Edit tour

Windows Analysis Report
https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document

Overview

General Information

Sample URL:	https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document
Analysis ID:	1542421
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5956 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1976,i,3445806602069595460,3655185590131097478,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/5403944/envelope/?sentry_key=c50fa9f3bfcc4ee3bd4a5eca6add3a1b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveContent-Length: 465sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_71.2.dr, chromecache_60.2.dr

String found in binary or memory: https://github.com/getsentry/sentry-javascript

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 51984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 52077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52009
Source: unknown	Network traffic detected: HTTP traffic on port 52002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52003
Source: unknown	Network traffic detected: HTTP traffic on port 52048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52000
Source: unknown	Network traffic detected: HTTP traffic on port 52105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52007
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52004
Source: unknown	Network traffic detected: HTTP traffic on port 52083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52005
Source: unknown	Network traffic detected: HTTP traffic on port 52066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52010
Source: unknown	Network traffic detected: HTTP traffic on port 51989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52019
Source: unknown	Network traffic detected: HTTP traffic on port 52055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52013
Source: unknown	Network traffic detected: HTTP traffic on port 52084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52012
Source: unknown	Network traffic detected: HTTP traffic on port 52061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52017
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52016
Source: unknown	Network traffic detected: HTTP traffic on port 52042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51976
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52022
Source: unknown	Network traffic detected: HTTP traffic on port 52025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52029
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52026
Source: unknown	Network traffic detected: HTTP traffic on port 52067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52027
Source: unknown	Network traffic detected: HTTP traffic on port 52019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52030
Source: unknown	Network traffic detected: HTTP traffic on port 52036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 52076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 52026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 52032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 52094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 52054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 52004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52103
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52104
Source: unknown	Network traffic detected: HTTP traffic on port 52043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 52099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 52005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52077
Source: unknown	Network traffic detected: HTTP traffic on port 51975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52078
Source: unknown	Network traffic detected: HTTP traffic on port 52063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52086
Source: unknown	Network traffic detected: HTTP traffic on port 52040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52085
Source: unknown	Network traffic detected: HTTP traffic on port 52092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52089
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52096
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52099
Source: unknown	Network traffic detected: HTTP traffic on port 52045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51988
Source: unknown	Network traffic detected: HTTP traffic on port 52030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51987
Source: unknown	Network traffic detected: HTTP traffic on port 52001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52035
Source: unknown	Network traffic detected: HTTP traffic on port 52047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51981
Source: unknown	Network traffic detected: HTTP traffic on port 52024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51985
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52038
Source: unknown	Network traffic detected: HTTP traffic on port 52018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52042
Source: unknown	Network traffic detected: HTTP traffic on port 51988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52041
Source: unknown	Network traffic detected: HTTP traffic on port 52096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51998
Source: unknown	Network traffic detected: HTTP traffic on port 52006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52044
Source: unknown	Network traffic detected: HTTP traffic on port 52062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51995
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52049
Source: unknown	Network traffic detected: HTTP traffic on port 52101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52054
Source: unknown	Network traffic detected: HTTP traffic on port 52013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52052
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52057
Source: unknown	Network traffic detected: HTTP traffic on port 52106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52059
Source: unknown	Network traffic detected: HTTP traffic on port 52068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52062
Source: unknown	Network traffic detected: HTTP traffic on port 52012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52063
Source: unknown	Network traffic detected: HTTP traffic on port 52035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52069
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52067
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52071
Source: unknown	Network traffic detected: HTTP traffic on port 52091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52074
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52074 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:51975 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/28@22/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1976,i,3445806602069595460,3655185590131097478,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1976,i,3445806602069595460,3655185590131097478,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
o13855.ingest.sentry.io	34.120.195.249	true	false	unknown
static.canva.com	104.16.103.112	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
www.canva.com	104.16.103.112	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false	URL Reputation: safe	unknown
https://o13855.ingest.sentry.io/api/5403944/envelope/?sentry_key=c50fa9f3bfcc4ee3bd4a5eca6add3a1b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0	false		unknown
https://a.nel.cloudflare.com/report/v4?s=s70mUGCgEkJKJiZ8aPZxfepMUzV8%2FS0mJAjcQpiGBEfgcXVkI%2BKQOLauCvUaX7BbcFM5iXvHCl8UBRn27VmxBjFR0JfGr0JZf5FZx0eIJ%2Fq7DwMt4Fq%2BeNSu%2BoZEwy4%3D	false		unknown
https://static.canva.com/static/images/favicon-1.ico	false		unknown
https://www.canva.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/e1a56f38220d/main.js?	false		unknown
https://static.canva.com/web/lrxlcv.40cddb0fa0d4dfad.ltr.css	false		unknown
https://static.canva.com/web/143b3cccb450cc5d.strings.js	false		unknown
https://static.canva.com/web/205dddee09e475f6.runtime.js	false		unknown
https://static.canva.com/web/lrxlcv.6f252c89c2f71f57.js	false		unknown
https://a.nel.cloudflare.com/report/v4?s=bac7nTFLeSwiHRrvUckC%2FEtvsS7Zx3AbrL3WxBUqgH3EN6r6WHvYh%2FdpTbYKahRi%2BQW3FCX0ss1%2Fco8FQ1ulmBaBRuiRcKMHwKg6oLsiryxfTNVrbdh5FNx4%2FiI6%2BrMI%2BBU%3D	false		unknown
https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document	false		unknown
https://www.canva.com/cdn-cgi/rum?	false		unknown
https://static.canva.com/static/lib/sentry/7.16.0.min.js	false		unknown
https://static.canva.com/web/387e316e7fce97e3.vendor.js	false		unknown
https://static.canva.com/web/9a2311e7590ee117.vendor.js	false		unknown
https://www.canva.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false		unknown
https://www.canva.com/cdn-cgi/challenge-platform/h/b/jsd/r/8d84eb191be92cab	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/getsentry/sentry-javascript	chromecache_71.2.dr, chromecache_60.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
104.16.103.112	static.canva.com	United States	13335	CLOUDFLARENETUS	false
104.16.102.112	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
34.120.195.249	o13855.ingest.sentry.io	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542421
Start date and time:	2024-10-25 22:21:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/28@22/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.185.78, 64.233.166.84, 34.104.35.123, 172.202.163.200, 93.184.221.240, 13.85.23.206, 192.229.221.95, 13.95.31.18, 20.3.187.198, 131.107.255.255, 172.217.16.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, dns.msftncsi.com, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48296)
Category:	downloaded
Size (bytes):	48366
Entropy (8bit):	5.758679506544993
Encrypted:	false
SSDEEP:	768:gkbMqdkap5xBG2wxeTPsGYQLFBBUAFnr+JE/Ri+q:gkbMqdkabG2wx0LwJE/RQ
MD5:	97192A431BA3352DB3EBAFE53B0F26E3
SHA1:	BFD4343F452E8EA450C1D175BBDCDD66B9F6587B
SHA-256:	C0B40D1F7600ECF153CC3B832911543ED89800A551971AEF7BA6FA3DCE991DEB
SHA-512:	1B13A5AEFC9B27AADE12D339DE9A47F829B0CD99734F9A227BAC9DBF22A93477AA00663EFB8D3B0C4741767BBC2835C0A8763C4590DAAB5B817DB80C345858F1
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/lrxlcv.40cddb0fa0d4dfad.ltr.css
Preview:	.theme{color-scheme:var(--4h-m_A)}.light{--4h-m_A:light;--Zpa-KA:#00c4cc;--eGVbng:#8b3dff;--M5_pvA:#7731d8;--boKKWg:#612dae;--oqurdw:rgba(64,87,109,.07);--d1p99w:#fff;--17LfHw:rgba(36,49,61,.4);--EgWgfg:rgba(13,18,22,0);--X3--Zg:rgba(64,87,109,.07);--xfy86Q:rgba(57,76,96,.15);--p53f_Q:rgba(13,18,22,0);--REcY5g:#0d1216;--XajtPQ:rgba(36,49,61,.4);--FVk7Ew:rgba(165,112,255,.15);--2-zmYA:rgba(165,112,255,.15);--ySYdsQ:rgba(165,112,255,.2);--aMXh3A:rgba(64,87,109,.07);--_RN1Dg:#612dae;--8fGzbw:rgba(36,49,61,.4);--ob8tTA:rgba(13,18,22,0);--MghLXQ:rgba(64,87,109,.07);--3R4u8w:rgba(57,76,96,.15);--TwiLcg:rgba(13,18,22,0);--QeQ0Dw:#0d1216;--TZOI7A:rgba(36,49,61,.4);--SZMkXA:rgba(165,112,255,.15);--1zesEA:rgba(165,112,255,.15);--AMxRgw:rgba(165,112,255,.2);--BZ60Jw:rgba(64,87,109,.07);--8Ex5gA:#612dae;--spIP2A:rgba(36,49,61,.4);--KtXlRg:rgba(17,23,29,.6);--QADODw:rgba(13,18,22,.7);--kTBxcw:rgba(13,18,22,.86);--HxK_kw:rgba(17,23,29,.6);--6u-yJQ:#fff;--J0YKvA:hsla(0,0%,100%,.7);--yrvb-A:rgba(57,76

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1979)
Category:	downloaded
Size (bytes):	2287
Entropy (8bit):	5.2296089244273425
Encrypted:	false
SSDEEP:	48:XCkEB1X88BCtwWBEXXBub6VZAHOEyhw5LWuU1EM8J+BCgbsB+0sxqkXg:ykQsQCnWXRu+ZAHOEOMWP1+IC5sxTw
MD5:	D631573FB1805FDA9C7668B7F1534161
SHA1:	C0D1D5B810551A163C4F281A4054EC4746CF8D97
SHA-256:	8D00030369DCC69DDE6FEA77A7606D298E6044DC5A014642186855C8423F9DF9
SHA-512:	84EE473C021F7960CE27EB92D332FC020F8E1989F512C9CC1A943A428FD644B1E7343C8B37EAB6EBB81CD94EC89E4897A02270A31C478C8E6CA772DC16060D20
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/143b3cccb450cc5d.strings.js
Preview:	(function() {. const messages = JSON.parse("{\"LE4MeQ\":\"Esc\",\"M50kBA\":\"Previous\",\"yLWiZA\":\"Ctrl\",\"PRfNzQ\":\"The page you intend to visit <strong>({0})</strong> does not exist or is invalid.\",\"mz4S4Q\":\"If this page has been wrongly flagged, <a href=\\\"mailto:trust@canva.com\\\">contact us</a>.\",\"E7JssA\":\"If you do not wish to continue, you can close this tab and return to Canva.\",\"Bx2HpA\":\"Continue to external site\",\"H5sJ6g\":\"<strong>{0}</strong> has been reported as a deceptive website.\",\"7ht4CQ\":\"Close\",\"VSJwUw\":\"(opens in a new tab or window)\",\"guY7ag\":\"We.re having some problems\",\"ocgyVw\":\"Alt\",\"OD1mVA\":\"If it doesn.t seem right, report it.\",\"6dyjdg\":\"Suspicious of this website?\",\"DXHOoA\":\"Go back\",\"1vUiEw\":\"Up\",\"VxF86A\":\"To keep using Canva, get the latest version of the app.\",\"qk+C4A\":\"Warning: Invalid URL\",\"gJDegw\":\"It may trick you into doing something dangerous like installing software, or revealing y

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1979)
Category:	dropped
Size (bytes):	2287
Entropy (8bit):	5.2296089244273425
Encrypted:	false
SSDEEP:	48:XCkEB1X88BCtwWBEXXBub6VZAHOEyhw5LWuU1EM8J+BCgbsB+0sxqkXg:ykQsQCnWXRu+ZAHOEOMWP1+IC5sxTw
MD5:	D631573FB1805FDA9C7668B7F1534161
SHA1:	C0D1D5B810551A163C4F281A4054EC4746CF8D97
SHA-256:	8D00030369DCC69DDE6FEA77A7606D298E6044DC5A014642186855C8423F9DF9
SHA-512:	84EE473C021F7960CE27EB92D332FC020F8E1989F512C9CC1A943A428FD644B1E7343C8B37EAB6EBB81CD94EC89E4897A02270A31C478C8E6CA772DC16060D20
Malicious:	false
Reputation:	low
Preview:	(function() {. const messages = JSON.parse("{\"LE4MeQ\":\"Esc\",\"M50kBA\":\"Previous\",\"yLWiZA\":\"Ctrl\",\"PRfNzQ\":\"The page you intend to visit <strong>({0})</strong> does not exist or is invalid.\",\"mz4S4Q\":\"If this page has been wrongly flagged, <a href=\\\"mailto:trust@canva.com\\\">contact us</a>.\",\"E7JssA\":\"If you do not wish to continue, you can close this tab and return to Canva.\",\"Bx2HpA\":\"Continue to external site\",\"H5sJ6g\":\"<strong>{0}</strong> has been reported as a deceptive website.\",\"7ht4CQ\":\"Close\",\"VSJwUw\":\"(opens in a new tab or window)\",\"guY7ag\":\"We.re having some problems\",\"ocgyVw\":\"Alt\",\"OD1mVA\":\"If it doesn.t seem right, report it.\",\"6dyjdg\":\"Suspicious of this website?\",\"DXHOoA\":\"Go back\",\"1vUiEw\":\"Up\",\"VxF86A\":\"To keep using Canva, get the latest version of the app.\",\"qk+C4A\":\"Warning: Invalid URL\",\"gJDegw\":\"It may trick you into doing something dangerous like installing software, or revealing y

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8181), with no line terminators
Category:	dropped
Size (bytes):	8181
Entropy (8bit):	5.747261124149234
Encrypted:	false
SSDEEP:	96:hcL/HB8sqP2dyKJCw5Ud09ayv6A9uNhyevfSwg9zTwR+QGopRFqc79JnMZ:CrHizOddCwSd0kyvxCUjT9wYSr8ik
MD5:	5219A13A497C5B3A4A8770FF542877D0
SHA1:	8EADF1C9C8C7E6AB78BA9B8B08073A4020BB35C8
SHA-256:	5AB3358324AD4F0B9BC2B8417DF0467D1088FBD31443ED2EB41F7285D2011FD1
SHA-512:	FAE0CF45A55225E9438074B7DDD9A5D8CB615B0F530465B4A64506774D3BDDC7380AC2C1BC4C38F12397A1A090800F442D06EC0B355018B0C2780F672DA87421
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,o,s,B){V=b,function(d,e,U,f,g){for(U=b,f=d();!![];)try{if(g=-parseInt(U(233))/1+-parseInt(U(216))/2+-parseInt(U(272))/3(-parseInt(U(284))/4)+-parseInt(U(305))/5(parseInt(U(298))/6)+parseInt(U(243))/7(-parseInt(U(307))/8)+-parseInt(U(304))/9(parseInt(U(240))/10)+parseInt(U(295))/11*(parseInt(U(223))/12),g===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,762257),h=this\|\|self,i=h[V(302)],j={},j[V(306)]='o',j[V(225)]='s',j[V(244)]='u',j[V(220)]='z',j[V(238)]='n',j[V(251)]='I',j[V(213)]='b',k=j,h[V(314)]=function(g,D,E,F,a0,H,I,J,K,L,M){if(a0=V,null===D\|\|void 0===D)return F;for(H=n(D),g[a0(309)][a0(278)]&&(H=H[a0(274)](g[a0(309)][a0(278)](D))),H=g[a0(260)][a0(318)]&&g[a0(254)]?g[a0(260)][a0(318)](new g[(a0(254))](H)):function(N,a1,O){for(a1=a0,N[a1(269)](),O=0;O<N[a1(277)];N[O]===N[O+1]?N[a1(235)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(287)][a0(293)](I),J=0;J<H[a0(277)];K=H[J],L=m(g,D,K),I(L)?(M='s'===L&&

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55289)
Category:	downloaded
Size (bytes):	55418
Entropy (8bit):	5.2011745666689
Encrypted:	false
SSDEEP:	768:7Snb/BBuuGki0usgH8bdwB005NLqrbcSb4sA7CctFzBmBv4L7HelSWVoz8WlqdLZ:70q8berM2bW6X49yWx1ZSDh/33s
MD5:	16E5D529039D25735AE0BA1D610125E8
SHA1:	D7CAA746424A018583EC1E097F74A484C4FB1811
SHA-256:	C6DE703F8EE214808496DCD92795AC8971782935ED75ABDD5624C814E69DAAEA
SHA-512:	56AC6CDABC05070E1440C8CA4A60119B3555B2743BA8652A2A0282701ECC8E150AC343020D620D3F5CD6406F04966CDE54FD797530149AD0B2711E44F89165D0
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/static/lib/sentry/7.16.0.min.js
Preview:	/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return h(t,Error)}}function r(t,e){return n.call(t)===`[object ${e}]`}function i(t){return r(t,"ErrorEvent")}function s(t){return r(t,"DOMError")}function o(t){return r(t,"String")}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return r(t,"Object")}function a(t){return"undefined"!=typeof Event&&h(t,Event)}function f(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function h(t,n){try{return t instanceof n}catch(t){return!1}}function l(t){return t&&t.Math==Math?t:void 0}const d="object"==typeof globalThis&&l(globalThis)\|\|"object"==typeof window&&l(window)\|\|"object"==typeof self&&l(self)\|\|"object"==typeof global&&l(global)\|\|function(){return this}()\|\|{};function p(t,n,e){const r

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	dropped
Size (bytes):	204452
Entropy (8bit):	5.28093716766383
Encrypted:	false
SSDEEP:	3072:1RsYsv95EH3i0uW2AheWnAEk+uNyOinZ0qRR1Lf:Y5EH3i0/2HWAEkxsDZhPf
MD5:	02D8436722F1F2095DC9706BBF600D74
SHA1:	8862AE77407622FB9B7081EE807973DD930075EC
SHA-256:	6A43C8C19F7C91478E2E69151C1D33D3D948CCAA0265E5B17C5DEA14999115B9
SHA-512:	96698ED454F9C89CFC0ED2294D5D6B48942D659D70925D180CF52D75A080C2158FE53BE78FF8FF0BECBDCD3EF2BB7F3BB0DA61F413EECE015FECBFBBA141994F
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 387e316e7fce97e3.vendor.js.LICENSE.txt /."use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{40749:(e,t,n)=>{n(366995)},736241:(e,t,n)=>{n.d(t,{DT:()=>o.D,FY:()=>o.F,Pi:()=>u.P,fv:()=>s.f,jd:()=>l.O});n(454648);var r,a=n(404935),i=n(695578),o=(n(366995),n(775328)),l=n(751586),u=n(364620),s=(n(40749),n(818321));n(948591),n(24765);(0,i.z0)(a.m);r=l.O.finalizeAllImmediately},364620:(e,t,n)=>{n.d(t,{P:()=>d});var r,a,i=n(875604),o=n(775328),l=n(366995),u="function"==typeof Symbol&&Symbol.for,s=null!==(a=null===(r=Object.getOwnPropertyDescriptor((function(){}),"name"))\|\|void 0===r?void 0:r.configurable)&&void 0!==a&&a,c=u?Symbol.for("react.forward_ref"):"function"==typeof i.forwardRef&&(0,i.forwardRef)((function(e){return null})).$$typeof,f=u?Symbol.for("react.memo"):"function"==typeof i.memo&&(0,i.memo)((function(e){return null})).$$typeof;function d(e,t){var n;if(f&&e.$$typeof===f)throw new Error("[mobx-react-lit

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	downloaded
Size (bytes):	204452
Entropy (8bit):	5.28093716766383
Encrypted:	false
SSDEEP:	3072:1RsYsv95EH3i0uW2AheWnAEk+uNyOinZ0qRR1Lf:Y5EH3i0/2HWAEkxsDZhPf
MD5:	02D8436722F1F2095DC9706BBF600D74
SHA1:	8862AE77407622FB9B7081EE807973DD930075EC
SHA-256:	6A43C8C19F7C91478E2E69151C1D33D3D948CCAA0265E5B17C5DEA14999115B9
SHA-512:	96698ED454F9C89CFC0ED2294D5D6B48942D659D70925D180CF52D75A080C2158FE53BE78FF8FF0BECBDCD3EF2BB7F3BB0DA61F413EECE015FECBFBBA141994F
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/387e316e7fce97e3.vendor.js
Preview:	/! For license information please see 387e316e7fce97e3.vendor.js.LICENSE.txt /."use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{40749:(e,t,n)=>{n(366995)},736241:(e,t,n)=>{n.d(t,{DT:()=>o.D,FY:()=>o.F,Pi:()=>u.P,fv:()=>s.f,jd:()=>l.O});n(454648);var r,a=n(404935),i=n(695578),o=(n(366995),n(775328)),l=n(751586),u=n(364620),s=(n(40749),n(818321));n(948591),n(24765);(0,i.z0)(a.m);r=l.O.finalizeAllImmediately},364620:(e,t,n)=>{n.d(t,{P:()=>d});var r,a,i=n(875604),o=n(775328),l=n(366995),u="function"==typeof Symbol&&Symbol.for,s=null!==(a=null===(r=Object.getOwnPropertyDescriptor((function(){}),"name"))\|\|void 0===r?void 0:r.configurable)&&void 0!==a&&a,c=u?Symbol.for("react.forward_ref"):"function"==typeof i.forwardRef&&(0,i.forwardRef)((function(e){return null})).$$typeof,f=u?Symbol.for("react.memo"):"function"==typeof i.memo&&(0,i.memo)((function(e){return null})).$$typeof;function d(e,t){var n;if(f&&e.$$typeof===f)throw new Error("[mobx-react-lit

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4414
Entropy (8bit):	5.9195472440471955
Encrypted:	false
SSDEEP:	96:v6LQztmnE2hqFJmd7l0TlPInbSqVpWV9gr9Fb3+:bs4oCTlGbSqVpWXw9p
MD5:	A0C86DA7FC37EA50E848C4733761D53E
SHA1:	7B53A4FE8198AA654C02282134DCC19E0C07CC9A
SHA-256:	EC2FBAD47E598FE06C7A2B825224B3B1B8D8221F3002E6370E627D459FF0634A
SHA-512:	6FD3BB6D1392F89DCF63A37A9086517620A63C6D933885ACDB61F99BB8AF137D2DD184C59EF92C173E214711DCEAE9585A5B574AFB422A4A0969D99C86264339
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/static/images/favicon-1.ico
Preview:	...... .... .(.......(... ...@..... ......................................................@...........#h..!g\."h..!i..#k..$l..$n..$o..%q..%r..'s[.#t..........@...................................................UU..........,]).+_..)b..j..)l..'l..%l..$k..#m..$q..&u..(y..(z..&t..&u..%v)..........U......................................@@..........3Y..1[..4b..1]..0\..0^../`..,c..+f..)i..&l..%o..%q..&s..&t..)\|..'v..(v..........@...............................33......8X .7V..;]..7V..8W..7W..7X..8Z..=_..?b..?e..<g..5g..-i..m..(q..&s..&t..'u.....(x..(x .....3f......................@@......CN..?R..@W..=R..=R..>S..?S..GZ..<S...?...5...6...@..!T..?f..;i..0j..-o..)s..'u..'w..}..(y..'z......@...............UU......PP .HL..IO..EN..DO..CN..GQ..GQ...!..HR................ly...B...O..Dh..7g..3l...q..)v..(w..)\|..)z..(x ......U..................SG..UK..PG..NI..LI..NN..FF..76..................................\|....>..He..=e..8i..3o..-t..*w..+...){..............@......\A..cG..ZB..XC..VD..VG..QC..OA...

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8052), with no line terminators
Category:	downloaded
Size (bytes):	8052
Entropy (8bit):	5.755947887443428
Encrypted:	false
SSDEEP:	192:rgGj2Bn27qsmEbg6mdKs35mhcxyHl2fM0X:MGj2BnwmEbg6mdKsaCCy7
MD5:	2D358E3F876772AC8831AA3D1241EA02
SHA1:	5BC6BE17F8056F0645728A31B426F1AF1613B1D4
SHA-256:	F8E19A5BEDEF8F222AE4545C48A5724F8259F6ACE049BF17C8FF18E706B9E325
SHA-512:	60FC342D3A1B62E6A1A477F8F8DC433FFA381352B277628C715E0F2CC4BB39446F60E6E444AC20EEB1CABC2846D8DC49F625DD24020BDF2D168911927F73C1A9
Malicious:	false
Reputation:	low
URL:	https://www.canva.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/e1a56f38220d/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,o,s,x){V=b,function(d,e,U,f,g){for(U=b,f=d();!![];)try{if(g=parseInt(U(407))/1+-parseInt(U(373))/2+-parseInt(U(378))/3+-parseInt(U(321))/4+-parseInt(U(358))/5+parseInt(U(395))/6*(-parseInt(U(345))/7)+parseInt(U(354))/8,g===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,539638),h=this\|\|self,i=h[V(299)],j={},j[V(362)]='o',j[V(386)]='s',j[V(308)]='u',j[V(350)]='z',j[V(397)]='n',j[V(401)]='I',j[V(371)]='b',k=j,h[V(311)]=function(g,D,E,F,a0,H,I,J,K,L,M){if(a0=V,D===null\|\|void 0===D)return F;for(H=n(D),g[a0(387)][a0(361)]&&(H=H[a0(352)](g[a0(387)][a0(361)](D))),H=g[a0(340)][a0(357)]&&g[a0(313)]?g[a0(340)][a0(357)](new g[(a0(313))](H)):function(N,a1,O){for(a1=a0,N[a1(329)](),O=0;O<N[a1(355)];N[O]===N[O+1]?N[a1(346)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(388)][a0(348)](I),J=0;J<H[a0(355)];K=H[J],L=m(g,D,K),I(L)?(M=L==='s'&&!g[a0(404)](D[K]),a0(300)===E+K?G(E+K,L):M\|\|G(E+K,D[K])):G(E+K,L),J++);return F;function

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	dropped
Size (bytes):	117628
Entropy (8bit):	5.460167144308339
Encrypted:	false
SSDEEP:	3072:5SN3NpnQ2oY8oZF4LBGXX3v/1wOlkQr+dsOcod7pVwks:5yZ2GHSl3td7pVo
MD5:	73F32F62890EAF397E25DB19C6F9FB11
SHA1:	B791D71A153A8C97E4975B3A9C4261B3CDE239EA
SHA-256:	B02721A4152DEFDECADE42E12A0CD7A6F07676E757DD58A372918C42457F6DCA
SHA-512:	0815995D60A3DF2353B5F97F6AB02F5138AF84101FA35E5EC34D5BD75965F74CB4412A80FFD0B882C4781AD109A1BD6E09F5CB1D35DD68CC2487937A57AE3401
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 9a2311e7590ee117.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{23278:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serializer:l;return(t&&t.strategy?t.strategy:a)(e,{cache:n,serializer:r})}function o(e,t,n,r){var o,i=null==(o=r)\|\|"number"==typeof o\|\|"boolean"==typeof o?r:n(r),s=t.get(i);return void 0===s&&(s=e.call(this,r),t.set(i,s)),s}function i(e,t,n){var r=Array.prototype.slice.call(arguments,3),o=n(r),i=t.get(o);return void 0===i&&(i=e.apply(this,r),t.set(o,i)),i}function s(e,t,n,r,o){return n.bind(t,e,r,o)}function a(e,t){return s(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}n.d(t,{A:()=>h,H:()=>r});var l=function(){return JSON.stringify(arguments)};function u(){this.cache=Object.create(null)}u.prototype.get=function(e){return this.cache[e]},u.prototype.set=function(e,t){this.cache[e]=t};var c={create:function(){return new u}},h={variadic

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11068)
Category:	downloaded
Size (bytes):	11132
Entropy (8bit):	5.450535372385073
Encrypted:	false
SSDEEP:	192:dDH5SPoiv5hrGkKs3SGrogVMniMpqbXW89M/3jDnb5VeKVDn/q22J80DnRoJJ4Cd:dDqLrGkKs3SuogVMniMtjDnTnbq2080Y
MD5:	870F2226FAD953C4977CD23934D57233
SHA1:	9E70855AA546DDAA52B22DD062BE469B29AFE762
SHA-256:	269E9D42117BA527967E282DB86AC3D7D2600B76841CAE5554031354F3222598
SHA-512:	B4567B3261EF35F5389E186D3BD50E3FAD898E8CA931D0A0C635A3EE5A009D7614B79CB0914FB710A8671EEAB64D7B1DC7349531CAF92F6590DAC0B96CD8E550
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/205dddee09e475f6.runtime.js
Preview:	(()=>{"use strict";var e,t,r,n,o,s={},i={};function a(e){var t=i[e];if(void 0!==t)return t.exports;var r=i[e]={id:e,loaded:!1,exports:{}};return s[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=s,e=[],a.O=(t,r,n,o)=>{if(!r){var s=1/0;for(f=0;f<e.length;f++){for(var[r,n,o]=e[f],i=!0,l=0;l<r.length;l++)if((!1&o\|\|s>=o)&&Object.keys(a.O).every((e=>a.O[e](r[l]))))r.splice(l--,1);else if(i=!1,o<s)s=o;if(i){e.splice(f--,1);var c=n();if(void 0!==c)t=c}}return t}else{o=o\|\|0;for(var f=e.length;f>0&&e[f-1][2]>o;f--)e[f]=e[f-1];e[f]=[r,n,o]}},a.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return a.d(t,{a:t}),t},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,a.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModule)return e;if(16&n&&"function"==typeof e.then)return e}var o=Object.create(null);a.r(o);var s={};t=t\|\|[null,r({}),r([]),r(r)];for(var i=2&n&&e;"object"==typeof i&&!~t.indexOf(i);i=r(i))Object.getOwnPropertyNames(i).

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11068)
Category:	dropped
Size (bytes):	11132
Entropy (8bit):	5.450535372385073
Encrypted:	false
SSDEEP:	192:dDH5SPoiv5hrGkKs3SGrogVMniMpqbXW89M/3jDnb5VeKVDn/q22J80DnRoJJ4Cd:dDqLrGkKs3SuogVMniMtjDnTnbq2080Y
MD5:	870F2226FAD953C4977CD23934D57233
SHA1:	9E70855AA546DDAA52B22DD062BE469B29AFE762
SHA-256:	269E9D42117BA527967E282DB86AC3D7D2600B76841CAE5554031354F3222598
SHA-512:	B4567B3261EF35F5389E186D3BD50E3FAD898E8CA931D0A0C635A3EE5A009D7614B79CB0914FB710A8671EEAB64D7B1DC7349531CAF92F6590DAC0B96CD8E550
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e,t,r,n,o,s={},i={};function a(e){var t=i[e];if(void 0!==t)return t.exports;var r=i[e]={id:e,loaded:!1,exports:{}};return s[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=s,e=[],a.O=(t,r,n,o)=>{if(!r){var s=1/0;for(f=0;f<e.length;f++){for(var[r,n,o]=e[f],i=!0,l=0;l<r.length;l++)if((!1&o\|\|s>=o)&&Object.keys(a.O).every((e=>a.O[e](r[l]))))r.splice(l--,1);else if(i=!1,o<s)s=o;if(i){e.splice(f--,1);var c=n();if(void 0!==c)t=c}}return t}else{o=o\|\|0;for(var f=e.length;f>0&&e[f-1][2]>o;f--)e[f]=e[f-1];e[f]=[r,n,o]}},a.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return a.d(t,{a:t}),t},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,a.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModule)return e;if(16&n&&"function"==typeof e.then)return e}var o=Object.create(null);a.r(o);var s={};t=t\|\|[null,r({}),r([]),r(r)];for(var i=2&n&&e;"object"==typeof i&&!~t.indexOf(i);i=r(i))Object.getOwnPropertyNames(i).

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	downloaded
Size (bytes):	117628
Entropy (8bit):	5.460167144308339
Encrypted:	false
SSDEEP:	3072:5SN3NpnQ2oY8oZF4LBGXX3v/1wOlkQr+dsOcod7pVwks:5yZ2GHSl3td7pVo
MD5:	73F32F62890EAF397E25DB19C6F9FB11
SHA1:	B791D71A153A8C97E4975B3A9C4261B3CDE239EA
SHA-256:	B02721A4152DEFDECADE42E12A0CD7A6F07676E757DD58A372918C42457F6DCA
SHA-512:	0815995D60A3DF2353B5F97F6AB02F5138AF84101FA35E5EC34D5BD75965F74CB4412A80FFD0B882C4781AD109A1BD6E09F5CB1D35DD68CC2487937A57AE3401
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/9a2311e7590ee117.vendor.js
Preview:	/! For license information please see 9a2311e7590ee117.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{23278:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serializer:l;return(t&&t.strategy?t.strategy:a)(e,{cache:n,serializer:r})}function o(e,t,n,r){var o,i=null==(o=r)\|\|"number"==typeof o\|\|"boolean"==typeof o?r:n(r),s=t.get(i);return void 0===s&&(s=e.call(this,r),t.set(i,s)),s}function i(e,t,n){var r=Array.prototype.slice.call(arguments,3),o=n(r),i=t.get(o);return void 0===i&&(i=e.apply(this,r),t.set(o,i)),i}function s(e,t,n,r,o){return n.bind(t,e,r,o)}function a(e,t){return s(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}n.d(t,{A:()=>h,H:()=>r});var l=function(){return JSON.stringify(arguments)};function u(){this.cache=Object.create(null)}u.prototype.get=function(e){return this.cache[e]},u.prototype.set=function(e,t){this.cache[e]=t};var c={create:function(){return new u}},h={variadic

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55289)
Category:	dropped
Size (bytes):	55418
Entropy (8bit):	5.2011745666689
Encrypted:	false
SSDEEP:	768:7Snb/BBuuGki0usgH8bdwB005NLqrbcSb4sA7CctFzBmBv4L7HelSWVoz8WlqdLZ:70q8berM2bW6X49yWx1ZSDh/33s
MD5:	16E5D529039D25735AE0BA1D610125E8
SHA1:	D7CAA746424A018583EC1E097F74A484C4FB1811
SHA-256:	C6DE703F8EE214808496DCD92795AC8971782935ED75ABDD5624C814E69DAAEA
SHA-512:	56AC6CDABC05070E1440C8CA4A60119B3555B2743BA8652A2A0282701ECC8E150AC343020D620D3F5CD6406F04966CDE54FD797530149AD0B2711E44F89165D0
Malicious:	false
Reputation:	low
Preview:	/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return h(t,Error)}}function r(t,e){return n.call(t)===`[object ${e}]`}function i(t){return r(t,"ErrorEvent")}function s(t){return r(t,"DOMError")}function o(t){return r(t,"String")}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return r(t,"Object")}function a(t){return"undefined"!=typeof Event&&h(t,Event)}function f(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function h(t,n){try{return t instanceof n}catch(t){return!1}}function l(t){return t&&t.Math==Math?t:void 0}const d="object"==typeof globalThis&&l(globalThis)\|\|"object"==typeof window&&l(window)\|\|"object"==typeof self&&l(self)\|\|"object"==typeof global&&l(global)\|\|function(){return this}()\|\|{};function p(t,n,e){const r

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4414
Entropy (8bit):	5.9195472440471955
Encrypted:	false
SSDEEP:	96:v6LQztmnE2hqFJmd7l0TlPInbSqVpWV9gr9Fb3+:bs4oCTlGbSqVpWXw9p
MD5:	A0C86DA7FC37EA50E848C4733761D53E
SHA1:	7B53A4FE8198AA654C02282134DCC19E0C07CC9A
SHA-256:	EC2FBAD47E598FE06C7A2B825224B3B1B8D8221F3002E6370E627D459FF0634A
SHA-512:	6FD3BB6D1392F89DCF63A37A9086517620A63C6D933885ACDB61F99BB8AF137D2DD184C59EF92C173E214711DCEAE9585A5B574AFB422A4A0969D99C86264339
Malicious:	false
Reputation:	low
Preview:	...... .... .(.......(... ...@..... ......................................................@...........#h..!g\."h..!i..#k..$l..$n..$o..%q..%r..'s[.#t..........@...................................................UU..........,]).+_..)b..j..)l..'l..%l..$k..#m..$q..&u..(y..(z..&t..&u..%v)..........U......................................@@..........3Y..1[..4b..1]..0\..0^../`..,c..+f..)i..&l..%o..%q..&s..&t..)\|..'v..(v..........@...............................33......8X .7V..;]..7V..8W..7W..7X..8Z..=_..?b..?e..<g..5g..-i..m..(q..&s..&t..'u.....(x..(x .....3f......................@@......CN..?R..@W..=R..=R..>S..?S..GZ..<S...?...5...6...@..!T..?f..;i..0j..-o..)s..'u..'w..}..(y..'z......@...............UU......PP .HL..IO..EN..DO..CN..GQ..GQ...!..HR................ly...B...O..Dh..7g..3l...q..)v..(w..)\|..)z..(x ......U..................SG..UK..PG..NI..LI..NN..FF..76..................................\|....>..He..=e..8i..3o..-t..*w..+...){..............@......\A..cG..ZB..XC..VD..VG..QC..OA...

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (579)
Category:	downloaded
Size (bytes):	149998
Entropy (8bit):	5.566803873229341
Encrypted:	false
SSDEEP:	3072:dgfZIbQXM05VhyUX3fddEiih3oWhO0YG9JfEyFY6CdVFGmmc+uXXkJ+TxTNsEqBW:dgRoQXM05VhyUX3ffEiih3oWhO1G9Jfc
MD5:	03FDF89051F36676D1A69DB4844B32A3
SHA1:	822F8FE42C04F54743F13CAC1881ED627FCB7F74
SHA-256:	77EF0873A42284C0F7A45B19471803FF9BF162C02483D5AD49B49D9598D667FE
SHA-512:	F34229052835D5BD2F0CB588634885E758E4F750B1E1CEF9C95CC2C263738F384C339BA4E282BBD7616ECEFEF196619D31952376B0D0134FFF3820CE51512CAC
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/lrxlcv.6f252c89c2f71f57.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{../**/ 813110:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var gq;var F;var Y;var Ma;var bb;var Na;var X;var x;var Oc;var Ob;var ql;var G;var eb;var Pi;var Zh;var ah;var Vg;var I;var Ug;var Je;var Ce;var ee;var lb;var ha;var u;var l;.var aa,da,ea,fa,la,ja,ra,qa,oa,na,ya,Aa,Ca,Fa,Ga,Ia,La,Pa,Qa,$a,Ya,Ua,Va,Wa,Xa,Za,ab,Ja,Ta,Ra,Sa,fb,hb,jb,kb,mb,tb,ob,xb,yb,Cb,Db,Fb,wb,Jb,Mb,Pb,Sb,Rb,Tb,Ub,Yb,Xb,$b,ac,gc,pc,ec,nc,qc,ic,vc,zc,Hc,xc,Kc,Fc,Lc,Bc,Mc,Qc,Rc,Sc,Uc,Zc,bd,dd,ed,fd,nd,jd,hd,gd,od,pd,ud,yd,xd,zd,vd,Cd,Dd,Ed,Gd,Id,Kd,Ld,Md,Nd,Od,Pd,Qd,Sd,Rd,Ud,Zd,Yd,ae,$d,ce,de,fe,he,se,ge,te,ve,we,ze,Ae,Fe,Ee,De,Ie,Ke,Le,Me,Ne,Qe,Re,Se,Te,O,Ue,We,Xe,

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 22:22:10.095251083 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 22:22:19.704504013 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 22:22:21.621555090 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:21.621608019 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:21.621675014 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:21.621965885 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:21.622040987 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:21.622112989 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:21.622170925 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:21.622189045 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:21.622431993 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:21.622462034 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.589351892 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.593858004 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.642205000 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.642225027 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.808640957 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.808712006 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.808806896 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.808840990 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.810350895 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.810442924 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.811604023 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.811625957 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.811664104 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.822644949 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.822761059 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.827039957 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.827204943 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.827827930 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.827841043 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.876555920 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.876585960 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:22.876627922 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:22.927917004 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.042426109 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.042474985 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.042524099 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.042526007 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.042548895 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.042593956 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.042609930 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.042654037 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.043207884 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.043251991 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.043252945 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.043261051 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.043318033 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.164721012 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.164846897 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.164896965 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.184919119 CEST	49737	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.184957027 CEST	443	49737	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.202828884 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.202882051 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.202960968 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.203433990 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.203464985 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.203516006 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.204215050 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.204238892 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.204302073 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.208033085 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.208079100 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.208136082 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.209386110 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.209480047 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.209554911 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.210424900 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.210438013 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.210491896 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.211067915 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.211092949 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.211160898 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.212661028 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.212718010 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.213476896 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.213486910 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.214258909 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.214284897 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.215941906 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:23.215964079 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:23.216037989 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:23.216769934 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.216788054 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.217515945 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.217550993 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.218341112 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.218355894 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.218676090 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.218699932 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.219172001 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:23.219183922 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:23.819443941 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.819797039 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.819811106 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.820728064 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.820807934 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.822457075 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.822520971 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.822805882 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.823002100 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.823012114 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.823352098 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.823385000 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.826082945 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.826646090 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.826714039 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.826833010 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.826850891 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.827346087 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.827447891 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.827840090 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.827852964 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.828427076 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.828497887 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.829582930 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.829696894 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.829698086 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.832007885 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.832524061 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.832565069 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.833535910 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.833795071 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.833806038 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.834232092 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.834296942 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.834901094 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.835047960 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.835211039 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.835227013 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.836743116 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.837007999 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.837021112 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.837040901 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.837102890 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.837641954 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.837726116 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.837745905 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.837960958 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.838006973 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.838013887 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.838027000 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.838654041 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.838712931 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.839005947 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.839023113 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.839253902 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.839265108 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.840470076 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.840559006 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.841532946 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.841620922 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.841866970 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.841881037 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.844854116 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:23.845247030 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:23.845259905 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:23.846960068 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:23.847033024 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:23.848970890 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:23.849064112 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:23.849519968 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:23.849529028 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:23.875345945 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.878261089 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.878283978 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.878299952 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.878302097 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.878302097 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.878345966 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.893512011 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.893533945 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:23.893537998 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.925513983 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.987593889 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.987684965 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.987718105 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.987757921 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.987782955 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.987796068 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.987811089 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.987818956 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.987860918 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.987865925 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.987996101 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.988023996 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.988061905 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.988070011 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.988112926 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.996402979 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.996597052 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.996655941 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.996681929 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.996773958 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.996862888 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.996917963 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.996932030 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.996994019 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.997005939 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.997399092 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.997483015 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.997564077 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.997576952 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.997621059 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.997637033 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.997709990 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:23.997767925 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:23.999974966 CEST	49743	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.000006914 CEST	443	49743	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.001744032 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.001869917 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.001923084 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.001940012 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.002044916 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.002111912 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.002118111 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.002211094 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.002255917 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.002260923 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.002345085 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.002445936 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.002451897 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.006236076 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.006486893 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.006639957 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.006659985 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.006700039 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.006767035 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.006797075 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.006999969 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007047892 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.007064104 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007122993 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007142067 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007168055 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.007179976 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007368088 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007414103 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.007428885 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007518053 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007610083 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007659912 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.007672071 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007707119 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.007738113 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007900953 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.007951021 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.007957935 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.014904022 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.015002012 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.015039921 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.015089989 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.015104055 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.015137911 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.015163898 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.015197992 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.015243053 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.015256882 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.015516996 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.015567064 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.015582085 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.024158001 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.024255991 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.024298906 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.024347067 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.024358988 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.024393082 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.024410963 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.024440050 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.025928974 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.026176929 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.026267052 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.026277065 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.026305914 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.026660919 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.026721001 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.026745081 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.026801109 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.026813984 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.027056932 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.027142048 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.027201891 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.027215958 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.027271986 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.049977064 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.049993992 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.050029039 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.050038099 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.050043106 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.050056934 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.063081980 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.063138008 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.063918114 CEST	49746	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.063937902 CEST	443	49746	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.093828917 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.093847990 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.093871117 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.101119995 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.101155043 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.101236105 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.101466894 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.101547956 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.101624012 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.102086067 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.102099895 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.102448940 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.102485895 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.104312897 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.104408026 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.104435921 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.104476929 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.104485035 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.104702950 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.104921103 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.104983091 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.105001926 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.105026007 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.105027914 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.105038881 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.105068922 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.105546951 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.105592012 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.105596066 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.106090069 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.106120110 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.106128931 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.106133938 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.106180906 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.106187105 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.107137918 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.107215881 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.107223034 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.107299089 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.107393980 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.107451916 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.107496023 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.107502937 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.107614994 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.107779980 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.118885040 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.119082928 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.119144917 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.119158983 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.119478941 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.119570971 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.119623899 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.119632006 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.119734049 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.119786978 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.121228933 CEST	49748	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.121242046 CEST	443	49748	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.123383045 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.123464108 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.123528004 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.123583078 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.123620987 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.123801947 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.123858929 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.123864889 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.123878956 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.123908997 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.124396086 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.124591112 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.124643087 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.124664068 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.124671936 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.124717951 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.124727964 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.124744892 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.124799967 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.124811888 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.124922037 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.124972105 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125032902 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.125040054 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125041962 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.125053883 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125540018 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125587940 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.125596046 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125701904 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125711918 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125741959 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125757933 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125760078 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.125768900 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.125785112 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125802040 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125829935 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.125840902 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.125853062 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.126372099 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.126584053 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.126641989 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.126646042 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.126661062 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.126672029 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.126686096 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.126705885 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.126714945 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.126728058 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.126730919 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.126751900 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.126765013 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.127424955 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.127484083 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.127490997 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.127583027 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.127811909 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.127819061 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.134928942 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.135118961 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.135178089 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.135200977 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.135298967 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.135358095 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.135371923 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.135472059 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.135524988 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.135539055 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.136127949 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.136193037 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.136207104 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.136866093 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.136936903 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.136950970 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.137044907 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.137131929 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.137180090 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.137195110 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.137331009 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.137762070 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.137938023 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.137995005 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.138010979 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.138614893 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.138668060 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.138684034 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.138739109 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.138787031 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.138802052 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.140666962 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.140851974 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.140965939 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.140966892 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.141000986 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.141176939 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.141678095 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.141855955 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.141967058 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.141971111 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.141999960 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.142046928 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.142096043 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.142258883 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.142309904 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.142328024 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.142920971 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.142992973 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.143006086 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.143093109 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.143721104 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.143785954 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.143799067 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.143855095 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.143867970 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.146976948 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.147027969 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.147059917 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.147078991 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.147396088 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.147409916 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.158417940 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.165795088 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.165859938 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.165875912 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.173074961 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.184318066 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.184374094 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.184444904 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.185180902 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.185206890 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.188818932 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.188819885 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.218584061 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.221266985 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.221323013 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.221348047 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.221374035 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.221410990 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.221422911 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.221441984 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.221858978 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.221919060 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.221930981 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.221968889 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.222043037 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.226929903 CEST	49742	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.226939917 CEST	443	49742	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.241466045 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.241573095 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.241641998 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.241686106 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.241703987 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.241755962 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.241792917 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.241811991 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.241880894 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.241894960 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.242436886 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.242492914 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.242523909 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.242537975 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.242599010 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.242656946 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.242670059 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.242856979 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.242944002 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.243052959 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243146896 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243163109 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.243181944 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243264914 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.243272066 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243412971 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243468046 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.243480921 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243576050 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243627071 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.243670940 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243699074 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.243717909 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243774891 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243786097 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243824005 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243843079 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.243855953 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243875027 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.243880033 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243895054 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.243920088 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.243921041 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.243923903 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.244294882 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.244378090 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.244393110 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.244467020 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.244560003 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.244611979 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.244658947 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.244713068 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.244746923 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.244824886 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.244848013 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.244961977 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.245060921 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.245148897 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.245174885 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.245182991 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.245218039 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.245259047 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.245423079 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.245471001 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.245482922 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.245496988 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.245522976 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.245539904 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.245773077 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.245886087 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.245949030 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.246043921 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.246362925 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.246422052 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.246423006 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.246468067 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.246475935 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.246522903 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.246784925 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.246853113 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.246893883 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.246992111 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.254929066 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.255141973 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.255225897 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.255286932 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.255309105 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.255379915 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.255394936 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.255500078 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.255609989 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.255634069 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.255722046 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.255806923 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.255814075 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.255842924 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.255903006 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.255943060 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.256171942 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.256225109 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.256242037 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.256268978 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.256326914 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.256340027 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.257025003 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.257082939 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.257095098 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.257110119 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.257139921 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.257160902 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.258030891 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.258094072 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.258099079 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.258115053 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.258146048 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.258169889 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.259057045 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.259118080 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.259119987 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.259133101 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.259166956 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.259190083 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.260384083 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.260442019 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.260445118 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.260459900 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.260488033 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.260512114 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.260988951 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261044025 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261064053 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261090994 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261092901 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.261107922 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261125088 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.261204958 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261243105 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261246920 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.261255980 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261293888 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261295080 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.261305094 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261348963 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261385918 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.261395931 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261431932 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.261437893 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261504889 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.261640072 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.263168097 CEST	49747	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.263185024 CEST	443	49747	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.283463001 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.283577919 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.283600092 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.283611059 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.283642054 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.283715963 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.359734058 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.359838009 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.359869003 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.359926939 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.362132072 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.362200975 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.362319946 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.362402916 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.362483978 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.362543106 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.362607002 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.362662077 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.362664938 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.362821102 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.362826109 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.362857103 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.362907887 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.362907887 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.362961054 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363049030 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363050938 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363068104 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363105059 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363135099 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363153934 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363220930 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363255978 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363308907 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363341093 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363358021 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363384962 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363393068 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363430023 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363470078 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363481045 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363524914 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363528967 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363570929 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363583088 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363629103 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363691092 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363692999 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363791943 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363850117 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.363899946 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.363959074 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.364021063 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.364099979 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.364115953 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.364173889 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.364209890 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.364258051 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.364301920 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.364355087 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.364732981 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.364790916 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.364862919 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.364918947 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.364973068 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.365027905 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.365583897 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.365673065 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.365736961 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.365787029 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.365838051 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.365895987 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.366475105 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.366548061 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.366612911 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.366657019 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.366660118 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.366668940 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.366760015 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.366802931 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.374500990 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.374596119 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.374648094 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.374711037 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.374756098 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.374818087 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.374861002 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.374913931 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.374962091 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.375026941 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.375056982 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.375119925 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.375180960 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.375251055 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.375293016 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.375349045 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.375425100 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.375488997 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.375520945 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.375580072 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.375703096 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.375761986 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.375914097 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.375977993 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.376041889 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.376092911 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.377453089 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.377572060 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.377631903 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.383234024 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:24.383265972 CEST	443	49752	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:24.383456945 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:24.384126902 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.384907007 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:24.384922981 CEST	443	49752	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:24.388076067 CEST	49744	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.388098955 CEST	443	49744	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.390172005 CEST	49741	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.390214920 CEST	443	49741	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.404716969 CEST	49745	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.404741049 CEST	443	49745	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.715821028 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.716295004 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.716336966 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.717231035 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.717305899 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.718393087 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.718475103 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.718559027 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.730194092 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.730557919 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.730577946 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.734153032 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.734236002 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.734936953 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.735112906 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.735797882 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.735804081 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.759360075 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.762187958 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.762208939 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.777431965 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.803405046 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.804941893 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.804960966 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.808537960 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.808614969 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.809509993 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.863601923 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.863867044 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.865175009 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:24.865207911 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:24.876424074 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.876467943 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.876612902 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.896346092 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.896626949 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.896698952 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.896713972 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.897475958 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.897546053 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.898600101 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.898670912 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.898704052 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.898730040 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.898726940 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.898772955 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.898802042 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.898819923 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.898849964 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.898895979 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.898912907 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.898973942 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.899597883 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.900681973 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.900746107 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:24.900794983 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.900794983 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:24.906343937 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:25.018774986 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.018902063 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.019000053 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.019009113 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:25.019031048 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.019180059 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:25.019188881 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.019588947 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.019685030 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.019728899 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:25.019737959 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.019841909 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.019959927 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:25.019969940 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.020276070 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:25.024991989 CEST	443	49752	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:25.065437078 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:25.135865927 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.136087894 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.136182070 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.136183977 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:25.136214018 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.136271954 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:25.137510061 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.137753010 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.137871027 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:25.265986919 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.266063929 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.266149044 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.273534060 CEST	49756	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.273612976 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.273693085 CEST	49756	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.297064066 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.297137976 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.304433107 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.316704035 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:25.316726923 CEST	443	49752	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:25.318382025 CEST	443	49752	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:25.318445921 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:25.324683905 CEST	49757	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.324717045 CEST	443	49757	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.324771881 CEST	49757	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.324948072 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.324990034 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.332667112 CEST	49756	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.332689047 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.347340107 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.349370956 CEST	49757	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.349387884 CEST	443	49757	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.420607090 CEST	49758	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:22:25.420650005 CEST	443	49758	142.250.186.68	192.168.2.4
Oct 25, 2024 22:22:25.420711994 CEST	49758	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:22:25.421655893 CEST	49758	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:22:25.421669006 CEST	443	49758	142.250.186.68	192.168.2.4
Oct 25, 2024 22:22:25.423780918 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:25.423927069 CEST	443	49752	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:25.424455881 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:25.424468994 CEST	443	49752	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:25.435945988 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.435976982 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.436037064 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.436331034 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.436343908 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.438680887 CEST	49749	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.438703060 CEST	443	49749	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.439924955 CEST	49750	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.439954042 CEST	443	49750	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.440565109 CEST	49751	443	192.168.2.4	104.16.79.73
Oct 25, 2024 22:22:25.440591097 CEST	443	49751	104.16.79.73	192.168.2.4
Oct 25, 2024 22:22:25.456031084 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.456204891 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.456274986 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.457025051 CEST	49738	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.457043886 CEST	443	49738	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.459415913 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.459445000 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.459517956 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.459903955 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.459918976 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.468548059 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:25.579183102 CEST	443	49752	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:25.580729961 CEST	443	49752	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:25.580796003 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:25.582366943 CEST	49752	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:25.582381964 CEST	443	49752	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:25.915842056 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.921382904 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.921420097 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.921907902 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.929056883 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.929151058 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.929699898 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.938954115 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.939487934 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.939523935 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.940634966 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.942013025 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.942188978 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.942490101 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.942538977 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:25.942549944 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.942581892 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.966819048 CEST	443	49757	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.967331886 CEST	49757	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.967345953 CEST	443	49757	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.968801022 CEST	443	49757	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.968852997 CEST	49757	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.971100092 CEST	49757	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.971174955 CEST	443	49757	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.971357107 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:25.971613884 CEST	49757	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.971621990 CEST	443	49757	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.974733114 CEST	49761	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:25.974800110 CEST	443	49761	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:25.974875927 CEST	49761	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:25.978435993 CEST	49761	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:25.978467941 CEST	443	49761	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:25.981550932 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.981749058 CEST	49756	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.981780052 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.983216047 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:25.983273983 CEST	49756	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.983851910 CEST	49756	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:25.984091043 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:26.015414000 CEST	49757	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:26.053595066 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.053955078 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.053971052 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.054366112 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.055619955 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.055708885 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.056449890 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.062813044 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.072161913 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.072175980 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.072791100 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.073424101 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.073534966 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.073540926 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.073651075 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.076726913 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.076914072 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.076981068 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.077377081 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.077414989 CEST	443	49755	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.077440977 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.077491999 CEST	49755	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.095429897 CEST	49756	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:26.095453978 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:26.099339008 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.100033998 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.100131989 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.100179911 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.100188971 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.100234985 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.100250959 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.100280046 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.100327015 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.100366116 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.100373030 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.100404024 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.100455999 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.100759029 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.118267059 CEST	443	49757	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:26.119030952 CEST	49757	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:26.119081020 CEST	443	49757	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:26.119132996 CEST	49757	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:26.119775057 CEST	49756	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:26.137402058 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.137434959 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.137496948 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.137854099 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.137871981 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.141077042 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.141119003 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.141174078 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.141865969 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.141885042 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.161967039 CEST	49764	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:26.161998034 CEST	443	49764	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:26.162050009 CEST	49764	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:26.162214994 CEST	49764	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:26.162230968 CEST	443	49764	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:26.163338900 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:26.210532904 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.210613966 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.210645914 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.218116999 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.218162060 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.218189955 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.218195915 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.218213081 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.218240976 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.218818903 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.218868971 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.218887091 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.218904018 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.218947887 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.218972921 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.218986988 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.219029903 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.219347000 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.219424009 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.219469070 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.219470978 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.219485998 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.219538927 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.220252991 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220303059 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220318079 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220345020 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220345020 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220355034 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.220364094 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220393896 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220402002 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220407963 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220419884 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.220427990 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220439911 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.220443010 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220453978 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220455885 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.220460892 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220472097 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220479012 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.220500946 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.220515966 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.220516920 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220520973 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220525980 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220572948 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.220582962 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220594883 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220601082 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.220642090 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.220665932 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.221194983 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.221256971 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.221286058 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.221299887 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.221316099 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.221370935 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.237483978 CEST	49759	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.237504005 CEST	443	49759	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.241547108 CEST	49760	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.241563082 CEST	443	49760	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.274311066 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:26.275965929 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:26.276046991 CEST	49756	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:26.280209064 CEST	49756	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:22:26.280226946 CEST	443	49756	35.190.80.1	192.168.2.4
Oct 25, 2024 22:22:26.310125113 CEST	443	49758	142.250.186.68	192.168.2.4
Oct 25, 2024 22:22:26.319673061 CEST	49758	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:22:26.319684982 CEST	443	49758	142.250.186.68	192.168.2.4
Oct 25, 2024 22:22:26.321232080 CEST	443	49758	142.250.186.68	192.168.2.4
Oct 25, 2024 22:22:26.321300983 CEST	49758	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:22:26.323472023 CEST	49758	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:22:26.323556900 CEST	443	49758	142.250.186.68	192.168.2.4
Oct 25, 2024 22:22:26.335175037 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335242987 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335279942 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335303068 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.335329056 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335388899 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335450888 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.335460901 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335505962 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.335525990 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335853100 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335895061 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335911036 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.335926056 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335946083 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.335973978 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.335988045 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.336035013 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.336045980 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.336076021 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.336122990 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.385859966 CEST	49754	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.385900974 CEST	443	49754	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.468952894 CEST	49758	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:22:26.468967915 CEST	443	49758	142.250.186.68	192.168.2.4
Oct 25, 2024 22:22:26.616774082 CEST	49758	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:22:26.750950098 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.751228094 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.751245975 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.752512932 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.752881050 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.753031969 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.753038883 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.753053904 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.761809111 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.762073994 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.762094021 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.763197899 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.763624907 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.763756990 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.763763905 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.763797998 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.772772074 CEST	443	49764	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:26.772970915 CEST	49764	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:26.772984028 CEST	443	49764	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:26.776349068 CEST	443	49764	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:26.776413918 CEST	49764	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:26.776801109 CEST	49764	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:26.776880026 CEST	443	49764	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:26.776943922 CEST	49764	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:26.776951075 CEST	443	49764	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:26.803498983 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.818686008 CEST	49764	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:26.837064028 CEST	443	49761	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:26.837162971 CEST	49761	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:26.850399971 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.850446939 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.850529909 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.850805998 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.850819111 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.863755941 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.877466917 CEST	49761	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:26.877516985 CEST	443	49761	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:26.878488064 CEST	443	49761	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:26.921327114 CEST	443	49764	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:26.921360970 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.921613932 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.921680927 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.921700001 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.921855927 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.921952963 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.922003984 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.922013044 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.922115088 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.922163963 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.922171116 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.922208071 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.922214031 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.923192978 CEST	443	49764	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:26.923326969 CEST	49764	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:26.925750971 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.925973892 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.926079035 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.926129103 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.926140070 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.926182032 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.926198959 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.926312923 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.926399946 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.926409960 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.926428080 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.926589966 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.926635027 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.968790054 CEST	49761	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:26.968796968 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.968808889 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:26.968811989 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:26.968830109 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.015712023 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.040339947 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.040445089 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.040489912 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.040509939 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.040632010 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.040652037 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.040680885 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.040724039 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.040776014 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.040939093 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.040982008 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.040990114 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.041239977 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.041282892 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.041290045 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.041397095 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.041439056 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.041445017 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.042543888 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.042601109 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.042608023 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.042710066 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.042754889 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.042762041 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.042777061 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.042972088 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043072939 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043128014 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.043138981 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043260098 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.043284893 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043461084 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043481112 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043526888 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.043534040 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043541908 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.043555975 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043584108 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043634892 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.043751001 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043783903 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043828964 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.043839931 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.043931961 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.044006109 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.044011116 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.044085979 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.044128895 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.044133902 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.044786930 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.044840097 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.044845104 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.044931889 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.045077085 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.045082092 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.045605898 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.045698881 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.045773983 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.045816898 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.045816898 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.045824051 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.088682890 CEST	49764	443	192.168.2.4	34.120.195.249
Oct 25, 2024 22:22:27.088710070 CEST	443	49764	34.120.195.249	192.168.2.4
Oct 25, 2024 22:22:27.100302935 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.119904995 CEST	49761	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:27.127773046 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.127790928 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.158977032 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.159060001 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.159085989 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.159207106 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.159260988 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.159269094 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.159534931 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.159591913 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.159599066 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.159781933 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.159877062 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.159884930 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.159951925 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160012007 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160111904 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160119057 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.160126925 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160173893 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.160181999 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160242081 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160312891 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160324097 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160370111 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.160375118 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160382986 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.160391092 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160418987 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.160433054 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.160442114 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160474062 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160491943 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160523891 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.160598040 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160697937 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160751104 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.160756111 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.160852909 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.160856962 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.161216021 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.161264896 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.161272049 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.161288977 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.161297083 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.161338091 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.161345959 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.161365986 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.161370039 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.161384106 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.161405087 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.161408901 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.161477089 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.162162066 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.162183046 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.162249088 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.162260056 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.162267923 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.162270069 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.162272930 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.162288904 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.162312031 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.162322044 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.162370920 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.162378073 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.162405968 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.162458897 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.163161039 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.163168907 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.163213015 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.163223028 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.163245916 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.163247108 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.163258076 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.163263083 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.163271904 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.163283110 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.163295031 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.163346052 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.163399935 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.163445950 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.163453102 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.163839102 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.164132118 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.164179087 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.164192915 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.164231062 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.164263010 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.164304972 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.164309025 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.164321899 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.164372921 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.164377928 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.164423943 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.165247917 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.165720940 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.165725946 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.165857077 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.167335987 CEST	443	49761	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:27.277602911 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.277687073 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.277710915 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.277757883 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.277796984 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.277841091 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.277889967 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.277947903 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.277976990 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.277978897 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.278023958 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.278033972 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.278060913 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.278069019 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.278103113 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.278153896 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.278178930 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.278192997 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.278219938 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.278249025 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.278274059 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.278323889 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.278949022 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.279007912 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.279037952 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.279084921 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.279118061 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.279162884 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.279304028 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.279350996 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.279612064 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.279669046 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.279699087 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.279747963 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.279778004 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.279823065 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.280308962 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.280361891 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.280488014 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.280534029 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.280571938 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.280616045 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.280623913 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.280708075 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.281228065 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.281277895 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.281311035 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.281363964 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.281390905 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.281435966 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.281472921 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.281517982 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.282125950 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.282174110 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.282207966 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.282253981 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.282288074 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.282335043 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.282366991 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.282412052 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.283133984 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.283204079 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.283262968 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.283297062 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.283333063 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.283358097 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.283409119 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.283454895 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.283834934 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.283889055 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.284001112 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.284183025 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.284444094 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.286230087 CEST	49762	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.286263943 CEST	443	49762	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.289525032 CEST	49763	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.289546967 CEST	443	49763	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.364401102 CEST	443	49761	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:27.364470959 CEST	443	49761	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:27.364918947 CEST	49761	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:27.372572899 CEST	49761	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:27.372596979 CEST	443	49761	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:27.468729019 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.673059940 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.807617903 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.807640076 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.808587074 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.836344957 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.836549044 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.845974922 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.849178076 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.849219084 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.849327087 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.849334955 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.933151960 CEST	49766	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:27.933187008 CEST	443	49766	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:27.933263063 CEST	49766	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:27.933665991 CEST	49766	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:27.933684111 CEST	443	49766	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:27.942718029 CEST	49767	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.942750931 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.942887068 CEST	49767	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.943252087 CEST	49767	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:27.943264008 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:27.965329885 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:27.965424061 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:27.965641022 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:27.966376066 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:27.966404915 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.024435043 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.024508953 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.024631023 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:28.027467966 CEST	49765	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:28.027481079 CEST	443	49765	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.493146896 CEST	49769	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.493182898 CEST	443	49769	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.493388891 CEST	49769	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.494378090 CEST	49769	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.494390965 CEST	443	49769	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.556982040 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.557358980 CEST	49767	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:28.557372093 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.558412075 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.558852911 CEST	49767	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:28.559005022 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.559369087 CEST	49767	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:28.607333899 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.616661072 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.616904020 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.616923094 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.618618965 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.618681908 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.619071007 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.619152069 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.619246006 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.619252920 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.672979116 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.741354942 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.741455078 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.741494894 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.741527081 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.741549015 CEST	49767	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:28.741558075 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.741576910 CEST	49767	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:28.741658926 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.741729975 CEST	49767	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:28.742621899 CEST	49767	443	192.168.2.4	104.16.103.112
Oct 25, 2024 22:22:28.742646933 CEST	443	49767	104.16.103.112	192.168.2.4
Oct 25, 2024 22:22:28.768373966 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.768522978 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.768646002 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.768660069 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.768743038 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.768785954 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.768791914 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.768901110 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.768942118 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.768946886 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.769114971 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.769159079 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.770019054 CEST	49768	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:28.770031929 CEST	443	49768	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:28.793042898 CEST	443	49766	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:28.793118000 CEST	49766	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:28.794763088 CEST	49766	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:28.794775009 CEST	443	49766	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:28.795175076 CEST	443	49766	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:28.796433926 CEST	49766	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:28.843333960 CEST	443	49766	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:29.038687944 CEST	443	49766	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:29.038861036 CEST	443	49766	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:29.038919926 CEST	49766	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:29.039602041 CEST	49766	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:29.039621115 CEST	443	49766	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:29.039633036 CEST	49766	443	192.168.2.4	184.28.90.27
Oct 25, 2024 22:22:29.039638996 CEST	443	49766	184.28.90.27	192.168.2.4
Oct 25, 2024 22:22:29.096785069 CEST	443	49769	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:29.097095013 CEST	49769	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:29.097115040 CEST	443	49769	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:29.097991943 CEST	443	49769	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:29.098056078 CEST	49769	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:29.098468065 CEST	49769	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:29.098520994 CEST	443	49769	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:29.098695993 CEST	49769	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:29.098705053 CEST	443	49769	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:29.141726017 CEST	49769	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:29.243385077 CEST	443	49769	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:29.243433952 CEST	443	49769	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:29.243486881 CEST	49769	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:29.244353056 CEST	49769	443	192.168.2.4	104.16.102.112
Oct 25, 2024 22:22:29.244373083 CEST	443	49769	104.16.102.112	192.168.2.4
Oct 25, 2024 22:22:36.295926094 CEST	443	49758	142.250.186.68	192.168.2.4
Oct 25, 2024 22:22:36.296027899 CEST	443	49758	142.250.186.68	192.168.2.4
Oct 25, 2024 22:22:36.296180010 CEST	49758	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:22:36.493041039 CEST	51972	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:36.498399973 CEST	53	51972	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:36.498476028 CEST	51972	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:36.498500109 CEST	51972	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:36.503915071 CEST	53	51972	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:36.626744032 CEST	49758	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:22:36.626764059 CEST	443	49758	142.250.186.68	192.168.2.4
Oct 25, 2024 22:22:37.088032961 CEST	53	51972	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:37.088773966 CEST	51972	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:37.095010996 CEST	53	51972	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:37.095058918 CEST	51972	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:23:14.315543890 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:14.315593004 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:14.315725088 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:14.317970991 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:14.317997932 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.082276106 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.082348108 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.084995985 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.085021973 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.085408926 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.106523037 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.147356987 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.357683897 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.357759953 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.357816935 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.357842922 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.357884884 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.357908964 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.357976913 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.477232933 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.477308035 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.477334976 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.477380037 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.477394104 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.477442980 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.596625090 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.596688986 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.596713066 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.596750021 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.596765041 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.596812963 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.716691971 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.716768026 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.716805935 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.716823101 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.716850996 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.716958046 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.835680962 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.835745096 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.835783005 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.835799932 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.835829973 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.836024046 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.955918074 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.956012964 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.956060886 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.956090927 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:15.956198931 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:15.956198931 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.075177908 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.075242996 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.075285912 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.075316906 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.075342894 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.075404882 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.194341898 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.194370985 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.194473982 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.194473982 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.194540024 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.194741964 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.313594103 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.313648939 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.313682079 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.313714027 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.313741922 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.313885927 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.394963980 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.395019054 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.395057917 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.395091057 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.395117044 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.395189047 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.476084948 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.476171017 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.476183891 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.476232052 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.476273060 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.476382017 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.556015968 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.556077003 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.556212902 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.556212902 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.556279898 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.558284998 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.672441006 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.672499895 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.672544956 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.672615051 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.672653913 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.672693014 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.675415993 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.675487995 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.675504923 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.675560951 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.675570011 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.675617933 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.675764084 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.675798893 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.675826073 CEST	51975	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.675839901 CEST	443	51975	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.797458887 CEST	51976	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.797538996 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.797609091 CEST	51976	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.799396038 CEST	51977	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.799442053 CEST	443	51977	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.799498081 CEST	51977	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.803137064 CEST	51978	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.803160906 CEST	443	51978	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.803337097 CEST	51978	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.805212975 CEST	51979	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.805250883 CEST	443	51979	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.805316925 CEST	51979	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.806588888 CEST	51980	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.806690931 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.806910038 CEST	51980	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.807562113 CEST	51977	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.807598114 CEST	443	51977	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.807876110 CEST	51979	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.807889938 CEST	443	51979	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.808545113 CEST	51976	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.808581114 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.809053898 CEST	51980	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.809092999 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:16.809581041 CEST	51978	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:16.809614897 CEST	443	51978	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.528809071 CEST	443	51979	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.550034046 CEST	51979	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.550071955 CEST	443	51979	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.551120996 CEST	51979	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.551127911 CEST	443	51979	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.555210114 CEST	443	51978	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.555891991 CEST	51978	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.555953979 CEST	443	51978	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.556735992 CEST	51978	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.556741953 CEST	443	51978	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.557555914 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.558346987 CEST	51976	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.558372974 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.559130907 CEST	443	51977	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.559155941 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.559438944 CEST	51976	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.559448957 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.572597980 CEST	51977	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.572635889 CEST	443	51977	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.574346066 CEST	51977	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.574356079 CEST	443	51977	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.575726032 CEST	51980	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.575757980 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.577074051 CEST	51980	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.577085972 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.675260067 CEST	443	51979	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.675340891 CEST	443	51979	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.675437927 CEST	51979	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.675566912 CEST	51979	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.675566912 CEST	51979	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.675614119 CEST	443	51979	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.675642014 CEST	443	51979	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.678600073 CEST	51981	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.678652048 CEST	443	51981	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.678719044 CEST	51981	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.678951979 CEST	51981	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.678970098 CEST	443	51981	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.685525894 CEST	443	51978	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.685678005 CEST	443	51978	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.685728073 CEST	51978	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.685791016 CEST	51978	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.685837984 CEST	443	51978	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.685867071 CEST	51978	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.685883999 CEST	443	51978	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.688529968 CEST	51982	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.688589096 CEST	443	51982	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.688658953 CEST	51982	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.689055920 CEST	51982	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.689075947 CEST	443	51982	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.689084053 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.689148903 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.689214945 CEST	51976	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.689243078 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.689311981 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.689325094 CEST	51976	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.689407110 CEST	51976	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.689439058 CEST	51976	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.689439058 CEST	51976	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.689460993 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.689481020 CEST	443	51976	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.691808939 CEST	51983	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.691849947 CEST	443	51983	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.691915989 CEST	51983	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.692187071 CEST	51983	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.692205906 CEST	443	51983	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.703265905 CEST	443	51977	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.703342915 CEST	443	51977	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.703500032 CEST	443	51977	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.703510046 CEST	51977	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.703547955 CEST	51977	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.703600883 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.703603983 CEST	51977	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.703619957 CEST	443	51977	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.703648090 CEST	51977	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.703660965 CEST	443	51977	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.703660965 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.703715086 CEST	51980	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.703737020 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.703805923 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.703845978 CEST	51980	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.703881025 CEST	51980	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.704083920 CEST	51980	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.704102993 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.704116106 CEST	51980	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.704122066 CEST	443	51980	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.706988096 CEST	51984	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.707030058 CEST	443	51984	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.707046032 CEST	51985	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.707099915 CEST	51984	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.707113981 CEST	443	51985	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.707164049 CEST	51985	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.707262039 CEST	51984	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.707294941 CEST	443	51984	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:17.707372904 CEST	51985	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:17.707405090 CEST	443	51985	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.438348055 CEST	443	51985	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.438844919 CEST	51985	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.438913107 CEST	443	51985	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.439445972 CEST	51985	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.439459085 CEST	443	51985	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.443142891 CEST	443	51983	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.443573952 CEST	51983	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.443603992 CEST	443	51983	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.444147110 CEST	51983	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.444153070 CEST	443	51983	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.445823908 CEST	443	51982	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.446178913 CEST	51982	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.446265936 CEST	443	51982	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.446655035 CEST	51982	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.446670055 CEST	443	51982	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.455787897 CEST	443	51984	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.456139088 CEST	51984	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.456170082 CEST	443	51984	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.456641912 CEST	51984	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.456655979 CEST	443	51984	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.566595078 CEST	443	51985	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.566941023 CEST	443	51985	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.567018986 CEST	51985	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.567097902 CEST	51985	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.567097902 CEST	51985	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.567148924 CEST	443	51985	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.567178011 CEST	443	51985	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.570086956 CEST	51986	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.570175886 CEST	443	51986	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.570245981 CEST	51986	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.570470095 CEST	51986	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.570503950 CEST	443	51986	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.573966026 CEST	443	51983	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.574348927 CEST	443	51983	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.574415922 CEST	51983	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.574462891 CEST	51983	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.574464083 CEST	51983	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.574485064 CEST	443	51983	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.574497938 CEST	443	51983	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.577142954 CEST	51987	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.577208042 CEST	443	51987	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.577393055 CEST	51987	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.577531099 CEST	51987	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.577564001 CEST	443	51987	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.585141897 CEST	443	51982	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.585761070 CEST	443	51982	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.585817099 CEST	51982	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.585902929 CEST	51982	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.585902929 CEST	51982	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.585969925 CEST	443	51982	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.585998058 CEST	443	51982	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.588468075 CEST	51988	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.588490963 CEST	443	51988	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.588670015 CEST	51988	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.588785887 CEST	51988	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.588795900 CEST	443	51988	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.589073896 CEST	443	51984	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.589595079 CEST	443	51984	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.589659929 CEST	51984	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.589724064 CEST	51984	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.589724064 CEST	51984	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.589772940 CEST	443	51984	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.589798927 CEST	443	51984	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.592072964 CEST	51989	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.592129946 CEST	443	51989	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.592282057 CEST	51989	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.592353106 CEST	51989	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.592372894 CEST	443	51989	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.773334980 CEST	443	51981	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.774018049 CEST	51981	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.774036884 CEST	443	51981	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.774446964 CEST	51981	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.774462938 CEST	443	51981	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.903964043 CEST	443	51981	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.904124975 CEST	443	51981	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.904289961 CEST	51981	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.904289961 CEST	51981	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.904321909 CEST	51981	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.904354095 CEST	443	51981	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.907361031 CEST	51990	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.907397985 CEST	443	51990	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:18.907551050 CEST	51990	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.907614946 CEST	51990	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:18.907623053 CEST	443	51990	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.308469057 CEST	443	51986	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.309556007 CEST	51986	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.309556007 CEST	51986	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.309587002 CEST	443	51986	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.309607983 CEST	443	51986	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.313422918 CEST	443	51987	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.313909054 CEST	51987	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.313951015 CEST	443	51987	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.317375898 CEST	51987	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.317397118 CEST	443	51987	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.324101925 CEST	443	51988	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.324480057 CEST	51988	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.324502945 CEST	443	51988	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.325051069 CEST	51988	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.325057983 CEST	443	51988	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.437100887 CEST	443	51986	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.437253952 CEST	443	51986	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.437385082 CEST	51986	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.437485933 CEST	51986	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.437485933 CEST	51986	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.437510014 CEST	443	51986	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.437525034 CEST	443	51986	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.441066980 CEST	51991	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.441164017 CEST	443	51991	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.441639900 CEST	51991	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.441639900 CEST	51991	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.441730976 CEST	443	51991	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.442497015 CEST	443	51987	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.442651033 CEST	443	51987	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.442761898 CEST	51987	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.442826986 CEST	51987	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.442826986 CEST	51987	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.442854881 CEST	443	51987	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.442867041 CEST	443	51987	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.445034027 CEST	51992	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.445108891 CEST	443	51992	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.445400953 CEST	51992	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.445400953 CEST	51992	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.445523024 CEST	443	51992	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.454014063 CEST	443	51988	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.454163074 CEST	443	51988	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.454406977 CEST	51988	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.454406977 CEST	51988	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.454688072 CEST	51988	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.454705954 CEST	443	51988	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.456748009 CEST	51993	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.456830025 CEST	443	51993	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.457010031 CEST	51993	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.457082033 CEST	51993	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.457106113 CEST	443	51993	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.644057989 CEST	443	51990	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.644885063 CEST	51990	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.644911051 CEST	443	51990	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.645324945 CEST	51990	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.645340919 CEST	443	51990	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.772896051 CEST	443	51990	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.773117065 CEST	443	51990	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.773241043 CEST	51990	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.773241043 CEST	51990	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.773277998 CEST	51990	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.773294926 CEST	443	51990	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.776427031 CEST	51995	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.776523113 CEST	443	51995	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.776611090 CEST	51995	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.776807070 CEST	51995	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.776835918 CEST	443	51995	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.945419073 CEST	443	51989	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.946048021 CEST	51989	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.946075916 CEST	443	51989	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:19.946645021 CEST	51989	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:19.946656942 CEST	443	51989	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.079545021 CEST	443	51989	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.079772949 CEST	443	51989	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.079899073 CEST	51989	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.080077887 CEST	51989	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.080128908 CEST	443	51989	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.080159903 CEST	51989	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.080177069 CEST	443	51989	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.082619905 CEST	51996	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.082705975 CEST	443	51996	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.082817078 CEST	51996	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.083013058 CEST	51996	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.083048105 CEST	443	51996	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.179848909 CEST	443	51992	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.180380106 CEST	51992	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.180403948 CEST	443	51992	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.180975914 CEST	51992	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.180982113 CEST	443	51992	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.183353901 CEST	443	51991	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.183695078 CEST	51991	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.183779001 CEST	443	51991	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.184151888 CEST	51991	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.184168100 CEST	443	51991	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.237656116 CEST	443	51993	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.238056898 CEST	51993	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.238086939 CEST	443	51993	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.238569975 CEST	51993	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.238583088 CEST	443	51993	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.310048103 CEST	443	51992	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.310198069 CEST	443	51992	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.310338974 CEST	51992	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.310376883 CEST	51992	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.310376883 CEST	51992	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.310398102 CEST	443	51992	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.310409069 CEST	443	51992	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.313568115 CEST	51997	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.313678980 CEST	443	51997	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.313766003 CEST	51997	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.314085007 CEST	51997	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.314121962 CEST	443	51997	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.314579964 CEST	443	51991	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.314662933 CEST	443	51991	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.314713955 CEST	51991	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.314841986 CEST	51991	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.314862013 CEST	443	51991	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.314876080 CEST	51991	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.314882040 CEST	443	51991	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.317316055 CEST	51998	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.317361116 CEST	443	51998	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.317579031 CEST	51998	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.317719936 CEST	51998	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.317740917 CEST	443	51998	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.373547077 CEST	443	51993	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.373908997 CEST	443	51993	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.373994112 CEST	51993	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.374102116 CEST	51993	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.374145031 CEST	443	51993	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.374174118 CEST	51993	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.374191046 CEST	443	51993	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.377768040 CEST	51999	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.377842903 CEST	443	51999	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.378062010 CEST	51999	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.378242016 CEST	51999	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.378269911 CEST	443	51999	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.562714100 CEST	443	51995	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.563235998 CEST	51995	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.563267946 CEST	443	51995	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.563860893 CEST	51995	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.563879013 CEST	443	51995	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.695595026 CEST	443	51995	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.695868015 CEST	443	51995	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.696038008 CEST	51995	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.696038008 CEST	51995	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.696038008 CEST	51995	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.698988914 CEST	52000	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.699075937 CEST	443	52000	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.699167967 CEST	52000	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.699331045 CEST	52000	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.699359894 CEST	443	52000	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.808527946 CEST	443	51996	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.809041023 CEST	51996	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.809072971 CEST	443	51996	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.809618950 CEST	51996	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.809626102 CEST	443	51996	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.945941925 CEST	443	51996	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.946080923 CEST	443	51996	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.946191072 CEST	51996	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.946295977 CEST	51996	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.946295977 CEST	51996	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.946357012 CEST	443	51996	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.946384907 CEST	443	51996	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.949029922 CEST	52001	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.949089050 CEST	443	52001	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:20.949227095 CEST	52001	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.949395895 CEST	52001	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:20.949417114 CEST	443	52001	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.000835896 CEST	51995	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.000889063 CEST	443	51995	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.049588919 CEST	443	51997	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.050071001 CEST	51997	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.050148010 CEST	443	51997	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.050658941 CEST	51997	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.050673008 CEST	443	51997	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.063239098 CEST	443	51998	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.063709021 CEST	51998	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.063740969 CEST	443	51998	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.064385891 CEST	51998	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.064399004 CEST	443	51998	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.109793901 CEST	443	51999	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.110277891 CEST	51999	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.110306025 CEST	443	51999	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.110960007 CEST	51999	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.110970974 CEST	443	51999	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.179610014 CEST	443	51997	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.179775000 CEST	443	51997	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.179846048 CEST	51997	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.179893017 CEST	51997	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.179918051 CEST	443	51997	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.179929018 CEST	51997	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.179933071 CEST	443	51997	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.182955027 CEST	52002	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.183013916 CEST	443	52002	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.183082104 CEST	52002	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.183238983 CEST	52002	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.183264017 CEST	443	52002	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.195636988 CEST	443	51998	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.195710897 CEST	443	51998	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.195758104 CEST	51998	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.195889950 CEST	51998	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.195929050 CEST	443	51998	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.195959091 CEST	51998	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.195974112 CEST	443	51998	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.198348045 CEST	52003	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.198415041 CEST	443	52003	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.198532104 CEST	52003	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.198666096 CEST	52003	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.198697090 CEST	443	52003	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.239814043 CEST	443	51999	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.240411997 CEST	443	51999	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.240484953 CEST	51999	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.240593910 CEST	51999	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.240609884 CEST	443	51999	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.240617990 CEST	51999	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.240624905 CEST	443	51999	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.245142937 CEST	52004	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.245171070 CEST	443	52004	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.245374918 CEST	52004	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.246026039 CEST	52004	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.246037006 CEST	443	52004	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.427459002 CEST	443	52000	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.428352118 CEST	52000	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.428406000 CEST	443	52000	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.429373026 CEST	52000	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.429399967 CEST	443	52000	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.556957006 CEST	443	52000	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.557123899 CEST	443	52000	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.557183981 CEST	52000	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.557506084 CEST	52000	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.557528973 CEST	443	52000	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.562398911 CEST	52005	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.562439919 CEST	443	52005	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.562508106 CEST	52005	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.562947035 CEST	52005	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.562962055 CEST	443	52005	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.694988012 CEST	443	52001	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.695516109 CEST	52001	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.695553064 CEST	443	52001	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.696435928 CEST	52001	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.696449995 CEST	443	52001	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.825462103 CEST	443	52001	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.825613022 CEST	443	52001	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.825666904 CEST	52001	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.826062918 CEST	52001	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.826093912 CEST	443	52001	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.826122999 CEST	52001	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.826138973 CEST	443	52001	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.830204964 CEST	52006	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.830231905 CEST	443	52006	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.830394983 CEST	52006	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.830765009 CEST	52006	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.830775023 CEST	443	52006	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.929699898 CEST	443	52003	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.930210114 CEST	52003	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.930222988 CEST	443	52003	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.930557966 CEST	443	52002	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.931376934 CEST	52003	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.931381941 CEST	443	52003	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.931951046 CEST	52002	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.932009935 CEST	443	52002	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.932521105 CEST	52002	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.932533979 CEST	443	52002	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.987572908 CEST	443	52004	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.988176107 CEST	52004	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.988187075 CEST	443	52004	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:21.988742113 CEST	52004	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:21.988746881 CEST	443	52004	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.060170889 CEST	443	52003	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.060780048 CEST	443	52003	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.060837984 CEST	52003	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.060913086 CEST	52003	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.060933113 CEST	443	52003	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.060945034 CEST	52003	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.060950041 CEST	443	52003	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.061048985 CEST	443	52002	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.061754942 CEST	443	52002	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.061810017 CEST	52002	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.063690901 CEST	52002	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.063730955 CEST	443	52002	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.063756943 CEST	52002	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.063772917 CEST	443	52002	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.066715002 CEST	52007	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.066760063 CEST	443	52007	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.066895962 CEST	52007	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.068507910 CEST	52007	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.068525076 CEST	443	52007	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.070141077 CEST	52008	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.070219994 CEST	443	52008	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.070313931 CEST	52008	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.070489883 CEST	52008	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.070527077 CEST	443	52008	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.125437021 CEST	443	52004	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.125749111 CEST	443	52004	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.125864983 CEST	52004	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.140738010 CEST	52004	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.140757084 CEST	443	52004	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.140799046 CEST	52004	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.140805006 CEST	443	52004	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.148849010 CEST	52009	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.148964882 CEST	443	52009	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.149133921 CEST	52009	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.149636030 CEST	52009	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.149688959 CEST	443	52009	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.299487114 CEST	443	52005	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.299937010 CEST	52005	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.299997091 CEST	443	52005	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.300395012 CEST	52005	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.300407887 CEST	443	52005	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.436395884 CEST	443	52005	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.436508894 CEST	443	52005	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.436572075 CEST	52005	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.436794043 CEST	52005	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.436837912 CEST	443	52005	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.436867952 CEST	52005	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.436883926 CEST	443	52005	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.439802885 CEST	52010	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.439881086 CEST	443	52010	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.439959049 CEST	52010	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.440136909 CEST	52010	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.440170050 CEST	443	52010	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.571082115 CEST	443	52006	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.571552038 CEST	52006	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.571564913 CEST	443	52006	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.571986914 CEST	52006	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.571991920 CEST	443	52006	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.711477041 CEST	443	52006	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.711622000 CEST	443	52006	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.711685896 CEST	52006	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.711776972 CEST	52006	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.711802006 CEST	443	52006	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.711813927 CEST	52006	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.711818933 CEST	443	52006	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.714485884 CEST	52011	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.714541912 CEST	443	52011	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.714675903 CEST	52011	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.714869976 CEST	52011	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.714890957 CEST	443	52011	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.804589987 CEST	443	52008	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.805299997 CEST	52008	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.805349112 CEST	443	52008	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.805874109 CEST	52008	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.805888891 CEST	443	52008	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.806430101 CEST	443	52007	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.806937933 CEST	52007	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.807003975 CEST	443	52007	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.807293892 CEST	52007	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.807310104 CEST	443	52007	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.896189928 CEST	443	52009	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.899401903 CEST	52009	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.899447918 CEST	443	52009	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.900197029 CEST	52009	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.900216103 CEST	443	52009	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.937038898 CEST	443	52008	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.942084074 CEST	443	52008	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.942187071 CEST	52008	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.942276001 CEST	52008	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.942323923 CEST	443	52008	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.942353964 CEST	52008	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.942370892 CEST	443	52008	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.947364092 CEST	52012	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.947453022 CEST	443	52012	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.947550058 CEST	52012	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.947923899 CEST	52012	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.947966099 CEST	443	52012	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.972317934 CEST	443	52007	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.972476006 CEST	443	52007	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.972668886 CEST	52007	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.972816944 CEST	52007	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.972855091 CEST	443	52007	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.972888947 CEST	52007	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.972903967 CEST	443	52007	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.978363037 CEST	52013	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.978404045 CEST	443	52013	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:22.978549004 CEST	52013	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.979126930 CEST	52013	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:22.979142904 CEST	443	52013	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.026752949 CEST	443	52009	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.026905060 CEST	443	52009	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.027065039 CEST	52009	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.027623892 CEST	52009	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.027659893 CEST	443	52009	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.027687073 CEST	52009	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.027703047 CEST	443	52009	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.037664890 CEST	52014	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.037753105 CEST	443	52014	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.037945032 CEST	52014	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.038110971 CEST	52014	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.038145065 CEST	443	52014	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.190916061 CEST	443	52010	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.192240953 CEST	52010	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.192285061 CEST	443	52010	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.193181992 CEST	52010	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.193208933 CEST	443	52010	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.335084915 CEST	443	52010	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.335606098 CEST	443	52010	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.335681915 CEST	52010	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.335819006 CEST	52010	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.335860014 CEST	443	52010	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.335886955 CEST	52010	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.335901976 CEST	443	52010	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.350681067 CEST	52015	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.350723028 CEST	443	52015	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.350775003 CEST	52015	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.360342026 CEST	52015	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.360361099 CEST	443	52015	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.465706110 CEST	443	52011	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.507906914 CEST	52011	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.507997990 CEST	443	52011	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.508848906 CEST	52011	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.508862972 CEST	443	52011	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.637933016 CEST	443	52011	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.638104916 CEST	443	52011	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.638178110 CEST	52011	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.638554096 CEST	52011	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.638592005 CEST	443	52011	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.638617992 CEST	52011	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.638633013 CEST	443	52011	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.644855976 CEST	52016	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.644917011 CEST	443	52016	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.645004034 CEST	52016	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.645272970 CEST	52016	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.645302057 CEST	443	52016	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.687941074 CEST	443	52012	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.688519001 CEST	52012	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.688580036 CEST	443	52012	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.689327955 CEST	52012	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.689343929 CEST	443	52012	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.728827000 CEST	443	52013	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.729466915 CEST	52013	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.729486942 CEST	443	52013	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.730818987 CEST	52013	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.730823040 CEST	443	52013	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.793797016 CEST	443	52014	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.794403076 CEST	52014	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.794452906 CEST	443	52014	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.795084000 CEST	52014	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.795103073 CEST	443	52014	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.817414045 CEST	443	52012	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.817560911 CEST	443	52012	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.817656040 CEST	52012	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.817709923 CEST	52012	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.817709923 CEST	52012	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.817749023 CEST	443	52012	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.817775011 CEST	443	52012	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.820084095 CEST	52017	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.820158005 CEST	443	52017	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.820238113 CEST	52017	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.820451975 CEST	52017	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.820483923 CEST	443	52017	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.861035109 CEST	443	52013	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.861965895 CEST	443	52013	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.862050056 CEST	52013	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.862104893 CEST	52013	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.862104893 CEST	52013	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.862143040 CEST	443	52013	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.862169027 CEST	443	52013	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.864804983 CEST	52018	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.864861965 CEST	443	52018	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.864938974 CEST	52018	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.865061045 CEST	52018	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.865084887 CEST	443	52018	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.924408913 CEST	443	52014	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.924566031 CEST	443	52014	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.924751997 CEST	52014	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.924835920 CEST	52014	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.924835920 CEST	52014	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.924877882 CEST	443	52014	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.924907923 CEST	443	52014	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.927412987 CEST	52019	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.927490950 CEST	443	52019	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:23.927572012 CEST	52019	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.927730083 CEST	52019	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:23.927778006 CEST	443	52019	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.084182024 CEST	443	52015	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.084650040 CEST	52015	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.084707022 CEST	443	52015	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.085098982 CEST	52015	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.085112095 CEST	443	52015	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.211776972 CEST	443	52015	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.212117910 CEST	443	52015	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.212683916 CEST	52015	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.212810993 CEST	52015	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.212848902 CEST	443	52015	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.212874889 CEST	52015	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.212892056 CEST	443	52015	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.218554020 CEST	52020	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.218606949 CEST	443	52020	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.218801975 CEST	52020	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.219227076 CEST	52020	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.219257116 CEST	443	52020	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.384593964 CEST	443	52016	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.385339022 CEST	52016	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.385382891 CEST	443	52016	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.386285067 CEST	52016	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.386300087 CEST	443	52016	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.403784037 CEST	52021	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:24.403882027 CEST	443	52021	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:24.403960943 CEST	52021	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:24.404292107 CEST	52021	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:24.404328108 CEST	443	52021	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:24.514065027 CEST	443	52016	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.514225960 CEST	443	52016	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.514300108 CEST	52016	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.514760971 CEST	52016	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.514812946 CEST	443	52016	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.514847040 CEST	52016	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.514863014 CEST	443	52016	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.544404030 CEST	52022	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.544514894 CEST	443	52022	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.544599056 CEST	52022	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.545037985 CEST	52022	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.545078993 CEST	443	52022	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.557478905 CEST	443	52017	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.558171034 CEST	52017	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.558203936 CEST	443	52017	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.558881044 CEST	52017	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.558887959 CEST	443	52017	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.605575085 CEST	443	52018	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.606023073 CEST	52018	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.606075048 CEST	443	52018	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.606663942 CEST	52018	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.606676102 CEST	443	52018	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.676552057 CEST	443	52019	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.677354097 CEST	52019	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.677407026 CEST	443	52019	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.678075075 CEST	52019	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.678088903 CEST	443	52019	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.686861038 CEST	443	52017	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.687429905 CEST	443	52017	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.687493086 CEST	52017	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.687561035 CEST	52017	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.687593937 CEST	443	52017	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.691656113 CEST	52023	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.691750050 CEST	443	52023	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.691931963 CEST	52023	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.692044973 CEST	52023	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.692079067 CEST	443	52023	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.740415096 CEST	443	52018	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.741523981 CEST	443	52018	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.741655111 CEST	52018	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.741759062 CEST	52018	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.741759062 CEST	52018	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.741808891 CEST	443	52018	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.741837025 CEST	443	52018	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.745006084 CEST	52024	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.745088100 CEST	443	52024	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.745220900 CEST	52024	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.745687008 CEST	52024	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.745723963 CEST	443	52024	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.805743933 CEST	443	52019	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.806461096 CEST	443	52019	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.806529045 CEST	52019	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.806685925 CEST	52019	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.806737900 CEST	443	52019	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.806771040 CEST	52019	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.806787014 CEST	443	52019	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.811295033 CEST	52025	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.811386108 CEST	443	52025	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.811460972 CEST	52025	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.811608076 CEST	52025	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.811635017 CEST	443	52025	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.885559082 CEST	52026	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:23:24.885628939 CEST	443	52026	142.250.186.68	192.168.2.4
Oct 25, 2024 22:23:24.885831118 CEST	52026	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:23:24.886574030 CEST	52026	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:23:24.886610985 CEST	443	52026	142.250.186.68	192.168.2.4
Oct 25, 2024 22:23:24.961044073 CEST	443	52020	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.962100029 CEST	52020	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.962138891 CEST	443	52020	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:24.963293076 CEST	52020	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:24.963306904 CEST	443	52020	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.034423113 CEST	443	52021	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.035135984 CEST	52021	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.035162926 CEST	443	52021	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.038475990 CEST	443	52021	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.038546085 CEST	52021	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.039005041 CEST	52021	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.039100885 CEST	443	52021	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.039397001 CEST	52021	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.039414883 CEST	443	52021	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.079062939 CEST	52021	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.094840050 CEST	443	52020	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.095356941 CEST	443	52020	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.095442057 CEST	52020	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.095503092 CEST	52020	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.095536947 CEST	443	52020	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.095571995 CEST	52020	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.095586061 CEST	443	52020	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.099797010 CEST	52027	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.099874020 CEST	443	52027	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.100013971 CEST	52027	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.100364923 CEST	52027	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.100395918 CEST	443	52027	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.184735060 CEST	443	52021	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.185029030 CEST	52021	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.185121059 CEST	443	52021	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.185192108 CEST	52021	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.185456991 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.185535908 CEST	443	52028	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.185619116 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.185887098 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.185925961 CEST	443	52028	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.303417921 CEST	443	52022	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.303900003 CEST	52022	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.303940058 CEST	443	52022	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.304361105 CEST	52022	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.304373980 CEST	443	52022	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.432602882 CEST	443	52023	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.433126926 CEST	52023	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.433182001 CEST	443	52023	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.433581114 CEST	52023	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.433594942 CEST	443	52023	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.437679052 CEST	443	52022	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.438225031 CEST	443	52022	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.438296080 CEST	52022	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.438406944 CEST	52022	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.438406944 CEST	52022	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.438447952 CEST	443	52022	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.438472033 CEST	443	52022	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.441066980 CEST	52029	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.441096067 CEST	443	52029	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.441200018 CEST	52029	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.441334963 CEST	52029	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.441344976 CEST	443	52029	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.487056017 CEST	443	52024	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.487441063 CEST	52024	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.487452984 CEST	443	52024	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.487888098 CEST	52024	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.487893105 CEST	443	52024	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.563719988 CEST	443	52025	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.564327002 CEST	52025	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.564357042 CEST	443	52025	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.564780951 CEST	52025	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.564789057 CEST	443	52025	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.585745096 CEST	443	52023	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.585968971 CEST	443	52023	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.586028099 CEST	52023	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.586085081 CEST	52023	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.586117983 CEST	443	52023	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.586158991 CEST	52023	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.586173058 CEST	443	52023	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.588759899 CEST	52030	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.588862896 CEST	443	52030	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.589006901 CEST	52030	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.589193106 CEST	52030	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.589229107 CEST	443	52030	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.616431952 CEST	443	52024	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.617098093 CEST	443	52024	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.617162943 CEST	52024	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.618004084 CEST	52024	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.618021965 CEST	443	52024	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.629452944 CEST	52031	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.629482985 CEST	443	52031	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.629539967 CEST	52031	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.629796982 CEST	52031	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.629807949 CEST	443	52031	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.696448088 CEST	443	52025	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.696818113 CEST	443	52025	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.696986914 CEST	52025	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.697046041 CEST	52025	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.697077990 CEST	443	52025	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.697105885 CEST	52025	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.697120905 CEST	443	52025	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.700334072 CEST	52032	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.700356960 CEST	443	52032	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.700489998 CEST	52032	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.700561047 CEST	52032	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.700567961 CEST	443	52032	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.738493919 CEST	443	52026	142.250.186.68	192.168.2.4
Oct 25, 2024 22:23:25.738796949 CEST	52026	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:23:25.738832951 CEST	443	52026	142.250.186.68	192.168.2.4
Oct 25, 2024 22:23:25.739181995 CEST	443	52026	142.250.186.68	192.168.2.4
Oct 25, 2024 22:23:25.739619970 CEST	52026	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:23:25.739695072 CEST	443	52026	142.250.186.68	192.168.2.4
Oct 25, 2024 22:23:25.782212973 CEST	52026	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:23:25.834686041 CEST	443	52028	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.834989071 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.835027933 CEST	443	52028	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.836863041 CEST	443	52027	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.837389946 CEST	52027	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.837414026 CEST	443	52027	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.837846994 CEST	52027	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.837857962 CEST	443	52027	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.838442087 CEST	443	52028	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.838527918 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.838857889 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.838946104 CEST	443	52028	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.838979006 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.883337975 CEST	443	52028	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.891587973 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.891625881 CEST	443	52028	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.938446999 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.968853951 CEST	443	52027	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.970206022 CEST	443	52027	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.970335007 CEST	52027	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.970386982 CEST	52027	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.970386982 CEST	52027	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.970413923 CEST	443	52027	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.970451117 CEST	443	52027	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.973047972 CEST	52033	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.973151922 CEST	443	52033	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.973270893 CEST	52033	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.973439932 CEST	52033	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:25.973478079 CEST	443	52033	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:25.993339062 CEST	443	52028	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.993669033 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:25.993776083 CEST	443	52028	35.190.80.1	192.168.2.4
Oct 25, 2024 22:23:25.993839979 CEST	52028	443	192.168.2.4	35.190.80.1
Oct 25, 2024 22:23:26.196101904 CEST	443	52029	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.196804047 CEST	52029	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.196822882 CEST	443	52029	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.197218895 CEST	52029	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.197222948 CEST	443	52029	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.318423986 CEST	443	52030	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.319072962 CEST	52030	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.319139004 CEST	443	52030	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.319689035 CEST	52030	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.319710970 CEST	443	52030	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.329273939 CEST	443	52029	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.329457045 CEST	443	52029	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.329538107 CEST	52029	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.329571009 CEST	52029	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.329586983 CEST	443	52029	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.329624891 CEST	52029	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.329629898 CEST	443	52029	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.332544088 CEST	52034	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.332562923 CEST	443	52034	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.332815886 CEST	52034	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.332995892 CEST	52034	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.333007097 CEST	443	52034	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.374526978 CEST	443	52031	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.374919891 CEST	52031	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.374928951 CEST	443	52031	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.375488997 CEST	52031	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.375494003 CEST	443	52031	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.432459116 CEST	443	52032	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.433007002 CEST	52032	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.433017015 CEST	443	52032	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.433579922 CEST	52032	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.433583975 CEST	443	52032	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.448087931 CEST	443	52030	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.448273897 CEST	443	52030	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.448343992 CEST	52030	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.448523045 CEST	52030	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.448566914 CEST	443	52030	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.448595047 CEST	52030	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.448611021 CEST	443	52030	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.452402115 CEST	52035	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.452447891 CEST	443	52035	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.452521086 CEST	52035	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.452756882 CEST	52035	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.452786922 CEST	443	52035	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.561866045 CEST	443	52032	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.562097073 CEST	443	52032	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.562164068 CEST	52032	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.562195063 CEST	52032	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.562195063 CEST	52032	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.562211037 CEST	443	52032	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.562220097 CEST	443	52032	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.565556049 CEST	52036	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.565639973 CEST	443	52036	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.565751076 CEST	52036	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.565918922 CEST	52036	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.565948963 CEST	443	52036	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.628318071 CEST	443	52031	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.628499985 CEST	443	52031	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.628566027 CEST	52031	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.628695011 CEST	52031	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.628705025 CEST	443	52031	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.632427931 CEST	52037	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.632477999 CEST	443	52037	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.632543087 CEST	52037	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.632702112 CEST	52037	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.632720947 CEST	443	52037	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.712048054 CEST	443	52033	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.712551117 CEST	52033	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.712615013 CEST	443	52033	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.713038921 CEST	52033	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.713052988 CEST	443	52033	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.842963934 CEST	443	52033	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.843523979 CEST	443	52033	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.843732119 CEST	52033	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.843732119 CEST	52033	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.843732119 CEST	52033	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.846446991 CEST	52038	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.846493959 CEST	443	52038	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:26.846563101 CEST	52038	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.846767902 CEST	52038	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:26.846782923 CEST	443	52038	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.073107958 CEST	443	52034	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.073709011 CEST	52034	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.073719978 CEST	443	52034	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.074258089 CEST	52034	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.074264050 CEST	443	52034	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.157315016 CEST	52033	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.157383919 CEST	443	52033	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.184381962 CEST	443	52035	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.185024023 CEST	52035	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.185117960 CEST	443	52035	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.185496092 CEST	52035	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.185511112 CEST	443	52035	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.202482939 CEST	443	52034	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.202614069 CEST	443	52034	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.202697992 CEST	52034	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.202810049 CEST	52034	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.202822924 CEST	443	52034	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.202851057 CEST	52034	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.202857971 CEST	443	52034	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.206254959 CEST	52039	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.206316948 CEST	443	52039	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.206382990 CEST	52039	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.206618071 CEST	52039	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.206639051 CEST	443	52039	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.299374104 CEST	443	52036	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.299910069 CEST	52036	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.299999952 CEST	443	52036	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.300513983 CEST	52036	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.300530910 CEST	443	52036	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.314234018 CEST	443	52035	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.314474106 CEST	443	52035	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.314671993 CEST	52035	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.314763069 CEST	52035	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.314764023 CEST	52035	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.314812899 CEST	443	52035	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.314841986 CEST	443	52035	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.317589045 CEST	52040	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.317661047 CEST	443	52040	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.317744970 CEST	52040	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.317919016 CEST	52040	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.317950964 CEST	443	52040	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.366595030 CEST	443	52037	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.367089033 CEST	52037	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.367114067 CEST	443	52037	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.367671967 CEST	52037	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.367676973 CEST	443	52037	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.470628977 CEST	443	52036	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.470715046 CEST	443	52036	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.470788002 CEST	52036	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.471029997 CEST	52036	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.471069098 CEST	443	52036	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.471101999 CEST	52036	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.471117973 CEST	443	52036	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.474034071 CEST	52041	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.474082947 CEST	443	52041	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.474149942 CEST	52041	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.474302053 CEST	52041	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.474320889 CEST	443	52041	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.495661020 CEST	443	52037	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.495811939 CEST	443	52037	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.495867968 CEST	52037	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.495922089 CEST	52037	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.495946884 CEST	443	52037	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.495960951 CEST	52037	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.495969057 CEST	443	52037	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.498226881 CEST	52042	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.498285055 CEST	443	52042	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.498363018 CEST	52042	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.498533964 CEST	52042	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.498565912 CEST	443	52042	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.606587887 CEST	443	52038	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.607168913 CEST	52038	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.607219934 CEST	443	52038	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.607733965 CEST	52038	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.607747078 CEST	443	52038	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.737730980 CEST	443	52038	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.738009930 CEST	443	52038	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.738089085 CEST	52038	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.738168001 CEST	52038	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.738168001 CEST	52038	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.738205910 CEST	443	52038	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.738230944 CEST	443	52038	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.741378069 CEST	52043	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.741425037 CEST	443	52043	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.741533041 CEST	52043	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.741808891 CEST	52043	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.741827011 CEST	443	52043	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.953458071 CEST	443	52039	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.955976963 CEST	52039	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.956012011 CEST	443	52039	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:27.956964970 CEST	52039	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:27.956970930 CEST	443	52039	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.084285975 CEST	443	52039	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.084494114 CEST	443	52039	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.084559917 CEST	52039	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.084610939 CEST	52039	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.084631920 CEST	443	52039	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.084645987 CEST	52039	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.084652901 CEST	443	52039	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.086014032 CEST	443	52040	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.086611032 CEST	52040	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.086667061 CEST	443	52040	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.087090015 CEST	52040	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.087104082 CEST	443	52040	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.088090897 CEST	52044	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.088186979 CEST	443	52044	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.088268995 CEST	52044	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.088442087 CEST	52044	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.088469028 CEST	443	52044	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.195347071 CEST	443	52041	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.195753098 CEST	52041	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.195784092 CEST	443	52041	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.196329117 CEST	52041	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.196336031 CEST	443	52041	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.222944021 CEST	443	52040	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.223354101 CEST	443	52040	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.223423958 CEST	52040	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.223489046 CEST	52040	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.223489046 CEST	52040	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.223525047 CEST	443	52040	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.223548889 CEST	443	52040	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.226234913 CEST	52045	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.226300001 CEST	443	52045	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.226449966 CEST	52045	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.226577044 CEST	52045	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.226608992 CEST	443	52045	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.236443043 CEST	443	52042	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.236812115 CEST	52042	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.236844063 CEST	443	52042	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.237351894 CEST	52042	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.237364054 CEST	443	52042	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.324415922 CEST	443	52041	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.324567080 CEST	443	52041	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.324625015 CEST	52041	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.324697018 CEST	52041	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.324721098 CEST	443	52041	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.324734926 CEST	52041	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.324742079 CEST	443	52041	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.327826977 CEST	52046	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.327908993 CEST	443	52046	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.327996016 CEST	52046	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.328176975 CEST	52046	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.328210115 CEST	443	52046	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.367738008 CEST	443	52042	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.371201992 CEST	443	52042	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.371270895 CEST	52042	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.371360064 CEST	52042	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.371360064 CEST	52042	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.371396065 CEST	443	52042	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.371437073 CEST	443	52042	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.373822927 CEST	52047	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.373878956 CEST	443	52047	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.373964071 CEST	52047	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.374103069 CEST	52047	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.374130964 CEST	443	52047	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.478957891 CEST	443	52043	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.479530096 CEST	52043	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.479546070 CEST	443	52043	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.480246067 CEST	52043	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.480252028 CEST	443	52043	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.611706018 CEST	443	52043	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.611867905 CEST	443	52043	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.611924887 CEST	52043	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.612169027 CEST	52043	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.612185955 CEST	443	52043	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.612199068 CEST	52043	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.612205029 CEST	443	52043	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.614655972 CEST	52048	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.614682913 CEST	443	52048	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.614764929 CEST	52048	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.614969015 CEST	52048	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.614985943 CEST	443	52048	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.827773094 CEST	443	52044	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.828474045 CEST	52044	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.828530073 CEST	443	52044	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.829571009 CEST	52044	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.829586029 CEST	443	52044	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.959167957 CEST	443	52044	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.959403038 CEST	443	52044	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.959479094 CEST	52044	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.959924936 CEST	52044	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.959973097 CEST	443	52044	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.960001945 CEST	52044	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.960017920 CEST	443	52044	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.963557005 CEST	52049	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.963654995 CEST	443	52049	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.963731050 CEST	52049	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.963990927 CEST	52049	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:28.964027882 CEST	443	52049	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:28.977323055 CEST	443	52045	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.006470919 CEST	52045	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.006539106 CEST	443	52045	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.006999969 CEST	52045	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.007015944 CEST	443	52045	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.066740990 CEST	443	52046	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.068185091 CEST	52046	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.068228006 CEST	443	52046	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.069881916 CEST	52046	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.069897890 CEST	443	52046	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.112091064 CEST	443	52047	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.113049030 CEST	52047	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.113090038 CEST	443	52047	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.113866091 CEST	52047	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.113879919 CEST	443	52047	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.139928102 CEST	443	52045	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.140125990 CEST	443	52045	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.140415907 CEST	52045	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.140618086 CEST	52045	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.140677929 CEST	443	52045	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.140723944 CEST	52045	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.140741110 CEST	443	52045	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.145870924 CEST	52050	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.145924091 CEST	443	52050	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.146029949 CEST	52050	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.146258116 CEST	52050	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.146284103 CEST	443	52050	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.195058107 CEST	443	52046	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.195319891 CEST	443	52046	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.195391893 CEST	52046	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.195736885 CEST	52046	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.195768118 CEST	443	52046	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.202455997 CEST	52051	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.202550888 CEST	443	52051	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.202647924 CEST	52051	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.203110933 CEST	52051	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.203145027 CEST	443	52051	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.245475054 CEST	443	52047	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.245616913 CEST	443	52047	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.245743990 CEST	52047	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.245955944 CEST	52047	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.246012926 CEST	443	52047	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.246041059 CEST	52047	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.246056080 CEST	443	52047	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.250220060 CEST	52052	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.250250101 CEST	443	52052	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.250399113 CEST	52052	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.250639915 CEST	52052	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.250657082 CEST	443	52052	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.358707905 CEST	443	52048	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.359944105 CEST	52048	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.359991074 CEST	443	52048	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.363131046 CEST	52048	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.363138914 CEST	443	52048	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.498761892 CEST	443	52048	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.499018908 CEST	443	52048	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.499105930 CEST	52048	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.504404068 CEST	52048	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.504448891 CEST	443	52048	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.504456997 CEST	52048	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.504477024 CEST	443	52048	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.556777954 CEST	52053	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.556844950 CEST	443	52053	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.556922913 CEST	52053	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.557140112 CEST	52053	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.557156086 CEST	443	52053	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.911561966 CEST	443	52050	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.918948889 CEST	52050	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.918984890 CEST	443	52050	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.919576883 CEST	52050	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.919584990 CEST	443	52050	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.926678896 CEST	443	52051	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.927141905 CEST	52051	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.927172899 CEST	443	52051	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.927862883 CEST	52051	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.927876949 CEST	443	52051	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.992604971 CEST	443	52052	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.993117094 CEST	52052	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.993146896 CEST	443	52052	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:29.993704081 CEST	52052	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:29.993710995 CEST	443	52052	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.048779011 CEST	443	52050	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.048913002 CEST	443	52049	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.049021006 CEST	443	52050	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.049093962 CEST	52050	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.049148083 CEST	52050	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.049165964 CEST	443	52050	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.049179077 CEST	52050	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.049185038 CEST	443	52050	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.049647093 CEST	52049	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.049660921 CEST	443	52049	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.050169945 CEST	52049	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.050180912 CEST	443	52049	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.052395105 CEST	52054	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.052438021 CEST	443	52054	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.052705050 CEST	52054	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.052850008 CEST	52054	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.052867889 CEST	443	52054	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.056930065 CEST	443	52051	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.057097912 CEST	443	52051	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.057172060 CEST	52051	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.057244062 CEST	52051	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.057244062 CEST	52051	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.057271957 CEST	443	52051	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.057298899 CEST	443	52051	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.059823990 CEST	52055	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.059870005 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.059927940 CEST	52055	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.060107946 CEST	52055	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.060132980 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.124722004 CEST	443	52052	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.124927998 CEST	443	52052	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.125009060 CEST	52052	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.125173092 CEST	52052	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.125216007 CEST	443	52052	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.125245094 CEST	52052	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.125262022 CEST	443	52052	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.128448963 CEST	52056	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.128555059 CEST	443	52056	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.128637075 CEST	52056	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.128887892 CEST	52056	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.128916979 CEST	443	52056	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.177229881 CEST	443	52049	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.177325010 CEST	443	52049	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.177381039 CEST	52049	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.177560091 CEST	52049	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.177581072 CEST	443	52049	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.177602053 CEST	52049	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.177609921 CEST	443	52049	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.180746078 CEST	52057	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.180790901 CEST	443	52057	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.181068897 CEST	52057	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.181253910 CEST	52057	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.181266069 CEST	443	52057	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.298609018 CEST	443	52053	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.299154997 CEST	52053	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.299216986 CEST	443	52053	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.299758911 CEST	52053	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.299772978 CEST	443	52053	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.429611921 CEST	443	52053	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.429832935 CEST	443	52053	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.429992914 CEST	52053	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.431643963 CEST	52053	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.431687117 CEST	443	52053	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.431736946 CEST	52053	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.431752920 CEST	443	52053	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.446732044 CEST	52058	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.446831942 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.446964025 CEST	52058	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.447287083 CEST	52058	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.447336912 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.801949024 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.802532911 CEST	52055	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.802607059 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.803381920 CEST	52055	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.803396940 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.828028917 CEST	443	52054	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.828866959 CEST	52054	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.828937054 CEST	443	52054	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.829840899 CEST	52054	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.829857111 CEST	443	52054	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.886248112 CEST	443	52056	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.886790037 CEST	52056	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.886868000 CEST	443	52056	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.887417078 CEST	52056	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.887435913 CEST	443	52056	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.929653883 CEST	443	52057	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.930629015 CEST	52057	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.930639982 CEST	443	52057	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.931677103 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.931693077 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.931754112 CEST	52055	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.931786060 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.931848049 CEST	52057	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.931854010 CEST	443	52057	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.931858063 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.931909084 CEST	52055	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.932440042 CEST	52055	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.932473898 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.932499886 CEST	52055	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.932513952 CEST	443	52055	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.936003923 CEST	52059	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.936034918 CEST	443	52059	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.936327934 CEST	52059	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.936458111 CEST	52059	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.936469078 CEST	443	52059	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.963284969 CEST	443	52054	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.963474989 CEST	443	52054	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.963562965 CEST	52054	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.963654041 CEST	52054	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.963654041 CEST	52054	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.963701963 CEST	443	52054	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.963732958 CEST	443	52054	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.966978073 CEST	52060	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.967012882 CEST	443	52060	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:30.967102051 CEST	52060	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.967298985 CEST	52060	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:30.967319965 CEST	443	52060	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.016833067 CEST	443	52056	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.016982079 CEST	443	52056	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.017059088 CEST	52056	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.019771099 CEST	52056	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.019830942 CEST	443	52056	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.019932985 CEST	52056	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.019949913 CEST	443	52056	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.025516987 CEST	52061	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.025549889 CEST	443	52061	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.025609016 CEST	52061	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.025928974 CEST	52061	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.025944948 CEST	443	52061	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.062552929 CEST	443	52057	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.062599897 CEST	443	52057	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.062714100 CEST	52057	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.063069105 CEST	52057	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.063069105 CEST	52057	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.063091040 CEST	443	52057	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.063105106 CEST	443	52057	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.067408085 CEST	52062	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.067444086 CEST	443	52062	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.067506075 CEST	52062	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.067770004 CEST	52062	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.067783117 CEST	443	52062	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.193979025 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.194612980 CEST	52058	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.194695950 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.195353031 CEST	52058	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.195367098 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.333019018 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.333070993 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.333146095 CEST	52058	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.333179951 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.333225012 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.333287001 CEST	52058	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.333653927 CEST	52058	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.333653927 CEST	52058	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.333688021 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.333710909 CEST	443	52058	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.341156006 CEST	52063	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.341191053 CEST	443	52063	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.341315031 CEST	52063	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.341519117 CEST	52063	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.341530085 CEST	443	52063	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.697240114 CEST	443	52060	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.697724104 CEST	52060	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.697750092 CEST	443	52060	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.698169947 CEST	52060	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.698179007 CEST	443	52060	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.710479021 CEST	443	52059	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.710902929 CEST	52059	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.710916042 CEST	443	52059	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.711260080 CEST	52059	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.711267948 CEST	443	52059	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.775171041 CEST	443	52061	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.775619030 CEST	52061	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.775638103 CEST	443	52061	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.776021957 CEST	52061	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.776027918 CEST	443	52061	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.808434963 CEST	443	52062	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.808866024 CEST	52062	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.808888912 CEST	443	52062	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.809238911 CEST	52062	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.809246063 CEST	443	52062	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.840020895 CEST	443	52060	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.840048075 CEST	443	52060	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.840101957 CEST	443	52060	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.840104103 CEST	52060	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.840143919 CEST	52060	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.840272903 CEST	52060	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.840300083 CEST	443	52060	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.840313911 CEST	52060	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.840322018 CEST	443	52060	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.842951059 CEST	52064	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.843019962 CEST	443	52064	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.843127966 CEST	52064	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.843311071 CEST	52064	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.843329906 CEST	443	52064	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.848145008 CEST	443	52059	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.848170042 CEST	443	52059	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.848223925 CEST	443	52059	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.848277092 CEST	52059	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.848277092 CEST	52059	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.848694086 CEST	52059	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.848694086 CEST	52059	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.848715067 CEST	443	52059	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.848726988 CEST	443	52059	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.857851028 CEST	52065	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.857897997 CEST	443	52065	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.857975960 CEST	52065	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.858412027 CEST	52065	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.858447075 CEST	443	52065	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.924911022 CEST	443	52061	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.925093889 CEST	443	52061	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.925180912 CEST	52061	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.925632000 CEST	52061	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.925645113 CEST	443	52061	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.925662041 CEST	52061	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.925668001 CEST	443	52061	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.931648970 CEST	52066	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.931674957 CEST	443	52066	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.932168007 CEST	52066	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.932512045 CEST	52066	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.932524920 CEST	443	52066	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.951047897 CEST	443	52062	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.951091051 CEST	443	52062	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.951163054 CEST	52062	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.951469898 CEST	52062	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.951488972 CEST	443	52062	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.961018085 CEST	52067	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.961083889 CEST	443	52067	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:31.961180925 CEST	52067	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.962318897 CEST	52067	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:31.962349892 CEST	443	52067	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.089838028 CEST	443	52063	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.090579033 CEST	52063	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.090607882 CEST	443	52063	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.092293978 CEST	52063	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.092307091 CEST	443	52063	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.225935936 CEST	443	52063	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.226110935 CEST	443	52063	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.226260900 CEST	52063	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.226450920 CEST	52063	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.226471901 CEST	443	52063	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.226514101 CEST	52063	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.226521969 CEST	443	52063	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.231137037 CEST	52068	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.231235981 CEST	443	52068	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.231427908 CEST	52068	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.231651068 CEST	52068	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.231688023 CEST	443	52068	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.573295116 CEST	443	52064	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.583410978 CEST	52064	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.583442926 CEST	443	52064	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.584009886 CEST	52064	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.584017038 CEST	443	52064	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.612627983 CEST	443	52065	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.616555929 CEST	52065	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.616633892 CEST	443	52065	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.617168903 CEST	52065	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.617182970 CEST	443	52065	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.655833960 CEST	443	52066	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.669862986 CEST	52066	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.669902086 CEST	443	52066	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.679177046 CEST	52066	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.679192066 CEST	443	52066	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.700969934 CEST	443	52067	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.701361895 CEST	52067	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.701409101 CEST	443	52067	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.701944113 CEST	52067	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.701955080 CEST	443	52067	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.709203005 CEST	443	52064	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.709315062 CEST	443	52064	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.709359884 CEST	52064	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.715293884 CEST	52064	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.715322971 CEST	443	52064	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.715336084 CEST	52064	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.715342045 CEST	443	52064	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.738754034 CEST	52069	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.738847017 CEST	443	52069	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.738938093 CEST	52069	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.739762068 CEST	52069	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.739795923 CEST	443	52069	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.742784023 CEST	443	52065	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.742930889 CEST	443	52065	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.743010998 CEST	52065	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.743822098 CEST	52065	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.743866920 CEST	443	52065	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.750705957 CEST	52070	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.750802994 CEST	443	52070	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.750873089 CEST	52070	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.773691893 CEST	52070	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.773777008 CEST	443	52070	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.803466082 CEST	443	52066	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.803658962 CEST	443	52066	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.803842068 CEST	52066	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.804610968 CEST	52066	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.804645061 CEST	443	52066	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.804817915 CEST	52066	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.804825068 CEST	443	52066	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.811794043 CEST	52071	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.811907053 CEST	443	52071	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.812107086 CEST	52071	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.812942982 CEST	52071	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.812982082 CEST	443	52071	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.829668045 CEST	443	52067	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.829744101 CEST	443	52067	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.829874992 CEST	52067	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.830045938 CEST	52067	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.830092907 CEST	443	52067	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.830126047 CEST	52067	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.830147982 CEST	443	52067	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.832523108 CEST	52072	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.832664013 CEST	443	52072	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.832761049 CEST	52072	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.832892895 CEST	52072	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.832931042 CEST	443	52072	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.967222929 CEST	443	52068	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.967739105 CEST	52068	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.967780113 CEST	443	52068	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:32.968221903 CEST	52068	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:32.968230009 CEST	443	52068	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.098057985 CEST	443	52068	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.098242998 CEST	443	52068	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.098299980 CEST	52068	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.098562002 CEST	52068	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.098596096 CEST	443	52068	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.098619938 CEST	52068	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.098632097 CEST	443	52068	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.101644039 CEST	52073	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.101671934 CEST	443	52073	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.101855040 CEST	52073	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.102035999 CEST	52073	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.102042913 CEST	443	52073	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.474483967 CEST	443	52069	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.475099087 CEST	52069	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.475182056 CEST	443	52069	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.475708008 CEST	52069	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.475723028 CEST	443	52069	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.512876034 CEST	443	52070	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.513381004 CEST	52070	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.513432026 CEST	443	52070	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.513823986 CEST	52070	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.513838053 CEST	443	52070	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.554445028 CEST	443	52071	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.554912090 CEST	52071	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.554989100 CEST	443	52071	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.555375099 CEST	52071	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.555391073 CEST	443	52071	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.563833952 CEST	443	52072	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.564275980 CEST	52072	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.564308882 CEST	443	52072	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.564560890 CEST	52072	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.564569950 CEST	443	52072	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.611845970 CEST	443	52069	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.611994982 CEST	443	52069	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.612059116 CEST	52069	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.612179995 CEST	52069	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.612221003 CEST	443	52069	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.612246990 CEST	52069	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.612263918 CEST	443	52069	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.615248919 CEST	52074	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.615364075 CEST	443	52074	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.615447044 CEST	52074	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.615628004 CEST	52074	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.615664005 CEST	443	52074	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.644123077 CEST	443	52070	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.644259930 CEST	443	52070	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.644330978 CEST	52070	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.644437075 CEST	52070	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.644479036 CEST	443	52070	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.644505978 CEST	52070	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.644521952 CEST	443	52070	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.647049904 CEST	52075	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.647090912 CEST	443	52075	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.647217035 CEST	52075	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.647320986 CEST	52075	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.647329092 CEST	443	52075	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.683165073 CEST	443	52071	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.683202028 CEST	443	52071	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.683255911 CEST	443	52071	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.683341026 CEST	52071	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.683449984 CEST	52071	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.683449984 CEST	52071	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.683480978 CEST	443	52071	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.683502913 CEST	443	52071	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.685873985 CEST	52076	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.685906887 CEST	443	52076	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.685959101 CEST	52076	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.686084032 CEST	52076	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.686098099 CEST	443	52076	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.839663982 CEST	443	52073	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.840414047 CEST	52073	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.840430021 CEST	443	52073	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.840624094 CEST	52073	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.840629101 CEST	443	52073	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.916759968 CEST	443	52072	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.916886091 CEST	443	52072	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.917018890 CEST	52072	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.917126894 CEST	52072	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.917160034 CEST	443	52072	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.917176962 CEST	52072	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.917184114 CEST	443	52072	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.919902086 CEST	52077	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.919965029 CEST	443	52077	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.920031071 CEST	52077	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.920241117 CEST	52077	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.920259953 CEST	443	52077	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.969872952 CEST	443	52073	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.969940901 CEST	443	52073	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.970042944 CEST	443	52073	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.970071077 CEST	52073	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.970195055 CEST	52073	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.970247030 CEST	52073	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.970247030 CEST	52073	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.970268965 CEST	443	52073	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.970277071 CEST	443	52073	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.972837925 CEST	52078	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.972889900 CEST	443	52078	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:33.972965002 CEST	52078	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.973115921 CEST	52078	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:33.973136902 CEST	443	52078	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.389225006 CEST	443	52075	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.389820099 CEST	52075	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.389834881 CEST	443	52075	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.390316963 CEST	52075	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.390322924 CEST	443	52075	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.430305958 CEST	443	52076	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.430785894 CEST	52076	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.430809021 CEST	443	52076	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.431232929 CEST	52076	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.431237936 CEST	443	52076	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.525541067 CEST	443	52075	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.525713921 CEST	443	52075	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.526001930 CEST	52075	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.526074886 CEST	52075	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.526091099 CEST	443	52075	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.526113987 CEST	52075	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.526118994 CEST	443	52075	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.529333115 CEST	52079	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.529386044 CEST	443	52079	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.529573917 CEST	52079	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.529746056 CEST	52079	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.529766083 CEST	443	52079	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.554011106 CEST	443	52074	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.554536104 CEST	52074	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.554580927 CEST	443	52074	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.555027962 CEST	52074	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.555042028 CEST	443	52074	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.562597036 CEST	443	52076	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.562688112 CEST	443	52076	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.562753916 CEST	52076	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.563003063 CEST	52076	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.563023090 CEST	443	52076	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.563062906 CEST	52076	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.563071012 CEST	443	52076	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.566077948 CEST	52080	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.566098928 CEST	443	52080	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.566207886 CEST	52080	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.566344976 CEST	52080	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.566355944 CEST	443	52080	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.682817936 CEST	443	52074	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.682898998 CEST	443	52074	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.683096886 CEST	52074	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.683172941 CEST	52074	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.683172941 CEST	52074	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.683217049 CEST	443	52074	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.683242083 CEST	443	52074	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.685888052 CEST	52081	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.685940981 CEST	443	52081	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.686029911 CEST	52081	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.686201096 CEST	52081	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.686233997 CEST	443	52081	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.708857059 CEST	443	52077	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.709422112 CEST	52077	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.709474087 CEST	443	52077	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.709861994 CEST	52077	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.709873915 CEST	443	52077	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.732165098 CEST	443	52078	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.732609987 CEST	52078	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.732640982 CEST	443	52078	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.733048916 CEST	52078	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.733067989 CEST	443	52078	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.865860939 CEST	443	52078	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.865921021 CEST	443	52078	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.865983009 CEST	52078	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.866231918 CEST	52078	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.866231918 CEST	52078	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.866250038 CEST	443	52078	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.866262913 CEST	443	52078	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.868717909 CEST	52082	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.868730068 CEST	443	52082	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.868846893 CEST	52082	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.869030952 CEST	52082	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.869038105 CEST	443	52082	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.875233889 CEST	443	52077	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.875307083 CEST	443	52077	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.875436068 CEST	443	52077	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.875499964 CEST	52077	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.875541925 CEST	52077	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.875562906 CEST	443	52077	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.875577927 CEST	52077	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.875586033 CEST	443	52077	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.877738953 CEST	52083	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.877763987 CEST	443	52083	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:34.877875090 CEST	52083	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.878011942 CEST	52083	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:34.878026962 CEST	443	52083	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.272814989 CEST	443	52079	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.273314953 CEST	52079	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.273358107 CEST	443	52079	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.273839951 CEST	52079	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.273849010 CEST	443	52079	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.301501989 CEST	443	52080	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.301928043 CEST	52080	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.301947117 CEST	443	52080	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.302519083 CEST	52080	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.302525043 CEST	443	52080	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.609489918 CEST	443	52079	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.609565020 CEST	443	52079	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.609657049 CEST	52079	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.609846115 CEST	52079	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.609868050 CEST	443	52079	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.609889984 CEST	52079	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.609896898 CEST	443	52079	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.610310078 CEST	443	52080	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.610405922 CEST	443	52080	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.610562086 CEST	52080	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.610685110 CEST	52080	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.610685110 CEST	52080	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.610697985 CEST	443	52080	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.610709906 CEST	443	52080	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.613429070 CEST	52084	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.613475084 CEST	443	52084	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.613508940 CEST	52085	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.613540888 CEST	52084	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.613554001 CEST	443	52085	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.613620996 CEST	52085	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.613786936 CEST	52085	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.613806009 CEST	443	52085	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.613853931 CEST	52084	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.613872051 CEST	443	52084	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.617206097 CEST	443	52081	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.617578983 CEST	52081	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.617624998 CEST	443	52081	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.618010998 CEST	52081	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.618024111 CEST	443	52081	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.734483004 CEST	443	52026	142.250.186.68	192.168.2.4
Oct 25, 2024 22:23:35.734630108 CEST	443	52026	142.250.186.68	192.168.2.4
Oct 25, 2024 22:23:35.734724998 CEST	52026	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:23:35.749213934 CEST	443	52081	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.749279022 CEST	443	52081	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.749381065 CEST	443	52081	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.749450922 CEST	52081	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.749562979 CEST	52081	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.749562979 CEST	52081	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.749609947 CEST	443	52081	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.749636889 CEST	443	52081	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.752770901 CEST	52086	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.752819061 CEST	443	52086	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.753077984 CEST	52086	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.753252983 CEST	52086	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.753277063 CEST	443	52086	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.755692005 CEST	443	52082	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.756124020 CEST	52082	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.756134033 CEST	443	52082	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.756761074 CEST	52082	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.756764889 CEST	443	52082	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.756994963 CEST	443	52083	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.757322073 CEST	52083	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.757371902 CEST	443	52083	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.757955074 CEST	52083	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.757966042 CEST	443	52083	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.884330988 CEST	443	52083	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.884373903 CEST	443	52082	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.884399891 CEST	443	52083	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.884495974 CEST	52083	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.884526014 CEST	443	52082	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.884532928 CEST	443	52083	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.884623051 CEST	52082	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.884694099 CEST	52082	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.884701967 CEST	52083	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.884711981 CEST	443	52082	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.884737968 CEST	52082	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.884743929 CEST	443	52082	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.884907961 CEST	52083	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.884907961 CEST	52083	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.884948969 CEST	443	52083	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.884974003 CEST	443	52083	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.888154030 CEST	52087	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.888189077 CEST	443	52087	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.888266087 CEST	52088	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.888308048 CEST	52087	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.888324022 CEST	443	52088	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.888423920 CEST	52088	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.888576031 CEST	52087	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.888593912 CEST	443	52087	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:35.888648987 CEST	52088	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:35.888680935 CEST	443	52088	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.367042065 CEST	443	52085	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.367557049 CEST	52085	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.367578030 CEST	443	52085	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.368027925 CEST	52085	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.368035078 CEST	443	52085	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.488118887 CEST	443	52086	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.488612890 CEST	52086	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.488662004 CEST	443	52086	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.489073038 CEST	52086	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.489083052 CEST	443	52086	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.522860050 CEST	443	52085	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.522960901 CEST	443	52085	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.523022890 CEST	52085	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.523190975 CEST	52085	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.523216963 CEST	443	52085	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.523226976 CEST	52085	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.523236990 CEST	443	52085	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.526007891 CEST	52089	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.526051998 CEST	443	52089	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.526197910 CEST	52089	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.526355982 CEST	52089	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.526371956 CEST	443	52089	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.619528055 CEST	443	52086	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.619601011 CEST	443	52086	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.619685888 CEST	52086	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.619848013 CEST	52086	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.619868994 CEST	443	52086	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.619899988 CEST	52086	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.619906902 CEST	443	52086	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.622572899 CEST	52090	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.622663975 CEST	443	52090	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.622910023 CEST	52090	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.623022079 CEST	52090	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.623054981 CEST	443	52090	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.627729893 CEST	52026	443	192.168.2.4	142.250.186.68
Oct 25, 2024 22:23:36.627799034 CEST	443	52026	142.250.186.68	192.168.2.4
Oct 25, 2024 22:23:36.635601044 CEST	443	52088	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.636019945 CEST	52088	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.636059999 CEST	443	52088	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.636512041 CEST	52088	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.636523962 CEST	443	52088	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.671029091 CEST	443	52087	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.671374083 CEST	52087	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.671389103 CEST	443	52087	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.671834946 CEST	52087	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.671840906 CEST	443	52087	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.767178059 CEST	443	52088	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.767705917 CEST	443	52088	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.767762899 CEST	52088	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.767772913 CEST	443	52088	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.767894983 CEST	52088	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.767894983 CEST	52088	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.767934084 CEST	52088	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.767955065 CEST	443	52088	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.770380974 CEST	52091	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.770414114 CEST	443	52091	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.770617962 CEST	52091	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.770710945 CEST	52091	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.770715952 CEST	443	52091	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.814439058 CEST	443	52087	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.814555883 CEST	443	52087	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.814681053 CEST	52087	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.814949989 CEST	52087	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.814949989 CEST	52087	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.814975023 CEST	443	52087	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.814989090 CEST	443	52087	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.818018913 CEST	52092	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.818099022 CEST	443	52092	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:36.818192959 CEST	52092	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.818922043 CEST	52092	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:36.818954945 CEST	443	52092	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.275733948 CEST	443	52089	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.276762009 CEST	52089	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.276762009 CEST	52089	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.276783943 CEST	443	52089	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.276802063 CEST	443	52089	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.382422924 CEST	443	52084	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.383920908 CEST	52084	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.383953094 CEST	443	52084	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.384650946 CEST	52084	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.384659052 CEST	443	52084	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.417280912 CEST	443	52089	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.417359114 CEST	443	52089	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.417479992 CEST	52089	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.418441057 CEST	52089	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.418462038 CEST	443	52089	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.418492079 CEST	52089	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.418499947 CEST	443	52089	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.430018902 CEST	52093	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.430057049 CEST	443	52093	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.430125952 CEST	52093	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.432610035 CEST	52093	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.432624102 CEST	443	52093	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.719754934 CEST	443	52084	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.719943047 CEST	443	52084	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.720038891 CEST	52084	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.720079899 CEST	52084	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.720079899 CEST	52084	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.720099926 CEST	443	52084	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.720104933 CEST	443	52084	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.724406958 CEST	52094	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.724486113 CEST	443	52094	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.724622011 CEST	52094	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.724750042 CEST	52094	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.724771976 CEST	443	52094	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.726367950 CEST	443	52090	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.727113962 CEST	52090	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.727114916 CEST	52090	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.727178097 CEST	443	52090	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.727224112 CEST	443	52090	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.730113983 CEST	443	52092	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.730191946 CEST	443	52091	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.730484009 CEST	52092	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.730501890 CEST	443	52092	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.730896950 CEST	52092	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.730906963 CEST	443	52092	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.731096983 CEST	52091	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.731117010 CEST	443	52091	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.731487989 CEST	52091	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.731493950 CEST	443	52091	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.858772039 CEST	443	52090	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.858860970 CEST	443	52090	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.859077930 CEST	52090	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.859078884 CEST	52090	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.859157085 CEST	52090	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.859194040 CEST	443	52090	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.861951113 CEST	52095	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.862004995 CEST	443	52095	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.862155914 CEST	52095	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.862268925 CEST	52095	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.862283945 CEST	443	52095	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.863656044 CEST	443	52091	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.863729954 CEST	443	52091	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.863852024 CEST	443	52091	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.863888025 CEST	52091	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.863967896 CEST	52091	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.863967896 CEST	52091	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.864250898 CEST	52091	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.864267111 CEST	443	52091	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.866331100 CEST	52096	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.866385937 CEST	443	52096	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.866533041 CEST	52096	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.866624117 CEST	52096	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.866642952 CEST	443	52096	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.871705055 CEST	443	52092	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.871859074 CEST	443	52092	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.872003078 CEST	52092	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.872003078 CEST	52092	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.872091055 CEST	52092	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.872129917 CEST	443	52092	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.874326944 CEST	52097	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.874353886 CEST	443	52097	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:37.874532938 CEST	52097	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.874584913 CEST	52097	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:37.874598980 CEST	443	52097	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.172621965 CEST	443	52093	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.173244953 CEST	52093	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.173281908 CEST	443	52093	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.173688889 CEST	52093	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.173696041 CEST	443	52093	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.304276943 CEST	443	52093	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.304347992 CEST	443	52093	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.304585934 CEST	52093	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.304636002 CEST	52093	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.304636002 CEST	52093	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.304660082 CEST	443	52093	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.304672003 CEST	443	52093	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.307822943 CEST	52098	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.307878017 CEST	443	52098	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.308032990 CEST	52098	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.308151960 CEST	52098	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.308186054 CEST	443	52098	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.451507092 CEST	443	52094	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.452053070 CEST	52094	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.452126026 CEST	443	52094	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.452527046 CEST	52094	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.452541113 CEST	443	52094	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.582712889 CEST	443	52094	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.582880974 CEST	443	52094	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.583000898 CEST	52094	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.583154917 CEST	52094	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.583200932 CEST	443	52094	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.583245039 CEST	52094	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.583261967 CEST	443	52094	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.586051941 CEST	52099	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.586092949 CEST	443	52099	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.586252928 CEST	52099	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.586430073 CEST	52099	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.586446047 CEST	443	52099	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.595850945 CEST	443	52095	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.596416950 CEST	52095	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.596451998 CEST	443	52095	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.597071886 CEST	52095	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.597078085 CEST	443	52095	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.612775087 CEST	443	52097	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.613838911 CEST	52097	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.613838911 CEST	52097	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.613857985 CEST	443	52097	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.613873959 CEST	443	52097	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.635291100 CEST	443	52096	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.635799885 CEST	52096	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.635859013 CEST	443	52096	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.636320114 CEST	52096	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.636334896 CEST	443	52096	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.725662947 CEST	443	52095	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.725939035 CEST	443	52095	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.725986958 CEST	443	52095	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.726015091 CEST	52095	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.726054907 CEST	52095	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.726149082 CEST	52095	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.726150036 CEST	52095	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.726182938 CEST	443	52095	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.726226091 CEST	443	52095	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.729028940 CEST	52100	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.729074955 CEST	443	52100	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.729233980 CEST	52100	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.729610920 CEST	52100	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.729629993 CEST	443	52100	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.742436886 CEST	443	52097	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.742593050 CEST	443	52097	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.742691040 CEST	52097	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.742691040 CEST	52097	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.742923021 CEST	52097	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.742934942 CEST	443	52097	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.745234013 CEST	52101	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.745280981 CEST	443	52101	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.745393038 CEST	52101	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.745558023 CEST	52101	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.745589972 CEST	443	52101	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.772300005 CEST	443	52096	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.772494078 CEST	443	52096	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.772716999 CEST	52096	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.772716999 CEST	52096	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.772716999 CEST	52096	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.774966002 CEST	52102	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.774996996 CEST	443	52102	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:38.775298119 CEST	52102	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.775440931 CEST	52102	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:38.775456905 CEST	443	52102	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.046570063 CEST	443	52098	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.047486067 CEST	52098	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.047486067 CEST	52098	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.047519922 CEST	443	52098	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.047547102 CEST	443	52098	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.079205036 CEST	52096	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.079241037 CEST	443	52096	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.187016010 CEST	443	52098	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.187089920 CEST	443	52098	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.187328100 CEST	52098	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.187328100 CEST	52098	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.187374115 CEST	52098	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.187392950 CEST	443	52098	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.190248013 CEST	52103	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.190300941 CEST	443	52103	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.190357924 CEST	52103	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.190525055 CEST	52103	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.190538883 CEST	443	52103	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.321672916 CEST	443	52099	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.322170019 CEST	52099	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.322206020 CEST	443	52099	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.322642088 CEST	52099	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.322649002 CEST	443	52099	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.451026917 CEST	443	52100	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.451591015 CEST	443	52099	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.451632023 CEST	443	52099	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.451644897 CEST	52100	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.451689959 CEST	443	52099	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.451718092 CEST	52099	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.451719046 CEST	443	52100	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.451754093 CEST	52099	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.451962948 CEST	52099	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.451977968 CEST	443	52099	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.451992989 CEST	52099	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.451998949 CEST	443	52099	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.452002048 CEST	52100	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.452017069 CEST	443	52100	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.455050945 CEST	52104	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.455081940 CEST	443	52104	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.455214977 CEST	52104	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.455353022 CEST	52104	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.455368042 CEST	443	52104	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.493012905 CEST	443	52101	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.494021893 CEST	52101	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.494054079 CEST	443	52101	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.494087934 CEST	52101	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.494096994 CEST	443	52101	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.509902000 CEST	443	52102	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.510616064 CEST	52102	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.510616064 CEST	52102	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.510662079 CEST	443	52102	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.510704994 CEST	443	52102	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.582340956 CEST	443	52100	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.582418919 CEST	443	52100	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.582629919 CEST	52100	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.582631111 CEST	52100	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.583400965 CEST	52100	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.583436012 CEST	443	52100	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.585238934 CEST	52105	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.585294008 CEST	443	52105	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.586009026 CEST	52105	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.586009026 CEST	52105	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.586055040 CEST	443	52105	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.626116991 CEST	443	52101	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.626149893 CEST	443	52101	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.626194000 CEST	443	52101	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.626219034 CEST	52101	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.626302004 CEST	52101	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.626413107 CEST	52101	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.626413107 CEST	52101	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.626435995 CEST	443	52101	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.626449108 CEST	443	52101	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.629951000 CEST	52106	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.629978895 CEST	443	52106	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.630527020 CEST	52106	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.630527020 CEST	52106	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.630548000 CEST	443	52106	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.642837048 CEST	443	52102	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.643676043 CEST	443	52102	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.643770933 CEST	52102	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.643770933 CEST	52102	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.645989895 CEST	52102	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.645996094 CEST	52107	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.646002054 CEST	443	52102	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.646045923 CEST	443	52107	13.107.246.45	192.168.2.4
Oct 25, 2024 22:23:39.646152020 CEST	52107	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.646266937 CEST	52107	443	192.168.2.4	13.107.246.45
Oct 25, 2024 22:23:39.646281958 CEST	443	52107	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 22:22:19.682050943 CEST	53	51689	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:19.862014055 CEST	53	62297	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:21.463155031 CEST	53	51095	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:21.599462032 CEST	51957	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:21.599648952 CEST	62911	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:21.607443094 CEST	53	51957	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:21.944729090 CEST	53	62911	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:23.188429117 CEST	55991	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:23.191490889 CEST	51804	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:23.198273897 CEST	58338	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:23.199089050 CEST	53	55991	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:23.199590921 CEST	59489	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:23.201925993 CEST	53	51804	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:23.207353115 CEST	53	58338	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:23.207386017 CEST	53	59489	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:24.091706991 CEST	50101	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:24.091909885 CEST	54217	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:24.100330114 CEST	53	54217	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:24.100370884 CEST	53	50101	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:24.171078920 CEST	55135	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:24.171381950 CEST	58745	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:24.179246902 CEST	53	55135	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:24.179634094 CEST	53	58745	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:24.336302996 CEST	54263	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:24.337697029 CEST	61396	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:24.346999884 CEST	53	54263	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:24.347042084 CEST	53	61396	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:24.864414930 CEST	58080	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:24.865004063 CEST	65422	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:24.872052908 CEST	53	58080	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:24.872745991 CEST	53	65422	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:25.281547070 CEST	51156	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:25.288992882 CEST	65357	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:25.289225101 CEST	53	51156	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:25.296921968 CEST	53	65357	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:26.152040958 CEST	59165	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:26.152331114 CEST	63345	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:26.160069942 CEST	53	63345	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:26.160927057 CEST	53	59165	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:27.945564032 CEST	64716	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:27.946172953 CEST	65205	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:22:27.952893019 CEST	53	64716	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:27.953545094 CEST	53	65205	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:36.492573023 CEST	53	64399	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:37.006652117 CEST	138	138	192.168.2.4	192.168.2.255
Oct 25, 2024 22:22:38.688536882 CEST	53	57710	1.1.1.1	192.168.2.4
Oct 25, 2024 22:22:57.637252092 CEST	53	52193	1.1.1.1	192.168.2.4
Oct 25, 2024 22:23:19.574820042 CEST	53	52403	1.1.1.1	192.168.2.4
Oct 25, 2024 22:23:20.150052071 CEST	53	50493	1.1.1.1	192.168.2.4
Oct 25, 2024 22:23:24.393857956 CEST	58398	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:23:24.394407034 CEST	61393	53	192.168.2.4	1.1.1.1
Oct 25, 2024 22:23:24.401180029 CEST	53	58398	1.1.1.1	192.168.2.4
Oct 25, 2024 22:23:24.401619911 CEST	53	61393	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 25, 2024 22:22:21.944869995 CEST	192.168.2.4	1.1.1.1	c229	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 22:22:21.599462032 CEST	192.168.2.4	1.1.1.1	0x1199	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:21.599648952 CEST	192.168.2.4	1.1.1.1	0xe8c1	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Oct 25, 2024 22:22:23.188429117 CEST	192.168.2.4	1.1.1.1	0x4f58	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:23.191490889 CEST	192.168.2.4	1.1.1.1	0x18c6	Standard query (0)	static.canva.com	65	IN (0x0001)	false
Oct 25, 2024 22:22:23.198273897 CEST	192.168.2.4	1.1.1.1	0x6319	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:23.199590921 CEST	192.168.2.4	1.1.1.1	0x1568	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 25, 2024 22:22:24.091706991 CEST	192.168.2.4	1.1.1.1	0x2272	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:24.091909885 CEST	192.168.2.4	1.1.1.1	0xa0a4	Standard query (0)	static.canva.com	65	IN (0x0001)	false
Oct 25, 2024 22:22:24.171078920 CEST	192.168.2.4	1.1.1.1	0xea2c	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:24.171381950 CEST	192.168.2.4	1.1.1.1	0xcc1e	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 25, 2024 22:22:24.336302996 CEST	192.168.2.4	1.1.1.1	0xae94	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:24.337697029 CEST	192.168.2.4	1.1.1.1	0xbff6	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
Oct 25, 2024 22:22:24.864414930 CEST	192.168.2.4	1.1.1.1	0xb52d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:24.865004063 CEST	192.168.2.4	1.1.1.1	0xd504	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 25, 2024 22:22:25.281547070 CEST	192.168.2.4	1.1.1.1	0xdb17	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:25.288992882 CEST	192.168.2.4	1.1.1.1	0x657d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 22:22:26.152040958 CEST	192.168.2.4	1.1.1.1	0xf212	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:26.152331114 CEST	192.168.2.4	1.1.1.1	0xbd37	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
Oct 25, 2024 22:22:27.945564032 CEST	192.168.2.4	1.1.1.1	0x430	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:27.946172953 CEST	192.168.2.4	1.1.1.1	0x9f7d	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Oct 25, 2024 22:23:24.393857956 CEST	192.168.2.4	1.1.1.1	0xfffd	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:23:24.394407034 CEST	192.168.2.4	1.1.1.1	0xd657	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 22:22:21.607443094 CEST	1.1.1.1	192.168.2.4	0x1199	No error (0)	www.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:21.607443094 CEST	1.1.1.1	192.168.2.4	0x1199	No error (0)	www.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:21.944729090 CEST	1.1.1.1	192.168.2.4	0xe8c1	No error (0)	www.canva.com			65	IN (0x0001)	false
Oct 25, 2024 22:22:23.199089050 CEST	1.1.1.1	192.168.2.4	0x4f58	No error (0)	static.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:23.199089050 CEST	1.1.1.1	192.168.2.4	0x4f58	No error (0)	static.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:23.201925993 CEST	1.1.1.1	192.168.2.4	0x18c6	No error (0)	static.canva.com			65	IN (0x0001)	false
Oct 25, 2024 22:22:23.207353115 CEST	1.1.1.1	192.168.2.4	0x6319	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:23.207353115 CEST	1.1.1.1	192.168.2.4	0x6319	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:23.207386017 CEST	1.1.1.1	192.168.2.4	0x1568	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Oct 25, 2024 22:22:24.100330114 CEST	1.1.1.1	192.168.2.4	0xa0a4	No error (0)	static.canva.com			65	IN (0x0001)	false
Oct 25, 2024 22:22:24.100370884 CEST	1.1.1.1	192.168.2.4	0x2272	No error (0)	static.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:24.100370884 CEST	1.1.1.1	192.168.2.4	0x2272	No error (0)	static.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:24.179246902 CEST	1.1.1.1	192.168.2.4	0xea2c	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:24.179246902 CEST	1.1.1.1	192.168.2.4	0xea2c	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:24.179634094 CEST	1.1.1.1	192.168.2.4	0xcc1e	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Oct 25, 2024 22:22:24.346999884 CEST	1.1.1.1	192.168.2.4	0xae94	No error (0)	o13855.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:24.872052908 CEST	1.1.1.1	192.168.2.4	0xb52d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:25.289225101 CEST	1.1.1.1	192.168.2.4	0xdb17	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:25.296921968 CEST	1.1.1.1	192.168.2.4	0x657d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 22:22:26.160927057 CEST	1.1.1.1	192.168.2.4	0xf212	No error (0)	o13855.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:27.952893019 CEST	1.1.1.1	192.168.2.4	0x430	No error (0)	www.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:27.952893019 CEST	1.1.1.1	192.168.2.4	0x430	No error (0)	www.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:22:27.953545094 CEST	1.1.1.1	192.168.2.4	0x9f7d	No error (0)	www.canva.com			65	IN (0x0001)	false
Oct 25, 2024 22:22:35.774373055 CEST	1.1.1.1	192.168.2.4	0xd25c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 22:22:35.774373055 CEST	1.1.1.1	192.168.2.4	0xd25c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:23:14.314188957 CEST	1.1.1.1	192.168.2.4	0xcd20	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 22:23:14.314188957 CEST	1.1.1.1	192.168.2.4	0xcd20	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:23:24.401180029 CEST	1.1.1.1	192.168.2.4	0xfffd	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 25, 2024 22:23:32.901026964 CEST	1.1.1.1	192.168.2.4	0xad15	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 22:23:32.901026964 CEST	1.1.1.1	192.168.2.4	0xad15	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.canva.com

https:

static.canva.com

static.cloudflareinsights.com

o13855.ingest.sentry.io

a.nel.cloudflare.com

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:22 UTC	788	OUT	GET /link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:23 UTC	1120	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:22 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8d84eb191be92cab-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-cache, no-cache, no-store, no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; Path=/; Max-Age=31536000; Expires=Sat, 25 Oct 2025 20:22:22 GMT; Secure; HttpOnly; SameSite=NONE Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com; content-security-policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-vTv3Tm52nidFDn81zI1Xsg'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=8d84eb191be92cab&app=malicious_links&policyHash=b2581152 content-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com;
2024-10-25 20:22:23 UTC	1565	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 6e 6f 6e 63 65 2d 76 54 76 33 54 6d 35 32 6e 69 64 46 44 6e 38 31 7a 49 31 58 73 67 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 63 73 70 72 65 70 6f 72 74 3f 73 6f 75 72 63 65 3d 77 65 62 32 26 72 65 71 75 65 73 74 49 64 3d 38 64 38 34 65 62 31 39 31 62 65 39 32 63 61 62 26 61 70 70 3d 6d 61 6c 69 63 69 6f 75 73 5f 6c 69 6e 6b 73 26 70 Data Ascii: content-security-policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-vTv3Tm52nidFDn81zI1Xsg'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=8d84eb191be92cab&app=malicious_links&p
2024-10-25 20:22:23 UTC	447	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 73 57 2e 68 49 77 42 53 61 54 55 52 42 5a 6a 5f 67 6d 43 4b 53 53 6e 4e 33 5f 46 41 41 57 41 78 72 5f 30 78 31 6c 4c 4f 44 68 30 2d 31 37 32 39 38 38 37 37 34 32 2d 31 2e 30 2e 31 2e 31 2d 30 4b 56 75 30 6d 54 35 4a 4f 45 41 50 6f 73 78 4c 70 63 6e 6f 51 52 4c 52 45 35 41 47 50 42 43 34 65 6c 61 70 50 78 75 78 37 32 35 34 77 6b 71 72 64 58 56 32 70 31 5a 6f 52 53 63 38 65 50 63 4c 76 69 71 48 75 45 5a 76 48 38 64 46 62 51 41 34 79 6c 69 6e 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 2d 4f 63 74 2d 32 34 20 32 30 3a 35 32 3a 32 32 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; path=/; expires=Fri, 25-Oct-24 20:52:22 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 32 64 32 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 59 6f 75 20 61 72 65 20 61 62 6f 75 74 20 74 6f 20 6c 65 61 76 65 20 43 61 6e 76 61 21 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 6c 69 63 69 6f 75 73 5f 6c 69 6e 6b 73 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d Data Ascii: 2d2e<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><head><meta charset="utf-8"><title>You are about to leave Canva!</title><meta name="app-name" content="malicious_links"/><meta name="viewport" content="width=device-width, initial-
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 30 63 30 2d 30 30 64 36 2c 75 2b 30 30 64 38 2d 30 30 66 36 2c 75 2b 30 30 66 38 2d 30 31 34 38 2c 75 2b 30 31 34 61 2d 30 31 37 65 2c 75 2b 30 31 39 32 2c 75 2b 30 31 62 35 2d 30 31 62 36 2c 75 2b 30 31 66 63 2d 30 31 66 64 2c 75 2b 30 32 31 38 2d 30 32 31 62 2c 75 2b 30 32 33 37 2c 75 2b 30 32 63 36 2d 30 32 63 37 2c 75 2b 30 32 63 39 2c 75 2b 30 32 64 38 2d 30 32 64 64 2c 75 2b 31 65 38 30 2d 31 65 38 35 2c 75 2b 31 65 39 65 2c 75 2b 31 65 66 32 2d 31 65 66 33 2c 75 2b 32 30 33 30 2c 75 2b 32 30 33 39 2d 32 30 33 61 2c 75 2b 32 30 61 63 2c 75 2b 32 30 62 61 2c 75 2b 32 31 31 33 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 6e 76 61 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 Data Ascii: 0c0-00d6,u+00d8-00f6,u+00f8-0148,u+014a-017e,u+0192,u+01b5-01b6,u+01fc-01fd,u+0218-021b,u+0237,u+02c6-02c7,u+02c9,u+02d8-02dd,u+1e80-1e85,u+1e9e,u+1ef2-1ef3,u+2030,u+2039-203a,u+20ac,u+20ba,u+2113}@font-face{font-display:swap;font-family:Canva Sans;font-s
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 6c 6d 6d 4f 31 46 54 35 79 4a 7a 38 44 74 49 70 54 56 31 72 53 4a 51 74 5a 5a 31 77 6b 6c 30 59 44 50 55 74 64 61 43 41 77 68 57 50 35 54 76 6e 6a 2f 6a 2f 43 2b 79 39 7a 54 37 79 75 33 38 37 73 4e 70 68 39 42 50 75 7a 67 46 66 37 4c 2b 37 6f 55 47 5a 54 77 3d 3d 22 20 6e 6f 6e 63 65 3d 22 76 54 76 33 54 6d 35 32 6e 69 64 46 44 6e 38 31 7a 49 31 58 73 67 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 39 61 32 33 31 31 65 37 35 39 30 65 65 31 31 37 2e 76 65 6e 64 6f 72 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 Data Ascii: ossorigin="anonymous" integrity="sha512-lmmO1FT5yJz8DtIpTV1rSJQtZZ1wkl0YDPUtdaCAwhWP5Tvnj/j/C+y9zT7yu387sNph9BPuzgFf7L+7oUGZTw==" nonce="vTv3Tm52nidFDn81zI1Xsg"><link href="https://static.canva.com/web/9a2311e7590ee117.vendor.js" rel="preload" as="script"
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2d 31 2e 69 63 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 61 6e 64 72 6f 69 64 2d 31 39 32 78 31 39 32 2d 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 31 32 30 Data Ascii: con" href="https://static.canva.com/static/images/favicon-1.ico"><link rel="icon" href="https://static.canva.com/static/images/android-192x192-2.png" sizes="192x192"><link rel="apple-touch-icon" href="https://static.canva.com/static/images/apple-touch-120
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 41 22 3a 66 61 6c 73 65 2c 22 42 22 3a 66 61 6c 73 65 2c 22 47 22 3a 66 61 6c 73 65 2c 22 4e 22 3a 66 61 6c 73 65 2c 22 43 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 63 6f 6f 6b 69 65 73 2d 70 6f 6c 69 63 79 2f 22 2c 22 49 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2d 63 6f 6f 6b 69 65 73 2f 22 2c 22 4a 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 45 22 3a 5b 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 61 6e 76 61 22 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 61 73 74 6c 65 22 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 6c Data Ascii: A":false,"B":false,"G":false,"N":false,"C":"https://www.canva.com/policies/cookies-policy/","I":"https://www.canva.com/manage-cookies/","J":"https://www.canva.com/policies/privacy-policy/","E":[{"A":"B","B":"Canva"},{"A":"B","B":"Castle"},{"A":"B","B":"Cl
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 3a 22 45 22 2c 22 42 22 3a 22 53 6e 61 70 63 68 61 74 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 54 69 6b 54 6f 6b 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 54 77 69 74 74 65 72 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 59 61 68 6f 6f 20 41 64 20 45 78 63 68 61 6e 67 65 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 59 6f 75 74 75 62 65 22 7d 5d 2c 22 50 22 3a 5b 5d 2c 22 51 22 3a 5b 5d 7d 2c 22 53 22 3a 74 72 75 65 2c 22 57 22 3a 66 61 6c 73 65 2c 22 58 22 3a 7b 22 41 22 3a 22 36 37 31 62 66 64 66 65 37 38 35 63 36 33 31 35 66 39 62 31 37 61 64 39 65 35 32 61 37 39 31 32 22 2c 22 42 22 3a 22 33 38 34 65 65 63 62 33 65 64 32 65 31 63 32 32 22 2c 22 43 22 3a 31 7d 2c 22 55 22 3a 5b 5d 2c 22 56 22 3a 5b 5d 2c 22 67 22 3a 66 61 Data Ascii: :"E","B":"Snapchat"},{"A":"E","B":"TikTok"},{"A":"E","B":"Twitter"},{"A":"E","B":"Yahoo Ad Exchange"},{"A":"E","B":"Youtube"}],"P":[],"Q":[]},"S":true,"W":false,"X":{"A":"671bfdfe785c6315f9b17ad9e52a7912","B":"384eecb3ed2e1c22","C":1},"U":[],"V":[],"g":fa
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 65 7d 7d 27 29 3b 20 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 20 7c 7c 20 7b 20 6c 6f 63 61 6c 65 3a 20 22 65 6e 22 2c 20 73 74 72 69 6e 67 73 3a 20 7b 7d 20 7d 3b 77 69 6e 64 6f 77 5b 27 5f 5f 62 61 74 63 68 5f 63 68 75 6e 6b 73 5f 5f 27 5d 20 3d 20 74 72 75 65 3b 77 69 6e 64 6f 77 5b 27 5f 5f 65 6e 61 62 6c 65 5f 73 79 6e 63 5f 6d 6f 62 78 5f 6f 62 73 65 72 76 65 72 5f 5f 27 5d 20 3d 20 74 72 75 65 3b 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6c 69 62 2f 73 65 6e 74 72 79 2f 37 2e 31 36 2e 30 2e 6d 69 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 76 54 76 33 54 6d 35 32 6e 69 Data Ascii: e}}'); window['cmsg'] = window['cmsg'] \|\| { locale: "en", strings: {} };window['__batch_chunks__'] = true;window['__enable_sync_mobx_observer__'] = true;})();</script><script src="https://static.canva.com/static/lib/sentry/7.16.0.min.js" nonce="vTv3Tm52ni
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 39 61 32 33 31 31 65 37 35 39 30 65 65 31 31 37 2e 76 65 6e 64 6f 72 2e 6a 73 22 20 64 65 66 65 72 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 43 42 57 5a 58 57 43 6a 33 79 4e 54 74 66 6c 2f 61 72 41 76 55 54 69 76 68 42 41 66 6f 31 35 65 77 30 31 62 31 31 6c 6c 39 30 79 30 51 53 71 41 2f 39 43 34 67 73 52 34 47 74 45 4a 6f 62 31 75 43 66 58 4c 48 54 58 64 61 4d 77 6b 68 35 4e 36 56 36 34 30 41 51 3d 3d 22 20 6e 6f 6e 63 65 3d 22 76 54 76 33 54 6d 35 32 6e 69 64 46 44 6e 38 31 7a 49 31 58 73 67 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 Data Ascii: //static.canva.com/web/9a2311e7590ee117.vendor.js" defer integrity="sha512-CBWZXWCj3yNTtfl/arAvUTivhBAfo15ew01b11ll90y0QSqA/9C4gsR4GtEJob1uCfXLHTXdaMwkh5N6V640AQ==" nonce="vTv3Tm52nidFDn81zI1Xsg"></script><script crossorigin="anonymous" src="https://stati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:23 UTC	589	OUT	GET /web/lrxlcv.40cddb0fa0d4dfad.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:23 UTC	1349	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:23 GMT Content-Type: text/css Content-Length: 48366 Connection: close CF-Ray: 8d84eb1f595f4680-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 66868 Cache-Control: public, max-age=31556926 ETag: "97192a431ba3352db3ebafe53b0f26e3" Expires: Sun, 26 Oct 2025 02:11:09 GMT Last-Modified: Fri, 25 Oct 2024 01:35:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 3tAcW18CTTcwWzfxGfHbnbshqm3b9venmuZQXG9HHTgVgi58iLLxQV590aRmf4nKZb7TXul5EnU= x-amz-replication-status: COMPLETED x-amz-request-id: T0XET52MVY232HAJ x-amz-server-side-encryption: AES256 x-amz-version-id: uqiF.lVc9Dd.j8mvFETmRF78zgyvMUWM X-Content-Type-Options: nosniff
2024-10-25 20:22:23 UTC	779	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 77 6f 68 77 43 69 72 79 64 4d 58 34 47 72 6c 65 6d 44 4e 41 67 43 62 4c 59 4c 59 70 71 6a 4d 70 49 50 6f 77 7a 4a 4e 57 33 4b 51 2d 31 37 32 39 38 38 37 37 34 33 2d 31 2e 30 2e 31 2e 31 2d 63 39 42 61 6d 63 70 4e 76 43 44 47 38 44 35 36 33 6b 76 31 4c 58 6e 5a 53 64 62 6e 48 37 4c 61 47 5f 6f 6b 78 74 50 2e 77 4d 41 77 70 4a 7a 46 39 79 65 70 44 66 62 32 61 42 61 35 33 67 42 66 2e 6b 77 44 34 50 38 4f 56 73 51 4f 5f 6d 77 47 55 47 73 6e 79 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 2d 4f 63 74 2d 32 34 20 32 30 3a 35 32 3a 32 33 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=wohwCirydMX4GrlemDNAgCbLYLYpqjMpIPowzJNW3KQ-1729887743-1.0.1.1-c9BamcpNvCDG8D563kv1LXnZSdbnH7LaG_okxtP.wMAwpJzF9yepDfb2aBa53gBf.kwD4P8OVsQO_mwGUGsnyw; path=/; expires=Fri, 25-Oct-24 20:52:23 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-25 20:22:23 UTC	610	IN	Data Raw: 2e 74 68 65 6d 65 7b 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 76 61 72 28 2d 2d 34 68 2d 6d 5f 41 29 7d 2e 6c 69 67 68 74 7b 2d 2d 34 68 2d 6d 5f 41 3a 6c 69 67 68 74 3b 2d 2d 5a 70 61 2d 4b 41 3a 23 30 30 63 34 63 63 3b 2d 2d 65 47 56 62 6e 67 3a 23 38 62 33 64 66 66 3b 2d 2d 4d 35 5f 70 76 41 3a 23 37 37 33 31 64 38 3b 2d 2d 62 6f 4b 4b 57 67 3a 23 36 31 32 64 61 65 3b 2d 2d 6f 71 75 72 64 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 64 31 70 39 39 77 3a 23 66 66 66 3b 2d 2d 31 37 4c 66 48 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 45 67 57 67 66 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 58 33 2d 2d 5a 67 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 78 66 79 38 Data Ascii: .theme{color-scheme:var(--4h-m_A)}.light{--4h-m_A:light;--Zpa-KA:#00c4cc;--eGVbng:#8b3dff;--M5_pvA:#7731d8;--boKKWg:#612dae;--oqurdw:rgba(64,87,109,.07);--d1p99w:#fff;--17LfHw:rgba(36,49,61,.4);--EgWgfg:rgba(13,18,22,0);--X3--Zg:rgba(64,87,109,.07);--xfy8
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 51 65 51 30 44 77 3a 23 30 64 31 32 31 36 3b 2d 2d 54 5a 4f 49 37 41 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 53 5a 4d 6b 58 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 31 35 29 3b 2d 2d 31 7a 65 73 45 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 31 35 29 3b 2d 2d 41 4d 78 52 67 77 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 32 29 3b 2d 2d 42 5a 36 30 4a 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 38 45 78 35 67 41 3a 23 36 31 32 64 61 65 3b 2d 2d 73 70 49 50 32 41 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 74 58 6c 52 67 3a 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e 36 29 3b 2d 2d 51 41 44 4f 44 77 Data Ascii: 3,18,22,0);--QeQ0Dw:#0d1216;--TZOI7A:rgba(36,49,61,.4);--SZMkXA:rgba(165,112,255,.15);--1zesEA:rgba(165,112,255,.15);--AMxRgw:rgba(165,112,255,.2);--BZ60Jw:rgba(64,87,109,.07);--8Ex5gA:#612dae;--spIP2A:rgba(36,49,61,.4);--KtXlRg:rgba(17,23,29,.6);--QADODw
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 70 35 34 56 77 3a 23 66 30 66 31 66 35 3b 2d 2d 70 66 5f 4a 52 51 3a 72 67 62 61 28 32 34 30 2c 32 34 31 2c 32 34 35 2c 2e 37 29 3b 2d 2d 79 73 35 58 47 67 3a 72 67 62 61 28 32 34 30 2c 32 34 31 2c 32 34 35 2c 30 29 3b 2d 2d 64 56 75 63 4a 77 3a 23 66 36 66 37 66 38 3b 2d 2d 75 36 56 55 4c 67 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 2e 37 29 3b 2d 2d 63 6d 35 4f 65 51 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 30 29 3b 2d 2d 43 2d 71 36 49 67 3a 23 66 66 66 3b 2d 2d 50 6a 36 47 5a 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 72 36 4d 48 58 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 34 52 61 53 6a 67 3a 23 66 66 66 3b 2d 2d 46 36 46 32 4e 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 Data Ascii: p54Vw:#f0f1f5;--pf_JRQ:rgba(240,241,245,.7);--ys5XGg:rgba(240,241,245,0);--dVucJw:#f6f7f8;--u6VULg:rgba(246,247,248,.7);--cm5OeQ:rgba(246,247,248,0);--C-q6Ig:#fff;--Pj6GZQ:hsla(0,0%,100%,.7);--r6MHXQ:hsla(0,0%,100%,0);--4RaSjg:#fff;--F6F2NQ:hsla(0,0%,100%
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 69 4c 63 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 51 65 51 30 44 77 3a 23 66 66 66 3b 2d 2d 54 5a 4f 49 37 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 53 5a 4d 6b 58 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 33 29 3b 2d 2d 31 7a 65 73 45 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 33 29 3b 2d 2d 41 4d 78 52 67 77 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 32 29 3b 2d 2d 42 5a 36 30 4a 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 38 45 78 35 67 41 3a 23 66 66 66 3b 2d 2d 73 70 49 50 32 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 4b 74 58 6c 52 67 3a 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e 36 29 3b 2d 2d Data Ascii: iLcg:hsla(0,0%,100%,0);--QeQ0Dw:#fff;--TZOI7A:hsla(0,0%,100%,.4);--SZMkXA:rgba(165,112,255,.3);--1zesEA:rgba(165,112,255,.3);--AMxRgw:rgba(165,112,255,.2);--BZ60Jw:hsla(0,0%,100%,.15);--8Ex5gA:#fff;--spIP2A:hsla(0,0%,100%,.4);--KtXlRg:rgba(17,23,29,.6);--
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 35 34 56 77 3a 23 30 64 31 32 31 36 3b 2d 2d 70 66 5f 4a 52 51 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 2e 37 29 3b 2d 2d 79 73 35 58 47 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 64 56 75 63 4a 77 3a 23 31 38 31 39 31 62 3b 2d 2d 75 36 56 55 4c 67 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 2e 37 29 3b 2d 2d 63 6d 35 4f 65 51 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 30 29 3b 2d 2d 43 2d 71 36 49 67 3a 23 31 38 31 39 31 62 3b 2d 2d 50 6a 36 47 5a 51 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 2e 37 29 3b 2d 2d 72 36 4d 48 58 51 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 30 29 3b 2d 2d 34 52 61 53 6a 67 3a 23 32 35 32 36 32 37 3b 2d 2d 46 36 46 32 4e 51 3a 72 67 62 61 28 33 37 2c 33 38 2c 33 39 2c 2e 37 29 3b 2d 2d 33 38 39 Data Ascii: 54Vw:#0d1216;--pf_JRQ:rgba(13,18,22,.7);--ys5XGg:rgba(13,18,22,0);--dVucJw:#18191b;--u6VULg:rgba(24,25,27,.7);--cm5OeQ:rgba(24,25,27,0);--C-q6Ig:#18191b;--Pj6GZQ:rgba(24,25,27,.7);--r6MHXQ:rgba(24,25,27,0);--4RaSjg:#252627;--F6F2NQ:rgba(37,38,39,.7);--389
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 64 38 33 32 32 31 65 65 36 61 36 38 34 31 62 31 37 61 37 35 34 66 36 38 62 36 63 35 61 33 64 65 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 39 30 30 2d 30 39 37 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 Data Ascii: face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:400;src:url(images/d83221ee6a6841b17a754f68b6c5a3de.woff2) format("woff2");unicode-range:u+0900-097f}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weigh
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 36 30 2d 30 35 32 66 2c 75 2b 31 63 38 30 2d 31 63 38 38 2c 75 2b 32 30 62 34 2c 75 2b 32 64 65 30 2d 32 64 66 66 2c 75 2b 61 36 34 30 2d 61 36 39 66 2c 75 2b 66 65 32 65 2d 66 65 32 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 30 32 62 62 61 32 64 65 31 62 35 66 37 66 63 33 62 35 36 34 62 32 31 35 32 31 65 37 37 34 64 30 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 69 6d 61 67 65 73 2f 31 36 33 31 32 34 33 37 30 66 33 Data Ascii: ode-range:u+0460-052f,u+1c80-1c88,u+20b4,u+2de0-2dff,u+a640-a69f,u+fe2e-fe2f}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:400;src:url(images/02bba2de1b5f7fc3b564b21521e774d0.woff2) format("woff2"),url(images/163124370f3
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 31 66 3f 3f 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 63 61 34 32 33 37 33 37 38 64 61 35 37 65 31 65 33 31 38 39 37 38 32 38 31 65 37 66 65 65 36 30 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 69 6d 61 67 65 73 2f 64 37 36 36 39 66 66 32 64 30 31 30 36 61 64 39 39 61 37 61 35 35 63 34 64 35 34 30 34 37 38 63 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d Data Ascii: ff");unicode-range:u+1f??}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:700;src:url(images/ca4237378da57e1e318978281e7fee60.woff2) format("woff2"),url(images/d7669ff2d0106ad99a7a55c4d540478c.woff) format("woff");unicode-
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 35 38 63 66 37 30 38 66 32 63 63 34 64 32 62 33 62 62 66 37 65 36 61 64 64 32 35 66 35 63 32 30 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 69 6d 61 67 65 73 2f 34 66 39 66 30 39 65 39 63 39 62 63 30 35 33 63 63 32 31 66 37 63 66 37 66 35 35 39 30 39 30 34 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 31 37 66 2c 75 2b 30 31 66 30 2c 75 2b 30 31 66 61 2d 30 31 66 62 2c 75 2b 30 31 66 65 2d 30 31 66 66 2c 75 2b 31 65 30 30 2d 31 65 30 31 2c 75 2b 31 65 33 65 2d 31 65 33 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c Data Ascii: ormal;font-weight:600;src:url(images/58cf708f2cc4d2b3bbf7e6add25f5c20.woff2) format("woff2"),url(images/4f9f09e9c9bc053cc21f7cf7f5590904.woff) format("woff");unicode-range:u+017f,u+01f0,u+01fa-01fb,u+01fe-01ff,u+1e00-1e01,u+1e3e-1e3f}@font-face{font-displ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49747	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:23 UTC	795	OUT	GET /static/lib/sentry/7.16.0.min.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:24 UTC	1350	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d84eb1f5cf8ea36-DFW CF-Cache-Status: HIT Age: 183181 Cache-Control: public, max-age=31556926 ETag: W/"91258797204803263e4c46f8400f1bda" Expires: Sun, 26 Oct 2025 02:11:09 GMT Last-Modified: Mon, 14 Oct 2024 22:43:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-id-2: n/tgAv7nhdMK8+ZDRGJEaCxpKxVhLFJZMQK/5RvJNADTgttBr37iBiAAR/bcmMUlTegrHaZW7D4= x-amz-meta-vary: Origin x-amz-replication-status: COMPLETED x-amz-request-id: 4BC7Q2FFFT5VZFJY x-amz-server-side-encryption: AES256 x-amz-version-id: tozEOUZEBcqjRpGz85aK0Lg42bZme1w8 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AQoUzvPuV8mQNG9M6LQKEnDmLNhTtqWOX6T%2B8BywlgBi4vc7d%2FSWtxXTA4T3rmyU6wl31J6sOxEYUV7utAYwHk%2F6jGS00QC77bRA79vJyPZdlPzkNBW3x1uzI6MkOML1yyc%3D"}],"group":"cf-nel","max_age":604800}
2024-10-25 20:22:24 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 37 2e 31 36 2e 30 20 28 35 33 38 36 63 65 37 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 73 77 69 74 63 68 28 6e 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e Data Ascii: 7ffa/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 2c 73 2c 63 2c 75 2c 61 3b 69 66 28 21 65 7c 7c 21 65 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 72 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 66 3d 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 29 29 2e 6d 61 70 28 28 74 3d 3e 5b 74 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 5d 29 29 3a 6e 75 6c 6c 3b 69 66 28 66 26 26 66 2e 6c 65 6e 67 74 68 29 66 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 72 2e 70 75 73 68 28 60 5b 24 7b 74 5b 30 5d 7d 3d 22 24 7b 74 5b 31 5d 7d 22 5d 60 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 65 2e 69 64 26 26 72 2e 70 75 73 68 28 60 23 24 7b 65 2e 69 64 7d 60 29 2c 69 Data Ascii: ,s,c,u,a;if(!e\|\|!e.tagName)return"";r.push(e.tagName.toLowerCase());const f=n&&n.length?n.filter((t=>e.getAttribute(t))).map((t=>[t,e.getAttribute(t)])):null;if(f&&f.length)f.forEach((t=>{r.push(`[${t[0]}="${t[1]}"]`)}));else if(e.id&&r.push(`#${e.id}`),i
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 6f 2c 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 75 62 6c 69 63 4b 65 79 3a 72 7d 29 7d 28 74 29 3a 77 28 74 29 7d 63 6f 6e 73 74 20 53 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 24 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 30 3d 3d 3d 6e 7c 7c 74 2e 6c 65 6e 67 74 68 3c 3d 6e 3f 74 3a 60 24 7b 74 2e 73 75 62 73 74 72 28 30 2c 6e 29 7d 2e 2e 2e 60 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 6e 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b Data Ascii: o,protocol:e,publicKey:r})}(t):w(t)}const S=["debug","info","warn","error","log","assert","trace"];function $(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?t:`${t.substr(0,n)}...`}function x(t,n){if(!Array.isArray(t))return"";const e=[];for(let n=0;
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 52 28 74 29 29 3b 69 66 28 65 2e 73 6f 72 74 28 29 2c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 68 61 73 20 6e 6f 20 6b 65 79 73 5d 22 3b 69 66 28 65 5b 30 5d 2e 6c 65 6e 67 74 68 3e 3d 6e 29 72 65 74 75 72 6e 20 24 28 65 5b 30 5d 2c 6e 29 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 3b 74 3e 30 3b 74 2d 2d 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 73 6c 69 63 65 28 30 2c 74 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 69 66 28 21 28 72 2e 6c 65 6e 67 74 68 3e 6e 29 29 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 72 3a 24 28 72 2c 6e 29 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 41 28 74 2c 6e 65 77 20 Data Ascii: onst e=Object.keys(R(t));if(e.sort(),!e.length)return"[object has no keys]";if(e[0].length>=n)return $(e[0],n);for(let t=e.length;t>0;t--){const r=e.slice(0,t).join(", ");if(!(r.length>n))return t===e.length?r:$(r,n)}return""}function N(t){return A(t,new
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 75 72 6e 20 6e 65 77 20 48 65 61 64 65 72 73 2c 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 6e 65 77 20 52 65 73 70 6f 6e 73 65 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 2f 5e 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 5c 28 5c 29 5c 73 2b 5c 7b 5c 73 2b 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 5c 73 2b 5c 7d 24 2f 2e 74 65 73 74 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 6f 6e 73 74 20 46 3d 7b 7d 2c 42 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 69 66 28 21 42 5b 74 5d 29 73 77 69 74 63 68 28 42 5b 74 5d 3d 21 30 2c 74 29 7b 63 61 73 65 22 63 6f 6e 73 6f 6c 65 22 3a 21 Data Ascii: urn new Headers,new Request("http://www.example.com"),new Response,!0}catch(t){return!1}}function H(t){return t&&/^function fetch\s+\{\s+\[native code\]\s+\}$/.test(t.toString())}const F={},B={};function X(t){if(!B[t])switch(B[t]=!0,t){case"console":!
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 65 2c 72 29 7d 7d 29 29 29 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 68 72 22 3a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 69 6e 20 79 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 3b 6b 28 74 2c 22 6f 70 65 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2c 72 3d 6e 5b 31 5d 2c 69 3d 65 2e 5f 5f 73 65 6e 74 72 79 5f 78 68 Data Ascii: try_instrumentation_handlers__)}catch(t){}return t.call(this,n,e,r)}})))}))}();break;case"xhr":!function(){if(!("XMLHttpRequest"in y))return;const t=XMLHttpRequest.prototype;k(t,"open",(function(t){return function(...n){const e=this,r=n[1],i=e.__sentry_xh
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 44 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 4a 28 6e 29 2c 75 72 6c 3a 4b 28 6e 29 7d 2c 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 72 65 74 75 72 6e 20 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 7d 29 2c 74 2e 61 70 70 6c 79 28 79 2c 6e 29 2e 74 68 65 6e 28 28 74 3d 3e 28 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 72 65 73 70 6f 6e 73 65 3a 74 7d 29 2c 74 29 29 2c 28 74 3d 3e 7b 74 68 72 6f 77 20 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 65 72 72 6f 72 3a 74 7d 29 2c 74 7d 29 29 7d 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 69 73 74 6f 72 79 22 3a 21 66 Data Ascii: Data:{method:J(n),url:K(n)},startTimestamp:Date.now()};return W("fetch",{...e}),t.apply(y,n).then((t=>(W("fetch",{...e,endTimestamp:Date.now(),response:t}),t)),(t=>{throw W("fetch",{...e,endTimestamp:Date.now(),error:t}),t}))}}))}();break;case"history":!f
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 47 45 54 22 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 3d 5b 5d 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 30 5d 3f 74 5b 30 5d 3a 22 52 65 71 75 65 73 74 22 69 6e 20 79 26 26 68 28 74 5b 30 5d 2c 52 65 71 75 65 73 74 29 3f 74 5b 30 5d 2e 75 72 6c 3a 53 74 72 69 6e 67 28 74 5b 30 5d 29 7d 6c 65 74 20 47 3b 6c 65 74 20 56 2c 51 3b 66 75 6e 63 74 69 6f 6e 20 59 28 74 2c 6e 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 3d 3e 7b 69 66 28 21 65 7c 7c 51 3d 3d 3d 65 29 72 65 74 75 72 6e 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6b 65 79 70 72 65 73 73 22 21 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 74 2e 74 61 72 67 65 74 3b 69 66 28 21 6e 7c 7c 21 6e 2e 74 61 67 4e 61 Data Ascii: GET"}function K(t=[]){return"string"==typeof t[0]?t[0]:"Request"in y&&h(t[0],Request)?t[0].url:String(t[0])}let G;let V,Q;function Y(t,n=!1){return e=>{if(!e\|\|Q===e)return;if(function(t){if("keypress"!==t.type)return!1;try{const n=t.target;if(!n\|\|!n.tagNa
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 65 3d 65 74 28 74 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6d 65 63 68 61 6e 69 73 6d 3b 69 66 28 65 2e 6d 65 63 68 61 6e 69 73 6d 3d 7b 74 79 70 65 3a 22 67 65 6e 65 72 69 63 22 2c 68 61 6e 64 6c 65 64 3a 21 30 2c 2e 2e 2e 72 2c 2e 2e 2e 6e 7d 2c 6e 26 26 22 64 61 74 61 22 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 74 3d 7b 2e 2e 2e 72 26 26 72 2e 64 61 74 61 2c 2e 2e 2e 6e 2e 64 61 74 61 7d 3b 65 2e 6d 65 63 68 61 6e 69 73 6d 2e 64 61 74 61 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 4f 28 74 2c 22 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 22 2c 21 30 29 7d 63 61 74 63 68 28 74 Data Ascii: e=et(t);if(!e)return;const r=e.mechanism;if(e.mechanism={type:"generic",handled:!0,...r,...n},n&&"data"in n){const t={...r&&r.data,...n.data};e.mechanism.data=t}}function ot(t){if(t&&t.__sentry_captured__)return!0;try{O(t,"__sentry_captured__",!0)}catch(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:23 UTC	571	OUT	GET /web/143b3cccb450cc5d.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:24 UTC	1356	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:23 GMT Content-Type: text/javascript Content-Length: 2287 Connection: close CF-Ray: 8d84eb1f6efa6b4d-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 185953 Cache-Control: public, max-age=31556926 ETag: "d631573fb1805fda9c7668b7f1534161" Expires: Sun, 26 Oct 2025 02:11:09 GMT Last-Modified: Tue, 10 Sep 2024 01:29:24 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 11 Sep 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 6F/rGI3gFCqe029MVzo83/kNONLnF70t9GqdtbGvUe1pLAqdvp8qQSfLiZurUHTsEJCnjYblNz0= x-amz-replication-status: COMPLETED x-amz-request-id: K89744YGQQS86VW9 x-amz-server-side-encryption: AES256 x-amz-version-id: aBX5COE5i8SgmPwRNNlVns3uDpEXsql. X-Content-Type-Options: nosniff
2024-10-25 20:22:24 UTC	783	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 30 79 45 46 42 6c 54 77 71 7a 34 4e 33 4c 6d 54 5f 77 5a 4b 51 72 75 33 4d 44 48 4b 4d 50 2e 4f 41 64 7a 50 5f 56 2e 31 58 31 38 2d 31 37 32 39 38 38 37 37 34 33 2d 31 2e 30 2e 31 2e 31 2d 65 51 4c 39 36 45 6a 68 59 32 4f 54 6e 42 41 75 4d 42 5f 30 70 43 5f 4a 71 47 4f 30 43 59 51 36 56 46 37 4b 43 6b 62 72 51 64 34 47 53 63 4c 52 31 62 62 43 4f 31 44 43 57 34 44 6a 6e 66 4a 35 45 61 55 45 5f 32 5a 70 6d 42 68 45 5f 68 33 4f 2e 31 72 61 72 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 2d 4f 63 74 2d 32 34 20 32 30 3a 35 32 3a 32 33 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=0yEFBlTwqz4N3LmT_wZKQru3MDHKMP.OAdzP_V.1X18-1729887743-1.0.1.1-eQL96EjhY2OTnBAuMB_0pC_JqGO0CYQ6VF7KCkbrQd4GScLR1bbCO1DCW4DjnfJ5EaUE_2ZpmBhE_h3O.1rarg; path=/; expires=Fri, 25-Oct-24 20:52:23 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-25 20:22:24 UTC	599	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 4c 45 34 4d 65 51 5c 22 3a 5c 22 45 73 63 5c 22 2c 5c 22 4d 35 30 6b 42 41 5c 22 3a 5c 22 50 72 65 76 69 6f 75 73 5c 22 2c 5c 22 79 4c 57 69 5a 41 5c 22 3a 5c 22 43 74 72 6c 5c 22 2c 5c 22 50 52 66 4e 7a 51 5c 22 3a 5c 22 54 68 65 20 70 61 67 65 20 79 6f 75 20 69 6e 74 65 6e 64 20 74 6f 20 76 69 73 69 74 20 3c 73 74 72 6f 6e 67 3e 28 7b 30 7d 29 3c 2f 73 74 72 6f 6e 67 3e 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 20 6f 72 20 69 73 20 69 6e 76 61 6c 69 64 2e 5c 22 2c 5c 22 6d 7a 34 53 34 51 5c 22 3a 5c 22 49 66 20 74 68 69 73 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 77 72 6f 6e 67 6c 79 20 66 6c 61 67 67 65 64 Data Ascii: (function() { const messages = JSON.parse("{\"LE4MeQ\":\"Esc\",\"M50kBA\":\"Previous\",\"yLWiZA\":\"Ctrl\",\"PRfNzQ\":\"The page you intend to visit <strong>({0})</strong> does not exist or is invalid.\",\"mz4S4Q\":\"If this page has been wrongly flagged
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 5c 22 3a 5c 22 57 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 73 6f 6d 65 20 70 72 6f 62 6c 65 6d 73 5c 22 2c 5c 22 6f 63 67 79 56 77 5c 22 3a 5c 22 41 6c 74 5c 22 2c 5c 22 4f 44 31 6d 56 41 5c 22 3a 5c 22 49 66 20 69 74 20 64 6f 65 73 6e e2 80 99 74 20 73 65 65 6d 20 72 69 67 68 74 2c 20 72 65 70 6f 72 74 20 69 74 2e 5c 22 2c 5c 22 36 64 79 6a 64 67 5c 22 3a 5c 22 53 75 73 70 69 63 69 6f 75 73 20 6f 66 20 74 68 69 73 20 77 65 62 73 69 74 65 3f 5c 22 2c 5c 22 44 58 48 4f 6f 41 5c 22 3a 5c 22 47 6f 20 62 61 63 6b 5c 22 2c 5c 22 31 76 55 69 45 77 5c 22 3a 5c 22 55 70 5c 22 2c 5c 22 56 78 46 38 36 41 5c 22 3a 5c 22 54 6f 20 6b 65 65 70 20 75 73 69 6e 67 20 43 61 6e 76 61 2c 20 67 65 74 20 74 68 65 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 Data Ascii: \":\"Were having some problems\",\"ocgyVw\":\"Alt\",\"OD1mVA\":\"If it doesnt seem right, report it.\",\"6dyjdg\":\"Suspicious of this website?\",\"DXHOoA\":\"Go back\",\"1vUiEw\":\"Up\",\"VxF86A\":\"To keep using Canva, get the latest version of th
2024-10-25 20:22:24 UTC	319	IN	Data Raw: 63 68 65 63 6b 20 74 68 65 20 6c 69 6e 6b 20 62 65 66 6f 72 65 20 63 6f 6e 74 69 6e 75 69 6e 67 2e 5c 22 7d 22 29 3b 0a 20 63 6f 6e 73 74 20 63 6d 73 67 20 3d 20 77 69 6e 64 6f 77 5b 22 63 6d 73 67 22 5d 20 3d 20 77 69 6e 64 6f 77 5b 22 63 6d 73 67 22 5d 20 7c 7c 20 7b 7d 3b 0a 20 63 6f 6e 73 74 20 6c 6f 61 64 65 64 20 3d 20 63 6d 73 67 5b 22 6c 6f 61 64 65 64 22 5d 20 3d 20 63 6d 73 67 5b 22 6c 6f 61 64 65 64 22 5d 20 7c 7c 20 7b 7d 3b 0a 20 6c 6f 61 64 65 64 5b 22 31 33 38 39 5f 65 6e 22 5d 20 3d 20 31 3b 0a 20 63 6f 6e 73 74 20 73 74 72 69 6e 67 73 20 3d 20 63 6d 73 67 5b 22 73 74 72 69 6e 67 73 22 5d 20 3d 20 63 6d 73 67 5b 22 73 74 72 69 6e 67 73 22 5d 20 7c 7c 20 7b 7d 3b 0a 20 73 74 72 69 6e 67 73 5b 22 65 6e 22 5d 20 3d 20 73 74 72 69 6e 67 73 5b Data Ascii: check the link before continuing.\"}"); const cmsg = window["cmsg"] = window["cmsg"] \|\| {}; const loaded = cmsg["loaded"] = cmsg["loaded"] \|\| {}; loaded["1389_en"] = 1; const strings = cmsg["strings"] = cmsg["strings"] \|\| {}; strings["en"] = strings[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:23 UTC	571	OUT	GET /web/205dddee09e475f6.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:23 UTC	1356	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:23 GMT Content-Type: text/javascript Content-Length: 11132 Connection: close CF-Ray: 8d84eb1f68c6c86f-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 66868 Cache-Control: public, max-age=31556926 ETag: "870f2226fad953c4977cd23934d57233" Expires: Sun, 26 Oct 2025 02:11:09 GMT Last-Modified: Fri, 25 Oct 2024 01:35:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: IYrslKNZ0k/RhdSMDnhYC/r9qHmXiHbwewQYuKtbsIdRlwNPPrX/KlHOPih0GHxCcCTalA7evxI= x-amz-replication-status: COMPLETED x-amz-request-id: T0X2YFTND1BT97EX x-amz-server-side-encryption: AES256 x-amz-version-id: DlunCOP2zt8JmXQm7CPLkrSCkIaH_w.O X-Content-Type-Options: nosniff
2024-10-25 20:22:23 UTC	777	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 39 4e 69 5a 75 6d 6d 6f 4a 39 62 4b 54 44 47 6c 57 5f 34 6b 6e 6a 5f 38 79 66 6c 52 51 76 51 73 46 75 68 5a 42 46 71 50 38 47 77 2d 31 37 32 39 38 38 37 37 34 33 2d 31 2e 30 2e 31 2e 31 2d 63 66 77 7a 70 51 34 5f 38 58 58 6e 44 67 34 61 6c 74 62 70 64 41 4c 71 7a 34 38 63 68 65 6b 44 75 52 31 61 37 64 43 76 4a 6d 42 66 6b 2e 6e 58 2e 6e 52 35 76 5a 50 79 43 4c 44 5f 30 6e 58 45 73 50 77 4e 42 59 72 39 4d 4d 6c 64 42 4a 59 76 34 58 50 43 6b 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 2d 4f 63 74 2d 32 34 20 32 30 3a 35 32 3a 32 33 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=9NiZummoJ9bKTDGlW_4knj_8yflRQvQsFuhZBFqP8Gw-1729887743-1.0.1.1-cfwzpQ4_8XXnDg4altbpdALqz48chekDuR1a7dCvJmBfk.nX.nR5vZPyCLD_0nXEsPwNBYr9MMldBJYv4XPCkA; path=/; expires=Fri, 25-Oct-24 20:52:23 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-25 20:22:23 UTC	605	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 72 2c 6e 2c 6f 2c 73 3d 7b 7d 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 69 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 73 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 61 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 73 2c 65 3d 5b 5d 2c 61 2e 4f 3d 28 74 2c 72 2c 6e 2c 6f 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 73 3d 31 2f 30 3b 66 6f 72 28 66 3d 30 3b 66 Data Ascii: (()=>{"use strict";var e,t,r,n,o,s={},i={};function a(e){var t=i[e];if(void 0!==t)return t.exports;var r=i[e]={id:e,loaded:!1,exports:{}};return s[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=s,e=[],a.O=(t,r,n,o)=>{if(!r){var s=1/0;for(f=0;f
