f 69 e0 69 06 a6 ec 0e cc 71 41 2f 00 04 13 5b 51 18 3c ad e3 82 a7 75 89 cc 19 99 94 7b 36 77 60 e0 60 91 99 01 6b 13 52 64 48 2a 28 ce 35 eb 03 b2 83 ce 4e cd f6 21 cb 43 13 f2 7f 20 fe cb a8 ba 0a 17 b9 c1 d1 e5 88 ae 6d f0 81 37 37 Data Ascii: VdlE$(^dg~Z[nOP3vr{0,3r5,M/DytlM+a+M20J/3Cw8K1fB@j8g2}iJwi38_iiqA/[Q<u{6w``kRdH*(5N!C m77

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49752	138.197.235.123	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:12:20 UTC	350	OUT	GET /ico.ico HTTP/1.1 Host: scary-wave.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:12:21 UTC	430	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 11271::1728761125163-6701a4ba0b931af579be35b93631da04 Age: 1708666 Date: Sun, 13 Oct 2024 18:12:20 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "ce8a22ece441cfd0f09fb0359b8d683fed0e66f8bec0bbc067a8257c95b05fd8" Content-Type: image/x-icon Accept-Ranges: bytes Response-Time: 1ms Content-Length: 5430 Vary: Accept-Encoding Connection: close
2024-10-13 18:12:21 UTC	5430	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: h& ( h ffgd@`efffffep`fffffff

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5384, Parent PID: 3616

General

Target ID:	0
Start time:	14:12:06
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5632, Parent PID: 5384

General

Target ID:	2
Start time:	14:12:09
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1924,i,14733557885809012518,13010750702419069208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1640, Parent PID: 3616

General

Target ID:	3
Start time:	14:12:12
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scary-wave.surge.sh/appeal/"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly