Edit tour

Windows Analysis Report
https://democrats.org/

Overview

General Information

Sample URL:	https://democrats.org/
Analysis ID:	1538308
Tags:	urlscan
Infos:

Errors URL not reachable

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2688 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2480,i,14432624337751521977,12495694239076940357,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://democrats.org/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4694Host: login.live.com

Source: chromecache_36.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010d5b
Source: chromecache_36.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010d5c
Source: chromecache_36.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010d5d
Source: chromecache_42.2.dr	String found in binary or memory: http://www.bluestatedigital.com
Source: chromecache_36.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=gwo2tmd&ht=tk&f=10326.10327.10328&a=15080471&app=typekit&e=css
Source: chromecache_36.2.dr	String found in binary or memory: https://use.typekit.net/af/2d5126/000000000000000000010d5c/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_36.2.dr	String found in binary or memory: https://use.typekit.net/af/2d5126/000000000000000000010d5c/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_36.2.dr	String found in binary or memory: https://use.typekit.net/af/2d5126/000000000000000000010d5c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_36.2.dr	String found in binary or memory: https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_36.2.dr	String found in binary or memory: https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_36.2.dr	String found in binary or memory: https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_36.2.dr	String found in binary or memory: https://use.typekit.net/af/f629be/000000000000000000010d5d/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_36.2.dr	String found in binary or memory: https://use.typekit.net/af/f629be/000000000000000000010d5d/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_36.2.dr	String found in binary or memory: https://use.typekit.net/af/f629be/000000000000000000010d5d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.126.31.69:443 -> 192.168.2.6:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.14:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49797 version: TLS 1.2

Source: classification engine

Classification label: unknown0.win@15/23@16/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2480,i,14432624337751521977,12495694239076940357,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://democrats.org/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2480,i,14432624337751521977,12495694239076940357,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
democrats.org	192.0.66.105	true	false	unknown
iwillvote.com	108.138.7.103	true	false	unknown
www.google.com	172.217.23.100	true	false	unknown
dnc.clients.actionkit.com	52.8.222.175	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
cloud.typography.com	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
ak.democrats.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://democrats.org/	false	unknown
https://iwillvote.com/locate/widget-v2.css	false	unknown
https://democrats.org/wp-content/themes/bsdstarter/assets/img/footer-logo.svg	false	unknown
https://democrats.org/wp-content/uploads/2024/10/Vote-CTA-image-e1728660119427.jpg	false	unknown
https://democrats.org/wp-content/uploads/2024/10/Calls-CTA-image-e1728660041897.jpg	false	unknown
https://ak.democrats.org/samples/widget.js	false	unknown
https://democrats.org/wp-includes/css/dist/block-library/style.min.css?m=1725982252g	false	unknown
https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1729089554g	false	unknown
https://democrats.org/wp-admin/admin-ajax.php?action=frmpro_css&ver=9242122	false	unknown
https://democrats.org/_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uklFxfr6OPTDpRD5sM02efaGpobmVpaGBmZGgEARN0u5g==	false	unknown
https://democrats.org/wp-content/uploads/2024/10/51225586480_45a461ef95_o-3-1-e1728671125484.jpg	false	unknown
https://democrats.org/wp-content/themes/bsdstarter/src/js/vendor/jquery.js?m=1721416559g	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://typekit.com/eulas/000000000000000000010d5c	chromecache_36.2.dr	false	unknown
https://use.typekit.net/af/f629be/000000000000000000010d5d/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_36.2.dr	false	unknown
http://typekit.com/eulas/000000000000000000010d5d	chromecache_36.2.dr	false	unknown
http://typekit.com/eulas/000000000000000000010d5b	chromecache_36.2.dr	false	unknown
https://p.typekit.net/p.css?s=1&k=gwo2tmd&ht=tk&f=10326.10327.10328&a=15080471&app=typekit&e=css	chromecache_36.2.dr	false	unknown
https://use.typekit.net/af/2d5126/000000000000000000010d5c/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_36.2.dr	false	unknown
https://use.typekit.net/af/f629be/000000000000000000010d5d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_36.2.dr	false	unknown
https://use.typekit.net/af/2d5126/000000000000000000010d5c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_36.2.dr	false	unknown
https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_36.2.dr	false	unknown
https://use.typekit.net/af/2d5126/000000000000000000010d5c/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_36.2.dr	false	unknown
http://www.bluestatedigital.com	chromecache_42.2.dr	false	unknown
https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_36.2.dr	false	unknown
https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_36.2.dr	false	unknown
https://use.typekit.net/af/f629be/000000000000000000010d5d/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_36.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.0.66.105	democrats.org	United States	2635	AUTOMATTICUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.23.100	www.google.com	United States	15169	GOOGLEUS	false
108.138.7.103	iwillvote.com	United States	16509	AMAZON-02US	false
52.8.222.175	dnc.clients.actionkit.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1538308
Start date and time:	2024-10-21 00:13:50 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://democrats.org/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	UNKNOWN
Classification:	unknown0.win@15/23@16/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	URL browsing timeout or error

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 199.232.210.172, 142.250.186.99, 74.125.133.84, 216.58.206.46, 2.19.126.198, 2.19.126.206, 23.201.250.36, 2.19.126.211, 2.19.126.219, 142.250.184.200, 20.12.23.50
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, a1874.dscg1.akamai.net, p.typekit.net-stls-v3.edgesuite.net, clients2.google.com, ocsp.digicert.com, use-stls.adobe.com.edgesuite.net, www.googletagmanager.com, ocsp.edge.digicert.com, sls.update.microsoft.com, e7100.g.akamaiedge.net, clients.l.google.com, wildcard.typography.com.edgekey.net, wu-b-net.trafficmanager.net, a1988.dscg1.akamai.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://democrats.org/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 34

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1600x533, components 3
Category:	dropped
Size (bytes):	253556
Entropy (8bit):	7.912082931902928
Encrypted:	false
SSDEEP:	3072:KSi/Z0WtDnhVpzbj18EmcqPVaywkMa66G64myVJ+lLFwRmENM4Br4wBt3etXZG0r:K/xnhVpqP3gysa66G64awRjkwBpeNXVJ
MD5:	F565F3470575A1E1B18C7830D4535EC8
SHA1:	A576D4401F99CA4C8479ABFDB4B3616C99073810
SHA-256:	B39E5EAC9F5ECB55BBBF1B46A358F9194AC76D55F3B28705F8388F74DE29C87C
SHA-512:	594D350FFFC24CBFD873ADAFF3930CF5F10DFE2F0E43BD87B516973F8D60D7DAC28A17B2BDEA4B97B96797A26F0BBB38EFCCFCAE9ECFC1C5D32163963614C09E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$........@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..o..cj.7...M....,}........../.'......w...B...X.9...'.....u...U.].H'..?...S....I.S0_.9!......Ny._I..'..PIfRN..O...\|...........z~b.......?(.O .c.O..QQ...l.......=.s.~..7.G..7.s...........3.......c..t.?..X....y..w....:.......r:.y?.~..... ...<.X.V.a..x..>..cJ....y...x.;....p.1`.......

Chrome Cache Entry: 35

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57765)
Category:	downloaded
Size (bytes):	112427
Entropy (8bit):	4.925295015861728
Encrypted:	false
SSDEEP:	1536:pZeJWfZglWQg5MG7+qehN2pUkxWLZQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LaU3Pq
MD5:	319580D7D8944A1A65F635E0D11E5DA5
SHA1:	E23BC18EF1B0F78F7010E3C16E4C5E1F333248BD
SHA-256:	FB3A89CC6347E098063BD15F285BC90411846DDCE6F17812364FEEDAB67A67F5
SHA-512:	743825EAEA11208277528E506C115EC786AB060095AE4250C65A9B02FE9E5CB2AC5AC386532486A2678B9615490CE75BA096A9FD2041200989AD07A726B5D9D0
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-includes/css/dist/block-library/style.min.css?m=1725982252g
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100

Chrome Cache Entry: 36

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (516)
Category:	downloaded
Size (bytes):	2925
Entropy (8bit):	5.259142186185547
Encrypted:	false
SSDEEP:	48:35Y2zQVA0hmtpGjxG12GbMZGxGcGbMPGCGjGbMJc7dOZ:pbzQmtAQNMvMTMJc7dOZ
MD5:	A4526DEC8F20619E45507DE20A4E31CA
SHA1:	9735CD96CEF21657B803A72A7DF648DA49437EC6
SHA-256:	001554166E7DE27BC0CF9F9C9F21194619883E3031FB64BE6557B06D28F7A2BB
SHA-512:	543AF0D2EE2F932C72A3476113BA3BDFC7B2AE2515988D1B24C04489177F937BF1960A20EE5EB419A325213AEE8F5AE511556A30EB04153F73F158CFE722345C
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/gwo2tmd.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . alternate-gothic-no-1-d:. * - http://typekit.com/eulas/000000000000000000010d5b. * alternate-gothic-no-2-d:. * - http://typekit.com/eulas/000000000000000000010d5c. * alternate-gothic-no-3-d:. * - http://typekit.com/eulas/000000000000000000010d5d. . . 2009-2024 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2019-07-16 19:55:27 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=gwo2tmd&ht=tk&f=10326.10327.10328&a=15080471&app=typekit&e=css");..@font-face {.font-family:"alternate-gothic-no-1-d";.src:url("https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3") format("woff2"),url("https://use.typekit.net/af/9

Chrome Cache Entry: 37

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1269x1269, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	339288
Entropy (8bit):	7.9993694405351015
Encrypted:	true
SSDEEP:	6144:VFem3YJVW88vvfaqe+H8OfTxRIo7f72nhn6NFu2TUkzqw2NcyNh91zUaALf3NrG7:VFem+VivviqeiBxRH7ynh6NQczqp9h9Z
MD5:	49961225513BAFAFD58F51D4E47E8FA0
SHA1:	EA135A02944809C212DF18CB5A7528D8F5355443
SHA-256:	ED9D42D34B129C2C58CD309770489A29C442DECE60F4B6313811861CC4C225AB
SHA-512:	0D341DDB0F31D503A20A866A3C53557BDCD1F71586B249D03C4D206FA66ACDDE9FAC948F3C762FE95E4B6326F6C3BAA3CD462B149ECBB687BDF79F664B7226E8
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/uploads/2024/10/Vote-CTA-image-e1728660119427.jpg
Preview:	RIFFP-..WEBPVP8 D-...[.......>m0.G$"........gh).U.B...?....j...E..K...g_....W.?r.......?.}............@...Xk}.Ax1U...M...r.....?...........3.A.<.s#.g..A.../~..........._....S.?.....<.B.[._.w..o...........+.....W.o{.....o}W...'z..M.......a....._.c.g...{..?..M...O............/................../...?.........../.?z.I.O.........^......a..._`?...~.>..............v...............W./...?......k./.#......S...]..........7..y.B.9.U.]....1....Y.HW.\|...w:.V..t}......\|........F3.;z5...\......#F#.<,.?.....6.....I. !.>:.m%..u.W.d.+B.?.v..A.....H-.N..S..=d.j`...[.<...7..^.......C5....&..F....c...Y...8.....fA<J.xZM..[E..~.....R....q.3?.u,..{c.1...........v/.dC....Dk..$4x[R..$L..V..7...%..._.......Y/.....@....4.u.Xi....Y......D-...6.H........C...o.s.......fq..s.eW.%.a.V....'..v^\...+$...f.PO..~.e..r..v..%+.`.......k.o...:w...k.a8p..D...'d..&..O...D..bD{.'.+...5.j..bH...mm.>...x....&..k....A..v.f.Zz.......N.......f.y.:.N..h..\|...ng.h..%S..".W<.S.

Chrome Cache Entry: 38

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.29700525152376
Encrypted:	false
SSDEEP:	6:TMVBd6OjZ9mc4slzXQoxcWEwOlXgL9qeq4JWuRImBYUw9SVQygAqSGQU:TMHdtLRQo3c4z8uqmBYrgQynpGQU
MD5:	70F2B416A889795AB166FF47A060F87E
SHA1:	C8C8D5689E29B85B99F6D19F238B61A6D19B683D
SHA-256:	F74C2BEC62735B635256FEED18227CD13FADFDA79FA128D2B712D1D4CBA43CBB
SHA-512:	886E7FD18C68ACE8A1D6A32E70B7F6B3F6C149541E5F2E88DC9422B1D18B26F666CFCF862DBAAEC55D2F2923992A095EC4E3E9646F7498FBB3A30AF971B3DCB7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns="http://www.w3.org/2000/svg" width="86" height="86">. <circle cy="43" cx="43" r="37.5" style="stroke:#00212e;stroke-width:11;fill:#fff9ea"/>. <path d="M28.5,25.5v35h16.5a17.5,17.5 0 0,0 0,-35zM38.5,34h5a9,9 0 0,1 0,18h-5z" style="fill:#00212e"/>.</svg>

Chrome Cache Entry: 39

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3392
Entropy (8bit):	4.95875485146318
Encrypted:	false
SSDEEP:	48:KES4M0wB0ZOPZLPQ4TZSyvvUdwcCMXS4P0ZDEcmlITHTZSQgGVYTZSLqPn0:2jrZDtTw8ywcC68ZzBTwQLYTwW/0
MD5:	B636FD7BA3227E9DEF71A1E9F5FB259A
SHA1:	68D565756BE91409BAD990C6ED3DDCB13C0E81FE
SHA-256:	3C23FC019936BEEB0D65896C3B73CAF063E3A5491ACAE393A3437031368FA71D
SHA-512:	B96D0B50C339D0B95062E4F8E9C8C8B6EAE0BB8452A9AB004E852F16E5A62C8710B5B04389DE55F64FBE1A7B6F8AB51D80188249B11F93D8DF2B9BC7F19C0721
Malicious:	false
Reputation:	low
URL:	https://iwillvote.com/locate/widget-v2.css
Preview:	/*. Styles for the I Will Vote voting location lookup widget.. /./ stylelint-disable rule-empty-line-before /../. Any of these color and size variables can be overridden to customize the. * appearance of the widget.. . (For the non-modern browsers that don't support CSS variables, the styles. * below include duplicated fallback properties.). /.#i-will-vote-widget {. --widget-width: auto;. --base-font-color: #343a40;. --base-font-family: sans-serif;. --base-font-size: 1rem;. --header-font-color: #162577;. --label-font-color: #162577;. --input-background-color: #fff;. --input-border-color: #adb5bd;. --input-border-radius: 3px;. --input-font-color: #162577;. --input-hover-border-color: #6c757d;. --button-background-color: #0757c3;. --button-border-radius: 3px;. --button-font-color: #fff;. --button-hover-background-color: #0d43a5;. --button-hover-font-color: #fff;.}../ Base font and color */..widget-locate-form {. max-width: 600px;. width: var(--widget-widt

Chrome Cache Entry: 40

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 682x682, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	18826
Entropy (8bit):	7.989398099699847
Encrypted:	false
SSDEEP:	384:sV1zILmUfOJ40zjl3tET27mXbZ4UhvF8db/OyrQ4wVvGR6dOQKM7UD9kpskfQ6Ql:i1z3Uj0zjl3tAXbZ4A8db/3rQHuRK+MC
MD5:	E890AF327585D81A044BD5CBB368BF65
SHA1:	3DB5684CD7769D67659E8AAFCC78232B6286037E
SHA-256:	F5478D7FADDCC6C5A96540A0C669F1CC8B275B0ED13B2CD7407029B9D7E34D09
SHA-512:	7AC4540E4AEB684FED01567F636D7F4923A16706E292B6143FDBFDD65E959F0800943EC57EC137573DB7A16FBDECD3C4723EB004FD7DB3FDA236AE7474989206
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/uploads/2024/10/Calls-CTA-image-e1728660041897.jpg
Preview:	RIFFz...WEBPVP8 n....z.......>m2.G."...4<.p..em......."f.......PXP.]..)..:............6..!?..I..}R}q..)<...r...\|..G....J].o7.M.6.<\|..x...W....w..+.G.?...3..'...x.{...\|0.+&.......G....Z.U...7.o...{.yu...........4.v..KT..M.[.-....J.P...{....D.../l.}..._.N.Q.M.A.X3}l..d.......z..`.44.........]..8Fh.........m.U...#.;.u...{......I./.....].\|?.Q.AK.q.b...<32w..{3....=.]!<..8...~.)..s3s.H.S$....n/...J>n.W.Y..-...(.i.`...E..lM'uwP..aG....c.........fwO.\...C..C)..A.........g....(]...lW{2!....P1a..\y.R...+Q.6,.."....u../.I.R..o...Tik..w...]...Ty..Wy..M..`.I......H.3R:!..}q.9/J7.......8C6...}..t...g..m\|...JO.v..V....-.).9..z9.L........D.\.4.I....pY.........A...b.........>H.J.5? HT....$.-.....n........gT...l...P...<...1D....X...}...z...I.f50,....S...Le .....D...<h.8....=.^...y...r.A....Q.8.3.U.=..4..\D.e...K;.=M.Z.. .Z...=.h.;X...GG7h....jC1..w.#...\...1. y:.>.B..\...0GaSC{..&t.~...l....J.[{_..bfNA.7\j..I.....=.D.....J...b.Q.M.=.TXi..@:....&.....:Z.8.g..W..

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.css?s=1&k=gwo2tmd&ht=tk&f=10326.10327.10328&a=15080471&app=typekit&e=css
Preview:	/**/.

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65324)
Category:	downloaded
Size (bytes):	163694
Entropy (8bit):	5.106307285470873
Encrypted:	false
SSDEEP:	1536:Jw+v5/PonJPzpXDX7ZhdZ/XEDUh1jqQhmvGafUafkCf6Yugn:Jw+v5/PonJPzpXDX7Zh4AvO
MD5:	B0A2DD602191D61CE141256640489FD4
SHA1:	E76F3754AED3F86CB06972B60A59AB933F0CBEB2
SHA-256:	B00651631917D6FDC2A853F6741D43D7543A3805C2B43DCD218B6A24B48DB61E
SHA-512:	6864FF1768AFFB94C79619174419696C72EC834DD8DDEF5DA1F34B5F2FA0DD6A35ED4F2C9ED9E3D5AA7EC7BB0EC51B42F0645AF379BA4183C05097984C48BBFB
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1729089554g
Preview:	@charset "UTF-8";/!.Theme Name: BSD Wordpress Starterkit.Theme URI: http://www.bluestatedigital.com.Author: Blue State Digital.Author URI: http://www.bluestatedigital.com.Description: Custom theme starter kit./@font-face{font-family:NNColroy-Bold;font-weight:700;src:url(assets/fonts/NNColroy-Bold.eot),url(assets/fonts/NNColroy-Bold.eot?#iefix) format("embedded-opentype"),url(assets/fonts/NNColroy-Bold.woff2) format("woff2"),url(assets/fonts/NNColroy-Bold.woff) format("woff")}@font-face{font-family:NNColroy-BoldItalic;font-style:italic;font-weight:700;src:url(assets/fonts/NNColroy-BoldItalic.eot),url(assets/fonts/NNColroy-BoldItalic.eot?#iefix) format("embedded-opentype"),url(assets/fonts/NNColroy-BoldItalic.woff2) format("woff2"),url(assets/fonts/NNColroy-BoldItalic.woff) format("woff")}@font-face{font-family:NNColroy-Medium;font-weight:500;src:url(assets/fonts/NNColroy-Medium.eot),url(assets/fonts/NNColroy-Medium.eot?#iefix) format("embedded-opentype"),url(assets/fonts/NNColroy-Medi

Chrome Cache Entry: 43

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x533, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	231350
Entropy (8bit):	7.999200197216388
Encrypted:	true
SSDEEP:	6144:MPslpdvVxCNVvOtG+B+1h8h72sAspOF1/0hT2CmHlnxNZ:M0lpd9U4PsnQKLR/GTJ8lnxb
MD5:	86E207427EEA9C3A44E86CDA285D08B5
SHA1:	30C65D9ABDD6536A60E0E3405A2CFAE4DBC2FA0C
SHA-256:	4B0F81FEFF7158AF57194EE8B3A6C0AFABBDD69B09DBDE8259E1EB324D622EB3
SHA-512:	60E1AC39F4D996B341C28689C04AF833D6591DDA8261305A75335EF3B87A2FFB97D33BDF69F40ADAAED4230BCD46046C00943B2827E3B8F4297C1DD31F13F4DC
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/uploads/2024/10/51225586480_45a461ef95_o-3-1-e1728671125484.jpg
Preview:	RIFF....WEBPVP8 ....P....*@...>m,.E."...V.@.......~..?@.G..`X..72...............W..............A...w............2..h...#.h...\q#.....+...6..g.Fr.&.....:y?....../g...._.}.x....../.....V...........,......_..b..........'.?.................`..\|x...........x}C..._........_..~...}..w......._...............6.................?.>Q.........../.....K.C_..y...3(...}.....vB.....Ss.i...p....o.jd..\|F.<...3qb$\.s.>.n.}iyv..........$[(c#...I.%.\|..h.b..H..b...U.F.G.\.W....x ..~.A.R".(....O9Y.....&....{.F...&...'.....d..x3g..df...t~.90t..!S...;.. ........)...,.M.D..\|..#...m..E......GQ%..PC^...9.4....=.~.Ll.(.....&L..W..P.c.;/..!Zi.& ..4.......!..h.y..1.B].[..qFA4..p..E..1lxKn.l.NmF......v-...H'.G.cx.AX.m.C..D............ 7...--e&....?..i.+..zd[.V.6..f.e.2.j..>.......a..s.).m.!DI...%...!8....H.u.#4;..z(.....i.......h.c........T9n.......).Pu4...B.<..lt..O..V.....R.R....R.^u.E..................9........0.G...0.`.^......i..}.l.[....w.c...!B.@.........#.s.S.5..

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	320
Entropy (8bit):	5.29700525152376
Encrypted:	false
SSDEEP:	6:TMVBd6OjZ9mc4slzXQoxcWEwOlXgL9qeq4JWuRImBYUw9SVQygAqSGQU:TMHdtLRQo3c4z8uqmBYrgQynpGQU
MD5:	70F2B416A889795AB166FF47A060F87E
SHA1:	C8C8D5689E29B85B99F6D19F238B61A6D19B683D
SHA-256:	F74C2BEC62735B635256FEED18227CD13FADFDA79FA128D2B712D1D4CBA43CBB
SHA-512:	886E7FD18C68ACE8A1D6A32E70B7F6B3F6C149541E5F2E88DC9422B1D18B26F666CFCF862DBAAEC55D2F2923992A095EC4E3E9646F7498FBB3A30AF971B3DCB7
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/img/footer-logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns="http://www.w3.org/2000/svg" width="86" height="86">. <circle cy="43" cx="43" r="37.5" style="stroke:#00212e;stroke-width:11;fill:#fff9ea"/>. <path d="M28.5,25.5v35h16.5a17.5,17.5 0 0,0 0,-35zM38.5,34h5a9,9 0 0,1 0,18h-5z" style="fill:#00212e"/>.</svg>

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1269x1269, components 3
Category:	dropped
Size (bytes):	393256
Entropy (8bit):	7.909031717147618
Encrypted:	false
SSDEEP:	12288:5GADIhpt5YXMcAFxbUngsucUTPXi7TEg0:EmIlujACNbii7TEp
MD5:	EAC115B244F6203DBC8B199096718AE1
SHA1:	8BD10D4A413B07BAFB1E3D53E91C54838DDDC266
SHA-256:	F093A6C609942DD2DA9F31C20976D8DC3550EB95AD2CA7BF39DB7DD0CBBB5445
SHA-512:	BE57FCFD8F7FB1256BA42EB463F4F7B735CA57EBC43911B019A87BF448F00584DE421EBF2025DB78C67E8C5E3B08ED66B2E4AC03BE7CF82FEC76E8DE5742FC0A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...``.1.b.....d...+".RX.vx...kF....3.r+.=3V6..m..o.....zu......g...r9....E..1.......Y......?..v........x9=:..?.432h. .....=3......b@./pFq..g }?..P....=Nzu..bC3n..a.O@....{.).....3....9@..y'....U..e....}.._c]01.T.N..$........HS..OF.:...crH.x..q.V!PX... g.~..j..n.....v1..=?.:U....rq.}?.E...

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15521), with no line terminators
Category:	downloaded
Size (bytes):	15521
Entropy (8bit):	5.012863695997015
Encrypted:	false
SSDEEP:	192:xtLsVmeDXD2ZnvgZenzA5KdXSMpNO96hDIzL79V1QVSD1CNxn6fR31MueVkw:izDSnvuenzA0NBhDInSwh31iD
MD5:	7BF3EFD430A9A0592C41552968D38FF7
SHA1:	2E85EA74DC08DFABB4855E4A087535A335B442F2
SHA-256:	3D2C10CF69410C10177FC6E56937D05151B182841FA6AEE36F651D587D91FBB8
SHA-512:	D14D336CFF98CC43764F6CE40F772D565E00E22B2B6DAFC23C1D0BB4D816AE8ED44D6A350AB0D9174342A1214E59D22F85ACD03CF82836EDC18634943AAC5123
Malicious:	false
Reputation:	low
URL:	https://democrats.org/_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uklFxfr6OPTDpRD5sM02efaGpobmVpaGBmZGgEARN0u5g==
Preview:	.mejs-offscreen{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal}.mejs-container{background:#000;font-family:Helvetica,Arial,serif;position:relative;text-align:left;text-indent:0;vertical-align:top}.mejs-container,.mejs-container *{box-sizing:border-box}.mejs-container video::-webkit-media-controls,.mejs-container video::-webkit-media-controls-panel,.mejs-container video::-webkit-media-controls-panel-container,.mejs-container video::-webkit-media-controls-start-playback-button{-webkit-appearance:none;display:none!important}.mejs-fill-container,.mejs-fill-container .mejs-container{height:100%;width:100%}.mejs-fill-container{background:0 0;margin:0 auto;overflow:hidden;position:relative}.mejs-container:focus{outline:none}.mejs-iframe-overlay{height:100%;position:absolute;width:100%}.mejs-embed,.mejs-embed body{background:#000;height:100%;margin:0;overflow:hid

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 00:14:34.841679096 CEST	443	49707	40.126.31.69	192.168.2.6
Oct 21, 2024 00:14:34.841819048 CEST	49707	443	192.168.2.6	40.126.31.69
Oct 21, 2024 00:14:34.857623100 CEST	49707	443	192.168.2.6	40.126.31.69
Oct 21, 2024 00:14:34.857657909 CEST	443	49707	40.126.31.69	192.168.2.6
Oct 21, 2024 00:14:34.857983112 CEST	443	49707	40.126.31.69	192.168.2.6
Oct 21, 2024 00:14:34.858426094 CEST	49707	443	192.168.2.6	40.126.31.69
Oct 21, 2024 00:14:34.858570099 CEST	49707	443	192.168.2.6	40.126.31.69
Oct 21, 2024 00:14:34.858594894 CEST	443	49707	40.126.31.69	192.168.2.6
Oct 21, 2024 00:14:34.899148941 CEST	443	49708	20.190.160.14	192.168.2.6
Oct 21, 2024 00:14:34.899275064 CEST	49708	443	192.168.2.6	20.190.160.14
Oct 21, 2024 00:14:34.907587051 CEST	49708	443	192.168.2.6	20.190.160.14
Oct 21, 2024 00:14:34.907608032 CEST	443	49708	20.190.160.14	192.168.2.6
Oct 21, 2024 00:14:34.907877922 CEST	443	49708	20.190.160.14	192.168.2.6
Oct 21, 2024 00:14:34.908303022 CEST	49708	443	192.168.2.6	20.190.160.14
Oct 21, 2024 00:14:34.908366919 CEST	49708	443	192.168.2.6	20.190.160.14
Oct 21, 2024 00:14:34.908413887 CEST	443	49708	20.190.160.14	192.168.2.6
Oct 21, 2024 00:14:35.240269899 CEST	443	49707	40.126.31.69	192.168.2.6
Oct 21, 2024 00:14:35.240303993 CEST	443	49707	40.126.31.69	192.168.2.6
Oct 21, 2024 00:14:35.240355015 CEST	443	49707	40.126.31.69	192.168.2.6
Oct 21, 2024 00:14:35.240418911 CEST	49707	443	192.168.2.6	40.126.31.69
Oct 21, 2024 00:14:35.240454912 CEST	443	49707	40.126.31.69	192.168.2.6
Oct 21, 2024 00:14:35.240469933 CEST	49707	443	192.168.2.6	40.126.31.69
Oct 21, 2024 00:14:35.240735054 CEST	49707	443	192.168.2.6	40.126.31.69
Oct 21, 2024 00:14:35.240751982 CEST	49707	443	192.168.2.6	40.126.31.69
Oct 21, 2024 00:14:35.240876913 CEST	443	49707	40.126.31.69	192.168.2.6
Oct 21, 2024 00:14:35.240906954 CEST	443	49707	40.126.31.69	192.168.2.6
Oct 21, 2024 00:14:35.240947962 CEST	49707	443	192.168.2.6	40.126.31.69
Oct 21, 2024 00:14:35.265955925 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 21, 2024 00:14:35.265988111 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 21, 2024 00:14:35.266243935 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 21, 2024 00:14:35.266875029 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 21, 2024 00:14:35.266885042 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 21, 2024 00:14:35.382963896 CEST	443	49708	20.190.160.14	192.168.2.6
Oct 21, 2024 00:14:35.383016109 CEST	443	49708	20.190.160.14	192.168.2.6
Oct 21, 2024 00:14:35.383116961 CEST	49708	443	192.168.2.6	20.190.160.14
Oct 21, 2024 00:14:35.383187056 CEST	49708	443	192.168.2.6	20.190.160.14
Oct 21, 2024 00:14:35.383204937 CEST	443	49708	20.190.160.14	192.168.2.6
Oct 21, 2024 00:14:36.618081093 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 21, 2024 00:14:36.618174076 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 21, 2024 00:14:36.621825933 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 21, 2024 00:14:36.621836901 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 21, 2024 00:14:36.622082949 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 21, 2024 00:14:36.624577999 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 21, 2024 00:14:36.624845982 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 21, 2024 00:14:36.624851942 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 21, 2024 00:14:36.624985933 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 21, 2024 00:14:36.667402983 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 21, 2024 00:14:36.923226118 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 21, 2024 00:14:36.923286915 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 21, 2024 00:14:36.923355103 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 21, 2024 00:14:36.923696041 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 21, 2024 00:14:36.923719883 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 21, 2024 00:14:38.285223961 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 21, 2024 00:14:38.285223961 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 21, 2024 00:14:38.581173897 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 21, 2024 00:14:42.175436974 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:42.175474882 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:42.175554991 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:42.177475929 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:42.177486897 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:43.532540083 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:43.532610893 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:43.543226957 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:43.543256998 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:43.543509007 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:43.545286894 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:43.545378923 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:43.545388937 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:43.545620918 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:43.591403008 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:43.847650051 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:43.847706079 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:43.848109007 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:43.848511934 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:43.848541021 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:44.537077904 CEST	49718	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:44.537142038 CEST	443	49718	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:44.537250996 CEST	49718	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:44.538033962 CEST	49718	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:44.538048983 CEST	443	49718	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:45.180370092 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:45.180413008 CEST	443	49719	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:45.180543900 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:45.181369066 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:45.181381941 CEST	443	49719	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:45.625143051 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:45.625188112 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:45.625274897 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:45.625641108 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:45.625684977 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:45.625910997 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:45.625924110 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:45.625938892 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:45.626224041 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:45.626233101 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:45.904501915 CEST	443	49718	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:45.904632092 CEST	49718	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:45.906847954 CEST	49718	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:45.906862020 CEST	443	49718	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:45.907119036 CEST	443	49718	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:45.915841103 CEST	49718	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:45.915889978 CEST	49718	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:45.915906906 CEST	443	49718	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:45.916008949 CEST	49718	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:45.959409952 CEST	443	49718	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.216864109 CEST	443	49718	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.216927052 CEST	443	49718	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.217010021 CEST	49718	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:46.217267036 CEST	49718	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:46.217313051 CEST	443	49718	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.381381989 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.381666899 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.381689072 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.382920027 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.382981062 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.384217978 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.384289980 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.384393930 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.384402037 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.385974884 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.386173964 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.386203051 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.387280941 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.387342930 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.387680054 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.387753010 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.428044081 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.428112030 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.428152084 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.473114014 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.539952040 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.540014029 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.540076971 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.540112019 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.540378094 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.540405035 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.540424109 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.540431976 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.540469885 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.541176081 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.541237116 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.541286945 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.541305065 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.543540001 CEST	443	49719	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.543600082 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:46.573240042 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:46.573262930 CEST	443	49719	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.573729992 CEST	443	49719	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.577187061 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:46.577296019 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:46.577307940 CEST	443	49719	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.577613115 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:46.582454920 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.582482100 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.623405933 CEST	443	49719	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.626101971 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.686933041 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.687000036 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.687043905 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.687073946 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.687841892 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.687865019 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.687889099 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.687897921 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.687939882 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.688327074 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.688963890 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.688988924 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.689017057 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.689017057 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.689032078 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.689059973 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.690154076 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.690186024 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.690201998 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.690208912 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.690272093 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.690278053 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.690916061 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.690948963 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.690959930 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.690965891 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.691013098 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.691669941 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.732781887 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.732882977 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.732908964 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.786828041 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.804287910 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.834008932 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.834500074 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.834528923 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.834573030 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.834593058 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.834640026 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.835010052 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.835066080 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.835108995 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.835115910 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.836189985 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.836225033 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.836237907 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.836245060 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.836283922 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.836288929 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.837392092 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.837436914 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.851402998 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.895232916 CEST	443	49719	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.947724104 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:46.947762012 CEST	443	49719	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.968832970 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:46.968863964 CEST	443	49719	40.113.103.199	192.168.2.6
Oct 21, 2024 00:14:46.969068050 CEST	49719	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:14:46.970092058 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.970158100 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.970218897 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.970928907 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.970992088 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.971060991 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.972172022 CEST	49730	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.972199917 CEST	443	49730	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.972251892 CEST	49730	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.972472906 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.972490072 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.972610950 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.974096060 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.974112034 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.974354982 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.974379063 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.974558115 CEST	49730	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.974570990 CEST	443	49730	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.974965096 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.974976063 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:46.975358009 CEST	49720	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:46.975369930 CEST	443	49720	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.147878885 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.147932053 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.147989035 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.148024082 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.152658939 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.152699947 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.152726889 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.152745962 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.152816057 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.153162956 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.157475948 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.157515049 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.157608986 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.157624006 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.157664061 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.158026934 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.158061981 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:47.158107996 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:47.158212900 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:47.159310102 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:47.159324884 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:47.207113981 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.296370983 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.296843052 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.296875000 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.296901941 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.296905994 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.296936035 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.296952963 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.297586918 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.297616959 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.297657967 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.297669888 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.297705889 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.298317909 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.299161911 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.299192905 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.299221992 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.299232960 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.299253941 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.299268961 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.299874067 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.299895048 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.299945116 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.299952030 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.299992085 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.300702095 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.301512957 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.301549911 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.301558018 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.301563978 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.301599026 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.445400000 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.445463896 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.445557117 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.445640087 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.445846081 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.445879936 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.445924997 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.445941925 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.446110010 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.446705103 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.446764946 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.446852922 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.446866035 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.447837114 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.447899103 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.447911978 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.448250055 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.448314905 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.448328018 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.448415995 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.449224949 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.449295044 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.449919939 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.450001955 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.450712919 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.450778961 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.452158928 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.452217102 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.452235937 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.452287912 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.452315092 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.452967882 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.453038931 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.453051090 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.453109980 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.453856945 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.453900099 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.453929901 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.453941107 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.453969002 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.454062939 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.454829931 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.454896927 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.557831049 CEST	49734	443	192.168.2.6	172.217.23.100
Oct 21, 2024 00:14:47.557873011 CEST	443	49734	172.217.23.100	192.168.2.6
Oct 21, 2024 00:14:47.558092117 CEST	49734	443	192.168.2.6	172.217.23.100
Oct 21, 2024 00:14:47.558311939 CEST	49734	443	192.168.2.6	172.217.23.100
Oct 21, 2024 00:14:47.558324099 CEST	443	49734	172.217.23.100	192.168.2.6
Oct 21, 2024 00:14:47.602581978 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.602749109 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.602943897 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.603003979 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.603805065 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.603883982 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.604698896 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.604767084 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.605655909 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.605689049 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.605726957 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.605743885 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.605756998 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.606628895 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.606692076 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.606703043 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.607527971 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.607580900 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.607594967 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.608484030 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.608540058 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.608550072 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.609358072 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.609409094 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.609411955 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.609425068 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.609466076 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.609472036 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.609507084 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.609524012 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.609716892 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.609724998 CEST	443	49721	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.609735966 CEST	49721	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.754816055 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.755157948 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.755176067 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.755202055 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.755321980 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.755348921 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.755579948 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.755711079 CEST	443	49730	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.755817890 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.755985022 CEST	49730	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.755995035 CEST	443	49730	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.756325960 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.756397963 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.756448984 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.756515980 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.756556034 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.756563902 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.756970882 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.756972075 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.757045031 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.757062912 CEST	443	49730	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.757117987 CEST	49730	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.757170916 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.757446051 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.757534981 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.757760048 CEST	49730	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.757848024 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.757848024 CEST	443	49730	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.757863045 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.757978916 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.758106947 CEST	49730	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.758114100 CEST	443	49730	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.799180984 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.799200058 CEST	49730	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.799442053 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.803400040 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.892910957 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 21, 2024 00:14:47.893385887 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 21, 2024 00:14:47.915106058 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.915143967 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.915211916 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.915239096 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.915306091 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.915333033 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.915380001 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.915400028 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.915440083 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.915851116 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.920033932 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.920073986 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.920135975 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.920161009 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.920222998 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.988460064 CEST	443	49730	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.988529921 CEST	443	49730	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.988625050 CEST	49730	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.990130901 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.990174055 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.990230083 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.990256071 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.990410089 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.990432978 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.990474939 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.990483999 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.990529060 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.990653038 CEST	49730	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.990675926 CEST	443	49730	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.991101027 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.991688013 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.991713047 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.991758108 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.991766930 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.991806030 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.994657040 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.994879961 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.994909048 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.994932890 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.994956017 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.994966984 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.994992018 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.995407104 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.995599031 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.995606899 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.997117043 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.997179031 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.997231007 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.997239113 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.999596119 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.999744892 CEST	49735	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:47.999804974 CEST	443	49735	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:47.999871969 CEST	49735	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.000561953 CEST	49735	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.000576973 CEST	443	49735	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.032386065 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 21, 2024 00:14:48.032438993 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 21, 2024 00:14:48.035640001 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 21, 2024 00:14:48.037420988 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 21, 2024 00:14:48.037451982 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 21, 2024 00:14:48.040152073 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.040189981 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.043622017 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.043865919 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.043886900 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.064063072 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.064315081 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.064347029 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.064418077 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.064449072 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.064505100 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.064747095 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.065325022 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.065402031 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.065422058 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.065680981 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.065707922 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.065753937 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.065768957 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.065807104 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.066241980 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.066490889 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.066581964 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.066591978 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.066890955 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.066929102 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.066941977 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.066953897 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.067250013 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.067466974 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.098377943 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.098979950 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.099056959 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.099065065 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.099124908 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.099294901 CEST	49731	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.099318027 CEST	443	49731	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.104696989 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.106693029 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.106797934 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.106869936 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.106897116 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.106945038 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.144139051 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.144187927 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.144279003 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.144329071 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.144690037 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.144766092 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.144778967 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.144820929 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.144829035 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.145067930 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.145112038 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.145123959 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.145752907 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.145807028 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.145817995 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.146017075 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.146574020 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.146624088 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.146636009 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.146778107 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.146823883 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.146832943 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.146874905 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.147233963 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.147279024 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.147330046 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.147341013 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.189821005 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.189824104 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 21, 2024 00:14:48.189852953 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.213114023 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.213306904 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.213352919 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.213371992 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.213500977 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.213531971 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.213571072 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.213577032 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.213613033 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.214011908 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.214080095 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.214121103 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.214126110 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.214514017 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.214556932 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.214562893 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.215361118 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.215419054 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.215425968 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.215573072 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:48.215835094 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.215886116 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.215898991 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.215939045 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.216006041 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:48.216029882 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:48.216315985 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.216362953 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.217051983 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:48.217108011 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.217134953 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.217143059 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:48.217159033 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.217165947 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.217181921 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.217989922 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.218034029 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.218044996 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.218089104 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.218247890 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:48.218329906 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:48.218481064 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:48.218504906 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:48.218817949 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.218851089 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.218873024 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.218883991 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.218904972 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.218923092 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.236696005 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.253155947 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.253222942 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.253288031 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.253293991 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.253321886 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.253429890 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.255958080 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.256031990 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.267940044 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:48.293879986 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.293947935 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.294022083 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.294035912 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.294194937 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.294311047 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.294317007 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.294389009 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.294433117 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.294439077 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.294866085 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.294919014 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.294924974 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.295634031 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.295689106 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.295695066 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.295763969 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.295941114 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.295991898 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.296618938 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.296660900 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.296689034 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.296694994 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.296734095 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.297544956 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.297584057 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.297595024 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.297601938 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.297627926 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.298451900 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.298508883 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.298516035 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.298605919 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.299253941 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.299304962 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.362310886 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.362409115 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.362474918 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.362520933 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.363089085 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.363157988 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.363167048 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.363183022 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.363208055 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.363219023 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.363725901 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.363778114 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.363787889 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.363805056 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.363853931 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.363992929 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.364010096 CEST	443	49729	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.364018917 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.364178896 CEST	49729	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.402348042 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.402421951 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.402498960 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.402554989 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.402811050 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.402865887 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.443377972 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.443444967 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.443715096 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.443766117 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.444093943 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.444147110 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.444418907 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.444483042 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.445120096 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.445153952 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.445185900 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.445214033 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.445231915 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.445991993 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.446042061 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.446074963 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.446118116 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.446934938 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.446962118 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.446988106 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.447011948 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.447026968 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.447052956 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.447518110 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.447544098 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.447577953 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.447596073 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.447618008 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.447644949 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.448446035 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.448487997 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.448506117 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.448525906 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.448545933 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.448637009 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.449309111 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.449361086 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.449374914 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.449393034 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.449440002 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.449743986 CEST	49728	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.449776888 CEST	443	49728	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.507199049 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:48.507239103 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:48.507301092 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:48.507605076 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:48.507616043 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:48.627545118 CEST	443	49734	172.217.23.100	192.168.2.6
Oct 21, 2024 00:14:48.637895107 CEST	49734	443	192.168.2.6	172.217.23.100
Oct 21, 2024 00:14:48.637912035 CEST	443	49734	172.217.23.100	192.168.2.6
Oct 21, 2024 00:14:48.639084101 CEST	443	49734	172.217.23.100	192.168.2.6
Oct 21, 2024 00:14:48.639149904 CEST	49734	443	192.168.2.6	172.217.23.100
Oct 21, 2024 00:14:48.640369892 CEST	49734	443	192.168.2.6	172.217.23.100
Oct 21, 2024 00:14:48.640435934 CEST	443	49734	172.217.23.100	192.168.2.6
Oct 21, 2024 00:14:48.689801931 CEST	49734	443	192.168.2.6	172.217.23.100
Oct 21, 2024 00:14:48.689821959 CEST	443	49734	172.217.23.100	192.168.2.6
Oct 21, 2024 00:14:48.736665964 CEST	49734	443	192.168.2.6	172.217.23.100
Oct 21, 2024 00:14:48.763164997 CEST	443	49735	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.763458967 CEST	49735	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.763488054 CEST	443	49735	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.763832092 CEST	443	49735	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.764183044 CEST	49735	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.764266014 CEST	443	49735	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.764374018 CEST	49735	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.811399937 CEST	443	49735	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.822026014 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.822294950 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.822323084 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.822720051 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.822782040 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.823415995 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.823465109 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.824446917 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.824515104 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.824944019 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.824960947 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.877286911 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.914832115 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:48.914897919 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:48.914961100 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:48.914961100 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:48.915004015 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:48.915849924 CEST	49733	443	192.168.2.6	108.138.7.103
Oct 21, 2024 00:14:48.915873051 CEST	443	49733	108.138.7.103	192.168.2.6
Oct 21, 2024 00:14:48.923016071 CEST	443	49735	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.923096895 CEST	443	49735	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.923324108 CEST	49735	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.923757076 CEST	49735	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.923780918 CEST	443	49735	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.927726030 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.927779913 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.927861929 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.928082943 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.928093910 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.948894024 CEST	49741	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.948937893 CEST	443	49741	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.948996067 CEST	49741	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.949233055 CEST	49741	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.949243069 CEST	443	49741	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.990453005 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.990530014 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.990652084 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.994730949 CEST	49737	443	192.168.2.6	52.8.222.175
Oct 21, 2024 00:14:48.994765997 CEST	443	49737	52.8.222.175	192.168.2.6
Oct 21, 2024 00:14:48.996098042 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.996136904 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:48.996205091 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.996437073 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:48.996455908 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.105634928 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 21, 2024 00:14:49.105721951 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 21, 2024 00:14:49.109757900 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 21, 2024 00:14:49.109782934 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 21, 2024 00:14:49.110157967 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 21, 2024 00:14:49.158550024 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 21, 2024 00:14:49.161542892 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 21, 2024 00:14:49.207410097 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 21, 2024 00:14:49.434138060 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.434246063 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.440351009 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.440370083 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.440654993 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.456285000 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.470380068 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 21, 2024 00:14:49.470438957 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 21, 2024 00:14:49.470494032 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 21, 2024 00:14:49.470570087 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 21, 2024 00:14:49.470592976 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 21, 2024 00:14:49.499409914 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.682225943 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.682559967 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.682588100 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.682887077 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.683340073 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.683410883 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.683516979 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.710088968 CEST	443	49741	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.710396051 CEST	49741	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.710426092 CEST	443	49741	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.711442947 CEST	443	49741	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.711519003 CEST	49741	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.711885929 CEST	49741	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.711941957 CEST	443	49741	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.712019920 CEST	49741	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.712029934 CEST	443	49741	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.731404066 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.752372980 CEST	49741	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.757534027 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.757860899 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.757885933 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.758228064 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.758512020 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.758568048 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.758641005 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.768203974 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.768227100 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.768241882 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.768323898 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.768353939 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.768403053 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.770083904 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.770100117 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.770159006 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.770164013 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.770205021 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.803404093 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.843887091 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.843971968 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.843996048 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.844022989 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.844070911 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.844070911 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.844099045 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.844387054 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.844407082 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.844454050 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.844459057 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.844501972 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.850526094 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.872637987 CEST	443	49741	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.872714043 CEST	443	49741	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.873111010 CEST	49741	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.873735905 CEST	49741	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.873754978 CEST	443	49741	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.892944098 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.892967939 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.917157888 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.917176008 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.917298079 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.917321920 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.917361021 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.918797016 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.918811083 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.918875933 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.918880939 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.918916941 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.920893908 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.920908928 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.920978069 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.920984030 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.921029091 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.921400070 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.921441078 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.921469927 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.921506882 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.921521902 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.921560049 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.921575069 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.921874046 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.923609972 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.923616886 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.928029060 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.928172112 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.928235054 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.928241968 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.928287983 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.939836025 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.963571072 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.963598967 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.963711977 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.963745117 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:49.963789940 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:49.991919041 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.991981030 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.992095947 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.992093086 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.992124081 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.992379904 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.992404938 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.992427111 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.992432117 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.992441893 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.992703915 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.992743015 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.992748022 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.992988110 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.993212938 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.993259907 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.993263960 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.993303061 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.993587017 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.993742943 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.993943930 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.993967056 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.993989944 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.993994951 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.994028091 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.994529963 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.994575024 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.994579077 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.994795084 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:49.995604038 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:49.995608091 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.049231052 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.066989899 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.067019939 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.067164898 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.067179918 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.067224026 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.068471909 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.068486929 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.068563938 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.068569899 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.068615913 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.070209026 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.070225954 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.070322037 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.070329905 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.070338011 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.070426941 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.070914984 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.071767092 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.071803093 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.071855068 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.071877956 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.071923018 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.072736979 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.072755098 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.072787046 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.072832108 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.072838068 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.072864056 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.072882891 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.072894096 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.072923899 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.072931051 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.072968960 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.073656082 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.073704004 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.074106932 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.074140072 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.074162006 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.074171066 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.074186087 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.074238062 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.074469090 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.074500084 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.074511051 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.074517965 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.074544907 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.074553967 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.074594021 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.074599981 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.106426954 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 21, 2024 00:14:50.107732058 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 21, 2024 00:14:50.114252090 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.115691900 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.115731001 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.140378952 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.140520096 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.140552998 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.140737057 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.140765905 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.140897036 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.141007900 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.141014099 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.141105890 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.141866922 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.142067909 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.142096043 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.142172098 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.142179012 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.142802954 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.142893076 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.142903090 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.143102884 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.143465996 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.143537045 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.144212008 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.144357920 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.144403934 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.144567013 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.145204067 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.145299911 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.146034002 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.146121979 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.146354914 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.146522999 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.147033930 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.147192955 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.147547960 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.147618055 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.147886038 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.147985935 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.158679962 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.214725971 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.214762926 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.214975119 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.215010881 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.215187073 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.216413975 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.216438055 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.216590881 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.216598034 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.216788054 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.218048096 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.218066931 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.218192101 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.218200922 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.218381882 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.218395948 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.218400002 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.218463898 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.218468904 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.218473911 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.218517065 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.218538046 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.218549967 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.218555927 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.218604088 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.218605995 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.218686104 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.218828917 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.218858957 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.219079971 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.219223022 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.219274998 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.219291925 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.219373941 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.219434977 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.219778061 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.219891071 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.219921112 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.219975948 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.219986916 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.220638990 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.220766068 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.220784903 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.220841885 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.221599102 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.221673012 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.221811056 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.221870899 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.222671986 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.222745895 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.223511934 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.223612070 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.224451065 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.224549055 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.224551916 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.224570036 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.224647999 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.225501060 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.225589037 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.262859106 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.262962103 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.262978077 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.263011932 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.263026953 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.269146919 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.269208908 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.269288063 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.270169973 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.270221949 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.270297050 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.270807981 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.270826101 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.271734953 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.271748066 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.271765947 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.271831989 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.272008896 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.272022009 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.272100925 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.272109032 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.272172928 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.272186041 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.272568941 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.272581100 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.273106098 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.273164988 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.273232937 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.273336887 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:50.273346901 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:50.288022041 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.288160086 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.288249016 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.288274050 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.288292885 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.288563967 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.288650036 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.288655043 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.289273977 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.289325953 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.289330006 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.289367914 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.289582968 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.289632082 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.289918900 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.289975882 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.290179968 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.290266991 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.290642023 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.290679932 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.290704966 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.290709019 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.290730000 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.291273117 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.291304111 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.291335106 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.291338921 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.291374922 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.291889906 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.291927099 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.291956902 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.291960955 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.291992903 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.292572021 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.292632103 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.292635918 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.292682886 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.294255972 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.294328928 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.294461966 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.294511080 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.294855118 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.294887066 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.294904947 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.294909000 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.294924974 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.294946909 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.295471907 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.295536041 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.295799017 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.295852900 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.296155930 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.296190977 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.296216965 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.296221018 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.296232939 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.296261072 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.296895981 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.296936989 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.296953917 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.296957970 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.296972036 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.296978951 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.297003031 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.297005892 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.297028065 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.297740936 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.297777891 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.297797918 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.297801971 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.297827959 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.314892054 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.346151114 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.366925001 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.366940022 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.367069960 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.367171049 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.367203951 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.367222071 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.367250919 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.367423058 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.367480040 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.367676020 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.367724895 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.368159056 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.368216038 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.368278980 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.368326902 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.368894100 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.368961096 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.369359016 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.369422913 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.369601965 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.369651079 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.369848967 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.369894028 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.370328903 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.370387077 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.370558977 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.370604992 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.371037006 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.371093988 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.411528111 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.411578894 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.411753893 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.411781073 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.412034988 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.412127018 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.412137032 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.412184954 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.435472012 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.435590029 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.435672045 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.435734987 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.435986042 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.436127901 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.436574936 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.436654091 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.436669111 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.436717033 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.436916113 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.436937094 CEST	443	49740	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.436945915 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.437026024 CEST	49740	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.442125082 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.442173004 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.442243099 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.442491055 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.442504883 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.445291042 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.445317984 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.445394039 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.445584059 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.445600986 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.515548944 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.515666962 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.515783072 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.515819073 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.515877008 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.515994072 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.516002893 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.516269922 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.516360998 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.516371012 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.516416073 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.516582966 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.516726017 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.516911030 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.516984940 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.517441034 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.517508984 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.517538071 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.517695904 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.518002033 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.518062115 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.518239975 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.518291950 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.518584967 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.518640995 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.518682957 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.518749952 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.519192934 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.519258022 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.519575119 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.519629955 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.522479057 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.522500038 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.522540092 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.522591114 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.522609949 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.522625923 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.522651911 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.523488045 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.523530006 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.523561001 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.523569107 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.523596048 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.523610115 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.524555922 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.524609089 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.524638891 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.524648905 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.524677038 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.524696112 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.525532007 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.525585890 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.525613070 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.525619030 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.525644064 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.525661945 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.526521921 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.526566029 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.526598930 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.526613951 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.526637077 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.526664972 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.527482986 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.527538061 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.527565956 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.527585030 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.527602911 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.527638912 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.561276913 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.561362982 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.561395884 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.561434031 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.561480045 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.562190056 CEST	49742	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.562206030 CEST	443	49742	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.569588900 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.569690943 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:50.569830894 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.570229053 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:50.570271969 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.207806110 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.209913969 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.216948032 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.217794895 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.218756914 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.222641945 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.227689981 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.253437042 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.253437996 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.269085884 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.269104958 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.269110918 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.269104004 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.269166946 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.350755930 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.394097090 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.548981905 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.549006939 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.549088001 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.549098969 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.549191952 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.549216986 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.549482107 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.549597025 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.549611092 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.597203970 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.597281933 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.597451925 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.942482948 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.942666054 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.944716930 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.944853067 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.945305109 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.945420027 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.947056055 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.947103024 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.947135925 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:51.963574886 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.963613987 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.964467049 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.964473963 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.965213060 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.965264082 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.965805054 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.965816021 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.966314077 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.966344118 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.967005968 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.967010975 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.967494011 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.967514992 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.968219995 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.968230963 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.968656063 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.968672991 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.971457005 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:51.971462011 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:51.987445116 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.991400003 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:51.991414070 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.101242065 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.101294994 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.101325035 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.101347923 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.101517916 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.101541042 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104257107 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104305983 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104341984 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104368925 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104398012 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104424953 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104455948 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104749918 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104779005 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.104789972 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104815006 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104820967 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104854107 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104899883 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.104909897 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.104932070 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.104932070 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.105052948 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.105113029 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.105222940 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.105228901 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.106103897 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.106137037 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.106184006 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.106236935 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.106251001 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.106776953 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.106807947 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.106838942 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.106863022 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.106875896 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.106887102 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.107501030 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.107626915 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.107634068 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.123626947 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.123652935 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.123733997 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.123763084 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.123815060 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.124064922 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.124069929 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.124162912 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.124222994 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.124248028 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.124285936 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.126941919 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.126986027 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.127249956 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.127257109 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.127285004 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.127347946 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.127346992 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.127476931 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.127485991 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.127490997 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.127687931 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.127701998 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.129314899 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.129373074 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.129545927 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.129664898 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.129681110 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.129736900 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.129743099 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.131263971 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.131313086 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.131542921 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.131987095 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.131998062 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.132949114 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.132994890 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.133060932 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.133244991 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.133264065 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.143295050 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.143944979 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.144004107 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.144252062 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.144275904 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.144287109 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.144293070 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.148169994 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.148220062 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.148330927 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.148520947 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.148530960 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.159965992 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.159996033 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.160139084 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.160166025 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.206610918 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.207299948 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.207328081 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.207405090 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.207505941 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.207950115 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.207974911 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.207988024 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.207994938 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.212344885 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.212379932 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.212457895 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.212748051 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:52.212757111 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:52.249028921 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.249089003 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.249119043 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.249167919 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.249170065 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.249192953 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.249221087 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.249223948 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.249253035 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.249264956 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.249270916 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.249838114 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.250386953 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.252512932 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.252691984 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.252692938 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.252820969 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.252835035 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.252871037 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253025055 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253215075 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.253221035 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253273010 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.253295898 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253432989 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.253443003 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253473043 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253494024 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253529072 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253566980 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253567934 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.253591061 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.253597021 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253607988 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253644943 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.253776073 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253807068 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253817081 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.253825903 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.253915071 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.254275084 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.254321098 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.254324913 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.254333019 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.254365921 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.254715919 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.254759073 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.254782915 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.254811049 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.254816055 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.254874945 CEST	49749	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.254884005 CEST	443	49749	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.254889011 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.255472898 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.255522966 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.255578041 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.255614996 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.255624056 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.256617069 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.256649017 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.256678104 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.256685019 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.256695986 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.256735086 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.256742001 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.256778955 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.256799936 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.256804943 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.256839991 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.256841898 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.256850958 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.256887913 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.256892920 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.300340891 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.300410032 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.395791054 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.395854950 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.395881891 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.395904064 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.395910025 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.395936012 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.395952940 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.395999908 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.396034002 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.396060944 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.396065950 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.396086931 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.396111965 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.396116972 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.396157026 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.396367073 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.396400928 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.396442890 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.396449089 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.396486998 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.397681952 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.397743940 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.400106907 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.400190115 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.400198936 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.400227070 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.400247097 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.400844097 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.400912046 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.400918961 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.400943041 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.400969028 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.401524067 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.401592970 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.401598930 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.401638031 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.402129889 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.402205944 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.402213097 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.402237892 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.402262926 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.402277946 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.402592897 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.402631044 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.402651072 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.402682066 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.402693987 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.402729034 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.402745962 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.402776003 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.403103113 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.403147936 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.403168917 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.403197050 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.403214931 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.403223038 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.403244019 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.403270006 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.403491020 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.403518915 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.403546095 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.403553963 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.403580904 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.403589010 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.404614925 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.404661894 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.404673100 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.404721975 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.405128002 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.405189037 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.405690908 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.405719042 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.405755043 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.405761003 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.405776978 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.406616926 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.406645060 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.406704903 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.406716108 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.406838894 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.543076038 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.543170929 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.543179035 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.543193102 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.543221951 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.543241978 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.543458939 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.543495893 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.543509007 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.543519020 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.543539047 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.543554068 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.544229031 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.544258118 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.544296026 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.544300079 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.544329882 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.544347048 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.544594049 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.544626951 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.544645071 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.544648886 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.544677973 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.544692039 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.545417070 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.545452118 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.545475960 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.545480013 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.545488119 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.545500040 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.545525074 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.545528889 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.547044992 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.547106028 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.547111034 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.547148943 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.547362089 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.547410965 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.547597885 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.547631025 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.547648907 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.547652960 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.547677994 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.548521996 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.548552990 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.548578024 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.548579931 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.548590899 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.548619032 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.548640013 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.548729897 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.549129963 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.549156904 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.549171925 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.549175978 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.549186945 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.549196005 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.549210072 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.549212933 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.549235106 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.549524069 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.549580097 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.549586058 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.549665928 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.549987078 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.550024033 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.550048113 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.550051928 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.550061941 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.550081015 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.550096989 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.550097942 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.550107956 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.550138950 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.550690889 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.550740004 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.551440001 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.551490068 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.551847935 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.551882029 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.551898003 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.551911116 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.551924944 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.551927090 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.551961899 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.551969051 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.552006960 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.552369118 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.552402020 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.552419901 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.552426100 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.552436113 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.552449942 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.552467108 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.552470922 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.553188086 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.553215981 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.553237915 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.553244114 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.553275108 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.553678989 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.553699970 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.553719997 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.553725004 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.553761005 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.553880930 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.553917885 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.553924084 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.553962946 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.554111958 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.554140091 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.554162025 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.554167986 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.554191113 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.554203987 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.554827929 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.554863930 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.554882050 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.554888010 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.554898024 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.554915905 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.554945946 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.554949045 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.556745052 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.556797028 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.556802988 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.556852102 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.557286978 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.557322025 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.557338953 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.557344913 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.557360888 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.557363987 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.557399988 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.557404041 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.557553053 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.557579041 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.557593107 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.557599068 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.557645082 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.558104038 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.558135033 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.558150053 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.558155060 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.558177948 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.558372974 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.558406115 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.558408022 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.558418036 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.558445930 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.558603048 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.690190077 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.690227032 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.690252066 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.690270901 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.690285921 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.690308094 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.690428019 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.690471888 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.691178083 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.691195965 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.691237926 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.691242933 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.691282034 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.691498041 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.691538095 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.691551924 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.691557884 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.691570044 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.691581964 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.691602945 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.691631079 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.700170994 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.700259924 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.700275898 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.700293064 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.700315952 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.700330973 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.700414896 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.700540066 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.700973988 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.700989008 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.701086044 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.701092958 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.701689005 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.701708078 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.701771975 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.701777935 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.702593088 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.702606916 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.702680111 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.702687979 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.702929974 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.702946901 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.703066111 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.703072071 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.703634977 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.703646898 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.703722954 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.703728914 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.704509974 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.704529047 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.704641104 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.704647064 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.705351114 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.705363035 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.705401897 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.705408096 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.705435038 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.705455065 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.705476046 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.705663919 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.705668926 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.706394911 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.706407070 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.706506014 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.706511974 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.707271099 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.707288980 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.707326889 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.707346916 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.707353115 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.707390070 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:52.707396984 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.707428932 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:52.992182016 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:53.075470924 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.081808090 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.082664967 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.084749937 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.128462076 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.128468037 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.128479958 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.128482103 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.132781982 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.175332069 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.272061110 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.272087097 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.272901058 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.272912979 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.273442984 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.273473978 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.274487019 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.274492979 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.275095940 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.275120020 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.275856018 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.275861979 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.276448965 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.276467085 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.277497053 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.277506113 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.277981997 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.278002977 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.279011011 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.279017925 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.298540115 CEST	49751	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:53.298564911 CEST	443	49751	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:53.312470913 CEST	49750	443	192.168.2.6	192.0.66.105
Oct 21, 2024 00:14:53.312504053 CEST	443	49750	192.0.66.105	192.168.2.6
Oct 21, 2024 00:14:53.428185940 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.428263903 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.428414106 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.429918051 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.430073977 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.430128098 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.430726051 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.430726051 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.430771112 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.430797100 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.434240103 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.434263945 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.434710979 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.434870005 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.435019970 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.437170029 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.437170029 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.437192917 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.437225103 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.438056946 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.438122988 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.438178062 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.439378023 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.439397097 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.439991951 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.440265894 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.440315962 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.451277971 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.451298952 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.451308966 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.451314926 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.469521046 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.469577074 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.469641924 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.471028090 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.471050978 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.472409010 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.472419024 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.472673893 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.472879887 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.472889900 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.476854086 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.476916075 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.477143049 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.478028059 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.478049040 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.478127003 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.478823900 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.478836060 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.479083061 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.479188919 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.479219913 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.479290009 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.479310989 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:53.479556084 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:53.479566097 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.383853912 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.393697023 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.393732071 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.400515079 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.404022932 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.407727003 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.407749891 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.408647060 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.416735888 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.416760921 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.417215109 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.417221069 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.427474976 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.427501917 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.427953005 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.427958965 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.447153091 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.447185040 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.451421976 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.451433897 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.495596886 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.496689081 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.496720076 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.498034000 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.498054028 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.562418938 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.562707901 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.562776089 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.562815905 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.562839031 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.562943935 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.562951088 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.567377090 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.567433119 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.567506075 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.567845106 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.567856073 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.572882891 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.573338032 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.573677063 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.573792934 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.573810101 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.573824883 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.573829889 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.577527046 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.577583075 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.577686071 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.577888012 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.577900887 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.584068060 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.584697962 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.584752083 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.584816933 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.584837914 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.584851980 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.584856987 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.588606119 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.588629961 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.588691950 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.589102030 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.589108944 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.610765934 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.610901117 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.610958099 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.611325026 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.611345053 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.615897894 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.615936041 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.616070032 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.616257906 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.616266966 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.664851904 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.666248083 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.666306019 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.666376114 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.666398048 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.670303106 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.670347929 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:54.670655012 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.670866966 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:54.670876980 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.489501953 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.490329981 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.490360022 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.490916014 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.490921021 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.499608994 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.500000954 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.500025034 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.500420094 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.500423908 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.529675007 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.530190945 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.530210972 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.530771017 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.530775070 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.609612942 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.610093117 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.610129118 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.610600948 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.610605955 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.642569065 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.643022060 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.643048048 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.643477917 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.643481970 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.650634050 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.650697947 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.650751114 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.650875092 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.650896072 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.650907993 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.650913954 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.653559923 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.653595924 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.653712034 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.653866053 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.653875113 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.659554958 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.659873962 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.659934044 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.659966946 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.659981966 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.659992933 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.659997940 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.662139893 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.662147999 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.662208080 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.662322044 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.662329912 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.688543081 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.688630104 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.688688993 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.688900948 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.688915968 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.688930035 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.688935995 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.692229986 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.692279100 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.692348003 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.692481995 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.692492008 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.771739960 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.772026062 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.772089005 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.772136927 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.772155046 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.772166967 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.772172928 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.775067091 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.775106907 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.775180101 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.775362968 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.775372028 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.806891918 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.807415962 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.807475090 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.807516098 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.807534933 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.807548046 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.807554007 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.810364008 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.810404062 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:55.810578108 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.810712099 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:55.810724974 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.564543009 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.565434933 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.565445900 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.566633940 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.566638947 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.584774017 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.585149050 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.585160971 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.585621119 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.585627079 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.610687971 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.611109972 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.611136913 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.611939907 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.611944914 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.698055983 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.698471069 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.698491096 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.698904991 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.698909998 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.725344896 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.725416899 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.725868940 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.725894928 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.725894928 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.725909948 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.725919962 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.727190018 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.728312016 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.728349924 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.728415012 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.728431940 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.728452921 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.728756905 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.728769064 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.728833914 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.728840113 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.761684895 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.761837959 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.761893988 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.761924982 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.761934996 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.761981010 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.761986017 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.764297962 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.764333010 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.764427900 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.764605999 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.764614105 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.783041954 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.784286976 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.784354925 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.784418106 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.784418106 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.784447908 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.784456015 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.786603928 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.786643028 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.786884069 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.787002087 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.787009954 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.868244886 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.868314981 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.868427038 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.868633986 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.868654966 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.868669033 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.868674994 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.872051954 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.872102022 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.872328043 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.872328043 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.872359037 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.886095047 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.886192083 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.886291027 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.886507034 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.886533022 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.886543989 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.886549950 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.889149904 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.889198065 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:56.889257908 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.889401913 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:56.889420033 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.655100107 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.655814886 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.655829906 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.656305075 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.656308889 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.671629906 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.672017097 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.672034025 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.672451019 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.672456026 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.711733103 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.712150097 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.712188959 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.712717056 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.712724924 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.791950941 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.792438984 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.792471886 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.792892933 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.792898893 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.801800966 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.802156925 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.802186012 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.802550077 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.802557945 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.822176933 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.822916031 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.822967052 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.822997093 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.823013067 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.823025942 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.823031902 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.825651884 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.825695992 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.825758934 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.825913906 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.825926065 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.832726955 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.832818031 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.832948923 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.832973957 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.832984924 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.832993984 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.832998991 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.835222960 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.835263014 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.835427999 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.835592985 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.835616112 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.875536919 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.875605106 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.875720978 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.875854015 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.875900984 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.875931025 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.875946999 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.878473043 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.878519058 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.878654957 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.878823996 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.878835917 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.956985950 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.957282066 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.957339048 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.957406044 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.957427025 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.957441092 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.957446098 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.960017920 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.960443974 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.960488081 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.960575104 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.960781097 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.960822105 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.960947990 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.960959911 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.961215019 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.961224079 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.961234093 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.961237907 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.964304924 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.964343071 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:57.964397907 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.964740992 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:57.964757919 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.617471933 CEST	443	49734	172.217.23.100	192.168.2.6
Oct 21, 2024 00:14:58.617546082 CEST	443	49734	172.217.23.100	192.168.2.6
Oct 21, 2024 00:14:58.617592096 CEST	49734	443	192.168.2.6	172.217.23.100
Oct 21, 2024 00:14:58.744573116 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.745122910 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.745204926 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.745570898 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.745585918 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.780495882 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.780991077 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.781018019 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.781438112 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.781447887 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.796287060 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.796701908 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.796720028 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.797113895 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.797118902 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.880923986 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.881397963 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.881421089 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.881911039 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.881916046 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.892636061 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.893014908 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.893028021 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.893429041 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.893434048 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.907758951 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.907826900 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.907898903 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.908029079 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.908042908 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.908060074 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.908065081 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.910816908 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.910912991 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.910998106 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.911211014 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.911246061 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.945785999 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.945929050 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.945997953 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.946034908 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.946053982 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.946064949 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.946070910 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.948764086 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.948801041 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.948894024 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.949003935 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.949009895 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.960038900 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.960202932 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.960297108 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.960330963 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.960340023 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.960350037 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.960356951 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.962512970 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.962538958 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:58.962733030 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.962958097 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:58.962974072 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.045695066 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.047456980 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.047580957 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.047617912 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.047617912 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.047637939 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.047647953 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.050930023 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.051033974 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.052256107 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.052320004 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.052337885 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.055092096 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.055171013 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.055329084 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.055329084 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.055443048 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.055484056 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.057372093 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.057427883 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.057584047 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.057658911 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.057688951 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.820897102 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.821371078 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.821396112 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.822026014 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.822031975 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.874382973 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.875219107 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.875219107 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.875231981 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.875246048 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.875344992 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.875616074 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.875627041 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.875963926 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.875967979 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.880717039 CEST	49734	443	192.168.2.6	172.217.23.100
Oct 21, 2024 00:14:59.880743980 CEST	443	49734	172.217.23.100	192.168.2.6
Oct 21, 2024 00:14:59.982800007 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.985711098 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.985795021 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.985833883 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.985833883 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.985850096 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.985857964 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.986597061 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.987482071 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.987544060 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.989284039 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.989288092 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.989310026 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.989325047 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 21, 2024 00:14:59.989878893 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.990035057 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:14:59.990045071 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.002280951 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.002677917 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.002696037 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.003626108 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.003628969 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.034152985 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.034262896 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.034414053 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.034475088 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.034475088 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.034492970 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.034506083 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.036803007 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.037194014 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.037209988 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.037266970 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.037297010 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.037297010 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.037345886 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.037357092 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.037369013 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.039360046 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.039360046 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.039377928 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.039400101 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.039535999 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.039666891 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.039675951 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.147156954 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.147294998 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.147365093 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.150561094 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.150579929 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.150609016 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.150614023 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.155786991 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.155827045 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.155942917 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.156203985 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.156214952 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.165285110 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.165592909 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.165693998 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.165791035 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.165798903 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.165823936 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.165827990 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.168004036 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.168039083 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.168226957 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.168226957 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.168251991 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.263453960 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:00.263513088 CEST	443	49797	40.113.103.199	192.168.2.6
Oct 21, 2024 00:15:00.263605118 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:00.264357090 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:00.264369011 CEST	443	49797	40.113.103.199	192.168.2.6
Oct 21, 2024 00:15:00.918576956 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.919379950 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.919379950 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.919409990 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.919452906 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.973418951 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.974711895 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.974711895 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:00.974773884 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:00.974802971 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.080501080 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.081020117 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.081039906 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.081267118 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.081433058 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.081463099 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.082007885 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.082014084 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.082042933 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.082042933 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.082062960 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.082072020 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.084737062 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.084765911 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.084893942 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.085129976 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.085139990 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.141383886 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.141855001 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.142007113 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.142070055 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.142071009 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.142105103 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.142116070 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.144701958 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.144731998 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.145119905 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.145453930 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.145467043 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.257169962 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.257234097 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.257847071 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.257906914 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.257906914 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.257926941 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.257930040 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.260538101 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.260584116 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.260795116 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.260951042 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.260965109 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.616738081 CEST	443	49797	40.113.103.199	192.168.2.6
Oct 21, 2024 00:15:01.616866112 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:01.618793011 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:01.618814945 CEST	443	49797	40.113.103.199	192.168.2.6
Oct 21, 2024 00:15:01.619057894 CEST	443	49797	40.113.103.199	192.168.2.6
Oct 21, 2024 00:15:01.620814085 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:01.620901108 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:01.620906115 CEST	443	49797	40.113.103.199	192.168.2.6
Oct 21, 2024 00:15:01.620975971 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:01.667401075 CEST	443	49797	40.113.103.199	192.168.2.6
Oct 21, 2024 00:15:01.922261000 CEST	443	49797	40.113.103.199	192.168.2.6
Oct 21, 2024 00:15:01.923173904 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:01.923173904 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:01.923206091 CEST	443	49797	40.113.103.199	192.168.2.6
Oct 21, 2024 00:15:01.923485994 CEST	443	49797	40.113.103.199	192.168.2.6
Oct 21, 2024 00:15:01.923588991 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:01.923631907 CEST	49797	443	192.168.2.6	40.113.103.199
Oct 21, 2024 00:15:01.952770948 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.954612017 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.954612017 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:01.954677105 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:01.954721928 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.004539013 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.005260944 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.005285025 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.005783081 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.005786896 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.076230049 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.076778889 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.076798916 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.077418089 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.077423096 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.114849091 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.115051031 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.115106106 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.115142107 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.115159988 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.115170956 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.115175962 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.119508982 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.119551897 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.119623899 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.120018005 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.120034933 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.184673071 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.185703993 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.185719967 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.186122894 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.186130047 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.188317060 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.188576937 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.188631058 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.188673973 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.188694000 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.188709021 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.188714981 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.192235947 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.192280054 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.192342043 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.192462921 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.192473888 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.240535021 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.240966082 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.241070986 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.241138935 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.241138935 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.241158962 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.241168022 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.244982958 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.245018005 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.245086908 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.245202065 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.245217085 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.353760958 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.353941917 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.353991985 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.354541063 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.354541063 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.354562998 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.354573011 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.359261990 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.359306097 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 21, 2024 00:15:02.359364986 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.360279083 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 21, 2024 00:15:02.360292912 CEST	443	49806	13.107.246.45	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 00:14:43.270297050 CEST	53	57408	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:43.453428984 CEST	53	65327	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:45.604131937 CEST	64541	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:45.604370117 CEST	57365	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:45.624273062 CEST	53	57365	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:45.624288082 CEST	53	64541	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:46.714725018 CEST	57227	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:46.714878082 CEST	62422	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:46.717976093 CEST	64256	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:46.718311071 CEST	61661	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:46.972878933 CEST	51334	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:46.973031998 CEST	59845	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:46.993988991 CEST	53	59845	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:47.157448053 CEST	53	51334	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:47.549882889 CEST	59503	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:47.550028086 CEST	57394	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:47.556759119 CEST	53	59503	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:47.556814909 CEST	53	57394	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:48.000231981 CEST	61654	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:48.000349045 CEST	55110	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:48.032181025 CEST	53	61654	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:48.039544106 CEST	53	55110	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:48.185641050 CEST	53135	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:48.185784101 CEST	50615	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:48.929065943 CEST	56500	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:48.929239988 CEST	58261	53	192.168.2.6	1.1.1.1
Oct 21, 2024 00:14:48.947664022 CEST	53	58261	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:48.948410988 CEST	53	56500	1.1.1.1	192.168.2.6
Oct 21, 2024 00:14:50.576750994 CEST	53	63178	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 21, 2024 00:14:45.604131937 CEST	192.168.2.6	1.1.1.1	0x3fd1	Standard query (0)	democrats.org	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:45.604370117 CEST	192.168.2.6	1.1.1.1	0x57f5	Standard query (0)	democrats.org	65	IN (0x0001)	false
Oct 21, 2024 00:14:46.714725018 CEST	192.168.2.6	1.1.1.1	0x11a4	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:46.714878082 CEST	192.168.2.6	1.1.1.1	0x51e6	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Oct 21, 2024 00:14:46.717976093 CEST	192.168.2.6	1.1.1.1	0x6093	Standard query (0)	cloud.typography.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:46.718311071 CEST	192.168.2.6	1.1.1.1	0x71f8	Standard query (0)	cloud.typography.com	65	IN (0x0001)	false
Oct 21, 2024 00:14:46.972878933 CEST	192.168.2.6	1.1.1.1	0xa4d0	Standard query (0)	iwillvote.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:46.973031998 CEST	192.168.2.6	1.1.1.1	0x7017	Standard query (0)	iwillvote.com	65	IN (0x0001)	false
Oct 21, 2024 00:14:47.549882889 CEST	192.168.2.6	1.1.1.1	0x35fb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:47.550028086 CEST	192.168.2.6	1.1.1.1	0xd614	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 21, 2024 00:14:48.000231981 CEST	192.168.2.6	1.1.1.1	0xf2e5	Standard query (0)	ak.democrats.org	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:48.000349045 CEST	192.168.2.6	1.1.1.1	0xc8dc	Standard query (0)	ak.democrats.org	65	IN (0x0001)	false
Oct 21, 2024 00:14:48.185641050 CEST	192.168.2.6	1.1.1.1	0xcb55	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:48.185784101 CEST	192.168.2.6	1.1.1.1	0xb351	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Oct 21, 2024 00:14:48.929065943 CEST	192.168.2.6	1.1.1.1	0xc591	Standard query (0)	democrats.org	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:48.929239988 CEST	192.168.2.6	1.1.1.1	0x8985	Standard query (0)	democrats.org	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 21, 2024 00:14:34.940165043 CEST	1.1.1.1	192.168.2.6	0xe523	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 00:14:34.940165043 CEST	1.1.1.1	192.168.2.6	0xe523	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:36.578893900 CEST	1.1.1.1	192.168.2.6	0xbf41	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:36.578893900 CEST	1.1.1.1	192.168.2.6	0xbf41	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:45.624288082 CEST	1.1.1.1	192.168.2.6	0x3fd1	No error (0)	democrats.org		192.0.66.105	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:46.722908974 CEST	1.1.1.1	192.168.2.6	0x11a4	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 00:14:46.723545074 CEST	1.1.1.1	192.168.2.6	0x51e6	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 00:14:46.726829052 CEST	1.1.1.1	192.168.2.6	0x6093	No error (0)	cloud.typography.com	wildcard.typography.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 00:14:46.745728016 CEST	1.1.1.1	192.168.2.6	0x71f8	No error (0)	cloud.typography.com	wildcard.typography.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 00:14:47.157448053 CEST	1.1.1.1	192.168.2.6	0xa4d0	No error (0)	iwillvote.com		108.138.7.103	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:47.157448053 CEST	1.1.1.1	192.168.2.6	0xa4d0	No error (0)	iwillvote.com		108.138.7.44	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:47.157448053 CEST	1.1.1.1	192.168.2.6	0xa4d0	No error (0)	iwillvote.com		108.138.7.16	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:47.157448053 CEST	1.1.1.1	192.168.2.6	0xa4d0	No error (0)	iwillvote.com		108.138.7.37	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:47.556759119 CEST	1.1.1.1	192.168.2.6	0x35fb	No error (0)	www.google.com		172.217.23.100	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:47.556814909 CEST	1.1.1.1	192.168.2.6	0xd614	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 21, 2024 00:14:48.032181025 CEST	1.1.1.1	192.168.2.6	0xf2e5	No error (0)	ak.democrats.org	dnc.clients.actionkit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 00:14:48.032181025 CEST	1.1.1.1	192.168.2.6	0xf2e5	No error (0)	dnc.clients.actionkit.com		52.8.222.175	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:48.032181025 CEST	1.1.1.1	192.168.2.6	0xf2e5	No error (0)	dnc.clients.actionkit.com		54.183.105.4	A (IP address)	IN (0x0001)	false
Oct 21, 2024 00:14:48.039544106 CEST	1.1.1.1	192.168.2.6	0xc8dc	No error (0)	ak.democrats.org	dnc.clients.actionkit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 00:14:48.192586899 CEST	1.1.1.1	192.168.2.6	0xb351	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 00:14:48.192620039 CEST	1.1.1.1	192.168.2.6	0xcb55	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 00:14:48.948410988 CEST	1.1.1.1	192.168.2.6	0xc591	No error (0)	democrats.org		192.0.66.105	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

democrats.org

https:

iwillvote.com

ak.democrats.org

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49707	40.126.31.69	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:34 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-10-20 22:14:34 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-20 22:14:35 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sun, 20 Oct 2024 22:13:35 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_BL2 x-ms-request-id: 7d044b59-f871-4553-8b8a-eb3519880d68 PPServer: PPV: 30 H: BL02EPF0001DA29 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sun, 20 Oct 2024 22:14:34 GMT Connection: close Content-Length: 10901
2024-10-20 22:14:35 UTC	10901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49708	20.190.160.14	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:34 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-20 22:14:34 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49710	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:36 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 63 72 35 72 7a 69 49 37 42 45 43 57 65 44 4f 6c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 65 39 64 38 66 39 61 34 62 38 30 31 35 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: cr5rziI7BECWeDOl.1Context: 3ee9d8f9a4b80154
2024-10-20 22:14:36 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-20 22:14:36 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 63 72 35 72 7a 69 49 37 42 45 43 57 65 44 4f 6c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 65 39 64 38 66 39 61 34 62 38 30 31 35 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 31 5a 53 39 4f 64 57 31 46 67 74 39 2b 54 76 58 6a 61 56 68 68 36 74 79 66 34 6b 4d 78 47 78 73 36 74 34 37 53 55 54 52 32 74 37 67 51 48 66 64 70 77 75 4f 6a 51 41 57 44 54 4d 4a 6e 51 72 71 44 45 71 71 30 59 32 56 56 68 51 6f 4e 78 59 6f 62 73 59 44 6f 33 4e 61 62 4b 43 51 76 73 50 67 4d 33 59 49 6b 44 58 66 54 46 70 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: cr5rziI7BECWeDOl.2Context: 3ee9d8f9a4b80154<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAT1ZS9OdW1Fgt9+TvXjaVhh6tyf4kMxGxs6t47SUTR2t7gQHfdpwuOjQAWDTMJnQrqDEqq0Y2VVhQoNxYobsYDo3NabKCQvsPgM3YIkDXfTFpt
2024-10-20 22:14:36 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 63 72 35 72 7a 69 49 37 42 45 43 57 65 44 4f 6c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 65 39 64 38 66 39 61 34 62 38 30 31 35 34 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: cr5rziI7BECWeDOl.3Context: 3ee9d8f9a4b80154

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49712	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:43 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 42 4c 75 45 49 32 30 6d 6d 55 65 45 54 31 78 43 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 64 61 39 37 39 38 66 34 38 39 62 31 30 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: BLuEI20mmUeET1xC.1Context: 69da9798f489b10c
2024-10-20 22:14:43 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-20 22:14:43 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 42 4c 75 45 49 32 30 6d 6d 55 65 45 54 31 78 43 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 64 61 39 37 39 38 66 34 38 39 62 31 30 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 7a 55 45 6b 33 4e 66 59 68 39 44 37 4a 45 5a 56 62 6c 51 70 7a 62 55 68 49 35 31 6e 4c 71 31 6c 79 78 73 49 65 70 6c 50 58 6f 72 4f 79 52 49 56 48 6e 75 53 2b 51 69 6e 32 63 6a 51 38 47 78 6c 52 66 65 2f 66 72 53 38 6e 4e 35 33 45 6b 50 56 49 67 5a 54 76 4c 63 7a 43 74 4b 2f 74 4b 78 6b 4e 6c 45 66 39 33 48 61 4b 43 39 4b Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: BLuEI20mmUeET1xC.2Context: 69da9798f489b10c<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXzUEk3NfYh9D7JEZVblQpzbUhI51nLq1lyxsIeplPXorOyRIVHnuS+Qin2cjQ8GxlRfe/frS8nN53EkPVIgZTvLczCtK/tKxkNlEf93HaKC9K
2024-10-20 22:14:43 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 42 4c 75 45 49 32 30 6d 6d 55 65 45 54 31 78 43 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 64 61 39 37 39 38 66 34 38 39 62 31 30 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: BLuEI20mmUeET1xC.3Context: 69da9798f489b10c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49718	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:45 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 61 63 51 44 69 33 63 56 79 55 43 6b 73 42 58 37 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 64 30 36 38 36 62 39 37 63 31 33 30 65 34 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: acQDi3cVyUCksBX7.1Context: 4d0686b97c130e49
2024-10-20 22:14:45 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-20 22:14:45 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 61 63 51 44 69 33 63 56 79 55 43 6b 73 42 58 37 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 64 30 36 38 36 62 39 37 63 31 33 30 65 34 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 31 5a 53 39 4f 64 57 31 46 67 74 39 2b 54 76 58 6a 61 56 68 68 36 74 79 66 34 6b 4d 78 47 78 73 36 74 34 37 53 55 54 52 32 74 37 67 51 48 66 64 70 77 75 4f 6a 51 41 57 44 54 4d 4a 6e 51 72 71 44 45 71 71 30 59 32 56 56 68 51 6f 4e 78 59 6f 62 73 59 44 6f 33 4e 61 62 4b 43 51 76 73 50 67 4d 33 59 49 6b 44 58 66 54 46 70 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: acQDi3cVyUCksBX7.2Context: 4d0686b97c130e49<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAT1ZS9OdW1Fgt9+TvXjaVhh6tyf4kMxGxs6t47SUTR2t7gQHfdpwuOjQAWDTMJnQrqDEqq0Y2VVhQoNxYobsYDo3NabKCQvsPgM3YIkDXfTFpt
2024-10-20 22:14:45 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 61 63 51 44 69 33 63 56 79 55 43 6b 73 42 58 37 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 64 30 36 38 36 62 39 37 63 31 33 30 65 34 39 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: acQDi3cVyUCksBX7.3Context: 4d0686b97c130e49

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49720	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:46 UTC	656	OUT	GET / HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:46 UTC	753	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-hacker: If you're reading this, you should visit wpvip.com/careers and apply to join the fun, mention this header. X-Powered-By: WordPress VIP <https://wpvip.com> Host-Header: a9130478a60e5f9135f765b23f26593b X-Frame-Options: SAMEORIGIN Link: <https://democrats.org/wp-json/>; rel="https://api.w.org/" Link: <https://democrats.org/wp-json/wp/v2/pages/204>; rel="alternate"; title="JSON"; type="application/json" Link: <https://democrats.org/>; rel=shortlink cache-control: max-age=300, must-revalidate x-rq: bur7 123 243 443 accept-ranges: bytes x-cache: HIT
2024-10-20 22:14:46 UTC	616	IN	Data Raw: 38 30 30 30 0d 0a 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 38 20 5d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6f 6c 64 69 65 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 39 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 Data Ascii: 8000 <!DOCTYPE html>...[if lte IE 8 ]><html lang="en" class="no-js oldie"><![endif]-->...[if IE 9 ]><html lang="en" class="no-js ie9"><![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="en" class="no-js">...<![endif]--><head> <meta cha
2024-10-20 22:14:46 UTC	1369	IN	Data Raw: 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 2e 74 79 70 6f 67 72 61 70 68 79 2e 63 6f 6d 2f 36 34 30 30 33 31 36 2f 36 38 37 37 36 31 32 2f 63 73 73 2f 66 6f 6e 74 73 2e 63 73 73 22 20 2f 3e 0a 0a 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 2d 3e 0a 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 4a 44 30 4a 52 32 5a 43 33 56 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ttps://cloud.typography.com/6400316/6877612/css/fonts.css" /> ... Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/gtag/js?id=G-JD0JR2ZC3V"></script> <script> window.dataLayer = window.dataLayer \|\| []; function
2024-10-20 22:14:46 UTC	1369	IN	Data Raw: 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 2c 6e 29 3b 61 6e 61 6c 79 74 69 63 73 2e 5f 6c 6f 61 64 4f 70 74 69 6f 6e 73 3d 65 7d 3b 61 6e 61 6c 79 74 69 63 73 2e 53 4e 49 50 50 45 54 5f 56 45 52 53 49 4f 4e 3d 22 34 2e 31 33 2e 31 22 3b 0a 20 20 20 20 61 6e 61 6c 79 74 69 63 73 2e 6c 6f 61 64 28 22 62 58 4c 4e 51 61 49 53 47 33 6e 56 31 52 73 46 65 50 45 35 4d 4a 39 47 48 6e 51 72 55 33 45 76 22 29 3b 0a 20 20 20 20 7d 7d 28 29 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 21 2d 2d 20 53 65 67 6d 65 6e 74 20 2d 2d 3e 0a 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 Data Ascii: entNode.insertBefore(t,n);analytics._loadOptions=e};analytics.SNIPPET_VERSION="4.13.1"; analytics.load("bXLNQaISG3nV1RsFePE5MJ9GHnQrU3Ev"); }}(); </script> ... Segment --> <meta name='robots' content='index, follow, max-image-preview:large
2024-10-20 22:14:46 UTC	1369	IN	Data Raw: 74 70 73 3a 2f 2f 64 65 6d 6f 63 72 61 74 73 2e 6f 72 67 2f 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 65 6d 6f 63 72 61 74 73 2e 6f 72 67 2f 22 2c 22 6e 61 6d 65 22 3a 22 57 65 20 61 72 65 20 74 68 65 20 44 65 6d 6f 63 72 61 74 69 63 20 50 61 72 74 79 20 2d 20 44 65 6d 6f 63 72 61 74 73 22 2c 22 69 73 50 61 72 74 4f 66 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 64 65 6d 6f 63 72 61 74 73 2e 6f 72 67 2f 23 77 65 62 73 69 74 65 22 7d 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 31 39 2d 30 36 2d 32 36 54 31 32 3a 31 35 3a 32 32 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 31 30 2d 31 31 54 31 38 3a 32 35 3a 34 34 2b 30 30 3a 30 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a Data Ascii: tps://democrats.org/","url":"https://democrats.org/","name":"We are the Democratic Party - Democrats","isPartOf":{"@id":"https://democrats.org/#website"},"datePublished":"2019-06-26T12:15:22+00:00","dateModified":"2024-10-11T18:25:44+00:00","description":
2024-10-20 22:14:46 UTC	1369	IN	Data Raw: 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 61 6c 6c 2d 63 73 73 2d 32 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 64 65 6d 6f 63 72 61 74 73 2e 6f 72 67 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2f 73 74 79 6c 65 2e 6d 69 6e 2e 63 73 73 3f 6d 3d 31 37 32 35 39 38 32 32 35 32 67 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 61 6c 6c 2d 63 73 73 2d 34 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 64 65 6d 6f 63 72 61 74 73 2e 6f 72 67 2f 5f 73 74 61 74 69 63 2f 3f 3f 2d 65 4a 7a 54 4c 79 2f 51 7a 63 Data Ascii: ll' /><link rel='stylesheet' id='all-css-2' href='https://democrats.org/wp-includes/css/dist/block-library/style.min.css?m=1725982252g' type='text/css' media='all' /><link rel='stylesheet' id='all-css-4' href='https://democrats.org/_static/??-eJzTLy/Qzc
2024-10-20 22:14:46 UTC	1369	IN	Data Raw: 2b 20 32 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 69 6c 65 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 32 33 37 33 63 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 3a 72 6f 6f 74 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 73 71 75 61 72 65 3a 20 31 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 34 2d 33 3a 20 34 2f 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d Data Ascii: + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none}</style><style id='global-styles-inline-css'>:root{--wp--preset--aspect-ratio--square: 1;--wp--preset--aspect-ratio--4-3: 4/3;--wp--preset--aspect-ratio-
2024-10-20 22:14:46 UTC	1369	IN	Data Raw: 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 28 32 30 37 2c 34 36 2c 34 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d Data Ascii: ivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-
2024-10-20 22:14:46 UTC	1369	IN	Data Raw: 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 36 30 3a 20 32 2e 32 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 37 30 3a 20 33 2e 33 38 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 38 30 3a 20 35 2e 30 36 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6e 61 74 75 72 61 6c 3a 20 36 70 78 20 36 70 78 20 39 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 64 65 65 70 3a 20 31 32 70 78 20 31 32 70 78 20 35 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 Data Ascii: .5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow
2024-10-20 22:14:46 UTC	1369	IN	Data Raw: 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d Data Ascii: : var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-
2024-10-20 22:14:46 UTC	1369	IN	Data Raw: 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 Data Ascii: ground-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--c

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49719	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:46 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 52 61 58 76 73 46 38 6e 76 45 69 47 46 64 44 6c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 31 61 64 34 33 61 61 35 37 62 38 63 31 38 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: RaXvsF8nvEiGFdDl.1Context: 81ad43aa57b8c18b
2024-10-20 22:14:46 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-20 22:14:46 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 52 61 58 76 73 46 38 6e 76 45 69 47 46 64 44 6c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 31 61 64 34 33 61 61 35 37 62 38 63 31 38 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 31 5a 53 39 4f 64 57 31 46 67 74 39 2b 54 76 58 6a 61 56 68 68 36 74 79 66 34 6b 4d 78 47 78 73 36 74 34 37 53 55 54 52 32 74 37 67 51 48 66 64 70 77 75 4f 6a 51 41 57 44 54 4d 4a 6e 51 72 71 44 45 71 71 30 59 32 56 56 68 51 6f 4e 78 59 6f 62 73 59 44 6f 33 4e 61 62 4b 43 51 76 73 50 67 4d 33 59 49 6b 44 58 66 54 46 70 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: RaXvsF8nvEiGFdDl.2Context: 81ad43aa57b8c18b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAT1ZS9OdW1Fgt9+TvXjaVhh6tyf4kMxGxs6t47SUTR2t7gQHfdpwuOjQAWDTMJnQrqDEqq0Y2VVhQoNxYobsYDo3NabKCQvsPgM3YIkDXfTFpt
2024-10-20 22:14:46 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 52 61 58 76 73 46 38 6e 76 45 69 47 46 64 44 6c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 31 61 64 34 33 61 61 35 37 62 38 63 31 38 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: RaXvsF8nvEiGFdDl.3Context: 81ad43aa57b8c18b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-20 22:14:46 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-20 22:14:46 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 57 2f 70 34 6d 31 50 51 38 45 43 71 44 72 54 59 31 44 4e 71 7a 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: W/p4m1PQ8ECqDrTY1DNqzg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49721	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:46 UTC	578	OUT	GET /wp-admin/admin-ajax.php?action=frmpro_css&ver=9242122 HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:47 UTC	440	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:47 GMT Content-Type: text/css;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Robots-Tag: noindex X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN x-rq: bur7 123 242 443 accept-ranges: bytes x-cache: BYPASS cache-control: no-cache, must-revalidate, max-age=0, no-store
2024-10-20 22:14:47 UTC	929	IN	Data Raw: 66 38 39 0d 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 7b 0a 2d 2d 66 6f 72 6d 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 66 6f 72 6d 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 2d 2d 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 2d 2d 66 69 65 6c 64 73 65 74 3a 30 70 78 3b 2d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 2d 2d 66 69 65 6c 64 73 65 74 2d 70 61 64 64 69 6e 67 3a 30 20 30 20 31 35 70 78 20 30 3b 2d 2d 66 69 65 6c 64 73 65 74 2d 62 67 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 74 69 74 6c 65 2d 73 69 7a 65 3a 34 30 70 78 3b 2d 2d 74 69 74 6c 65 2d 63 6f 6c 6f 72 3a 23 34 34 34 34 34 34 3b 2d 2d 74 69 74 6c 65 2d 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 2d 2d 74 69 74 6c 65 2d 6d 61 72 67 69 6e 2d Data Ascii: f89.with_frm_style{--form-width:100%;--form-align:left;--direction:ltr;--fieldset:0px;--fieldset-color:#000000;--fieldset-padding:0 0 15px 0;--fieldset-bg-color:transparent;--title-size:40px;--title-color:#444444;--title-margin-top:10px;--title-margin-
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 43 33 43 38 3b 2d 2d 66 69 65 6c 64 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 2d 2d 66 69 65 6c 64 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 2d 2d 62 67 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 2d 2d 62 67 2d 63 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 23 66 66 66 66 66 66 3b 2d 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 23 36 36 61 66 65 39 3b 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 65 72 72 6f 72 3a 23 34 34 34 34 34 34 3b 2d 2d 62 67 2d 63 6f 6c 6f 72 2d 65 72 72 6f 72 3a 23 66 66 66 66 66 66 3b 2d 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 65 72 72 6f 72 3a 23 42 39 34 41 34 38 3b 2d 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 2d 65 72 72 6f 72 3a 31 70 78 3b 2d 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 2d 65 72 Data Ascii: C3C8;--field-border-width:1px;--field-border-style:solid;--bg-color:#ffffff;--bg-color-active:#ffffff;--border-color-active:#66afe9;--text-color-error:#444444;--bg-color-error:#ffffff;--border-color-error:#B94A48;--border-width-error:1px;--border-style-er
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 3b 2d 2d 65 72 72 6f 72 2d 74 65 78 74 3a 23 42 39 34 41 34 38 3b 2d 2d 65 72 72 6f 72 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 2d 2d 73 75 63 63 65 73 73 2d 62 67 2d 63 6f 6c 6f 72 3a 23 44 46 46 30 44 38 3b 2d 2d 73 75 63 63 65 73 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 44 36 45 39 43 36 3b 2d 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 23 34 36 38 38 34 37 3b 2d 2d 73 75 63 63 65 73 73 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 2d 2d 70 72 6f 67 72 65 73 73 2d 62 67 2d 63 6f 6c 6f 72 3a 23 65 61 65 61 65 61 3b 2d 2d 70 72 6f 67 72 65 73 73 2d 63 6f 6c 6f 72 3a 23 33 66 34 62 35 62 3b 2d 2d 70 72 6f 67 72 65 73 73 2d 61 63 74 69 76 65 2d 62 67 2d 63 6f 6c 6f 72 3a 23 35 37 39 41 46 36 3b 2d 2d 70 72 6f 67 72 65 73 73 Data Ascii: ;--error-text:#B94A48;--error-font-size:14px;--success-bg-color:#DFF0D8;--success-border-color:#D6E9C6;--success-text-color:#468847;--success-font-size:14px;--progress-bg-color:#eaeaea;--progress-color:#3f4b5b;--progress-active-bg-color:#579AF6;--progress
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 6d 3a 20 76 61 72 28 2d 2d 66 6f 72 6d 2d 64 65 73 63 2d 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 29 3b 0a 09 70 61 64 64 69 6e 67 3a 20 76 61 72 28 2d 2d 66 6f 72 6d 2d 64 65 73 63 2d 70 61 64 64 69 6e 67 29 3b 0a 7d 0a 0a 66 6f 72 6d 20 2e 66 72 6d 5f 5f 36 36 36 62 30 39 66 64 37 39 66 34 33 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 77 69 64 74 68 3a 20 30 3b 0a 09 68 65 69 67 68 74 3a 20 30 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 7d 0a 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 66 69 65 6c 64 73 65 74 7b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 2f 2a 20 4f 76 65 72 72 69 64 65 20 32 30 32 31 20 74 68 65 6d 65 20 2a 2f 0a 7d 0a 0a 2e 77 Data Ascii: m: var(--form-desc-margin-bottom);padding: var(--form-desc-padding);}form .frm__666b09fd79f43 {overflow: hidden;width: 0;height: 0;position: absolute;}.with_frm_style fieldset{min-width:0;display: block; /* Override 2021 theme */}.w
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 72 65 71 75 69 72 65 64 20 7b 0a 09 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 72 65 71 75 69 72 65 64 2d 63 6f 6c 6f 72 29 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 72 65 71 75 69 72 65 64 2d 77 65 69 67 68 74 29 3b 0a 7d 0a 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 0a 2e 77 69 74 68 5f 66 72 6d 5f Data Ascii: ith_frm_style .frm_required {color: var(--required-color);font-weight: var(--required-weight);}.with_frm_style input[type=text],.with_frm_style input[type=password],.with_frm_style input[type=email],.with_frm_style input[type=number],.with_frm_
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 29 3b 0a 09 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 66 69 65 6c 64 2d 77 69 64 74 68 29 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 66 69 65 6c 64 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 0a 09 70 61 64 64 69 6e 67 3a 20 76 61 72 28 2d 2d 66 69 65 6c 64 2d 70 61 64 29 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 66 69 65 6c 64 2d 77 65 69 67 68 74 29 3b 0a 7d 0a 0a 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 73 65 6c 65 63 74 20 6f 70 74 69 6f 6e 20 7b 0a 09 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f Data Ascii: er-radius);width: var(--field-width);max-width: 100%;font-size: var(--field-font-size);padding: var(--field-pad);box-sizing: border-box;outline: none;font-weight: var(--field-weight);}.with_frm_style select option {color: var(--text-co
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 5f 66 72 6d 5f 73 74 79 6c 65 20 73 65 6c 65 63 74 5b 6d 75 6c 74 69 70 6c 65 3d 6d 75 6c 74 69 70 6c 65 5d 7b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 7d 0a 0a 2e 69 6e 70 75 74 5b 74 79 70 65 3d 66 69 6c 65 5d 2e 66 72 6d 5f 74 72 61 6e 73 70 61 72 65 6e 74 3a 66 6f 63 75 73 2c 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 66 69 6c 65 5d 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 66 69 6c 65 5d 7b 0a 09 63 6f 6c 6f 72 3a 20 76 61 Data Ascii: _frm_style select[multiple=multiple]{height:auto;}.input[type=file].frm_transparent:focus,.with_frm_style input[type=file]{background-color:transparent;border:none;outline:none;box-shadow:none;}.with_frm_style input[type=file]{color: va
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 29 3b 0a 09 70 61 64 64 69 6e 67 3a 20 76 61 72 28 2d 2d 6c 61 62 65 6c 2d 70 61 64 64 69 6e 67 29 3b 0a 09 6d 61 72 67 69 6e 3a 30 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 74 6f 70 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 66 72 6d 5f 70 72 69 6d 61 72 79 5f 6c 61 62 65 6c 2c 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 68 69 64 64 65 6e 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 66 72 6d 5f 70 72 69 6d 61 72 79 5f 6c 61 62 65 6c 2c 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 70 6f 73 5f 74 6f 70 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 0a Data Ascii: align);padding: var(--label-padding);margin:0;width:auto;display:block;}.with_frm_style .frm_top_container .frm_primary_label,.with_frm_style .frm_hidden_container .frm_primary_label,.with_frm_style .frm_pos_top{display:block;float:none;
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 64 20 2a 2f 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 74 65 78 74 61 72 65 61 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 66 69 65 6c 64 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 0a 7d 0a 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 69 6e 73 69 64 65 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 69 6e 73 69 64 65 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 74 65 78 74 61 72 65 61 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 09 Data Ascii: d */.with_frm_style input::placeholder,.with_frm_style textarea::placeholder {font-size: var(--field-font-size);}.with_frm_style .frm_inside_container > input::-moz-placeholder,.with_frm_style .frm_inside_container > textarea::-moz-placeholder {
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 28 30 2e 38 35 20 2a 20 76 61 72 28 2d 2d 66 69 65 6c 64 2d 66 6f 6e 74 2d 73 69 7a 65 29 29 3b 0a 7d 0a 0a 2f 2a 20 54 68 65 73 65 20 64 6f 20 6e 6f 74 20 77 6f 72 6b 20 69 66 20 74 68 65 79 20 61 72 65 20 63 6f 6d 62 69 6e 65 64 20 2a 2f 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 69 6e 73 69 64 65 5f 63 6f 6e 74 61 69 6e 65 72 2e 66 72 6d 5f 6c 61 62 65 6c 5f 66 6c 6f 61 74 5f 74 6f 70 20 3e 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 69 6e 73 69 64 65 5f 63 6f 6e 74 61 69 6e 65 72 2e 66 72 6d 5f 6c 61 62 65 6c 5f 66 6c 6f 61 74 5f 74 6f 70 20 3e 20 74 65 78 74 61 72 65 61 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a Data Ascii: (0.85 * var(--field-font-size));}/* These do not work if they are combined */.with_frm_style .frm_inside_container.frm_label_float_top > input::-moz-placeholder,.with_frm_style .frm_inside_container.frm_label_float_top > textarea::-moz-placeholder {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49729	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:47 UTC	587	OUT	GET /wp-includes/css/dist/block-library/style.min.css?m=1725982252g HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:47 UTC	324	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:47 GMT Content-Type: text/css Content-Length: 112427 Connection: close Last-Modified: Tue, 10 Sep 2024 15:30:52 GMT Vary: Accept-Encoding ETag: "66e0662c-1b72b" x-rq: bur7 123 242 443 x-cache: HIT cache-control: max-age=31536000 Accept-Ranges: bytes
2024-10-20 22:14:47 UTC	1045	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 77 69 64 74 68 2d 32 35 7b 77 69 64 74 68 3a 63 61 6c 63 28 32 35 25 20 2d 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 62 6c 6f 63 6b 2d 67 61 70 2c 20 2e 35 65 6d 29 2a 2e 37 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 77 69 64 74 68 2d 35 30 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 76 61 72 28 2d 2d Data Ascii: om-font-size .wp-block-button__link{font-size:inherit}.wp-block-buttons>.wp-block-button.wp-block-button__width-25{width:calc(25% - var(--wp--style--block-gap, .5em)*.75)}.wp-block-buttons>.wp-block-button.wp-block-button__width-50{width:calc(50% - var(--
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 29 2c 3a 72 6f 6f 74 20 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 77 70 2d 62 6c 6f 63 Data Ascii: ock-button__link.is-style-outline:not(.has-background)),:root :where(.wp-block-button.is-style-outline>.wp-block-button__link:not(.has-background)){background-color:initial;background-image:none}.wp-block-buttons.is-vertical{flex-direction:column}.wp-bloc
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 61 6c 69 67 6e 63 65 6e 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 66 6f 6e 74 2d 77 65 69 67 68 Data Ascii: t}.wp-block-buttons.has-custom-font-size .wp-block-button__link{font-size:inherit}.wp-block-button.aligncenter,.wp-block-calendar{text-align:center}.wp-block-calendar td,.wp-block-calendar th{border:1px solid;padding:.25em}.wp-block-calendar th{font-weigh
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 62 6f 74 74 6f 6d 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 31 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 Data Ascii: tart}.wp-block-columns.are-vertically-aligned-center{align-items:center}.wp-block-columns.are-vertically-aligned-bottom{align-items:flex-end}@media (max-width:781px){.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:100%!importa
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 6e 61 76 69 67 61 74 69 6f 6e 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a Data Ascii: x}.wp-block-post-comments .alignleft{float:left}.wp-block-post-comments .alignright{float:right}.wp-block-post-comments .navigation:after{clear:both;content:"";display:table}.wp-block-post-comments .commentlist{clear:both;list-style:none;margin:0;padding:
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f Data Ascii: rm input:not([type=submit]):not([type=checkbox]),.wp-block-post-comments .comment-form textarea{box-sizing:border-box;display:block;width:100%}.wp-block-post-comments .comment-form-cookies-consent{display:flex;gap:.25em}.wp-block-post-comments .comment-fo
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 65 76 69 6f 75 73 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 Data Ascii: evious:last-child{margin-right:0}.wp-block-comments-pagination .wp-block-comments-pagination-previous-arrow{display:inline-block;margin-right:1ch}.wp-block-comments-pagination .wp-block-comments-pagination-previous-arrow:not(.is-arrow-chevron){transform:s
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: lock-cover-image.has-background-dim:not([class=-background-color]),.wp-block-cover.has-background-dim:not([class=-background-color]){background-color:#000}.wp-block-cover .has-background-dim.has-background-gradient,.wp-block-cover-image .has-background-
2024-10-20 22:14:48 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 32 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 32 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: ackground-dim-10:not(.has-background-gradient):before{opacity:.1}.wp-block-cover-image.has-background-dim.has-background-dim-20 .wp-block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-20 .wp-block-cover__gradient-background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49728	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:47 UTC	577	OUT	GET /wp-content/themes/bsdstarter/style.css?m=1729089554g HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:47 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:47 GMT Content-Type: text/css Content-Length: 163694 Connection: close Last-Modified: Tue, 08 Oct 2024 22:18:54 GMT Vary: Accept-Encoding ETag: "6705afce-27f6e" x-rq: bur7 123 243 443 cache-control: max-age=31536000 x-cache: MISS Accept-Ranges: bytes
2024-10-20 22:14:47 UTC	1044	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 42 53 44 20 57 6f 72 64 70 72 65 73 73 20 53 74 61 72 74 65 72 6b 69 74 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 75 65 73 74 61 74 65 64 69 67 69 74 61 6c 2e 63 6f 6d 0a 41 75 74 68 6f 72 3a 20 42 6c 75 65 20 53 74 61 74 65 20 44 69 67 69 74 61 6c 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 75 65 73 74 61 74 65 64 69 67 69 74 61 6c 2e 63 6f 6d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 43 75 73 74 6f 6d 20 74 68 65 6d 65 20 73 74 61 72 74 65 72 20 6b 69 74 0a 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 4e 43 6f 6c 72 6f 79 2d 42 6f 6c 64 3b 66 6f 6e 74 2d 77 Data Ascii: @charset "UTF-8";/!Theme Name: BSD Wordpress StarterkitTheme URI: http://www.bluestatedigital.comAuthor: Blue State DigitalAuthor URI: http://www.bluestatedigital.comDescription: Custom theme starter kit/@font-face{font-family:NNColroy-Bold;font-w
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 4e 43 6f 6c 72 6f 79 2d 4d 65 64 69 75 6d 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 4e 43 6f 6c 72 6f 79 2d 4d 65 64 69 75 6d 49 74 61 6c 69 63 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 4e 4e 43 6f 6c 72 6f 79 2d 4d 65 64 69 75 6d 49 74 61 6c 69 63 2e 65 6f 74 29 2c 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 4e 4e 43 6f 6c 72 6f 79 2d 4d 65 64 69 75 6d 49 74 61 6c 69 63 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 61 73 73 65 74 73 2f 66 6f Data Ascii: NColroy-Medium.woff) format("woff")}@font-face{font-family:NNColroy-MediumItalic;font-style:italic;font-weight:500;src:url(assets/fonts/NNColroy-MediumItalic.eot),url(assets/fonts/NNColroy-MediumItalic.eot?#iefix) format("embedded-opentype"),url(assets/fo
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 67 6f 74 68 61 6d 62 6f 6f 6b 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 74 68 61 6d 20 42 6f 6c 64 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 67 6f 74 68 61 6d 62 6f 6c 64 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 67 6f 74 68 61 6d 62 6f 6c 64 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f Data Ascii: at("woff2"),url(assets/fonts/gothambook-webfont.woff) format("woff")}@font-face{font-family:'Gotham Bold';font-style:normal;font-weight:700;src:url(assets/fonts/gothambold-webfont.woff2) format("woff2"),url(assets/fonts/gothambold-webfont.woff) format("wo
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 63 61 6c 6c 6f 75 74 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 61 6c 6c 6f 75 74 2e 70 72 69 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 37 65 63 66 61 3b 63 6f 6c 6f 72 3a 23 30 61 30 61 30 61 7d 2e 63 61 6c 6c 6f 75 74 2e 73 65 63 6f 6e 64 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 65 61 65 61 3b 63 6f 6c 6f 72 3a 23 30 61 30 61 30 61 7d 2e 63 61 6c 6c 6f 75 74 2e 73 75 63 63 65 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 31 66 61 65 61 3b 63 6f 6c 6f 72 3a 23 30 61 30 61 30 61 7d 2e 63 61 6c 6c 6f 75 74 2e 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: t-child{margin-top:0}.callout>:last-child{margin-bottom:0}.callout.primary{background-color:#d7ecfa;color:#0a0a0a}.callout.secondary{background-color:#eaeaea;color:#0a0a0a}.callout.success{background-color:#e1faea;color:#0a0a0a}.callout.warning{background
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 61 75 64 69 6f 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 69 6d 67 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 Data Ascii: 5%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}audio,video{display:inline-block}audio:not([controls]){display:none;height:0}img{border-style:none}svg:not(:root){overflow:hidden}button,input,optgroup,select,texta
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 64 65 74 61 69 6c 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 7d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 63 61 6e 76 61 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 66 6f 75 6e 64 61 74 69 6f 6e 2d 6d 71 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 73 6d 61 6c 6c 3d 30 65 6d 26 6d 65 64 69 75 6d 3d 34 30 65 6d 26 6c 61 72 67 65 3d 36 34 65 6d 26 78 6c 61 72 67 65 3d 37 35 Data Ascii: ertical-align:baseline}textarea{overflow:auto}details{display:block}summary{display:list-item}menu{display:block}canvas{display:inline-block}template{display:none}[hidden]{display:none}.foundation-mq{font-family:"small=0em&medium=40em&large=64em&xlarge=75
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 72 6f 77 20 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 36 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 30 65 6d 29 7b 2e 72 6f 77 20 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 39 33 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 39 33 37 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 34 65 6d 29 7b 2e 72 6f 77 20 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 39 33 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d Data Ascii: :0;padding-left:0}.row .row{margin-right:-.625rem;margin-left:-.625rem}@media print,screen and (min-width:40em){.row .row{margin-right:-.9375rem;margin-left:-.9375rem}}@media print,screen and (min-width:64em){.row .row{margin-right:-.9375rem;margin-left:-
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 65 66 74 3a 2d 31 36 2e 36 36 36 36 37 25 7d 2e 73 6d 61 6c 6c 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 25 7d 2e 73 6d 61 6c 6c 2d 33 7b 77 69 64 74 68 3a 32 35 25 7d 2e 73 6d 61 6c 6c 2d 70 75 73 68 2d 33 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 65 66 74 3a 32 35 25 7d 2e 73 6d 61 6c 6c 2d 70 75 6c 6c 2d 33 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 65 66 74 3a 2d 32 35 25 7d 2e 73 6d 61 6c 6c 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 73 6d 61 6c 6c 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 73 6d 61 6c 6c 2d 70 75 73 68 2d 34 7b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: tion:relative;left:-16.66667%}.small-offset-1{margin-left:8.33333%}.small-3{width:25%}.small-push-3{position:relative;left:25%}.small-pull-3{position:relative;left:-25%}.small-offset-2{margin-left:16.66667%}.small-4{width:33.33333%}.small-push-4{position:
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 6c 65 66 74 3a 2d 39 31 2e 36 36 36 36 37 25 7d 2e 73 6d 61 6c 6c 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 73 6d 61 6c 6c 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 6d 61 6c 6c 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 31 3e 2e 63 6f 6c 75 6d 6e 2c 2e 73 6d 61 6c 6c 2d 75 70 2d 31 3e 2e 63 6f 6c 75 6d 6e 73 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 31 3e 2e 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 6e 29 2c 2e 73 6d 61 6c 6c 2d 75 70 2d 31 3e 2e 63 6f 6c 75 6d 6e 73 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 6e 29 7b 63 6c 65 61 Data Ascii: left:-91.66667%}.small-offset-10{margin-left:83.33333%}.small-12{width:100%}.small-offset-11{margin-left:91.66667%}.small-up-1>.column,.small-up-1>.columns{float:left;width:100%}.small-up-1>.column:nth-of-type(1n),.small-up-1>.columns:nth-of-type(1n){clea
2024-10-20 22:14:48 UTC	1369	IN	Data Raw: 6c 75 6d 6e 2c 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 73 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 32 30 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 6e 29 2c 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 73 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 6e 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 35 6e 2b 31 29 2c 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 73 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 35 6e 2b 31 29 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 73 6d 61 6c Data Ascii: lumn,.small-up-5>.columns{float:left;width:20%}.small-up-5>.column:nth-of-type(1n),.small-up-5>.columns:nth-of-type(1n){clear:none}.small-up-5>.column:nth-of-type(5n+1),.small-up-5>.columns:nth-of-type(5n+1){clear:both}.small-up-5>.column:last-child,.smal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49731	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:47 UTC	648	OUT	GET /_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uklFxfr6OPTDpRD5sM02efaGpobmVpaGBmZGgEARN0u5g== HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:47 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:47 GMT Content-Type: text/css;charset=utf-8 Content-Length: 15521 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 10 Sep 2024 15:30:52 GMT x-rq: bur7 123 243 443 accept-ranges: bytes cache-control: max-age=31536000 x-cache: MISS Accept-Ranges: bytes
2024-10-20 22:14:47 UTC	1033	IN	Data Raw: 2e 6d 65 6a 73 2d 6f 66 66 73 63 72 65 65 6e 7b 62 6f 72 64 65 72 3a 30 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c Data Ascii: .mejs-offscreen{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal}.mejs-container{background:#000;font-family:Helvetica,Arial
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 6c 6c 73 63 72 65 65 6e 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 75 6c 6c 73 63 72 65 65 6e 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 75 6c 6c 73 63 72 65 65 6e 20 2e 6d 65 6a 73 2d 6d 65 64 69 61 65 6c 65 6d 65 6e 74 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 75 6c 6c 73 63 72 65 65 6e 20 76 69 64 65 6f 7b 68 65 69 67 68 74 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 Data Ascii: llscreen{overflow:hidden!important}.mejs-container-fullscreen{bottom:0;left:0;overflow:hidden;position:fixed;right:0;top:0;z-index:1000}.mejs-container-fullscreen .mejs-mediaelement,.mejs-container-fullscreen video{height:100%!important;width:100%!importa
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 73 2d 63 6f 6e 74 72 6f 6c 73 2e 73 76 67 29 20 2d 31 36 30 70 78 20 2d 34 30 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 38 30 70 78 3b 77 69 64 74 68 3a 38 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 61 7b 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 61 7b 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 7b Data Ascii: s-controls.svg) -160px -40px no-repeat;display:block;height:80px;width:80px;z-index:1}@-webkit-keyframes a{to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}@keyframes a{to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}.mejs-controls{
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 36 70 78 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 6d 65 6a 73 2d 70 6c 61 79 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 2e 6d 65 6a 73 2d 70 61 75 73 65 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 70 78 20 30 7d 2e 6d 65 6a 73 2d 72 65 70 6c 61 79 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 30 70 78 20 30 7d 2e 6d 65 6a 73 Data Ascii: #fff;font-size:11px;font-weight:700;height:24px;overflow:hidden;padding:16px 6px 0;text-align:center;width:auto}.mejs-play>button{background-position:0 0}.mejs-pause>button{background-position:-20px 0}.mejs-replay>button{background-position:-160px 0}.mejs
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 33 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 63 75 72 72 65 6e 74 2c 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 61 6e 64 6c 65 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 6f 76 65 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 6f 76 65 72 65 64 2e 6e 65 67 61 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 62 75 66 66 65 72 69 6e 67 2c 2e 6d 65 6a 73 2d 74 69 6d 65 2d 63 75 72 72 65 6e 74 2c 2e 6d 65 6a 73 Data Ascii: d:hsla(0,0%,100%,.3)}.mejs-time-current,.mejs-time-handle-content{background:hsla(0,0%,100%,.9)}.mejs-time-hovered{background:hsla(0,0%,100%,.5);z-index:10}.mejs-time-hovered.negative{background:rgba(0,0,0,.2)}.mejs-time-buffering,.mejs-time-current,.mejs
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 3a 68 6f 76 65 72 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 61 6e 64 6c 65 2d 63 6f 6e 74 65 6e 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 66 6c 6f 61 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 65 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 33 33 3b 62 6f 74 74 6f 6d 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 31 31 31 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 37 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e Data Ascii: :hover .mejs-time-handle-content{-webkit-transform:scale(1);-ms-transform:scale(1);transform:scale(1)}.mejs-time-float{background:#eee;border:1px solid #333;bottom:100%;color:#111;display:none;height:17px;margin-bottom:9px;position:absolute;text-align:cen
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 32 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 34 70 78 20 34 70 78 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 74 6f 74 61 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b Data Ascii: ransform:translateX(-50%);-ms-transform:translateX(-50%);transform:translateX(-50%);width:25px;z-index:1}.mejs-volume-button:hover{border-radius:0 0 4px 4px}.mejs-volume-total{background:hsla(0,0%,100%,.5);height:100px;left:50%;margin:0;position:absolute;
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 65 6c 65 63 74 6f 72 2c 2e 6d 65 6a 73 2d 63 68 61 70 74 65 72 73 2d 62 75 74 74 6f 6e 3e 2e 6d 65 6a 73 2d 63 68 61 70 74 65 72 73 2d 73 65 6c 65 63 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 35 30 2c 35 30 2c 35 30 2c 2e 37 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 74 74 6f 6d 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 34 33 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 35 30 25 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 77 69 64 74 68 3a 38 36 70 78 7d 2e 6d 65 6a 73 2d 63 68 61 70 74 65 Data Ascii: elector,.mejs-chapters-button>.mejs-chapters-selector{background:rgba(50,50,50,.7);border:1px solid transparent;border-radius:0;bottom:100%;margin-right:-43px;overflow:hidden;padding:0;position:absolute;right:50%;visibility:visible;width:86px}.mejs-chapte
2024-10-20 22:14:47 UTC	1369	IN	Data Raw: 63 61 70 74 69 6f 6e 73 2d 6c 61 79 65 72 5b 6c 61 6e 67 3d 61 72 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 70 6f 73 69 74 69 6f 6e 7b 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 70 6f 73 69 74 69 6f 6e 2d 68 6f 76 65 72 7b 62 6f 74 74 6f 6d 3a 33 35 70 78 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 74 65 78 74 2c 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 74 65 78 74 20 2a 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 38 25 2c 2e 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 35 70 78 20 30 Data Ascii: captions-layer[lang=ar]{font-size:20px;font-weight:400}.mejs-captions-position{bottom:15px;left:0;position:absolute;width:100%}.mejs-captions-position-hover{bottom:35px}.mejs-captions-text,.mejs-captions-text *{background:hsla(0,0%,8%,.5);box-shadow:5px 0
2024-10-20 22:14:48 UTC	1369	IN	Data Raw: 33 33 29 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 73 6c 69 64 65 72 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 63 75 72 72 65 6e 74 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 73 6c 69 64 65 72 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 74 6f 74 61 6c 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 72 61 69 6c 20 73 70 61 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 6d 65 6a 73 2d 6f 76 65 72 6c 61 79 2d 6c 6f 61 64 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 2e 6d 65 6a 73 2d 63 6f Data Ascii: 33)}.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-current,.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-total,.mejs-controls .mejs-time-rail span{border-radius:0}.mejs-overlay-loading{background:0 0}.mejs-co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49730	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:47 UTC	577	OUT	GET /wp-content/themes/bsdstarter/src/js/vendor/jquery.js?m=1721416559g HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49733	108.138.7.103	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:48 UTC	544	OUT	GET /locate/widget-v2.css HTTP/1.1 Host: iwillvote.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:48 UTC	513	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3392 Connection: close Last-Modified: Sat, 19 Oct 2024 14:22:19 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 20 Oct 2024 22:14:49 GMT ETag: "b636fd7ba3227e9def71a1e9f5fb259a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0e37105a96e87c22ff4981659a6dc176.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: RwNUdrrlkMl2QgTAb0A_nrAyau8hhBY2xRaortOvEnA7yNcX9roHFw==
2024-10-20 22:14:48 UTC	3392	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 74 79 6c 65 73 20 66 6f 72 20 74 68 65 20 49 20 57 69 6c 6c 20 56 6f 74 65 20 76 6f 74 69 6e 67 20 6c 6f 63 61 74 69 6f 6e 20 6c 6f 6f 6b 75 70 20 77 69 64 67 65 74 2e 0a 20 2a 2f 0a 2f 2a 20 73 74 79 6c 65 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 72 75 6c 65 2d 65 6d 70 74 79 2d 6c 69 6e 65 2d 62 65 66 6f 72 65 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 41 6e 79 20 6f 66 20 74 68 65 73 65 20 63 6f 6c 6f 72 20 61 6e 64 20 73 69 7a 65 20 76 61 72 69 61 62 6c 65 73 20 63 61 6e 20 62 65 20 6f 76 65 72 72 69 64 64 65 6e 20 74 6f 20 63 75 73 74 6f 6d 69 7a 65 20 74 68 65 0a 20 2a 20 61 70 70 65 61 72 61 6e 63 65 20 6f 66 20 74 68 65 20 77 69 64 67 65 74 2e 0a 20 2a 0a 20 2a 20 28 46 6f 72 20 74 68 65 20 6e 6f 6e 2d 6d 6f 64 65 72 6e 20 62 72 6f Data Ascii: /** * Styles for the I Will Vote voting location lookup widget. // stylelint-disable rule-empty-line-before //* * Any of these color and size variables can be overridden to customize the * appearance of the widget. * * (For the non-modern bro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49735	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:48 UTC	626	OUT	GET /wp-content/themes/bsdstarter/assets/img/footer-logo.svg HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:48 UTC	313	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:48 GMT Content-Type: image/svg+xml Content-Length: 320 Connection: close Last-Modified: Mon, 04 Mar 2024 16:11:42 GMT ETag: "65e5f2be-140" x-rq: bur7 123 242 443 x-cache: HIT cache-control: max-age=300, must-revalidate Accept-Ranges: bytes
2024-10-20 22:14:48 UTC	320	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 38 36 22 20 68 65 69 67 68 74 3d 22 38 36 22 3e 0a 20 20 3c 63 69 72 63 6c 65 20 63 79 3d 22 34 33 22 20 63 78 3d 22 34 33 22 20 72 3d 22 33 37 2e 35 22 20 73 74 79 6c 65 3d 22 73 74 72 6f 6b 65 3a 23 30 30 32 31 32 65 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 31 3b 66 69 6c 6c 3a 23 66 66 66 39 65 61 22 2f 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 38 2e 35 2c 32 35 2e 35 76 33 35 68 31 36 2e 35 61 31 37 2e 35 2c 31 37 2e 35 20 30 20 30 2c 30 20 30 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" width="86" height="86"> <circle cy="43" cx="43" r="37.5" style="stroke:#00212e;stroke-width:11;fill:#fff9ea"/> <path d="M28.5,25.5v35h16.5a17.5,17.5 0 0,0 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49737	52.8.222.175	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:48 UTC	529	OUT	GET /samples/widget.js HTTP/1.1 Host: ak.democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49736	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:49 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:49 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:49 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 18 Oct 2024 15:17:17 GMT ETag: "0x8DCEF87F3DDAA58" x-ms-request-id: afcefc7b-b01e-001e-6024-220214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221449Z-16c4998b89bgwq87xczx5msh6c000000024000000000du3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:49 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-20 22:14:49 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-20 22:14:49 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-20 22:14:49 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-20 22:14:49 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-20 22:14:49 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-20 22:14:50 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-20 22:14:50 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-20 22:14:50 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-20 22:14:50 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49740	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:49 UTC	645	OUT	GET /wp-content/uploads/2024/10/51225586480_45a461ef95_o-3-1-e1728671125484.jpg HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:49 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:49 GMT Content-Type: image/webp Content-Length: 231350 Connection: close Last-Modified: Fri, 11 Oct 2024 18:25:54 GMT ETag: "f5e3a7456b059f0b" Vary: Accept x-rq: bur7 118 21 443 accept-ranges: bytes x-cache: HIT cache-control: max-age=31536000 Accept-Ranges: bytes
2024-10-20 22:14:49 UTC	1029	IN	Data Raw: 52 49 46 46 ae 87 03 00 57 45 42 50 56 50 38 20 a2 87 03 00 50 0f 08 9d 01 2a 40 06 15 02 3e 6d 2c 90 45 a4 22 a1 97 ec 56 14 40 06 c4 b1 b1 e1 f1 d9 bd a3 7e e8 ff 3f 40 a9 47 f3 de 60 58 c7 ff 37 32 a5 c7 ea 03 bd bf f8 bc 88 8f f3 fe 9f ee cf a2 57 b8 7f d0 f5 11 e3 ef fd df 10 df be 7f d7 f4 41 fd c7 cf 77 ff ff ff ff 8c df db ff ff ff fd be 32 ff 80 68 12 c6 fb 23 86 68 83 e2 03 5c 71 23 cd dd a2 bc 01 b9 2b b0 0d 80 36 80 9a 67 cc 46 72 a5 26 e9 fa d7 ea e2 3a 79 3f c7 f8 a9 7f cb c0 2f 67 f2 ad f5 ce f5 5f fa 7d 88 78 ce fa d9 f5 9b ff 2f ce a7 aa 9f 99 bf 56 d7 a5 bf 9b 0f ad 97 ef 0f a4 ae ab 2c a3 fd 0b f7 cf f5 5f 91 de 62 fe 91 f7 9f b9 af c9 df 9a ff e2 b0 27 f1 3f e9 f9 83 fd a7 e7 07 b0 bf f5 bb c5 fd ff fc 7f dc 8f 60 8f d4 7c 78 ff 8b b0 Data Ascii: RIFFWEBPVP8 P*@>m,E"V@~?@G`X72WAw2h#h\q#+6gFr&:y?/g_}x/V,_b'?`\|x
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: fb b8 d0 79 3c 8b 1e 75 eb 1c c7 ed 56 06 b5 fa c0 9c 94 ce 0b 51 f3 e4 d9 73 43 51 11 76 3c 30 99 6e f1 72 da 4e e4 18 f9 f2 1e d9 0a 0c b7 e7 8c 32 4d 29 9f d5 88 7b 31 3e 42 8d d4 a6 be 5d 17 f0 41 0d bd b5 3b ed ce 25 95 ff 5d 54 31 f6 ce ca 7a 30 ba f6 ff 0b f1 bb 60 56 0f 84 c4 58 b8 bf d0 6c 2f 0d cf 8c b7 ac 24 b4 3c b1 52 78 36 fb e4 cc 42 f7 71 39 c6 84 e3 2d bb c9 3d 1f e2 89 a4 29 25 a9 b4 5f 06 fb ff 77 5f 4c 3b 06 3d 03 34 b7 a0 20 3a 9f e1 c4 87 24 2d 2b 78 71 34 95 59 d3 a3 35 c0 a6 95 9b bb c9 d0 43 0d af f7 6a 04 3d d0 e9 71 0e c3 73 1f 40 5a f7 c2 56 82 6f bd 3c 05 2d ff 04 af a4 71 fe 94 81 92 ab 71 20 ae 69 fe aa 49 c1 b3 c0 d2 cc 13 6b 71 0c 16 e4 39 37 d2 11 a8 13 0d 8b 95 36 bd 8e 07 80 56 20 23 37 53 2f 2c e0 92 16 08 14 94 ca d5 Data Ascii: y<uVQsCQv<0nrN2M){1>B]A;%]T1z0`VXl/$<Rx6Bq9-=)%_w_L;=4 :$-+xq4Y5Cj=qs@ZVo<-qq iIkq976V #7S/,
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: c7 bd 64 a3 1a 52 5d fc a5 4a ca ea 5a c1 91 83 f7 d2 2c d6 cc 0b b9 a6 7d 02 99 39 cd dc f8 44 14 45 5d 7c b6 9d 2c 8a 81 bf 23 0e 73 6a 61 63 31 73 f3 15 05 bd 17 0c 62 9b 76 4e 3a cd 66 da 29 e9 8b a0 db 6d 23 ea 87 f5 88 c3 cf 95 d8 27 93 f3 88 c9 85 53 d5 04 cf ca 35 07 a8 3d e4 c8 48 b5 45 da b6 ba 51 11 80 2f ab 8d 3f 7c 24 0b de cd ed 11 6f 41 af b7 b9 21 47 fe a4 52 9c 6e d6 f0 6f 59 c9 53 39 20 65 92 3d 0b 64 f1 69 4d bb c9 b4 f8 2a 12 7a 47 4f 6f 9d 5d 30 f9 45 42 15 2f 02 40 f6 37 c3 5f f2 e4 67 4b 57 e0 36 84 ae da dc 30 c1 ea 30 d5 27 f7 6f ad 8e 8c fe 7f 7f 23 1e bd 72 72 2e e5 e7 93 9c d2 f2 66 b6 43 61 b7 ec 94 1a 59 11 bb bb 25 01 f5 07 7c 10 b5 f7 2d 20 cc 5d 6d 95 cf d2 16 7f 60 54 21 54 7e ec fa 9e 7d fa 87 16 c6 42 cf cd ed 1b 06 cd Data Ascii: dR]JZ,}9DE]\|,#sjac1sbvN:f)m#'S5=HEQ/?\|$oA!GRnoYS9 e=diM*zGOo]0EB/@7_gKW600'o#rr.fCaY%\|- ]m`T!T~}B
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: 8c 10 78 2e 41 b1 20 2c 70 05 81 aa bc 33 71 c5 cf 99 8c 71 47 fe 96 5e ee 55 c9 bd 59 de e5 f5 49 7c 6c d1 21 fd c6 73 9d 7f c5 43 7e 1d b1 f4 86 fb a3 3f 63 51 85 24 a4 d1 79 9d f2 b8 ac 45 72 88 fd eb 35 58 0d 7c 7b 0c 3c ca 76 0e b0 f2 25 5e 19 de 43 3b 70 f8 5e 6b 3a c8 92 36 4c 2e e6 03 01 41 d5 cb 81 51 5d 18 5c c8 e2 24 21 a5 2c 10 b4 c1 a8 83 60 e7 22 5e 30 d1 41 12 f5 e5 89 67 1a 30 26 b2 1b 1c a3 8d de c4 e5 6a 8d 0c ab 90 04 6e 24 38 4c 1e be 95 a4 fa 79 55 96 4a 91 08 1c e0 f6 ec 40 dd c5 79 8c 16 52 9c f1 3f d7 6b 80 e8 ff 99 a5 ea e5 b7 2e e5 31 23 b0 1c eb 6c ab 9e ab 98 a1 86 48 69 47 8a 50 a8 62 06 ad c6 cf c1 40 f9 ba ce b8 e8 c3 10 bd 15 e3 06 a3 8d 0f 23 32 53 a9 a3 57 cc ae 29 87 07 8b c2 81 eb 7c 8a d6 42 7b 52 d2 1d 61 e8 9a b5 f8 Data Ascii: x.A ,p3qqG^UYI\|l!sC~?cQ$yEr5X\|{<v%^C;p^k:6L.AQ]\$!,`"^0Ag0&jn$8LyUJ@yR?k.1#lHiGPb@#2SW)\|B{Ra
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: fe ac 8b 3a 4e 4e ec 40 a2 ec 3f d5 32 14 03 28 65 cd b2 43 7e d5 cf 9f 57 67 cb 9c 9f 87 66 42 04 97 67 39 a4 fb 21 aa f6 07 44 21 50 43 20 4b 48 70 6d 18 9b dd 21 75 12 1c 99 7e 60 b5 8e e8 7f 9e 6d 5c 7c 17 80 f9 08 e3 9a cd f3 f9 9f 68 12 30 48 b4 68 78 8d 03 65 3c 7d 02 55 47 bd 64 90 db ff f3 9d 2c 91 3f 72 4f 35 68 42 58 ec cc 32 40 21 e8 96 c4 c8 e1 27 78 22 09 4b a5 8c f8 82 48 08 40 5a cd 70 67 9a b2 0a 67 4b 81 3b 78 12 8f ab f1 2b d8 64 33 4f a0 49 ff ee 66 43 12 7e fd a7 f8 23 38 85 35 11 a9 88 6c ba 0d 9b 20 54 c8 35 ac 6c 1a 35 e1 b1 c4 4e 96 73 12 28 8a d1 4b cc d8 c1 e4 e1 f7 48 65 33 7b c4 87 67 ca 58 e5 c7 22 15 ff 7a df f3 14 3f a5 e3 97 7a 6b a0 fa b1 6d 96 6f 82 55 4b dc 0c 0f 6a dd 76 89 ec 1f 93 4c d7 60 2f 52 13 c3 90 38 a1 bd 3a Data Ascii: :NN@?2(eC~WgfBg9!D!PC KHpm!u~`m\\|h0Hhxe<}UGd,?rO5hBX2@!'x"KH@ZpggK;x+d3OIfC~#85l T5l5Ns(KHe3{gX"z?zkmoUKjvL`/R8:
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: 19 e4 d4 0c 72 cf 4c 2f 36 c3 17 4a 53 bf 93 8b 36 76 db 6c fe 49 b9 c5 45 08 de b3 bc ed ab a4 92 d4 9f f1 aa 13 f7 61 b5 1d 2e 4e 53 1a 96 98 bb 6c ba 98 b2 1e 70 7e 60 37 7f 2f c0 8e 80 75 16 e4 41 29 cb a4 96 c3 3d d1 50 53 21 70 d4 a0 db 22 5c 2b f9 dd 1a 97 38 b8 ca 8f ed 4b 44 71 49 4b fb 1e d4 3f 38 14 44 8a 04 2a cb 43 61 84 73 9c 53 38 e8 8c bf 4e f7 2a ec bd 77 82 49 8b 48 66 c4 5f a9 8f 3d e3 6b 4e c1 7f 44 00 c3 a6 ab 6f 67 ec 18 2d ea 7a 79 bf b8 85 0c fb 7c a5 75 41 ca 0b d0 49 78 cc f3 52 7f 6c 81 b2 5b ce a3 19 3c 55 49 38 f1 0c 5f 5b 05 75 6f 8f f3 69 86 b8 76 f8 1a 64 46 49 da 91 b3 c3 29 90 ff ab 60 75 21 72 d8 22 98 7c 3d 43 ff 19 0b f9 ef e2 0e f3 d5 07 43 91 54 af 1b 78 38 e5 cd 8c a0 7f 3d 77 2f 41 b4 c4 47 0f e9 b5 20 1d c4 86 18 Data Ascii: rL/6JS6vlIEa.NSlp~`7/uA)=PS!p"\+8KDqIK?8DCasS8NwIHf_=kNDog-zy\|uAIxRl[<UI8_[uoivdFI)`u!r"\|=CCTx8=w/AG
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: 7a c9 eb 75 c0 ba e4 e3 b4 68 87 57 a2 01 97 bc 7a 5d f5 75 d7 75 c5 74 2f fe 2a ed 03 da c1 92 ae 7b e7 42 6c 48 86 56 db 9c 83 72 b7 cb 2f 74 8c eb 9a b0 aa b1 ad 3b 31 27 1b f3 11 77 c3 e9 d8 f8 f8 07 05 a3 3a ce 0e f2 f3 69 a5 3d f7 b2 d5 15 a8 b5 5e 2f 5c ca be 6e 88 d9 66 35 f9 a9 3d 10 03 5d 41 9c 72 ab 39 cd 8c f0 ae 67 18 35 53 9e ca 8f 7c 45 70 84 ee cb 8c d9 78 03 50 35 c1 52 89 11 8c e3 1a e6 00 d3 14 76 b3 7d 79 9b e0 ed ef 7a 65 2d 41 e8 3c cc a2 3e 34 f0 cc 80 5d d6 e8 7e 99 13 7d d0 79 f8 5a f2 cd 12 b9 22 88 f9 33 2c 22 f2 8c 2f 57 bd 15 21 4c 97 7e 19 b4 0c 8a 98 2b 64 e8 15 40 5f 1c aa 5e e4 cb a9 bf 24 90 bb c1 3e 6c ec b5 7a 13 02 5c 9b 03 a5 7d 52 72 52 c0 3a 7c 86 a9 63 cd c1 f7 e6 4f c9 91 cd b0 c4 57 c7 66 fe 9e 08 bd c6 07 33 13 Data Ascii: zuhWz]uut/*{BlHVr/t;1'w:i=^/\nf5=]Ar9g5S\|EpxP5Rv}yze-A<>4]~}yZ"3,"/W!L~+d@_^$>lz\}RrR:\|cOWf3
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: 3c 09 e1 e0 db 97 de 5d 22 37 75 3f 64 c5 9a 3b 0a 6e fa 87 03 9d de b3 9c 63 03 5c a3 35 ed 52 8b 33 31 82 8a 74 b3 f5 17 04 7c d5 94 b7 75 3e 25 18 cb b8 90 0d 45 6b aa 34 49 40 05 ad b1 9d dd f7 17 4c f7 49 23 8f d7 7c b4 c6 8b 7f fa c6 07 9a 29 d0 ae 3e c4 e3 fb 5d b9 ff 72 a8 67 96 87 7d fc 7c 14 ec f8 49 ce 7a 2a 76 b8 e9 03 51 b9 89 61 9f 65 7b 87 41 62 0f 3d a1 e5 d7 48 50 ab e8 b4 17 12 7a 88 a6 95 16 b1 03 5f fa 3e 94 c1 ec e4 52 5b 04 23 a4 10 3a 13 3a eb 3e c7 7c c4 8b 26 eb d8 65 d7 cc fe de 10 c9 3c 5d 51 17 49 97 34 ea e8 2c e3 58 60 a1 23 3c d2 b3 fc d3 66 d6 0e c1 b2 f5 4d 64 1e 60 22 73 ad 2a 78 49 c9 f7 ca a2 29 f6 2f 85 ce ae 95 ba 6d 41 ca 46 2b 1f c6 2e f3 87 45 fb 9b 79 2f 6a d1 49 fc 5e b9 74 08 39 96 00 89 98 02 84 be 8d bb dd 6d Data Ascii: <]"7u?d;nc\5R31t\|u>%Ek4I@LI#\|)>]rg}\|IzvQae{Ab=HPz_>R[#::>\|&e<]QI4,X`#<fMd`"sxI)/mAF+.Ey/jI^t9m
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: 65 d6 1b e4 2e aa 20 21 cb 16 79 86 63 25 b4 4f 0a 9c 18 83 5d fa be 92 39 48 ef d3 ac 3f e9 7c 3f 3b 4a e1 70 64 85 63 c7 e3 8d b5 fb 62 79 ab 1f 70 ab 75 36 c2 c7 da a4 d8 31 d5 3c e3 21 56 6e af c2 10 b9 64 59 cb 09 62 c7 5e 13 9e 81 29 af 24 92 ba 38 12 bb 0a 94 c6 24 3a 69 b6 ff 3c e7 f0 31 2d 2f d8 b9 df 55 c2 56 4b 83 78 36 bc 4f 83 d0 e3 7d 43 c0 23 24 39 be 8d 1e 7a ca 12 42 29 81 1b 23 c5 11 56 ec bf c3 29 e8 88 ec 5a 69 38 ed 3b 2a 7e 6f 45 54 7b f8 1b 10 2c 33 da 04 d3 15 61 98 37 73 b7 9d d2 57 ac db 97 35 c9 73 ee 5c 31 db db 77 24 4d 79 55 ab ee d0 fb 30 10 75 59 e5 37 47 94 bf 1c 3b 87 54 ee f6 15 9e b0 e2 b2 6a 22 39 93 4e be 7f 77 84 a7 1c 3c a7 76 0f a1 2f fa cc 56 d5 fc 25 4c 4d d0 20 7c f4 ae e7 24 70 df aa 9f b4 81 a0 61 d8 d8 a9 d8 Data Ascii: e. !yc%O]9H?\|?;Jpdcbypu61<!VndYb^)$8$:i<1-/UVKx6O}C#$9zB)#V)Zi8;*~oET{,3a7sW5s\1w$MyU0uY7G;Tj"9Nw<v/V%LM \|$pa
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: 2f 87 1d 32 00 70 f4 26 a9 43 99 c1 ab e2 38 48 12 7a 0d 41 68 7d 75 67 45 25 4c 36 a4 05 7f a1 f3 6d f8 23 85 41 b4 75 55 e1 3d 83 2c f8 a9 49 3a 87 42 d8 68 81 82 ec c5 21 a9 ad 1c cc f6 d9 df b4 e9 dc 57 e9 c3 c4 23 0f a6 19 a4 2a 2d 77 08 3b eb 72 6f ba fe 79 c2 56 3f 88 f4 fb f4 86 2a 97 48 85 a4 9c 1d 0d 1f e4 5d 86 71 ef cd 5d 3f 05 d7 bb 41 a9 29 71 41 fc 15 08 f2 49 3f ba 43 84 a0 25 b7 f2 ba 6e 9f b2 70 54 3f 60 79 f4 c1 23 78 f2 85 27 87 62 7a af 44 cb 26 01 76 d1 df 63 70 14 e8 6a 16 f0 d4 48 1a 2d d0 f6 d3 67 9d 93 43 60 67 f1 ba 7f c0 2f 4f 30 11 a9 83 de 76 38 55 16 63 dd 96 a2 5c 9f 13 bf 5b 09 90 6b 3f e8 6a 98 5e 21 19 a6 f6 97 3a 79 79 fa fa f2 05 74 36 81 2c 2f 82 0c ce c2 1a d2 c3 f7 64 d8 49 ca c7 df ed 0f 5c a2 ec d6 99 e4 52 1b 99 Data Ascii: /2p&C8HzAh}ugE%L6m#AuU=,I:Bh!W#-w;royV?H]q]?A)qAI?C%npT?`y#x'bzD&vcpjH-gC`g/O0v8Uc\[k?j^!:yyt6,/dI\R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49741	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:49 UTC	392	OUT	GET /wp-content/themes/bsdstarter/assets/img/footer-logo.svg HTTP/1.1 Host: democrats.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:49 UTC	313	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:49 GMT Content-Type: image/svg+xml Content-Length: 320 Connection: close Last-Modified: Mon, 04 Mar 2024 16:11:42 GMT ETag: "65e5f2be-140" x-rq: bur7 123 242 443 cache-control: max-age=300, must-revalidate x-cache: HIT Accept-Ranges: bytes
2024-10-20 22:14:49 UTC	320	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 38 36 22 20 68 65 69 67 68 74 3d 22 38 36 22 3e 0a 20 20 3c 63 69 72 63 6c 65 20 63 79 3d 22 34 33 22 20 63 78 3d 22 34 33 22 20 72 3d 22 33 37 2e 35 22 20 73 74 79 6c 65 3d 22 73 74 72 6f 6b 65 3a 23 30 30 32 31 32 65 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 31 3b 66 69 6c 6c 3a 23 66 66 66 39 65 61 22 2f 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 38 2e 35 2c 32 35 2e 35 76 33 35 68 31 36 2e 35 61 31 37 2e 35 2c 31 37 2e 35 20 30 20 30 2c 30 20 30 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" width="86" height="86"> <circle cy="43" cx="43" r="37.5" style="stroke:#00212e;stroke-width:11;fill:#fff9ea"/> <path d="M28.5,25.5v35h16.5a17.5,17.5 0 0,0 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49742	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:49 UTC	631	OUT	GET /wp-content/uploads/2024/10/Vote-CTA-image-e1728660119427.jpg HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:49 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:49 GMT Content-Type: image/webp Content-Length: 339288 Connection: close Last-Modified: Fri, 11 Oct 2024 15:55:52 GMT ETag: "202d497e23df33fb" Vary: Accept x-rq: bur7 115 147 443 accept-ranges: bytes cache-control: max-age=31536000 x-cache: HIT Accept-Ranges: bytes
2024-10-20 22:14:49 UTC	1028	IN	Data Raw: 52 49 46 46 50 2d 05 00 57 45 42 50 56 50 38 20 44 2d 05 00 d0 5b 0d 9d 01 2a f5 04 f5 04 3e 6d 30 93 47 24 22 a1 a3 2a f6 8b 08 80 0d 89 67 68 29 9b 55 cf 42 c1 f3 ee 3f f9 f2 c3 ff 6a cb fd 9e 45 ff 83 4b bb fe fe 67 5f 9c e9 0f ff 57 9b 3f 72 fa 93 f0 c9 ce f3 f2 3f fa 7d 1e f4 e6 fe e7 7f ff ff db f1 a3 fc 03 40 96 18 d9 58 6b 7d 8f 41 78 31 55 1e ba fd 4d ca b3 9f ff 72 ff 8d dc d7 fe 3f 88 df a5 ff 93 ff a5 ee 09 fa e5 ff 33 89 41 00 3c bc 73 23 a4 67 fc 7f 41 7f ac ba 2f 7e c9 f3 fb f6 df a8 ee 99 cd eb 8e 81 d4 ee 81 df 5f b0 ff 17 fb 53 fc 3f cb e6 87 bc 8d fe 0f 3c bf 42 fe 5b ff 5f de 77 ca bf de 9f 6f 7f c8 ff db ff e7 fc ff fa 18 fe 2b fd d3 ff 07 ed 57 ec 6f 7b cf f9 1e 92 7f 6f 7d 57 bf ed fa 27 7a b1 7f 4d ff 8b eb fb eb c1 e9 61 e6 7f ff Data Ascii: RIFFP-WEBPVP8 D-[>m0G$"gh)UB?jEKg_W?r?}@Xk}Ax1UMr?3A<s#gA/~_S?<B[_wo+Wo{o}W'zMa
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: 92 03 50 a2 57 95 42 50 bc 47 96 2f dd 5f 73 89 2b 28 92 61 36 80 a3 d7 53 4a 83 54 41 f6 5f cb 7a a9 31 bb 49 9c 85 3c b4 f0 58 95 7e 66 0a 62 e9 2e d5 0d 2e b0 9d 47 ec 70 3c c8 43 fc bc b6 c2 58 ec 2b 8c 16 75 d0 45 ac e5 2e a3 51 ad 10 2a 36 e1 01 a4 85 9c 62 1c 06 01 6b c2 c7 6a 58 29 36 3c cb 1b ce f1 9d b3 24 76 15 a8 63 6c 13 6b 24 2d a0 66 81 e3 de 76 2f c3 a5 90 14 e3 61 56 28 29 1a d2 28 ea 08 44 2e 69 eb 0f d3 ab 73 1f f6 5a 01 e3 f5 ba 3e ad a6 3b 72 0c 21 0b 74 23 41 f4 98 56 86 1a 09 03 c6 34 66 66 2a b1 65 d2 31 f7 f1 6a 29 54 b6 ff 35 4f 18 b7 18 7a 1e f7 31 d1 f5 6d 42 3f 5c 3a 8a 84 ff b9 45 49 f5 48 e5 ba 4e 66 4c 2b 9c 01 17 c1 4d 16 ca 63 11 8a 68 a3 67 b7 2c d2 29 eb 5a 94 63 6d e0 5f 7c 8d 6a 4b b6 94 21 7a a2 b2 66 fa 12 77 e7 9d Data Ascii: PWBPG/_s+(a6SJTA_z1I<X~fb..Gp<CX+uE.Q6bkjX)6<$vclk$-fv/aV()(D.isZ>;r!t#AV4ffe1j)T5Oz1mB?\:EIHNfL+Mchg,)Zcm_\|jK!zfw
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: 27 dd a2 f2 aa f7 20 6a 7c d0 23 9b 9d c9 33 d4 2c 09 ac 51 b0 66 0e 6a 89 bf d2 00 79 a5 a0 12 8d 46 43 0c d0 a3 cc 20 13 3f 2a 61 0b 51 d8 da 87 27 c3 b7 17 91 63 28 e4 65 bb 0f 94 e4 3a 75 b2 18 bc e4 23 9d e0 a6 75 8d 2f 1f 48 c1 8b 43 62 cc 29 7b f6 4a e8 21 49 8c 28 99 86 16 e5 bc 75 b9 d4 29 e1 d6 0f 11 13 a7 ff 38 16 41 82 49 d0 a9 e0 45 da 32 d8 82 66 d7 f3 ef c3 57 4d 2f b4 74 e9 cb 0b 56 9f 5c 2f 23 90 68 47 0c 46 9d d3 d8 fe 93 52 7c 82 bf 95 8d e7 1c bc 01 ac 88 7a 87 15 ad 88 d6 33 7a 7e 8e 93 00 2c ee 90 65 8c b3 c1 0c de a5 39 14 9a 9e d8 f7 2f a1 4e aa f4 b4 37 11 03 33 a4 e4 b7 22 ce aa 30 d5 af 62 c9 4f e5 eb a6 b0 cf c2 a4 c2 dd 92 27 4e 96 ff 6c b3 29 11 54 2d 11 fd e2 8e 82 06 d8 a5 08 08 29 fa 02 18 bf fd 62 bf 50 d2 76 84 40 73 37 Data Ascii: ' j\|#3,QfjyFC ?*aQ'c(e:u#u/HCb){J!I(u)8AIE2fWM/tV\/#hGFR\|z3z~,e9/N73"0bO'Nl)T-)bPv@s7
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: b9 49 9f 9f b2 06 a0 fe c1 07 7b 08 e9 c9 b3 7b 3b 7e a1 ef 60 b2 10 52 d6 63 cc cd 01 ff af 40 a9 59 f4 1f 8f ce b5 2f 30 c6 56 57 e0 d2 dc f8 0d 06 0b 10 d5 53 21 fb 0b dd 99 a7 f0 a1 c8 97 9d 3f 6a 4d 08 3f 49 dc 94 0d e7 73 ac e2 1d 74 a9 4a f6 cb ad 26 80 d2 38 75 e4 59 db b1 91 7c a8 51 a6 0f 61 5a a3 c1 46 f1 32 e1 8e 48 7c 0a 64 a4 39 b0 a3 9f cf 8f 67 81 9e 69 22 c1 6f 36 d3 db 0f 10 f9 61 54 bb 8b b8 c7 c4 e5 b4 64 78 64 3d 4f 1c f5 ad 43 58 11 87 34 f8 84 4c f9 35 0a ef 5f af 82 5a 76 48 f5 20 62 d0 35 41 6f 81 b3 cf 5f 46 7d ff 44 f3 66 a9 5c c4 bc a3 9b f5 22 e7 ca 68 30 b3 89 6e e4 9e 28 7f e0 37 23 df 42 e1 b9 43 61 f6 68 04 84 30 a1 3c 43 e2 82 a7 fc 8a 95 29 79 21 29 ce 82 09 fe 14 d4 d5 72 f2 44 05 b0 02 b5 af 7e c0 d5 19 e3 04 a8 34 96 Data Ascii: I{{;~`Rc@Y/0VWS!?jM?IstJ&8uY\|QaZF2H\|d9gi"o6aTdxd=OCX4L5_ZvH b5Ao_F}Df\"h0n(7#BCah0<C)y!)rD~4
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: d2 9c 7e cf 8e 42 26 30 04 61 80 78 bf 94 32 60 e4 91 d5 33 00 8f ab 34 c9 05 84 d2 48 a0 02 54 2d 54 71 cd df 02 ac a1 80 67 9d 33 bc a4 ae 91 bd fb 97 99 c1 03 9e 68 4e ed df cb 59 c0 5f d2 ae 46 82 cc 5e 9f 4c 24 fe da 92 40 01 56 34 71 80 09 d9 53 93 47 29 bf f1 3a 26 01 8d 3b 9f 69 27 39 6f 64 79 e6 5d 2e bf e6 c3 2f 97 d4 64 ad 58 01 5f 5f 01 ba 8f eb 28 92 ab de 14 e3 0a 88 96 53 14 d3 de e8 5e 35 33 c1 37 f4 b9 bf 33 9f ab 2f 6e 31 9b 99 bb ee 4b 0a fd 97 76 78 7f fd b9 ec 36 96 38 b0 77 f0 ac d4 89 8b 84 f5 ff 49 df bf e0 b1 e9 ac 57 05 36 2c 9c e4 a6 cd 25 21 5d cd cf 0a 5f de f4 ee df 91 23 4e 3a ec 7a 5d e2 f8 22 dd eb 1f b0 06 7e 66 9d 7f 39 24 cf 81 b9 11 d4 95 6a 70 b7 d7 1f 7d fb ca 11 23 3f 03 07 0d ca 14 9a 8d 16 37 37 0f 0a 2f 23 1f d0 Data Ascii: ~B&0ax2`34HT-Tqg3hNY_F^L$@V4qSG):&;i'9ody]./dX__(S^5373/n1Kvx68wIW6,%!]_#N:z]"~f9$jp}#?77/#
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: c5 4f c5 24 0a 4a d6 ab 04 db ba 87 df 04 d0 4f e7 73 dd d8 e6 fb 96 32 9a d8 0f 7b 01 ed f5 a0 07 07 ba 30 3c 98 3b 01 6c cf ac 84 bb cb 67 05 9b 8c 9a 3a 6f b0 3a 53 d8 84 6e 42 e3 a0 aa d0 60 f3 ed 44 38 eb e8 f5 ae bd 25 f0 e3 8c a6 aa 88 80 ea 24 49 92 d0 57 e8 18 2f 11 a0 83 25 f2 2c d2 ed ce b7 40 00 53 82 5d a7 d8 95 d3 9f 7c e9 7a e7 08 48 3d 15 01 f9 c6 54 37 a6 e3 74 25 b2 f4 a5 84 ab 29 bb a3 e1 51 21 6c 4d d6 3c 7c 96 71 ae 0a 49 bb 93 ce 1d a8 ef 7d 0b 42 10 ce 69 39 a7 40 03 50 40 4a a8 34 5a 4a 3e a8 df 42 fd 44 dc 40 2e ec 5c 6b c1 d9 d0 37 08 ac b1 5f d5 fa 10 71 5d be 8e 51 57 c1 ea b5 2e de 8b 2b 22 5e 8a 65 33 80 f0 4f 0b 7a 25 1f 4e 1e d5 42 38 43 7a f7 09 0b 72 48 a1 41 6d b4 09 7d 17 74 e2 82 ff 3d 04 23 a3 d2 81 3b 80 4c 01 a7 59 Data Ascii: O$JOs2{0<;lg:o:SnB`D8%$IW/%,@S]\|zH=T7t%)Q!lM<\|qI}Bi9@P@J4ZJ>BD@.\k7_q]QW.+"^e3Oz%NB8CzrHAm}t=#;LY
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: 8b 17 10 e6 7b 64 91 60 17 14 c7 cd 1f fe 33 40 3e d4 3c bc 6e 05 5a 6a 02 fb 7a 80 2b f4 94 92 22 2d 7d ed be a8 41 43 c2 31 3b 25 e5 d2 b6 56 9a 99 ff cb 9f 57 eb fa e5 38 d9 ab fc 8b 48 35 84 7d 0d a0 de 26 48 ea af ce 75 e0 d7 42 a6 9a 91 5e fe 3f 92 37 70 b2 3d ef 49 50 df d1 c9 7b d9 ff 51 0d 3c cb 21 79 3d 33 fe b0 25 ed 21 5e d8 12 1f f0 f4 2c ad de 66 39 e7 a3 fc 52 b1 1e 75 de 6f a5 e1 76 06 e1 32 3a 26 9c 47 7b 53 10 c6 39 ca 18 db 02 d0 3e 85 3d 50 39 3f ca b7 4f 8c cd 69 6d 05 20 b8 e9 b9 70 e7 f9 fe f2 f4 42 4f b1 83 b0 ca fb 7f a3 8c 87 e7 70 fe ea 6b 40 61 91 a7 10 8a 4d 29 6a 31 95 a6 2a ad e1 51 d1 ef af 68 bf cd 56 a6 59 c2 f2 56 d2 0c c0 18 c3 39 e6 df 39 74 50 0f 3c c1 71 69 00 79 e5 a7 39 e8 f1 cc 93 2b ee a0 04 39 d7 82 f1 6c f0 05 Data Ascii: {d`3@><nZjz+"-}AC1;%VW8H5}&HuB^?7p=IP{Q<!y=3%!^,f9Ruov2:&G{S9>=P9?Oim pBOpk@aM)j1*QhVYV99tP<qiy9+9l
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: 52 e1 72 14 cd 54 d8 ce 91 f8 5c bd 16 45 a8 29 f2 bf ac 7e 14 f5 2b 2e d1 b7 dd 53 0a ab 7c 2d cc 1e 2e 29 1d a8 5f bb 8a 6c bf 59 d3 7b 1f 53 25 93 91 1e df a3 36 38 3d eb 61 ad 69 ae c0 c6 32 f4 74 4c 6c 5a 57 ce c7 54 30 6d 0d 5f 24 6b 24 8f e8 03 45 60 25 3c 9a 45 82 53 68 d4 82 02 fe 26 ec d4 57 d4 1a fa e5 cb 0f b8 20 94 31 b5 8d a2 01 52 6b 0b 52 80 85 15 a7 12 4c ab 22 bc b6 c2 15 8b 53 60 67 ec 9d 25 b5 f8 38 cb ab 62 95 a9 f2 d1 5c d7 64 77 f1 0e d3 27 4e ba 63 38 45 c1 19 a1 11 12 35 c7 9b e1 c3 c4 bc d0 02 6c 36 c3 29 90 42 8c 85 a0 c8 75 7f 1c d2 cc 81 18 f1 1e 7e 1a 8d 4a ef c8 95 29 70 cc 49 54 9e 42 4d 38 32 6b 23 e3 1b 1b c4 55 e0 37 00 16 c9 97 76 01 11 a0 5a 46 22 5d b7 9c e8 3d 01 3c 00 92 09 4e 68 9e 5a c0 15 c2 82 83 f9 8a 6c ac 7d Data Ascii: RrT\E)~+.S\|-.)_lY{S%68=ai2tLlZWT0m_$k$E`%<ESh&W 1RkRL"S`g%8b\dw'Nc8E5l6)Bu~J)pITBM82k#U7vZF"]=<NhZl}
2024-10-20 22:14:49 UTC	1369	IN	Data Raw: f9 98 b4 8c fc 66 d4 21 76 83 6b b5 98 7c 9a 3e b9 d3 e9 8b d8 97 ce ff de 5f 67 43 61 ce b9 b9 1d f9 75 c4 41 b0 0e 8e 69 05 ed 00 70 84 a3 34 a2 fb b1 09 08 a1 75 a4 b0 a2 60 be c6 f6 79 d8 ca 97 43 cb 7d c5 0d 88 03 9e 83 be 91 0e 4a 2b b5 d8 12 a6 c7 ef c9 85 63 12 82 f5 91 e9 01 3c 97 cd d4 c1 d2 0c 69 22 00 e3 42 c3 c8 53 5f 1f db ee ad 8f 9b af 1a 23 f5 19 f3 44 a5 c0 a9 20 79 c0 bf b9 97 87 5f 50 4a 81 bd 30 ae 77 1e 09 15 1f 8b cf 7e 4f 00 75 49 86 4f 9d 35 97 0e 1a a0 14 b9 a7 d2 3a 09 d8 ef 8c cf 4b 3d 5c b6 65 67 4b ff 73 d5 4b 9a 32 3b be 95 4a 3c fa c7 cc 3f 3b cb 80 fe 11 6c 34 db 23 ea b7 7d 82 0f db eb ff 8c b6 c5 e7 94 dc a6 d3 4c 38 94 ed f2 ee 7d 5f 48 ea ff 17 01 a4 d0 30 25 db c7 8e a8 85 44 77 87 08 77 04 ee 8f ca 13 63 ba c0 31 63 Data Ascii: f!vk\|>_gCauAip4u`yC}J+c<i"BS_#D y_PJ0w~OuIO5:K=\egKsK2;J<?;l4#}L8}_H0%Dwwc1c
2024-10-20 22:14:50 UTC	1369	IN	Data Raw: 74 6b 22 8d 2a 82 d9 7f d3 d9 05 4a cb f6 df 95 46 f5 85 cc ec b6 31 c6 6a 94 3c da d0 72 73 a5 c3 f9 aa 59 f0 6a 12 1f 57 bb d2 21 04 d9 41 a3 cf 22 a2 2a 81 33 ec ba 5e a4 66 9d 90 c1 9f a3 80 20 cd ae 7f 10 50 a4 42 3f e9 2d b1 2f 5d df fb d2 a3 de c9 a0 02 0d 14 91 d9 08 bf a6 08 99 f3 49 9b 79 ff f0 a5 e3 28 4b 6f 35 55 26 9b a8 cd 24 f7 07 9f 61 f7 a3 00 a8 e0 c6 1d dd c8 73 58 56 de 0c aa b1 9d b9 57 d4 24 77 92 ba 58 45 8f 9b 55 a3 10 ed 84 01 86 8c 6d e3 9d 28 49 da d0 fe dd fc 64 bf 2b b0 3d 64 76 cc 72 9a d3 f6 4e 77 64 64 6f ef 33 21 fd 74 9b 7a b1 28 ee da 25 fe 99 22 6d 44 f2 6d 21 e8 9b 70 fe 3c 90 4f 62 e9 61 ed 98 80 e3 50 f6 88 d7 45 6d 83 da 0c 1c 52 03 f1 c7 e3 92 87 c5 f2 1c db 8e 64 31 2f 37 ab 6e f1 99 a0 1c 51 53 e0 d9 e7 1f 22 36 Data Ascii: tk"JF1j<rsYjW!A"3^f PB?-/]Iy(Ko5U&$asXVW$wXEUm(Id+=dvrNwddo3!tz(%"mDm!p<ObaPEmRd1/7nQS"6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49749	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:51 UTC	632	OUT	GET /wp-content/uploads/2024/10/Calls-CTA-image-e1728660041897.jpg HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:52 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:52 GMT Content-Type: image/webp Content-Length: 48514 Connection: close Last-Modified: Fri, 11 Oct 2024 15:55:52 GMT ETag: "9102f19ff81e47b1" Vary: Accept cache-control: max-age=31536000 x-rq: bur7 113 214 443 accept-ranges: bytes x-cache: HIT Accept-Ranges: bytes
2024-10-20 22:14:52 UTC	1029	IN	Data Raw: 52 49 46 46 7a bd 00 00 57 45 42 50 56 50 38 20 6e bd 00 00 d0 7a 03 9d 01 2a aa 02 aa 02 3e 6d 32 94 47 a4 22 ab aa a6 34 3c 09 70 0d 89 65 6d a1 b1 ba 01 f6 ba 16 22 66 ab af ad 8b 92 a6 b2 50 58 50 95 5d ca f7 29 fc 0c 3a eb d2 d5 84 cf b6 ff c6 f6 03 fd 87 f2 85 e7 36 d4 05 21 3f e5 f3 49 e8 fa 7d 52 7d 71 f7 b1 29 3c b7 e6 d4 72 b1 e5 e9 7c ec ec 47 ea 7f f9 17 4a 5d b3 6f 37 9f 4d 8d 36 bf 3c 7c 8f 9f 78 f9 ed f9 57 f8 fd ff fe 77 f7 bf 2b bc 47 fc 3f 82 1f 85 33 b9 ff 27 87 bf af 78 8d 7b bb d1 ab fb 7c 30 c7 2b 26 ef a3 b5 03 f2 eb ff 7f 8a 47 b5 fb 05 7f 5a ff 55 eb 1b ff 37 96 6f dd ff eb 7b 0d 79 75 7f ff f7 8f fb d7 ff ff de 0f f7 34 e4 76 97 af 4b 54 d7 85 cb 4d db a5 5b 0a 2d a9 fb 8f cf 4a 0c 50 fe 0d c3 aa 7b 0e ce c2 c3 44 9e f5 b0 2f 6c Data Ascii: RIFFzWEBPVP8 nz*>m2G"4<pem"fPXP]):6!?I}R}q)<r\|GJ]o7M6<\|xWw+G?3'x{\|0+&GZU7o{yu4vKTM[-JP{D/l
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 07 f2 2f 17 c2 bc e2 c6 38 27 97 4d bd 80 36 2d 6d 3b bb e5 45 34 5d 08 ca 15 47 92 a4 32 68 5c d7 83 ae b6 3d da b6 65 56 33 ee 60 d2 5c 30 1e b0 cc 03 65 fb f1 69 b7 06 44 de dc bb 17 58 27 7c fa fa 83 60 7d 86 71 fc 00 58 c8 6d 98 9a 08 46 61 aa b6 c8 d8 d2 f9 52 b9 f9 67 23 36 fc 89 36 98 17 98 55 ed fa 3e 27 f1 ab bb ec 56 3a ac e5 53 c5 3f f6 87 90 3d c1 82 f4 65 12 df 5c be 8f 47 69 43 23 1e 13 94 24 05 5d f6 ee 13 6f 09 0f 68 20 99 a7 72 39 22 41 9d d9 0d f9 a2 49 94 71 8a 0d e4 b6 10 84 9b a4 29 b2 96 03 5b a1 8e 51 9c 09 41 2f 79 e1 eb 86 58 a4 4e b0 32 ca fc 2b 0a bb 6e 55 a1 b7 8b 17 9f 10 18 f0 f0 ed 77 e7 51 98 cb 05 b3 4d 6d 5e 95 ec fd 7d 46 a6 b3 51 4e 32 b5 24 da 82 1c 17 44 4e 87 b9 f5 d6 8e 15 12 26 57 b8 64 df 22 12 bb 05 3f 2e ae e2 Data Ascii: /8'M6-m;E4]G2h\=eV3`\0eiDX'\|`}qXmFaRg#66U>'V:S?=e\GiC#$]oh r9"AIq)[QA/yXN2+nUwQMm^}FQN2$DN&Wd"?.
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 2b ce b8 a3 61 66 81 ec 05 6b fa e4 8c 48 9d ce 72 01 f1 94 3a cc 0f 3c b3 f3 4e 41 31 55 0e a9 b2 b5 55 ea e4 e1 0c f7 8b cc 85 ef d1 8a 57 44 13 73 27 cf 0e bb a7 00 5c 96 a7 f9 7d f1 79 fb fb 1a a6 b3 7c 87 f3 e1 3b 76 ca f9 cf c3 b1 16 29 36 dc c3 55 aa 45 aa e6 0c 33 70 8a 26 8f 01 c9 61 8b 21 e6 ad 02 c5 e6 0f 9d e8 ad fb 7e 4d 1a aa c0 45 9d 23 05 e8 3b ad d1 61 d5 33 aa 74 e4 f1 e5 2f 70 bb 7f 07 44 9f 2f 56 9a d7 82 84 b6 8a 24 8c 76 9f c7 0d 70 2b fe 42 ce 3a 45 4b aa e0 c1 5f ec 36 50 0e 20 7a e4 7e 37 6a ae 72 10 24 4b 74 0b 1f 0d eb 00 17 df 39 b0 95 3d bf 73 88 17 65 5b 28 09 9d 3a b4 6c a1 4b 80 df 71 fe b8 92 f5 b1 e6 4b 60 25 75 a1 de f7 85 a1 53 f8 70 52 7f a6 bf e0 82 36 57 01 fd 5b 20 2b 51 8f 09 c1 bc e2 c5 79 d6 6f ee 29 ca c8 8b 79 Data Ascii: +afkHr:<NA1UUWDs'\}y\|;v)6UE3p&a!~ME#;a3t/pD/V$vp+B:EK_6P z~7jr$Kt9=se[(:lKqK`%uSpR6W[ +Qyo)y
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: a9 7f d7 77 51 93 cf 38 fd c1 03 25 2f 46 7e 1d 12 81 17 c0 ec 7c 13 bf eb d4 07 f8 2a b0 1c 73 23 be 1d 9f 69 54 ca 33 f2 3e b4 58 f4 b3 49 85 3e 28 e9 d5 2d 3d 70 27 40 b3 da de 95 42 62 ee 7d 8e 12 de 28 ac 7f 26 7d ba 84 70 00 a8 e5 a0 5b fb 46 9b 37 bc df 8e f0 60 e8 2f 73 00 a5 97 25 68 e7 1f fd de f4 ac 3b a9 38 b4 f7 68 29 b5 9f 6b 1d 6c 3f 5d 3d a4 12 5d da 5c cb 8f 24 95 7c 46 51 47 d9 05 1f a2 aa 7c 52 08 d4 15 3b ab a6 a5 b7 ec 8f 73 38 c2 07 91 fd d9 47 f9 db 9b aa 0b 64 88 16 ff 9b 7a 93 84 40 26 9f c4 bd 20 a5 88 b0 a1 dd 36 19 43 85 16 ef 55 68 7f d4 31 90 3e d6 97 cf b3 aa 2c 5e 10 2b 28 0c 71 67 60 6f 28 ff 51 07 90 c8 f4 e3 cc 76 07 6e c3 1d 63 bb 07 b2 4e a7 a1 f8 03 d7 f8 f6 58 f9 40 62 f9 9c 76 59 c8 63 78 8b 7b 28 c0 4e ea 8d 6a 69 Data Ascii: wQ8%/F~\|*s#iT3>XI>(-=p'@Bb}(&}p[F7`/s%h;8h)kl?]=]\$\|FQG\|R;s8Gdz@& 6CUh1>,^+(qg`o(QvncNX@bvYcx{(Nji
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 9a 7c 03 c8 73 a2 a6 74 df 67 03 8b ca 7d 02 c4 ac 97 e8 dd a8 d6 40 20 7d 8a 0f 37 b3 ec e9 b3 8a a8 c9 17 af f5 9f 19 bb 8c 6d ca 5e 86 ec 11 b3 fa 32 6f 01 33 83 3a 88 6e e0 06 ea 4e e7 ee 92 1e af 4b 61 cc dd 3f 3f 1c bf 40 ff fd b3 bf a0 2f 74 f4 cb db fb 62 8a f0 75 cd 29 6e f9 f8 34 74 ad 1c 08 5d b9 e9 67 6c 04 21 3e cd ca 25 1c d6 ee 2e 27 6c ad 27 93 97 64 49 b4 8f b7 91 6f 29 92 8a b0 12 77 dd ff 3b a3 59 a8 ec 73 39 52 79 64 c6 ff 50 cd 22 87 b8 68 6b 41 0f 20 29 b8 d4 02 30 01 68 56 d4 58 7a a3 10 4a 27 ea 7a 1e ff a3 eb 39 cb c8 69 f3 b1 2c b2 36 0c a1 08 28 02 b0 70 c3 40 7c b7 57 9f 9a 87 48 f4 ca 70 e4 c7 6e a6 40 ce 5e 81 eb 16 22 2d 64 91 17 a8 2d 91 8a 0c d9 d8 d0 6e 41 0d 68 50 0d 15 24 da 37 0a 60 f3 a4 f9 e9 1f eb 3a 84 07 ec 6d 5a Data Ascii: \|stg}@ }7m^2o3:nNKa??@/tbu)n4t]gl!>%.'l'dIo)w;Ys9RydP"hkA )0hVXzJ'z9i,6(p@\|WHpn@^"-d-nAhP$7`:mZ
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: da 65 89 b2 e0 65 f6 7a 33 34 a0 dd f5 5b 62 bb de 05 3e 95 a8 70 1c 0f 7d fd f7 6d bf e7 ba 42 b5 cb 73 0e 91 54 1f 92 1b 2d af 29 e7 e3 3f a2 69 6a 77 68 a0 29 0e 62 bb 76 46 c4 76 47 01 c4 36 85 80 95 31 1e 1a 0d c1 a4 86 8b 70 2c 3d a2 09 5e b3 f7 8f 62 e2 6e 59 b5 68 e7 d9 88 4c 5a fa 17 22 77 75 47 4b e1 4a 9a 26 94 dd c2 ea 0c f2 11 db db a0 e9 1c 3e e9 31 5a eb a6 fd ab 2f db f0 8b a0 a8 1d 07 de 45 eb 76 e3 61 da 7d d4 98 15 0c d0 93 3a 83 7b 96 c5 27 f2 46 f9 4a 09 07 51 c3 58 ec 52 ab d5 34 d1 e9 3c 99 ef e3 5e 7e dc 80 29 16 d5 c5 37 c7 e3 b1 7d 0f 0a 59 42 c1 3a a5 72 f9 e6 4f 4f 17 ff 46 c9 5d ff 4b eb 0f a4 55 55 34 82 b9 78 b4 1a 1a f0 a4 18 67 31 d2 cd 44 ca 9f 0e 9d ea b8 1c 67 6e 2f d9 95 01 e0 b9 b5 17 d4 fd 7f c8 3d ae e6 d5 90 0b 74 Data Ascii: eez34[b>p}mBsT-)?ijwh)bvFvG61p,=^bnYhLZ"wuGKJ&>1Z/Eva}:{'FJQXR4<^~)7}YB:rOOF]KUU4xg1Dgn/=t
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 0c 6e 97 2a bb 34 49 ca 97 9a 50 47 36 b2 67 dd a5 14 14 f1 b7 15 3d ce 4a 26 5d 1d 43 ac c9 df ca a9 ff bc 23 2a 23 c9 80 ff dd 7f 15 a9 cd 7c 01 c1 96 75 f9 31 86 0b f9 43 05 ab 13 38 c3 cc ed 92 cd 9f a3 b1 76 23 7d 22 55 ae 5a 49 6b 48 59 eb 41 7b b1 a7 a4 bb 5f 0b 1c 69 68 d6 41 4f 67 45 d6 b5 c6 3c c2 37 c4 bb 5c 15 24 51 45 2d 76 1e 17 3a 9c 51 c0 9e 84 6e 3a e1 53 ab dd 0d af 53 e3 68 21 7f b3 ff b5 93 90 e3 99 fb 78 c3 ad 87 c3 7a af 6a 83 10 00 56 30 f2 4a fa f6 10 e0 3f 4a 5a 52 4f 30 28 6a 56 03 3f a9 a5 39 95 6b 81 54 97 40 ac 3c c5 a2 e0 65 54 a9 00 61 a8 31 81 ee 15 e3 80 36 24 b9 21 d1 d9 55 04 20 a0 8a 77 d5 ef 59 5f bd f5 fd a7 6d 65 b8 08 4d 18 69 d2 d1 7e 08 53 29 65 82 51 5e 62 a3 d2 9b d5 0d 15 2e 9f a5 73 ad 67 9f 58 8c 58 a4 7c 84 Data Ascii: n4IPG6g=J&]C##\|u1C8v#}"UZIkHYA{_ihAOgE<7\$QE-v:Qn:SSh!xzjV0J?JZRO0(jV?9kT@<eTa16$!U wY_meMi~S)eQ^b.sgXX\|
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 32 c3 a5 22 98 11 18 8b ed e5 e8 90 40 80 5b 89 ed c4 9d 79 eb da 7f e2 f1 92 f3 d3 b4 e2 5a 65 ca 24 3f 2b c9 1e 23 ae db 12 1e 94 34 ef 60 28 fb 2b 7b 17 c8 04 78 d0 5f a4 b0 8e a5 44 9a b0 b5 81 f0 05 c6 78 0d 50 d0 35 86 54 09 bc fd 13 f6 eb e5 33 72 15 ee 86 61 7a 4a 42 6c a3 39 ac ee 22 cc 87 09 de 8e af da 2f 40 7d 7c e2 db 32 08 1b 73 f7 12 a5 8a 2c 73 bc 98 05 f3 ff 25 0f 87 06 cc 25 f4 df 01 54 00 2a 0b 10 cb 0f e7 1a 3a f0 70 56 63 c5 5d b1 7a cb 0b 99 34 30 ad 89 4a fc ab 25 e4 fb ba 1e 5a 8b a5 2e 68 be d2 3b 46 f9 f1 3a 62 9c 84 2d 87 2e 68 9b e4 8d cb 3e 0f 2a 32 e8 02 3e 7c ef 81 25 e8 05 e0 bf c2 7e 33 57 0c 9a cb 9d ba 2d d7 36 8c 1d 06 63 db b9 71 f6 8b 09 a4 87 e0 24 bc ca 6f 34 d3 40 4f b2 3d 1b 8f 6f e7 44 41 fd 6a 15 4e 7c 45 0d a7 Data Ascii: 2"@[yZe$?+#4`(+{x_DxP5T3razJBl9"/@}\|2s,s%%T:pVc]z40J%Z.h;F:b-.h>2>\|%~3W-6cq$o4@O=oDAjN\|E
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 0a 51 d3 c5 cd 8c 85 a0 03 aa c1 22 ec 85 45 42 cc 7e 69 02 37 f0 e8 a5 a8 d3 d4 f8 ff d8 f1 ef e5 ba 1f 57 6b bf 5d df c8 a6 e8 81 58 cf 7c ae 14 06 63 0c d2 68 8d b4 bc 82 d6 53 18 94 53 05 a8 ca d5 c0 3e 94 e4 12 63 ee 2f 8f be 35 9a 96 2e 6c 97 30 a1 c7 60 16 7e 11 ce ec 36 34 f4 4c 9d 1e a0 06 33 38 52 ce 06 6b 90 58 a5 3c aa d0 08 1c e9 a0 9b 9f 5d 17 38 89 b0 41 af 95 b7 3a d8 00 f7 b9 98 ca d9 90 af 73 fb 5c 1a 31 30 02 1c ef 50 5a d6 8d 6d f5 b2 ca 1b 2e 26 d8 9f 50 00 e2 37 de 28 a2 2b 41 e2 17 ed 3b 93 b1 7c ec 1f 81 d5 e0 5b 86 ab e1 2d 1c 21 c9 ac 27 a4 e8 22 49 86 91 1b 52 be fa fc 94 7b b9 0b 12 49 f8 9f 2c 8e 8b 59 34 1c 2e 62 06 ff 49 9d c3 d2 b9 d6 5a a2 21 fe ce 1c 46 1a 57 2e 26 27 de 46 51 e6 93 05 2f df 0b b0 e7 03 99 cb b6 19 ec cc Data Ascii: Q"EB~i7Wk]X\|chSS>c/5.l0`~64L38RkX<]8A:s\10PZm.&P7(+A;\|[-!'"IR{I,Y4.bIZ!FW.&'FQ/
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: d0 d0 79 a2 ad 44 71 c5 fc 56 41 c2 ef 73 9a ce 48 d7 86 f0 5d 75 97 35 bc a2 2f 1f 32 f9 22 7c 90 df 2c 4b 89 72 4e b9 ab cb 26 bb bb fb 3f 51 57 47 44 ab 5b 1e 23 6f af a5 56 83 b3 bf bb 10 a8 64 a8 8a eb 9e 6e 1f 6d cf 62 02 2b f2 e8 cd ca 40 ec 3c b1 d5 8b 81 30 c5 e7 7b ed ce 8c 7e b4 9e 3f 8c 65 78 e0 e7 c2 0d b3 83 e6 f4 28 2e 0d 3f 93 0d e7 72 cd 43 3a 44 97 aa 97 41 b2 86 84 5e 95 40 ba a3 89 33 12 a3 14 53 bf a0 fa d5 72 dd df ad 69 37 4b 2b d1 6e c6 26 83 f0 ae e5 7c a4 0b 79 03 3f 13 09 f3 c3 a8 8b 3c 25 06 7a 61 31 8d 52 d9 94 31 ff 04 0c d5 a2 e7 04 fc f7 21 7b 5d be 5b a0 88 1b 87 ea b8 53 9a 1f 36 58 74 7f cf f6 96 64 dd 7a 44 e5 4f fe ff 11 55 0c 46 7d ae 58 fa 69 00 63 9d 48 d8 23 9e e9 0c 79 e2 83 b1 51 15 30 1e eb bc 0b 63 18 85 2f a1 Data Ascii: yDqVAsH]u5/2"\|,KrN&?QWGD[#oVdnmb+@<0{~?ex(.?rC:DA^@3Sri7K+n&\|y?<%za1R1!{][S6XtdzDOUF}XicH#yQ0c/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49751	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:51 UTC	411	OUT	GET /wp-content/uploads/2024/10/51225586480_45a461ef95_o-3-1-e1728671125484.jpg HTTP/1.1 Host: democrats.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:52 UTC	326	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:52 GMT Content-Type: image/jpeg Content-Length: 253556 Connection: close ETag: "22a10a8a137dd147" Last-Modified: Fri, 11 Oct 2024 18:25:25 GMT x-rq: bur7 118 21 443 accept-ranges: bytes x-cache: HIT cache-control: max-age=31536000 Accept-Ranges: bytes
2024-10-20 22:14:52 UTC	1043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 15 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$@"
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 9c 71 c0 ce 06 3a e3 b7 5e b5 a5 6e 84 c6 08 05 7a 63 77 2a 0f b1 f4 1c f7 ac f7 c8 99 58 86 0d 9e 48 3c 83 fe 7d fb d6 8d a8 0a c0 f0 dc fc cd 8c 7d 4f f5 c7 22 9a 11 a3 10 00 f1 f2 74 c8 c8 c1 e0 91 db b6 73 d7 f4 ab b1 92 64 5e 58 ee e4 81 82 0f 03 39 cf b1 fd 3d aa 9c 03 6a ed c0 5d a0 72 bd 17 8c 1c 63 8e dd 4f af d2 ad 22 e5 76 85 c9 fa e7 38 e8 4f a7 4f 7c fd 3a 02 2c 45 90 8a d8 18 3f 36 e0 3f 97 07 8f f1 ed 53 82 36 8e 30 b8 e0 63 3e fd fa 73 50 c7 80 bb 86 d0 07 cd 8c 0e 7d 7b 7b fe 75 36 76 ee e9 f3 0f 98 05 ce 41 cf 41 d4 f4 ff 00 3c 8a 04 3c 1c 92 bf 36 ee 85 7b 8e bd ea 40 d8 25 88 53 90 39 41 90 4f 5e 3b f5 3e 9d ba 7a 31 38 23 05 99 87 cb f2 82 40 3f 4f 5a 78 03 2a 36 10 7a 00 4e 1b 1d 40 ef df 06 81 13 a2 e4 2a e7 af 1f 31 ea 38 f4 e3 f4 Data Ascii: q:^nzcwXH<}}O"tsd^X9=j]rcO"v8OO\|:,E?6?S60c>sP}{{u6vAA<<6{@%S9AO^;>z18#@?OZx6zN@*18
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 03 e5 8c b6 32 3f 87 af 7c 74 27 34 11 8e 0f dd c1 c7 3e c3 ae 3e 9f 5c 0a 42 06 e6 76 c1 3b b0 d8 c0 2d eb db b7 34 00 bb 70 0a 05 1d 33 8c 63 af 46 db c7 1c 71 48 48 c6 70 b9 c1 c2 95 e8 3d 39 fd 7e bd 69 ea 39 52 32 41 6d d8 c0 00 f3 fd 71 fd 29 89 c2 80 0f 19 00 10 4e 1b 9f a0 c7 38 3d fa 76 a0 05 da 48 e1 70 09 ce 1d 41 ea 38 e7 3e df 8e 69 36 2e 0b 08 c7 d5 06 71 c7 39 3f e7 f5 a4 00 6d fb aa 06 38 27 03 19 04 8c f6 e3 23 de 9e 50 e1 49 18 21 70 0f 3f 29 1f e7 ff 00 d7 40 0d e5 73 90 bc 1e 72 b9 19 07 e9 fe 7d a8 24 12 70 43 05 03 92 33 90 7d 78 fc 41 3f 97 a2 e1 79 08 a1 79 e0 63 19 e0 9c e3 e9 eb 4d db b9 76 95 fb c4 77 e9 d4 11 cf af f9 e3 aa 00 64 50 bb 18 65 40 0b 95 c6 08 39 1c 1f 7a 5e 50 2e 00 5e 78 dd 9f 94 0e 40 3f 4f 5c 7d 7a 50 e0 7c f9 Data Ascii: 2?\|t'4>>\Bv;-4p3cFqHHp=9~i9R2Amq)N8=vHpA8>i6.q9?m8'#PI!p?)@sr}$pC3}xA?yycMvwdPe@9z^P.^x@?O\}zP\|
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 55 ce 07 41 cf 6f a0 23 f9 9a 50 00 2c 32 03 2f af 3c 64 7a 1e 3a f1 4b f7 b0 aa c4 8c 9e 76 63 68 ea 31 9c 9f 43 9f a5 22 80 ca b8 40 ab 96 c0 18 3c 9c 63 1c 74 a0 42 1f 91 41 62 70 17 b8 ed 9c 63 fc fe 74 e0 b8 61 c1 66 cf 52 31 83 9e ff 00 a0 c7 a1 f6 a1 7e e8 20 e7 82 c0 67 e8 31 d7 07 a5 2e 30 bb 54 1e 38 18 3e 9d ba 76 f5 fa 50 03 72 bb 78 70 5b f8 0f 5e 79 e7 9e 0e 71 eb 4f 3c 0c ab 12 01 c8 0f d0 63 a8 c6 70 3d 3f fd 54 b8 01 82 1e 32 c0 90 73 81 93 e9 db f1 3c f3 d2 90 36 d8 c1 2c a1 80 c8 04 80 3f ce 39 ed d6 98 00 00 20 5c 10 a1 b8 03 af 07 18 fd 05 29 21 4e 30 72 0f 2c 4e 00 eb fc 3c 73 93 f4 e7 df 14 36 e0 ae 78 24 2f 18 e4 13 eb ef 9c e7 fc 9a 71 50 b8 c7 98 17 b3 2f f0 8e e7 9e 9d 0f e4 3d a8 02 78 07 ca a4 31 20 64 e0 af 1d f2 71 f9 fd 7e Data Ascii: UAo#P,2/<dz:Kvch1C"@<ctBAbpctafR1~ g1.0T8>vPrxp[^yqO<cp=?T2s<6,?9 \)!N0r,N<s6x$/qP/=x1 dq~
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 0f f3 d1 e7 06 4c e1 4b 33 64 0e bb 8e 39 3e be a3 26 9b 83 dd 64 e0 f4 ec 39 eb cf a7 1f a7 bd 00 30 26 57 0a a0 21 23 20 0d a3 a7 5f 7f f3 e9 51 95 0e a4 93 bf 20 02 c4 72 79 38 e9 f4 cf 5c d3 db 69 5c 06 39 c7 dd c7 20 f6 38 fa 75 03 34 49 b5 f3 c8 1f 77 a9 c7 61 cf bf d2 81 8c da 1d 98 21 5c ee c3 60 0c 8c f3 90 3a 7a 74 f5 a4 50 65 62 10 97 67 18 c7 72 3f 3e 38 cf e1 52 3f 98 49 cf cc 4e d3 86 e1 4e 7a 66 98 73 27 07 32 13 cf cd 82 73 fe 3f e3 ed 40 88 8e d6 51 b0 ed e8 0f 18 5c f2 0f e8 29 81 50 95 60 00 38 18 e7 20 fe 87 fc 81 52 8d bf 32 8f 98 e0 ed 04 60 80 01 e3 f5 27 bd 04 02 ec bf 3f 75 e3 d4 9f 43 f5 f6 a0 64 65 09 c0 c0 18 5c 9e 39 1d 71 9f cb f1 f6 a4 0a 99 46 08 85 89 04 e1 79 19 ef 81 c7 72 3f 3e 69 fb 8b 38 db b4 b3 2f 61 80 0e 7d 38 e9 Data Ascii: LK3d9>&d90&W!# _Q ry8\i\9 8u4Iwa!\`:ztPebgr?>8R?INNzfs'2s?@Q\)P`8 R2`'?uCde\9qFyr?>i8/a}8
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: c8 27 0a 70 4a 8f 6c 74 fc 32 73 fd 71 40 89 08 de 48 c8 04 f5 24 75 eb 81 cf 5e 7f a5 29 c0 f9 b6 80 b8 e8 a4 92 46 7d 87 27 a0 ef 48 0b ef 3d 4b 64 10 c4 64 fa 77 e4 77 1c d3 86 17 9d d8 0b d3 dc 67 eb f5 3c f5 a6 80 71 5e 4f ca 72 0e 0e d1 91 d3 a8 ec 07 5f fe bd 3d ba ec c9 dc b8 3c 91 bb a8 1d 71 cf 5f d4 7d 69 91 85 60 32 17 a1 18 18 1c f1 eb 8e 86 9c a7 70 20 36 de 46 4a 92 39 c0 00 1c 1c f7 eb 40 0e 03 20 e3 19 00 8c f1 85 fa ff 00 3f c2 80 57 71 c1 50 33 c0 3d 38 cf 7f d3 f2 a0 82 5b 24 06 38 f9 86 43 6d e7 dc f7 e6 94 b1 0c be 80 ee 00 1e 4f 7e 7f cf ad 02 13 85 20 82 38 19 04 0e bc 2f 03 9c 75 fa 52 81 b5 8e 14 6e 52 7a af 4e 7d 40 f6 fd 29 77 33 16 e4 16 19 fb eb 90 73 d3 fc 8f 43 f8 1d 1c 28 43 dd 48 c6 33 c0 e4 f1 d3 f0 fa 50 33 e3 0f 86 96 Data Ascii: 'pJlt2sq@H$u^)F}'H=Kddwwg<q^Or_=<q_}i`2p 6FJ9@ ?WqP3=8[$8CmO~ 8/uRnRzN}@)w3sC(CH3P3
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 8a ac fc 11 dc fa e4 f6 e9 8c 0e bf e4 d5 55 39 23 e6 04 86 3d 7a 1e a7 ff 00 af c7 b5 49 a2 d8 60 2a 57 85 07 2a 78 c7 23 af e5 da 9d 9e 01 f9 55 46 09 04 91 cf 5e 9e a7 1f 4a 52 a7 05 58 8e 33 93 b7 ae 33 9f d7 d7 1d 69 4e f2 db 88 7d d9 f9 80 c6 7f 1e be df 9d 03 08 fe 52 70 0b 00 47 51 b8 10 3d 7b f5 1f 4e 0d 0a 8a df 28 db bf 81 c8 03 27 a7 53 df 3f d2 9c 41 e0 95 5c 0f 63 82 3a 63 07 e8 79 a5 da 55 70 43 82 07 24 36 de ff 00 4f 6a 00 45 00 94 3b 80 53 c8 c9 f9 54 70 73 91 c9 1d f9 f5 a1 5b 70 42 54 00 39 19 52 76 fb e7 27 bf 3d 4d 2b 80 ae c1 57 ef 12 c0 91 80 4f 1f 97 43 40 d9 90 41 5f 42 76 81 8e 7d bf cf bd 00 20 3b b6 84 23 23 00 b6 33 ec 3a 7d 3f 9f 5a 19 32 09 23 00 70 c1 b2 70 33 c7 f4 fc 47 d2 a4 61 b1 b2 c7 e6 5f e1 da 09 3d cf 3d 3a 8e e7 Data Ascii: U9#=zI`Wx#UF^JRX33iN}RpGQ={N('S?A\c:cyUpC$6OjE;STps[pBT9Rv'=M+WOC@A_Bv} ;##3:}?Z2#pp3Ga_==:
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: b7 14 01 1b e4 2f ce 4b 04 39 da ea 3b 63 a7 ea 7f 01 eb 4a 72 9f 7f 6f 52 09 03 9e bd bd fa f1 40 50 ce 02 0c 1d b8 18 e7 3e 8b eb 93 9e b4 bb 80 3b f7 2e e3 fd dd b9 c6 47 3e 87 f8 7a f1 c8 a0 08 f2 99 2a ee 1c 02 03 06 60 3b f5 ed dc 8e 29 18 12 a4 9c f2 bf 33 72 48 e3 df f5 fa 73 52 06 90 05 0a cc a0 01 d8 01 f8 f6 c8 fe a2 80 c3 70 04 ed 19 e9 9c ed 1c 91 8e 71 ef eb d6 80 1a c0 e5 86 c1 8d c7 19 c1 1c 1e 07 7f f3 8a 14 aa 8d f8 60 06 77 33 2e 38 f4 c1 e9 d3 9e 99 fa 74 5c 27 ca 49 55 e7 b6 31 8c e0 e7 1d 7a fe 9f 9b 40 f9 72 e5 41 03 fe fa e0 fb f1 ff 00 ea a0 05 21 c0 01 71 18 03 9e a3 91 fe 54 7e 3e d4 ab 80 73 82 47 a7 39 ea 38 f4 e3 1c 9f ff 00 5d 2b 22 6e 62 70 01 24 12 cb c9 19 39 e3 db 8e df 96 05 28 fd e0 c1 2c 4b 12 71 d0 67 d7 8e 09 e4 fa Data Ascii: /K9;cJroR@P>;.G>z*`;)3rHsRpq`w3.8t\'IU1z@rA!qT~>sG98]+"nbp$9(,Kqg
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 92 3f fa de b5 1e de 98 4d aa 32 71 b7 9e df d7 fc f5 a7 90 4e 78 24 f4 c0 1d 7a f1 d7 fc e2 a3 93 1b 73 b8 60 f4 ca e7 b7 f8 f6 a4 06 56 a0 14 c7 20 8c 67 0a 77 10 06 3a f1 90 3b e0 63 f1 ed 59 0c 9b 59 80 19 08 4e 0e 38 f4 e3 f1 ff 00 3d ab 66 f8 b1 3b 8b 1e 32 08 dc 38 e8 09 f6 e9 fa 56 31 0a 48 42 15 be 53 fc 45 89 c6 3d fd c9 e2 93 1c 46 85 f9 81 0b b9 b8 27 3d cf be 47 5c 9e 83 f2 a1 47 20 a8 c8 1d f1 f9 1c 77 e8 7f af 4a 73 2f 27 2b ce 7a f0 7a f1 9c ff 00 9f 6a 6e e5 72 d9 6c 90 46 30 39 07 d3 df a9 1c 7a 1a 45 0a a0 a6 15 88 61 b4 8e 17 3b 7d ff 00 3c d2 8c 75 6c 8f 9b 23 a8 cf 7c fa 13 93 fa 51 82 a7 7b 67 18 ec d8 dc 06 0e 3f af 5e 7d 29 47 ca aa a5 ba 72 49 24 9f 4e 71 db 81 f4 a6 03 40 04 02 03 15 0a 3b 03 81 8e 38 fe bd b1 48 46 ec 82 72 a4 Data Ascii: ?M2qNx$zs`V gw:;cYYN8=f;28V1HBSE=F'=G\G wJs/'+zzjnrlF09zEa;}<ul#\|Q{g?^})GrI$Nq@;8HFr
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: f7 f9 49 c7 6c e0 8e ff 00 86 3f 11 03 36 3a 90 c0 9c 9c 31 cf 41 93 d7 39 07 af a5 39 42 e4 15 3b 98 1c 1c 80 dc e0 f3 f9 01 fc a9 76 7c c0 e4 b8 27 9e 47 1e be e3 a9 e7 9f f1 04 30 01 81 93 19 c7 cd 8f 5e 3a 8e be a3 a5 00 06 38 cc 60 9c 64 63 3f 81 c1 f6 fe b4 f5 52 51 54 8e 71 90 46 47 3c f4 c7 19 fa 52 b6 dd c5 b2 58 a8 24 71 c9 38 e9 d7 af 1f 85 31 8d 50 08 dc 4e 36 81 82 3a e0 0e c7 93 9e b4 10 c8 3f 88 67 07 3b 7f 8b 27 19 f7 1f 5f f1 a7 00 23 93 e6 6c 60 e7 71 3f 7b 07 9c e3 91 d0 77 ed f9 11 af 46 20 a6 e1 c9 5c fd d0 3a 7f 2f c6 81 0d 61 b9 31 c1 07 2a 00 cf cb c7 3c 63 24 77 e4 53 89 c3 bf 29 bd 8e e0 07 04 67 f4 1f e4 71 4f 55 38 2c f8 6d a0 12 14 83 93 8f f2 3d 3b 0a 15 b2 f8 52 c7 71 fe f7 39 f4 e3 9c 66 80 18 ab e6 28 d8 55 81 c1 07 83 c7 Data Ascii: Il?6:1A99B;v\|'G0^:8`dc?RQTqFG<RX$q81PN6:?g;'_#l`q?{wF \:/a1*<c$wS)gqOU8,m=;Rq9f(U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49750	192.0.66.105	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:51 UTC	397	OUT	GET /wp-content/uploads/2024/10/Vote-CTA-image-e1728660119427.jpg HTTP/1.1 Host: democrats.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-20 22:14:52 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 20 Oct 2024 22:14:52 GMT Content-Type: image/jpeg Content-Length: 393256 Connection: close ETag: "05fb328f8bd069f2" Last-Modified: Fri, 11 Oct 2024 15:21:59 GMT x-rq: bur7 115 147 443 cache-control: max-age=31536000 accept-ranges: bytes x-cache: HIT Accept-Ranges: bytes
2024-10-20 22:14:52 UTC	1042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 04 f5 04 f5 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 4f e5 f5 a7 29 c8 01 8b 0d dc f3 fe 7f c2 93 01 b2 1b 9c 0c 30 e0 7f f5 c7 f3 a0 42 2f 00 e4 f4 19 eb d2 93 a7 6c f2 4f 53 fc a9 dd 78 20 95 c8 39 c7 73 cf 3d bb 1f ca 9c 0f 1c 03 d7 19 23 07 9e 94 01 19 0b b3 80 a0 63 b8 34 30 c9 e8 41 1d 71 d7 8f ff 00 58 fc 85 2f 2b ce 0f 03 38 3d bd 3f 96 29 b8 19 23 8c 8e 09 f5 38 ff 00 f5 ff 00 fa e8 01 1c e0 92 c0 e4 fb 9f 51 48 46 01 51 b4 0f bb c1 a7 b0 e7 27 23 8c 1e e0 1a 46 52 33 81 8e d8 ce 46 3b 0c 53 01 a5 48 c8 c6 08 3c f4 38 e3 93 cf f9 39 a6 18 c8 e8 b8 e3 8f 6f a9 fd 7f 0f 43 4f 61 81 b8 64 60 e3 9e c7 34 8d d4 12 78 c9 e4 9c 77 a0 06 e7 9e a3 18 20 01 8f e5 fe 7f 4a 69 4c 95 e3 18 39 20 0c f5 ff 00 f5 ff 00 f5 e9 e0 63 91 bb 20 fd d1 d3 f4 fd 7f fa f4 d2 c0 03 81 d0 64 e3 3d 7f fa f8 ce 73 c5 00 47 d0 Data Ascii: O)0B/lOSx 9s=#c40AqX/+8=?)#8QHFQ'#FR3F;SH<89oCOad`4xw JiL9 c d=sG
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 07 20 00 8c e3 03 a1 20 91 8f 7f 5f f1 14 a8 bb be 4c 73 8c 95 03 1d 46 06 3d 79 ff 00 3d e9 80 8e 19 32 01 ed df ff 00 ad fc f8 fa d4 91 29 c8 da e0 8e 83 8f f3 ef 40 16 60 c7 de 25 47 05 8e 31 c1 fa fb 74 fa d5 f8 46 ce 7a 1f 4c 63 3e bd 3f 2a a9 6e 0b 0e 32 c7 23 1f af 6f ce ae 40 4a 92 c0 f2 71 c0 04 67 d7 be 69 31 96 91 7d 72 30 41 ce 30 7d 4f 4a 77 2d c1 5d c4 f4 07 1d 4f a7 f3 14 c0 42 63 fb a0 f2 9d 47 1e b8 ff 00 f5 77 c8 a5 07 cc 5c 0f 9b b0 20 e4 b7 ae 7f ce 3b 52 b0 c7 06 de 71 f3 7b 93 c0 1d 8f b1 ff 00 11 8a 50 f9 71 f3 f0 71 d7 a7 1f e7 19 fa 53 4b 0f 9b 20 1c 64 77 e7 db 34 82 43 f2 8c 12 4e 0f 3d cf af f2 e3 df d2 95 86 3c b0 5d bc 72 39 6c 0c fe 9d fa 1a 50 fb 42 72 b9 51 b8 1c e4 7f 9f f0 a6 31 20 06 07 8c f7 e4 7b 63 fc ff 00 3a 3a b6 Data Ascii: _LsF=y=2)@`%G1tFzLc>?*n2#o@Jqgi1}r0A0}OJw-]OBcGw\ ;Rq{PqqSK dw4CN=<]r9lPBrQ1 {c::
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 70 0f 4e fd 71 d6 80 2a 4a 8a 53 07 18 ea 39 fe 55 1c d1 7c c5 8f 24 9e 72 3a 9f 5f c7 1f ce ae 32 b9 ca ee 62 4f 40 08 ff 00 3e 9e 9c 54 6c 83 1f 27 20 e7 6f 72 47 e5 ef f8 60 d3 42 66 7b 40 30 30 7b fc bc 63 1e 9f 87 4a af 25 b2 95 24 a8 c6 33 82 7a 67 91 f4 15 a6 ea 48 f9 73 91 83 b5 b1 c1 c1 fd 33 9a 85 a0 e4 b0 04 1c 9c 64 0e 9c e3 f1 fe b4 c0 cb 92 db 0f f3 00 09 ce 00 04 67 93 8c 0c 7f 9c 8f 5a ae d1 36 dd c7 18 00 9c e3 81 e8 7f fd 5e 95 ac d0 80 5d 87 52 3d 3e 9f 9d 44 61 c9 23 07 23 f8 86 4e 7d f9 ea 38 fa 0f c2 98 8c 79 6d 43 10 a0 8c 82 01 20 f7 e3 d7 af 5f 5e fd aa ac b6 cc 57 18 3b 8f 03 2b d7 23 db fc f5 ad b7 88 9e 46 e2 31 81 dc 1e 3a ff 00 fa aa bb 40 37 08 d9 54 a8 18 eb d4 01 d3 f2 cf e5 54 98 9a 31 5a 00 b8 3b 8e 4f cd bb 3d 2a a3 5a Data Ascii: pNqJS9U\|$r:_2bO@>Tl' orG`Bf{@00{cJ%$3zgHs3dgZ6^]R=>Da##N}8ymC _^W;+#F1:@7TT1Z;O=Z
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: cf 3f 9f d2 9d 8c 2e e3 81 8e 84 f5 03 d7 d0 d0 ca 4e 41 e8 08 e4 71 f9 7e 42 80 1a 40 cf 5e 9c 71 fc ff 00 9f 1e d4 dc 60 76 20 0e c7 a7 f8 75 fc 6a 4d bb 09 6e 01 04 13 c6 31 ed e9 cf f9 14 c0 0f 3b b1 d0 0e 78 04 63 af 3f 5a 00 4d a0 2e 41 00 01 9e 39 18 e9 c7 e1 41 4d e4 8c 61 79 e0 8e 69 d8 00 ee c0 07 19 dd 9e bd 3f a6 69 b9 c7 c9 fc 43 03 9f 5e 94 c0 69 52 49 23 00 9e 47 1d 46 33 49 f8 fc ad c6 ec e0 81 83 8f f3 ee 69 e7 25 70 a4 30 1c 2e 46 3f cf 34 d7 25 b2 09 24 1e 4a 8e ad ec 7f cf a5 00 30 28 04 07 e9 d3 00 73 8f 4c f5 14 8c 09 c9 db 93 82 79 18 ff 00 f5 fd 69 5b a9 3b 8e 71 f2 fa 1c f4 c7 3d 38 c7 a5 29 da 1b a1 39 27 81 dc ff 00 2e df a7 d2 80 1a 38 c9 cb 71 c9 3d c6 3b f4 fe 7f fd 7a 61 1b 46 00 05 48 e8 0f 5c e3 19 fc cf d7 35 20 ce 40 0d Data Ascii: ?.NAq~B@^q`v ujMn1;xc?ZM.A9AMayi?iC^iRI#GF3Ii%p0.F?4%$J0(sLyi[;q=8)9'.8q=;zaFH\5 @
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 9c 8e 83 1d 7f c7 9f 7a 42 c3 20 f0 71 9c e0 63 a7 4f f3 f5 a0 43 95 f1 82 5d 4e 47 3b b1 8c f1 53 47 f7 b2 4a 8e 83 3c fb 63 fc 7f c3 15 0a 92 39 04 82 72 01 fc f2 3d aa 78 97 73 7d cd a3 3b 48 2b 80 7a 9f eb f8 52 1a 2d c4 9b 80 f9 07 1f 7b 3d 47 f8 ff 00 2a bc 98 24 33 28 c1 3f 86 3e 9e 9e 9f fe aa ab 10 2e 46 e1 8d c7 ef 6e cf 3d f8 ef ff 00 eb ab 51 02 72 ca a7 27 a1 cf 3f e7 fc e6 80 25 ce 07 43 eb f9 7f 2e 29 30 54 72 a7 1d 89 19 27 fc f3 cf 4f ad 26 18 fd d0 7e 63 fc 27 1d fa fe 1e 94 85 b2 a0 13 b8 e3 9c 9c 64 ff 00 9c fa d2 1d c9 01 c7 24 12 b8 e9 9e 07 03 ae 29 19 ca 9c 93 f3 9c 9e 79 c9 ea 4f bd 26 4e e1 f7 c3 75 07 d4 7e 34 82 41 b8 6d c0 07 38 c7 7f c7 db 9a 02 e3 b2 01 ce 09 20 e4 6d fa fa 7d 3d 69 55 94 ae 46 30 3d 39 c2 e7 af f3 e6 a3 0e Data Ascii: zB qcOC]NG;SGJ<c9r=xs};H+zR-{=G*$3(?>.Fn=Qr'?%C.)0Tr'O&~c'd$)yO&Nu~4Am8 m}=iUF0=9
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: ff 00 d6 ff 00 0a 4d 80 f3 8e 7a 8d a7 19 3d 7d 2a 9a cd 9c 7c c4 00 78 c7 1f e7 04 7f 3a 93 cd 00 10 00 03 a6 0f e3 d7 fc fe 34 58 09 88 04 72 77 67 d4 02 09 f6 ff 00 3d c5 47 b1 8f ca bd 48 c6 08 c9 34 f3 31 07 0c 30 7f da 3c e3 af 6e 9d b3 fd 29 08 1c 67 38 1c 0c f6 f5 fa ff 00 f5 a8 02 16 0c 41 ce 3e 6e 84 9e b8 ff 00 f5 d3 1a 21 9e 76 b6 d1 9f 94 f4 f7 c7 e1 f9 55 a2 d9 ce 73 ce 3e 5c 73 9f 6f f1 f7 a8 d9 7e 60 32 49 3e 87 18 ff 00 38 14 20 29 b4 08 76 e0 28 e7 8e 33 ef ff 00 d7 cf 5a 89 a0 c0 e4 ed 03 bf 61 df 9f cf f2 15 7c a1 24 60 e4 77 39 db c8 e4 7f 9f d3 bd 46 ca 37 fd ec 80 49 db df 19 e7 fc 3f 0a a1 19 b2 42 59 48 70 07 6e 9d 3f cf 35 0b c0 08 39 05 40 c9 24 9e 84 f1 cf 3d b1 db ad 69 3d b0 da 03 6d 03 1b 41 27 90 33 d8 e3 9e 71 d7 f9 e6 a3 Data Ascii: Mz=}*\|x:4Xrwg=GH410<n)g8A>n!vUs>\so~`2I>8 )v(3Za\|$`w9F7I?BYHpn?59@$=i=mA'3q
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: 27 cb c6 d0 01 1d 07 af d3 ad 2a 90 b9 c6 dc ae 73 8c 0c 73 fe 03 f4 a0 82 ca 33 9c 1c 67 8e bd 0e 79 ef fe 34 00 87 38 e7 d7 be 41 07 be 28 ed ea 3a 01 ed d7 a7 e1 d2 93 68 eb ed eb fe 7d a9 c0 61 9b 39 38 3d 4f 51 e8 7f 0a 00 66 0a 91 9d b9 c6 09 51 8c fb fb 7d 29 48 3d 33 ea 40 23 95 f7 fe 54 63 28 0e 02 8c 60 05 f4 ff 00 3c d1 96 29 f2 12 c7 9c 63 90 7a fa 7b 53 01 b8 db 97 e4 63 8c e2 9a 01 73 b5 86 31 db 27 8e dd bf 0a 72 81 82 c3 6e e1 c7 4e 0f f9 ed ff 00 d6 a3 19 5c 75 04 ed f6 23 9f ce 80 1a 03 64 90 0f 39 24 11 8e ab cf f4 a4 65 de 72 46 5b 83 c0 eb ce 3b ff 00 fa e9 4e 30 0f 00 8c 9d c4 76 1c f4 e3 a6 68 70 0a 9c 0c 03 c8 1f 4e 78 ef f8 fb 50 03 09 ea 5b a7 3c 1f d2 9a dc 12 b8 2c 33 8e 57 07 39 cf 4e d4 f0 42 be 38 e7 9c 02 3f 91 a4 c6 31 97 Data Ascii: '*ss3gy48A(:h}a98=OQfQ})H=3@#Tc(`<)cz{Scs1'rnN\u#d9$erF[;N0vhpNxP[<,3W9NB8?1
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: ad 40 ab 9d dc 00 47 39 3d 6a ba 64 92 fe e4 6e fa 0e 3f cf e5 57 22 c8 39 6d d9 03 77 27 3c 7f 9f eb c5 21 96 63 cb 03 b8 8c 91 d3 1d 45 59 0c 1b 21 80 cf 63 d7 f2 07 fa fe 15 04 5b 49 50 bc 64 f0 73 f9 10 7f 03 52 96 1c 72 ca a3 2c 5b bf 3e 9f ad 03 1f bb 0b 96 27 03 9c 03 eb c8 1f cf a5 26 e2 01 ea 46 71 9c e3 1e df 5c 9a 4c b0 3f c2 0f b9 3c 13 db fc fa 51 f2 92 41 ca 91 cf 6f 5a 40 38 b2 9c 9c 0e 4e 01 c6 d0 7f 5f 4c 7e b4 83 24 13 d7 93 80 7e bf cf 38 a4 ef f3 0c 12 48 3e fe bc f4 a4 04 10 5c 71 ce e5 27 23 e8 46 7f 97 d6 8b 00 e5 2c 79 56 04 03 80 72 47 4e 7f c7 f9 8a 37 36 37 67 d4 8c 9e 47 f9 e2 91 c8 18 18 1b 73 b4 64 0e f9 38 3e 9c ff 00 2a 4d c4 8c e3 92 3b 7a 7f 8f 7a 2c 03 f7 0d e7 20 8c 9e 9d 07 be 47 71 c7 4f 6a 38 65 5c f3 8e 58 0e fc 0f Data Ascii: @G9=jdn?W"9mw'<!cEY!c[IPdsRr,[>'&Fq\L?<QAoZ@8N_L~$~8H>\q'#F,yVrGN767gGsd8>*M;zz, GqOj8e\X
2024-10-20 22:14:52 UTC	1369	IN	Data Raw: fe 05 fe 7a d3 b7 f4 20 ed 1d 86 3a 71 df 8f f3 cd 2b 05 cb c9 20 c8 da a0 63 18 0a 70 0f bf d3 8a 95 24 e0 6d 24 1e 4f ca 3d 3a fa fb 1f ca b3 d2 71 bb 19 c3 9e 0f a7 4e a4 fe 54 f5 90 74 0b f3 1c e0 2f 27 fc f1 4b 94 77 34 56 55 2c 10 e3 a7 a9 e8 07 41 f9 66 9e 5d 4a 9c ee 18 00 92 38 ff 00 27 fc f6 ac ff 00 33 e6 db 91 80 07 4e 83 a7 e7 c8 ff 00 39 a7 a4 f9 5f 97 9c 7a 74 c6 3f 97 d6 8e 50 b9 70 63 27 1b 46 3d b1 b7 af f5 f5 e2 80 ad b3 07 83 dc 67 a9 f4 fe 5c 7f f5 ea ba dc 02 47 cd bc 13 d0 f4 3c f1 fc a9 de 7a 9c 0e 49 23 a6 38 27 03 23 f4 1c d2 b0 5c 79 8d 73 c0 07 af 3d 3f fa fd f1 8f eb 4c 91 54 97 66 c1 39 00 65 b3 fa 7e 1f af d2 95 99 1c 92 54 fd dc 64 70 4f 3f cb be 3f 5a 6b 3f f1 10 48 ce 14 16 c1 e9 da a8 08 5e 3c 28 21 71 85 db 92 39 3c fb Data Ascii: z :q+ cp$m$O=:qNTt/'Kw4VU,Af]J8'3N9_zt?Ppc'F=g\G<zI#8'#\ys=?LTf9e~TdpO??Zk?H^<(!q9<

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:51 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:52 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221452Z-16c4998b89bzpptd4xkb33bzng000000020g00000000nbh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:52 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:51 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:52 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221452Z-16c4998b89bpjcmqcydug5crk800000002600000000069vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:52 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:51 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:52 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221452Z-16c4998b89bgzr9ryr1qrwpe1w00000001wg00000000xv4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:52 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:51 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:52 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221452Z-16c4998b89bbfcp8g8yt8rn7h00000000260000000005afv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:52 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:51 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:52 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221452Z-16c4998b89b2rv6lm167hd6wr8000000028g000000006374 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:52 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:53 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:53 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bcb88dd7-c01e-0079-47cd-21e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221453Z-16c4998b89b9bnglyhfn31dsy4000000025000000000an8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:53 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:53 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221453Z-16c4998b89bgwq87xczx5msh6c000000023000000000m41p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:53 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221453Z-16c4998b89bddwz8qtftvr08un000000022000000001bh20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:53 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:53 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221453Z-16c4998b89bgwq87xczx5msh6c0000000260000000006kev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:53 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:53 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221453Z-16c4998b89bddwz8qtftvr08un000000029g000000000c8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:54 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221454Z-16c4998b89bxnvn4z8bkannvtn000000024g00000000d1fr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:54 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:54 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221454Z-16c4998b89b7pjkhd0u8x344rs00000001yg00000000fes9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:54 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:54 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221454Z-16c4998b89bk7mvweca297fwv4000000022000000000u9x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:54 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:54 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221454Z-16c4998b89b7jpjl4rem96730s00000001y000000000mzs7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:54 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:54 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 0d728fc6-301e-0000-17e3-21eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221454Z-16c4998b89bgs72bwd9m1pn9ec000000020000000000q7kg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:54 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:55 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:55 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 847e2871-001e-0079-66e3-2112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221455Z-16c4998b89bk7mvweca297fwv4000000024g00000000f1pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:55 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:55 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:55 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221455Z-16c4998b89bjhclnycnwufct2g000000025g00000000krbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:55 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:55 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:55 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221455Z-16c4998b89bdss8hhmumwy6p40000000022000000000er5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:55 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:55 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:55 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 968807c2-e01e-0052-0805-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221455Z-16c4998b89bmjc55ufxy735f24000000020g00000000m4qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:55 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:55 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:55 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221455Z-16c4998b89bxnvn4z8bkannvtn000000025g000000009255 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:55 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:56 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221456Z-16c4998b89b9t5hpmps51cqdcs00000001xg00000000p6vq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:56 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221456Z-16c4998b89bddwz8qtftvr08un000000024000000000yyfa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:56 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:56 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221456Z-16c4998b89bpjcmqcydug5crk800000001zg0000000153ea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:56 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:56 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:56 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 00f7314e-e01e-0052-48ac-21d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221456Z-16c4998b89b2rv6lm167hd6wr8000000027000000000e7uy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:56 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:56 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221456Z-16c4998b89bpjcmqcydug5crk80000000260000000006a76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:56 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:57 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221457Z-16c4998b89bxnvn4z8bkannvtn000000025000000000b0hu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:57 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:57 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221457Z-16c4998b89bddwz8qtftvr08un000000024g00000000vz8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:57 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:57 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:57 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221457Z-16c4998b89bddwz8qtftvr08un000000027000000000dmcn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:57 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:57 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221457Z-16c4998b89bgg6wv1u6pvknne000000001w000000000wwgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:57 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:57 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221457Z-16c4998b89bpjcmqcydug5crk800000001zg0000000153gd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:57 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:58 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:58 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221458Z-16c4998b89bpjcmqcydug5crk8000000021g00000000vvap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:58 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:58 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221458Z-16c4998b89bgwq87xczx5msh6c000000023000000000m4vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:58 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:58 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:58 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221458Z-16c4998b89b9bnglyhfn31dsy4000000023g00000000hkea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:58 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:58 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221458Z-16c4998b89bgzr9ryr1qrwpe1w00000001vg000000011sg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:59 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:58 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221458Z-16c4998b89bk7mvweca297fwv40000000200000000015mcp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:59 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:14:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 8700b1e1-801e-008f-0e93-212c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221459Z-16c4998b89bwzp5s8232wk5p1g00000001xg000000015a38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:14:59 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:59 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221459Z-16c4998b89bgg6wv1u6pvknne000000001xg00000000pnv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:59 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221459Z-16c4998b89b4ppvmbs4wd7kqwc00000001x0000000018gnr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:00 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:14:59 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:00 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 3e897e27-701e-006f-014d-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221500Z-16c4998b89bgwq87xczx5msh6c000000024g00000000bz1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:00 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:00 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:00 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221500Z-16c4998b89b4ppvmbs4wd7kqwc000000020g00000000qw98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:00 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:00 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:01 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:00 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221500Z-16c4998b89bgg6wv1u6pvknne000000001y000000000mvae x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:01 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:00 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:01 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221501Z-16c4998b89bdss8hhmumwy6p40000000023g000000007990 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:01 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:01 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:01 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221501Z-16c4998b89bndv2cxzkwx191ww000000025000000000r60u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:01 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49797	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:01 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4b 5a 5a 2f 51 31 32 51 75 30 43 5a 47 42 37 2b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 61 38 65 33 38 36 33 65 36 65 34 38 34 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: KZZ/Q12Qu0CZGB7+.1Context: e7a8e3863e6e4842
2024-10-20 22:15:01 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-20 22:15:01 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4b 5a 5a 2f 51 31 32 51 75 30 43 5a 47 42 37 2b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 61 38 65 33 38 36 33 65 36 65 34 38 34 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 31 5a 53 39 4f 64 57 31 46 67 74 39 2b 54 76 58 6a 61 56 68 68 36 74 79 66 34 6b 4d 78 47 78 73 36 74 34 37 53 55 54 52 32 74 37 67 51 48 66 64 70 77 75 4f 6a 51 41 57 44 54 4d 4a 6e 51 72 71 44 45 71 71 30 59 32 56 56 68 51 6f 4e 78 59 6f 62 73 59 44 6f 33 4e 61 62 4b 43 51 76 73 50 67 4d 33 59 49 6b 44 58 66 54 46 70 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: KZZ/Q12Qu0CZGB7+.2Context: e7a8e3863e6e4842<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAT1ZS9OdW1Fgt9+TvXjaVhh6tyf4kMxGxs6t47SUTR2t7gQHfdpwuOjQAWDTMJnQrqDEqq0Y2VVhQoNxYobsYDo3NabKCQvsPgM3YIkDXfTFpt
2024-10-20 22:15:01 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 4b 5a 5a 2f 51 31 32 51 75 30 43 5a 47 42 37 2b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 61 38 65 33 38 36 33 65 36 65 34 38 34 32 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: KZZ/Q12Qu0CZGB7+.3Context: e7a8e3863e6e4842
2024-10-20 22:15:01 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-20 22:15:01 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 52 64 2f 48 66 46 63 2b 72 55 79 4d 41 69 2b 6a 73 42 30 33 46 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Rd/HfFc+rUyMAi+jsB03Fw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:01 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:02 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221502Z-16c4998b89bwzp5s8232wk5p1g00000001x0000000018t9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:02 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:02 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:02 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221502Z-16c4998b89bsd955kt41610a8000000001t00000000129gd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:02 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:02 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221502Z-16c4998b89bk7mvweca297fwv4000000021g00000000x7cm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:02 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 7082da1f-601e-003d-073e-226f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221502Z-16c4998b89bgzqvgnnyu3npcdn00000001sg000000015zgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:03 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221503Z-16c4998b89b7pjkhd0u8x344rs00000001zg00000000amdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:03 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221503Z-16c4998b89b528g2b5wgcgb9yn00000001x000000000qwcg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:03 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221503Z-16c4998b89b2rv6lm167hd6wr8000000023000000001647w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:03 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221503Z-16c4998b89b6vm9d871kpg3tf8000000024g00000000rvv4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:04 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221504Z-16c4998b89bgzr9ryr1qrwpe1w00000001y000000000nuh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:04 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221504Z-16c4998b89bzxs4x4wx5s60fqw00000002900000000039mu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:04 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 09cb71da-201e-0033-6911-22b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221504Z-16c4998b89bmjc55ufxy735f2400000001z000000000uzmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-20 22:15:04 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-20 22:15:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 22:15:04 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: acb2ef9b-e01e-001f-1f33-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241020T221504Z-16c4998b89bgzr9ryr1qrwpe1w0000000220000000001nwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-20 22:15:04 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2688, Parent PID: 6052

General

Target ID:	0
Start time:	18:14:38
Start date:	20/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6220, Parent PID: 2688

General

Target ID:	2
Start time:	18:14:42
Start date:	20/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2480,i,14432624337751521977,12495694239076940357,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7012, Parent PID: 6052

General

Target ID:	3
Start time:	18:14:45
Start date:	20/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://democrats.org/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php?action=frmpro_css&ver=9242122 HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?m=1725982252g HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/style.css?m=1729089554g HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uklFxfr6OPTDpRD5sM02efaGpobmVpaGBmZGgEARN0u5g== HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/src/js/vendor/jquery.js?m=1721416559g HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /locate/widget-v2.css HTTP/1.1Host: iwillvote.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/img/footer-logo.svg HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /samples/widget.js HTTP/1.1Host: ak.democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/51225586480_45a461ef95_o-3-1-e1728671125484.jpg HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/img/footer-logo.svg HTTP/1.1Host: democrats.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/Vote-CTA-image-e1728660119427.jpg HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/Calls-CTA-image-e1728660041897.jpg HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/51225586480_45a461ef95_o-3-1-e1728671125484.jpg HTTP/1.1Host: democrats.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/Vote-CTA-image-e1728660119427.jpg HTTP/1.1Host: democrats.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: democrats.org
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: cloud.typography.com
Source: global traffic	DNS traffic detected: DNS query: iwillvote.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ak.democrats.org
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.14
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://democrats.org/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 34

Chrome Cache Entry: 35

Chrome Cache Entry: 36

Chrome Cache Entry: 37

Chrome Cache Entry: 38

Chrome Cache Entry: 39

Chrome Cache Entry: 40

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Chrome Cache Entry: 43

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2688, Parent PID: 6052

General

Windows Analysis Report
https://democrats.org/