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 20 61 2e 64 28 74 2c 7b 61 3a 74 7d 29 2c 74 7d 2c 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 65 3d 3e 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3a 65 3d 3e 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 2c 61 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 31 26 6e 29 65 3d 74 68 69 73 28 65 29 3b 69 66 28 38 26 6e 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 7b 69 66 28 34 26 6e 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 31 36 26 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 68 65 6e 29 72 65 74 75 72 6e 20 65 7d 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 Data Ascii: a.d(t,{a:t}),t},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,a.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModule)return e;if(16&n&&"function"==typeof e.then)return e}var o=Object.create(
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 75 72 6e 22 63 31 36 36 65 35 64 32 30 61 64 35 38 66 34 65 2e 72 75 6e 74 69 6d 65 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 7b 32 36 35 33 3a 31 2c 35 34 33 36 3a 31 2c 34 30 34 33 3a 31 2c 31 37 36 31 3a 31 2c 33 38 38 34 3a 31 2c 35 31 33 36 3a 31 7d 5b 65 5d 29 72 65 74 75 72 6e 22 63 31 36 36 65 35 64 32 30 61 64 35 38 66 34 65 2e 76 65 6e 64 6f 72 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 31 33 38 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 6c 72 78 6c 63 76 2e 64 66 38 61 36 31 66 37 32 34 63 33 64 38 38 35 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 38 36 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 33 33 61 34 33 62 35 30 34 62 65 34 38 62 32 34 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 7b 32 36 38 39 3a 31 2c 39 37 33 39 3a 31 2c 34 34 35 30 3a 31 2c 32 33 39 35 3a 31 Data Ascii: urn"c166e5d20ad58f4e.runtime.rtl.css";if({2653:1,5436:1,4043:1,1761:1,3884:1,5136:1}[e])return"c166e5d20ad58f4e.vendor.rtl.css";if(1389===e)return"lrxlcv.df8a61f724c3d885.rtl.css";if(869===e)return"33a43b504be48b24.rtl.css";if({2689:1,9739:1,4450:1,2395:1
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 22 2c 74 61 72 67 65 74 3a 69 7d 29 2c 31 32 65 34 29 3b 69 2e 6f 6e 65 72 72 6f 72 3d 64 2e 62 69 6e 64 28 6e 75 6c 6c 2c 69 2e 6f 6e 65 72 72 6f 72 29 2c 69 2e 6f 6e 6c 6f 61 64 3d 64 2e 62 69 6e 64 28 6e 75 6c 6c 2c 69 2e 6f 6e 6c 6f 61 64 29 2c 6c 26 26 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 7d 65 6c 73 65 20 6e 5b 65 5d 2e 70 75 73 68 28 74 29 7d 2c 61 2e 72 3d 65 3d 3e 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 29 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 3b 4f 62 Data Ascii: ",target:i}),12e4);i.onerror=d.bind(null,i.onerror),i.onload=d.bind(null,i.onload),l&&document.head.appendChild(i)}else n[e].push(t)},a.r=e=>{if("undefined"!=typeof Symbol&&Symbol.toStringTag)Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Ob
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 29 2c 75 3d 5b 5d 2c 76 3d 30 7d 29 29 3b 63 6f 6e 73 74 20 65 3d 5f 28 6f 29 3b 69 66 28 75 2e 6c 65 6e 67 74 68 3e 3d 31 26 26 76 2b 65 3e 73 7c 7c 75 2e 6c 65 6e 67 74 68 3e 3d 6e 29 6b 28 75 2c 79 29 2c 75 3d 5b 5d 2c 76 3d 30 3b 76 2b 3d 65 7d 65 6c 73 65 7b 69 66 28 62 2b 2b 3c 31 35 29 72 65 74 75 72 6e 20 74 28 65 29 3b 69 66 28 30 3d 3d 3d 75 2e 6c 65 6e 67 74 68 29 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 77 28 75 2c 79 29 29 2c 31 29 7d 75 2e 70 75 73 68 28 7b 73 72 63 3a 6f 2c 63 61 6c 6c 62 61 63 6b 3a 72 3d 3e 7b 69 66 28 22 6c 6f 61 64 22 3d 3d 3d 72 2e 74 79 70 65 29 65 2e 6f 6e 6c 6f 61 64 26 26 65 2e 6f 6e 6c 6f 61 64 28 72 29 3b 65 6c 73 65 20 74 28 65 29 7d 2c 6f 72 69 67 69 6e 61 6c 4c 6f 61 64 3a 28 29 3d 3e 7b 74 28 65 29 7d Data Ascii: ),u=[],v=0}));const e=_(o);if(u.length>=1&&v+e>s\|\|u.length>=n)k(u,y),u=[],v=0;v+=e}else{if(b++<15)return t(e);if(0===u.length)setTimeout((()=>w(u,y)),1)}u.push({src:o,callback:r=>{if("load"===r.type)e.onload&&e.onload(r);else t(e)},originalLoad:()=>{t(e)}
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 61 69 74 20 74 2e 6d 61 74 63 68 28 6e 2e 73 72 63 29 29 6e 2e 6f 72 69 67 69 6e 61 6c 4c 6f 61 64 28 29 3b 65 6c 73 65 20 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 28 65 29 3a 65 3b 66 6f 72 28 63 6f 6e 73 74 20 6f 20 6f 66 20 64 29 7b 63 6f 6e 73 74 20 65 3d 6f 2e 73 72 63 2e 73 75 62 73 74 72 69 6e 67 28 72 2e 6c 65 6e 67 74 68 29 2c 74 3d 65 3f 69 5b 65 5d 7c 7c 30 3a 30 3b 69 66 28 75 2e 6c 65 6e 67 74 68 3e 3d 31 26 26 66 2b 74 3e 73 7c 7c 75 2e 6c 65 6e 67 74 68 3e 3d 6e 29 68 28 75 29 2c 75 3d 5b 5d 2c 66 3d 30 3b 75 2e 70 75 73 68 28 6f 29 2c 66 2b 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 76 6f 69 64 20 65 5b 30 5d 2e 6f 72 69 67 69 6e 61 6c 4c 6f 61 64 Data Ascii: ait t.match(n.src))n.originalLoad();else r.push(n);return r}(e):e;for(const o of d){const e=o.src.substring(r.length),t=e?i[e]\|\|0:0;if(u.length>=1&&f+t>s\|\|u.length>=n)h(u),u=[],f=0;u.push(o),f+=t}function h(e){if(1===e.length)return void e[0].originalLoad
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 33 30 34 2e 76 65 6e 64 6f 72 2e 6a 73 22 3a 33 36 35 31 36 36 7d 2c 73 65 6c 66 2e 5f 5f 63 68 65 63 6b 5f 63 61 63 68 65 5f 62 61 74 63 68 5f 63 68 75 6e 6b 73 5f 5f 2c 22 61 73 73 65 74 73 2d 32 22 29 7d 29 28 29 2c 61 2e 67 2e 42 55 49 4c 44 5f 56 41 52 49 41 42 4c 45 53 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2e 67 2e 42 55 49 4c 44 5f 56 41 52 49 41 42 4c 45 53 7c 7c 7b 7d 2c 7b 50 52 45 46 45 52 52 45 44 5f 52 45 41 43 54 5f 52 45 4e 44 45 52 45 52 3a 22 63 6f 6e 63 75 72 72 65 6e 74 22 7d 29 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 39 31 36 34 22 3a 32 36 38 39 2c 22 35 35 38 32 30 22 3a 35 31 33 36 2c 22 31 34 34 36 31 36 22 3a 34 30 34 33 2c 22 31 39 31 32 35 33 22 3a 32 33 39 35 2c 22 32 30 Data Ascii: 304.vendor.js":365166},self.__check_cache_batch_chunks__,"assets-2")})(),a.g.BUILD_VARIABLES=Object.assign(a.g.BUILD_VARIABLES\|\|{},{PREFERRED_REACT_RENDERER:"concurrent"}),(()=>{const e=JSON.parse('{"9164":2689,"55820":5136,"144616":4043,"191253":2395,"20
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 7d 7d 29 28 29 2c 28 28 29 3d 3e 7b 6c 65 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 76 6f 69 64 20 30 21 3d 3d 73 65 6c 66 2e 64 6f 63 75 6d 65 6e 74 3f 73 65 6c 66 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 72 22 29 3a 22 6c 74 72 22 3b 69 66 28 22 6c 74 72 22 21 3d 3d 65 26 26 22 72 74 6c 22 21 3d 3d 65 29 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 43 6f 75 6c 64 20 6e 6f 74 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 6f 66 20 74 65 78 74 2c 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 64 69 72 20 61 74 74 72 69 62 75 74 65 20 69 73 20 73 65 74 20 6f 6e 20 74 68 Data Ascii: }})(),(()=>{let e="undefined"!=typeof self&&void 0!==self.document?self.document.body.parentElement.getAttribute("dir"):"ltr";if("ltr"!==e&&"rtl"!==e)console.warn("Could not determine the direction of text, please check that the dir attribute is set on th
2024-10-25 20:22:23 UTC	944	IN	Data Raw: 75 73 68 28 74 5b 72 5d 3d 65 28 72 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 74 5b 72 5d 3d 30 7d 29 2c 28 65 3d 3e 7b 74 68 72 6f 77 20 64 65 6c 65 74 65 20 74 5b 72 5d 2c 65 7d 29 29 29 7d 7d 7d 29 28 29 2c 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 38 35 38 31 3a 30 7d 3b 61 2e 66 2e 6a 3d 28 74 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 61 2e 6f 28 65 2c 74 29 3f 65 5b 74 5d 3a 76 6f 69 64 20 30 3b 69 66 28 30 21 3d 3d 6e 29 69 66 28 6e 29 72 2e 70 75 73 68 28 6e 5b 32 5d 29 3b 65 6c 73 65 20 69 66 28 38 35 38 31 21 3d 74 29 7b 76 61 72 20 6f 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 72 2c 6f 29 3d 3e 6e 3d 65 5b 74 5d 3d 5b 72 2c 6f 5d 29 29 3b 72 2e 70 75 73 68 28 6e 5b 32 5d 3d 6f 29 3b 76 61 72 20 73 3d 61 2e 70 2b 61 2e 75 28 74 29 2c 69 3d 6e 65 77 20 45 Data Ascii: ush(t[r]=e(r).then((()=>{t[r]=0}),(e=>{throw delete t[r],e})))}}})(),(()=>{var e={8581:0};a.f.j=(t,r)=>{var n=a.o(e,t)?e[t]:void 0;if(0!==n)if(n)r.push(n[2]);else if(8581!=t){var o=new Promise(((r,o)=>n=e[t]=[r,o]));r.push(n[2]=o);var s=a.p+a.u(t),i=new E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:23 UTC	570	OUT	GET /web/387e316e7fce97e3.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:24 UTC	1359	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:23 GMT Content-Type: text/javascript Content-Length: 204452 Connection: close CF-Ray: 8d84eb1f6f926c4c-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 1958436 Cache-Control: public, max-age=31556926 ETag: "02d8436722f1f2095dc9706bbf600d74" Expires: Sun, 26 Oct 2025 02:11:09 GMT Last-Modified: Thu, 03 Oct 2024 03:57:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 04 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 5QudCvAi2q/Aerr9EJehwZrXExwJ8p+5RkTc5MHx1iSi02FcXHSpHxpe7C9+XQpWSM/qqWsYI9I= x-amz-replication-status: COMPLETED x-amz-request-id: B1CJ1DHH88862NRG x-amz-server-side-encryption: AES256 x-amz-version-id: OJAf1gcov6i6r1Q.GSk9wV_hd1JSU0xI X-Content-Type-Options: nosniff
2024-10-25 20:22:24 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 74 45 43 58 54 51 74 30 42 6a 4e 70 32 76 69 71 44 74 2e 77 38 67 58 43 76 50 38 43 32 46 35 73 35 65 61 75 74 4d 4c 50 31 41 41 2d 31 37 32 39 38 38 37 37 34 33 2d 31 2e 30 2e 31 2e 31 2d 66 43 76 77 66 63 71 54 32 34 54 6c 42 67 46 39 77 50 57 36 44 46 54 57 39 4a 48 4b 61 36 48 51 54 5a 66 69 72 31 35 68 42 6b 52 39 6b 43 44 72 4c 4e 45 43 4c 54 6f 6c 68 6f 7a 46 54 4f 43 48 2e 53 52 4b 6f 78 4a 78 5f 6c 73 57 6d 4e 70 6e 42 41 51 49 32 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 2d 4f 63 74 2d 32 34 20 32 30 3a 35 32 3a 32 33 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=tECXTQt0BjNp2viqDt.w8gXCvP8C2F5s5eautMLP1AA-1729887743-1.0.1.1-fCvwfcqT24TlBgF9wPW6DFTW9JHKa6HQTZfir15hBkR9kCDrLNECLTolhozFTOCH.SRKoxJx_lsWmNpnBAQI2A; path=/; expires=Fri, 25-Oct-24 20:52:23 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-25 20:22:24 UTC	604	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 33 38 37 65 33 31 36 65 37 66 63 65 39 37 65 33 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 35 33 5d 2c 7b 34 30 37 34 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 28 33 36 36 39 39 35 29 7d 2c 37 33 36 32 34 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 44 54 3a 28 29 3d 3e 6f 2e 44 2c 46 59 3a 28 29 3d 3e 6f 2e 46 2c 50 69 3a 28 29 3d 3e 75 2e 50 2c 66 Data Ascii: /! For license information please see 387e316e7fce97e3.vendor.js.LICENSE.txt /"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{40749:(e,t,n)=>{n(366995)},736241:(e,t,n)=>{n.d(t,{DT:()=>o.D,FY:()=>o.F,Pi:()=>u.P,f
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 22 6e 61 6d 65 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2c 63 3d 75 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 66 6f 72 77 61 72 64 52 65 66 26 26 28 30 2c 69 2e 66 6f 72 77 61 72 64 52 65 66 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 29 2e 24 24 74 79 70 65 6f 66 2c 66 3d 75 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 3a 22 66 75 6e 63 74 69 6f 6e Data Ascii: nPropertyDescriptor((function(){}),"name"))\|\|void 0===r?void 0:r.configurable)&&void 0!==a&&a,c=u?Symbol.for("react.forward_ref"):"function"==typeof i.forwardRef&&(0,i.forwardRef)((function(e){return null})).$$typeof,f=u?Symbol.for("react.memo"):"function
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 7d 7d 2c 32 34 37 36 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 34 32 37 38 32 29 2c 61 3d 6e 28 38 37 35 36 30 34 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 74 3d 28 30 2c 61 2e 75 73 65 53 74 61 74 65 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 4c 4f 29 28 65 2c 7b 7d 2c 7b 64 65 65 70 3a 21 31 7d 29 7d 29 29 5b 30 5d 3b 72 65 74 75 72 6e 28 30 2c 72 2e 7a 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2c 65 29 7d 29 29 2c 74 7d 7d 2c 38 31 38 33 32 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 66 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 34 32 37 38 32 29 2c 61 3d 6e 28 38 37 35 Data Ascii: }},24765:(e,t,n)=>{n.d(t,{A:()=>i});var r=n(42782),a=n(875604);function i(e){var t=(0,a.useState)((function(){return(0,r.LO)(e,{},{deep:!1})}))[0];return(0,r.z)((function(){Object.assign(t,e)})),t}},818321:(e,t,n)=>{n.d(t,{f:()=>i});var r=n(42782),a=n(875
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 66 69 6e 61 6c 69 7a 65 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 72 65 67 69 73 74 72 61 74 69 6f 6e 73 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 65 77 20 4d 61 70 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: :()=>a});var r=function(){function e(e){var t=this;Object.defineProperty(this,"finalize",{enumerable:!0,configurable:!0,writable:!0,value:e}),Object.defineProperty(this,"registrations",{enumerable:!0,configurable:!0,writable:!0,value:new Map}),Object.defi
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 61 6c 69 7a 61 74 69 6f 6e 52 65 67 69 73 74 72 79 3f 46 69 6e 61 6c 69 7a 61 74 69 6f 6e 52 65 67 69 73 74 72 79 3a 72 7d 2c 34 35 34 36 34 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 34 32 37 38 32 29 3b 69 66 28 21 6e 28 38 37 35 36 30 34 29 2e 75 73 65 53 74 61 74 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 6f 62 78 2d 72 65 61 63 74 2d 6c 69 74 65 20 72 65 71 75 69 72 65 73 20 52 65 61 63 74 20 77 69 74 68 20 48 6f 6f 6b 73 20 73 75 70 70 6f 72 74 22 29 3b 69 66 28 21 72 2e 72 43 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 6f 62 78 2d 72 65 61 63 74 2d 6c 69 74 65 40 33 20 72 65 71 75 69 72 65 73 20 6d 6f 62 78 20 61 74 20 6c 65 61 73 74 20 76 65 72 73 69 6f 6e 20 36 20 74 6f 20 62 65 20 61 76 61 69 6c 61 Data Ascii: alizationRegistry?FinalizationRegistry:r},454648:(e,t,n)=>{var r=n(42782);if(!n(875604).useState)throw new Error("mobx-react-lite requires React with Hooks support");if(!r.rC)throw new Error("mobx-react-lite@3 requires mobx at least version 6 to be availa
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 2b 65 29 7d 76 61 72 20 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 21 3d 3d 6e 2e 67 3f 6e 2e 67 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 61 7d 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2c 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 75 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 73 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 63 Data Ascii: +e)}var a={};function i(){return"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:void 0!==n.g?n.g:"undefined"!=typeof self?self:a}var o=Object.assign,l=Object.getOwnPropertyDescriptor,u=Object.defineProperty,s=Object.prototype,c
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 76 61 72 20 43 3d 76 6f 69 64 20 30 21 3d 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3b 76 61 72 20 50 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2e 6f 77 6e 4b 65 79 73 3f 52 65 66 6c 65 63 74 2e 6f 77 6e 4b 65 79 73 3a 43 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 65 29 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 29 7d 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e Data Ascii: ]"===Object.prototype.toString.call(e)}var C=void 0!==Object.getOwnPropertySymbols;var P="undefined"!=typeof Reflect&&Reflect.ownKeys?Reflect.ownKeys:C?function(e){return Object.getOwnPropertyNames(e).concat(Object.getOwnPropertySymbols(e))}:Object.getOwn
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b 6e 26 26 28 65 3d 6e 29 3b 76 61 72 20 72 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3e 3d 65 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 65 5b 72 2b 2b 5d 7d 7d 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 Data Ascii: &&"number"==typeof e.length){n&&(e=n);var r=0;return function(){return r>=e.length?{done:!0}:{done:!1,value:e[r++]}}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.ite
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 22 41 74 6f 6d 22 29 2c 74 68 69 73 2e 6e 61 6d 65 5f 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 66 6c 61 67 73 5f 3d 30 2c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 5f 3d 6e 65 77 20 53 65 74 2c 74 68 69 73 2e 6c 61 73 74 41 63 63 65 73 73 65 64 42 79 5f 3d 30 2c 74 68 69 73 2e 6c 6f 77 65 73 74 4f 62 73 65 72 76 65 72 53 74 61 74 65 5f 3d 4a 65 2e 4e 4f 54 5f 54 52 41 43 4b 49 4e 47 5f 2c 74 68 69 73 2e 6f 6e 42 4f 4c 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 6f 6e 42 55 4f 4c 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 6e 61 6d 65 5f 3d 65 7d 76 61 72 20 74 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6f 6e 42 4f 3d 66 75 6e 63 Data Ascii: unction(){function e(e){void 0===e&&(e="Atom"),this.name_=void 0,this.flags_=0,this.observers_=new Set,this.lastAccessedBy_=0,this.lowestObserverState_=Je.NOT_TRACKING_,this.onBOL=void 0,this.onBUOL=void 0,this.name_=e}var t=e.prototype;return t.onBO=func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:23 UTC	570	OUT	GET /web/9a2311e7590ee117.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:24 UTC	1357	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:23 GMT Content-Type: text/javascript Content-Length: 117628 Connection: close CF-Ray: 8d84eb1f693a2cc3-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 28980 Cache-Control: public, max-age=31556926 ETag: "73f32f62890eaf397e25db19c6f9fb11" Expires: Sun, 26 Oct 2025 02:11:09 GMT Last-Modified: Fri, 25 Oct 2024 01:35:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: jwptLtGsNqcXOOE+7h6Ka+iQNsGZ1ELGJ5inm4VIVSHi+byTAdpsEvsSb/SbL5ieOlS3SboQe0o= x-amz-replication-status: COMPLETED x-amz-request-id: T0X9APK0F00XB2ZN x-amz-server-side-encryption: AES256 x-amz-version-id: xs7XO5dwd36SNjkijaz_rO80eXzf7Ae_ X-Content-Type-Options: nosniff
2024-10-25 20:22:24 UTC	777	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 65 67 63 67 69 49 33 59 33 6e 62 2e 6a 33 50 4a 53 42 71 73 39 33 43 65 78 49 73 5a 51 6e 63 6b 43 4a 75 6a 50 61 72 36 7a 6a 34 2d 31 37 32 39 38 38 37 37 34 33 2d 31 2e 30 2e 31 2e 31 2d 35 59 42 71 61 47 70 47 65 73 68 39 30 7a 43 39 49 54 36 59 36 63 34 70 57 38 79 31 72 78 55 74 51 52 38 5f 6f 50 49 57 79 4e 30 44 4d 61 54 64 69 66 61 51 68 4c 72 46 38 4b 4d 62 35 6f 39 6f 42 36 6b 65 58 67 72 64 67 5f 55 77 69 6a 78 4f 6c 36 74 48 4b 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 2d 4f 63 74 2d 32 34 20 32 30 3a 35 32 3a 32 33 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=egcgiI3Y3nb.j3PJSBqs93CexIsZQnckCJujPar6zj4-1729887743-1.0.1.1-5YBqaGpGesh90zC9IT6Y6c4pW8y1rxUtQR8_oPIWyN0DMaTdifaQhLrF8KMb5o9oB6keXgrdg_UwijxOl6tHKg; path=/; expires=Fri, 25-Oct-24 20:52:23 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-25 20:22:24 UTC	604	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 39 61 32 33 31 31 65 37 35 39 30 65 65 31 31 37 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 36 5d 2c 7b 32 33 32 37 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 61 63 68 65 3f 74 2e 63 61 63 68 65 3a 63 2c 72 3d 74 26 26 74 2e 73 65 72 69 61 6c 69 7a 65 72 3f 74 2e 73 65 72 69 61 6c Data Ascii: /! For license information please see 9a2311e7590ee117.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{23278:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serial
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2e 62 69 6e 64 28 74 2c 65 2c 72 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 73 28 65 2c 74 68 69 73 2c 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 6f 3a 69 2c 74 2e 63 61 63 68 65 2e 63 72 65 61 74 65 28 29 2c 74 2e 73 65 72 69 61 6c 69 7a 65 72 29 7d 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 68 2c 48 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 74 68 69 73 2e 63 61 63 68 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 75 2e 70 72 6f 74 6f Data Ascii: ,i}function s(e,t,n,r,o){return n.bind(t,e,r,o)}function a(e,t){return s(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}n.d(t,{A:()=>h,H:()=>r});var l=function(){return JSON.stringify(arguments)};function u(){this.cache=Object.create(null)}u.proto
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 59 5f 41 52 47 55 4d 45 4e 54 3d 32 5d 3d 22 45 4d 50 54 59 5f 41 52 47 55 4d 45 4e 54 22 2c 65 5b 65 2e 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 3d 33 5d 3d 22 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 3d 34 5d 3d 22 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 3d 35 5d 3d 22 49 4e 56 41 4c 49 44 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 54 59 4c 45 3d 36 5d 3d 22 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 54 59 4c 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 4e 55 4d 42 45 52 5f 53 Data Ascii: Y_ARGUMENT=2]="EMPTY_ARGUMENT",e[e.MALFORMED_ARGUMENT=3]="MALFORMED_ARGUMENT",e[e.EXPECT_ARGUMENT_TYPE=4]="EXPECT_ARGUMENT_TYPE",e[e.INVALID_ARGUMENT_TYPE=5]="INVALID_ARGUMENT_TYPE",e[e.EXPECT_ARGUMENT_STYLE=6]="EXPECT_ARGUMENT_STYLE",e[e.INVALID_NUMBER_S
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 45 52 5f 43 4c 41 55 53 45 3d 32 32 5d 3d 22 4d 49 53 53 49 4e 47 5f 4f 54 48 45 52 5f 43 4c 41 55 53 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 54 41 47 3d 32 33 5d 3d 22 49 4e 56 41 4c 49 44 5f 54 41 47 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 54 41 47 5f 4e 41 4d 45 3d 32 35 5d 3d 22 49 4e 56 41 4c 49 44 5f 54 41 47 5f 4e 41 4d 45 22 2c 65 5b 65 2e 55 4e 4d 41 54 43 48 45 44 5f 43 4c 4f 53 49 4e 47 5f 54 41 47 3d 32 36 5d 3d 22 55 4e 4d 41 54 43 48 45 44 5f 43 4c 4f 53 49 4e 47 5f 54 41 47 22 2c 65 5b 65 2e 55 4e 43 4c 4f 53 45 44 5f 54 41 47 3d 32 37 5d 3d 22 55 4e 43 4c 4f 53 45 44 5f 54 41 47 22 7d 28 72 7c 7c 28 72 3d 7b 7d 29 29 7d 2c 36 35 39 31 33 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b Data Ascii: ER_CLAUSE=22]="MISSING_OTHER_CLAUSE",e[e.INVALID_TAG=23]="INVALID_TAG",e[e.INVALID_TAG_NAME=25]="INVALID_TAG_NAME",e[e.UNMATCHED_CLOSING_TAG=26]="UNMATCHED_CLOSING_TAG",e[e.UNCLOSED_TAG=27]="UNCLOSED_TAG"}(r\|\|(r={}))},659137:(e,t,n)=>{"use strict";n.d(t,{
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 2c 67 3d 21 21 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 2c 62 3d 21 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 64 65 50 6f 69 6e 74 41 74 2c 79 3d 21 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 53 74 61 72 74 2c 76 3d 21 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 45 6e 64 2c 45 3d 21 21 4e 75 6d 62 65 72 2e 69 73 53 61 66 65 49 6e 74 65 67 65 72 3f 4e 75 6d 62 65 72 2e 69 73 53 61 66 65 49 6e 74 65 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 69 73 46 69 6e 69 74 65 28 65 29 26 26 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 3d 3d 3d 65 26 26 4d 61 74 68 2e 61 62 73 28 Data Ascii: fromCodePoint,g=!!Object.fromEntries,b=!!String.prototype.codePointAt,y=!!String.prototype.trimStart,v=!!String.prototype.trimEnd,E=!!Number.isSafeInteger?Number.isSafeInteger:function(e){return"number"==typeof e&&isFinite(e)&&Math.floor(e)===e&&Math.abs(
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 72 6e 5f 53 79 6e 74 61 78 7d 5d 2a 29 22 2c 22 79 75 22 29 3b 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 48 2e 6c 61 73 74 49 6e 64 65 78 3d 74 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 48 2e 65 78 65 63 28 65 29 5b 31 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 22 22 7d 7d 65 6c 73 65 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 3b 3b 29 7b 76 61 72 20 72 3d 53 28 65 2c 74 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 43 28 72 29 7c 7c 4c 28 72 29 29 62 72 65 61 6b 3b 6e 2e 70 75 73 68 28 72 29 2c 74 2b 3d 72 3e 3d 36 35 35 33 36 3f 32 3a 31 7d 72 65 74 75 72 6e 20 50 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 6e 29 7d 3b 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: rn_Syntax}]*)","yu");_=function(e,t){var n;return H.lastIndex=t,null!==(n=H.exec(e)[1])&&void 0!==n?n:""}}else _=function(e,t){for(var n=[];;){var r=S(e,t);if(void 0===r\|\|C(r)\|\|L(r))break;n.push(r),t+=r>=65536?2:1}return P.apply(void 0,n)};var B=function(
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 6f 6e 28 29 3b 74 68 69 73 2e 62 75 6d 70 28 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 70 61 72 73 65 54 61 67 4e 61 6d 65 28 29 3b 69 66 28 74 68 69 73 2e 62 75 6d 70 53 70 61 63 65 28 29 2c 74 68 69 73 2e 62 75 6d 70 49 66 28 22 2f 3e 22 29 29 72 65 74 75 72 6e 7b 76 61 6c 3a 7b 74 79 70 65 3a 73 2e 77 44 2e 6c 69 74 65 72 61 6c 2c 76 61 6c 75 65 3a 22 3c 22 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 3e 22 29 2c 6c 6f 63 61 74 69 6f 6e 3a 70 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 7d 2c 65 72 72 3a 6e 75 6c 6c 7d 3b 69 66 28 74 68 69 73 2e 62 75 6d 70 49 66 28 22 3e 22 29 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 70 61 72 73 65 4d 65 73 73 61 67 65 28 65 2b 31 2c 74 2c 21 30 29 3b 69 66 28 6f 2e 65 72 72 29 72 65 74 75 72 6e 20 6f 3b Data Ascii: on();this.bump();var r=this.parseTagName();if(this.bumpSpace(),this.bumpIf("/>"))return{val:{type:s.wD.literal,value:"<".concat(r,"/>"),location:p(n,this.clonePosition())},err:null};if(this.bumpIf(">")){var o=this.parseMessage(e+1,t,!0);if(o.err)return o;
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 69 73 2e 74 72 79 50 61 72 73 65 51 75 6f 74 65 28 74 29 3b 69 66 28 6f 29 72 2b 3d 6f 3b 65 6c 73 65 7b 76 61 72 20 69 3d 74 68 69 73 2e 74 72 79 50 61 72 73 65 55 6e 71 75 6f 74 65 64 28 65 2c 74 29 3b 69 66 28 69 29 72 2b 3d 69 3b 65 6c 73 65 7b 76 61 72 20 61 3d 74 68 69 73 2e 74 72 79 50 61 72 73 65 4c 65 66 74 41 6e 67 6c 65 42 72 61 63 6b 65 74 28 29 3b 69 66 28 21 61 29 62 72 65 61 6b 3b 72 2b 3d 61 7d 7d 7d 76 61 72 20 6c 3d 70 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 3b 72 65 74 75 72 6e 7b 76 61 6c 3a 7b 74 79 70 65 3a 73 2e 77 44 2e 6c 69 74 65 72 61 6c 2c 76 61 6c 75 65 3a 72 2c 6c 6f 63 61 74 69 6f 6e 3a 6c 7d 2c 65 72 72 3a 6e 75 6c 6c 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 79 50 61 72 73 65 4c 65 Data Ascii: is.tryParseQuote(t);if(o)r+=o;else{var i=this.tryParseUnquoted(e,t);if(i)r+=i;else{var a=this.tryParseLeftAngleBracket();if(!a)break;r+=a}}}var l=p(n,this.clonePosition());return{val:{type:s.wD.literal,value:r,location:l},err:null}},e.prototype.tryParseLe
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 2e 70 61 72 73 65 49 64 65 6e 74 69 66 69 65 72 49 66 50 6f 73 73 69 62 6c 65 28 29 2e 76 61 6c 75 65 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 69 2e 6f 2e 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 2c 70 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 3b 69 66 28 74 68 69 73 2e 62 75 6d 70 53 70 61 63 65 28 29 2c 74 68 69 73 2e 69 73 45 4f 46 28 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 69 2e 6f 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 43 4c 4f 53 49 4e 47 5f 42 52 41 43 45 2c 70 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 3b 73 77 69 74 63 68 28 74 68 69 73 2e 63 68 61 72 28 29 29 7b 63 61 73 65 20 31 32 35 3a 72 65 74 75 72 Data Ascii: .parseIdentifierIfPossible().value;if(!r)return this.error(i.o.MALFORMED_ARGUMENT,p(n,this.clonePosition()));if(this.bumpSpace(),this.isEOF())return this.error(i.o.EXPECT_ARGUMENT_CLOSING_BRACE,p(n,this.clonePosition()));switch(this.char()){case 125:retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:23 UTC	570	OUT	GET /web/lrxlcv.6f252c89c2f71f57.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:24 UTC	1357	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:23 GMT Content-Type: text/javascript Content-Length: 189838 Connection: close CF-Ray: 8d84eb1f7e836b05-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 66868 Cache-Control: public, max-age=31556926 ETag: "1b1bb075ed7f5cd7a4f0bb1be82fdfbf" Expires: Sun, 26 Oct 2025 02:11:09 GMT Last-Modified: Fri, 25 Oct 2024 01:35:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Y+lwVib8m0MixH1noFzajpreAvnoZE2MyoyvvGwECUsQ8ceu2iB2ySu1v9xK5mXr6EAMnxrD/C8= x-amz-replication-status: COMPLETED x-amz-request-id: T0XD596KBWKN13JZ x-amz-server-side-encryption: AES256 x-amz-version-id: 3qv8rgTvbzjMPrN7DbOegp8a4Ix8P9AS X-Content-Type-Options: nosniff
2024-10-25 20:22:24 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 45 6f 79 4c 34 4d 4b 66 46 79 53 57 35 4d 50 73 61 76 2e 51 6b 44 2e 61 41 68 65 6e 6c 6f 33 32 6e 44 37 4c 2e 51 74 70 54 5f 51 2d 31 37 32 39 38 38 37 37 34 33 2d 31 2e 30 2e 31 2e 31 2d 59 6e 65 4e 34 63 42 6b 53 32 78 4c 55 4c 51 45 50 44 6a 66 64 6b 7a 56 62 47 76 30 67 6f 56 36 75 4f 38 6b 37 44 59 50 35 32 66 50 69 43 4c 41 43 44 75 7a 38 36 2e 48 55 48 5a 33 77 64 2e 41 6c 77 33 48 39 32 51 54 37 30 30 63 45 6b 4f 2e 4f 4f 57 64 49 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 2d 4f 63 74 2d 32 34 20 32 30 3a 35 32 3a 32 33 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=EoyL4MKfFySW5MPsav.QkD.aAhenlo32nD7L.QtpT_Q-1729887743-1.0.1.1-YneN4cBkS2xLULQEPDjfdkzVbGv0goV6uO8k7DYP52fPiCLACDuz86.HUHZ3wd.Alw3H92QT700cEkO.OOWdIg; path=/; expires=Fri, 25-Oct-24 20:52:23 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-25 20:22:24 UTC	606	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 38 39 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 31 33 31 31 30 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 36 34 36 61 38 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{/***/ 813110:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fe4d99ebe0d2d259646a8
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 61 2c 6a 61 2c 72 61 2c 71 61 2c 6f 61 2c 6e 61 2c 79 61 2c 41 61 2c 43 61 2c 46 61 2c 47 61 2c 49 61 2c 4c 61 2c 50 61 2c 51 61 2c 24 61 2c 59 61 2c 55 61 2c 56 61 2c 57 61 2c 58 61 2c 5a 61 2c 61 62 2c 4a 61 2c 54 61 2c 52 61 2c 53 61 2c 66 62 2c 68 62 2c 6a 62 2c 6b 62 2c 6d 62 2c 74 62 2c 6f 62 2c 78 62 2c 79 62 2c 43 62 2c 44 62 2c 46 62 2c 77 62 2c 4a 62 2c 4d 62 2c 50 62 2c 53 62 2c 52 62 2c 54 62 2c 55 62 2c 59 62 2c 58 62 2c 24 62 2c 61 63 2c 67 63 2c 70 63 2c 65 63 2c 6e 63 2c 71 63 2c 69 63 2c 76 63 2c 7a 63 2c 48 63 2c 78 63 2c 4b 63 2c 46 63 2c 4c 63 2c 42 63 2c 4d 63 2c 51 63 2c 52 63 2c 53 63 2c 55 63 2c 5a 63 2c 62 64 2c 64 64 2c 65 64 2c 66 64 2c 6e 64 2c 6a 64 2c 68 64 2c 67 64 2c 6f 64 2c 70 64 2c 75 64 2c 79 64 2c 78 64 2c 7a 64 2c 76 Data Ascii: a,ja,ra,qa,oa,na,ya,Aa,Ca,Fa,Ga,Ia,La,Pa,Qa,$a,Ya,Ua,Va,Wa,Xa,Za,ab,Ja,Ta,Ra,Sa,fb,hb,jb,kb,mb,tb,ob,xb,yb,Cb,Db,Fb,wb,Jb,Mb,Pb,Sb,Rb,Tb,Ub,Yb,Xb,$b,ac,gc,pc,ec,nc,qc,ic,vc,zc,Hc,xc,Kc,Fc,Lc,Bc,Mc,Qc,Rc,Sc,Uc,Zc,bd,dd,ed,fd,nd,jd,hd,gd,od,pd,ud,yd,xd,zd,v
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6e 75 6c 6c 3d 3d 62 3f 22 69 6e 76 61 6c 69 64 20 61 72 67 75 6d 65 6e 74 22 3a 65 61 28 62 2c 2e 2e 2e 63 29 29 3b 7d 3b 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 2e 2e 2e 62 29 7b 6c 65 74 20 63 3d 30 3b 72 65 74 75 72 6e 20 61 2e 72 65 70 6c 61 63 65 28 2f 5c 7b 7d 2f 67 2c 28 29 3d 3e 63 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 63 2b 2b 5d 3a 22 7b 7d 22 29 7d 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6e 75 6c 6c 3d 3d 62 3f 22 69 6e 76 61 6c 69 64 20 73 74 61 74 65 22 3a 65 61 28 62 2c 2e 2e 2e 63 29 29 3b 7d 3b 68 61 3d 5f 5f 63 2e 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 69 Data Ascii: f(!a)throw Error(null==b?"invalid argument":ea(b,...c));};ea=function(a,...b){let c=0;return a.replace(/\{}/g,()=>c<b.length?b[c++]:"{}")};fa=function(a,b){var c=[];if(!a)throw Error(null==b?"invalid state":ea(b,...c));};ha=__c.ha=function(a,b){var c=[];i
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 28 61 29 3a 22 22 21 3d 3d 61 2e 74 72 69 6d 28 29 26 26 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 4e 75 6d 62 65 72 28 61 29 29 3f 4e 75 6d 62 65 72 28 61 29 3a 76 61 2e 68 61 73 28 61 29 3f 76 61 2e 67 65 74 28 61 29 3a 61 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 6c 28 74 61 2e 68 61 73 28 61 29 2c 22 62 6f 6f 6c 65 61 6e 20 76 61 6c 75 65 20 65 78 70 65 63 74 65 64 3a 20 7b 7d 22 2c 61 29 2c 74 61 2e 67 65 74 28 61 29 3b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 6c 28 22 22 21 3d 3d 61 2e 74 72 69 6d 28 29 26 26 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 4e 75 6d 62 65 72 28 61 29 29 2c 22 66 69 6e 69 74 65 20 6e 75 6d 65 72 61 6c 20 65 78 70 65 63 74 65 64 3a 20 7b 7d 22 2c 61 29 2c 4e 75 6d Data Ascii: (a):""!==a.trim()&&Number.isFinite(Number(a))?Number(a):va.has(a)?va.get(a):a;case "boolean":return l(ta.has(a),"boolean value expected: {}",a),ta.get(a);case "number":return l(""!==a.trim()&&Number.isFinite(Number(a)),"finite numeral expected: {}",a),Num
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 2e 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 63 2c 41 3a 64 2c 61 61 3a 65 7d 3d 4a 61 28 61 2c 62 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 4e 3a 32 2c 41 3a 64 2c 49 61 3a 65 2c 6a 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 46 3d 5f 5f 63 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 63 2c 41 3a 64 2c 61 61 3a 65 7d 3d 4a 61 28 61 2c 62 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 4e 3a 33 2c 41 3a 64 2c 49 61 3a 65 2c 6a 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 0a 4e 61 3d 5f 5f 63 2e 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 63 2c 41 3a 64 2c 61 61 3a 65 7d 3d 4a 61 28 61 2c 62 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 4e 3a 34 2c 41 3a Data Ascii: .Ma=function(a,b){const {tag:c,A:d,aa:e}=Ja(a,b);return{tag:c,N:2,A:d,Ia:e,j:"object"}};F=__c.F=function(a,b){const {tag:c,A:d,aa:e}=Ja(a,b);return{tag:c,N:3,A:d,Ia:e,j:"object"}};Na=__c.Na=function(a,b){const {tag:c,A:d,aa:e}=Ja(a,b);return{tag:c,N:4,A:
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 61 6b 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 3d 3d 70 7c 7c 21 54 61 28 70 2c 67 2e 6a 29 29 74 68 72 6f 77 20 56 61 28 7b 4f 3a 6b 2c 6f 61 3a 6d 7d 2c 70 2c 67 2e 6a 2c 66 29 3b 66 2e 70 75 73 68 28 6e 29 3b 68 5b 74 5d 3d 64 2e 53 63 28 70 2c 76 2c 66 29 3b 66 2e 70 6f 70 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 76 61 72 20 71 3d 0a 76 2e 76 64 3b 6e 3d 76 2e 4c 65 3b 69 66 28 6e 75 6c 6c 3d 3d 70 26 26 67 2e 43 69 29 7b 68 5b 74 5d 3d 67 2e 76 61 6c 75 65 3b 62 72 65 61 6b 7d 69 66 28 70 3d 3d 3d 71 29 7b 68 5b 74 5d 3d 67 2e 76 61 6c 75 65 3b 62 72 65 61 6b 7d 69 66 28 6e 75 6c 6c 21 3d 6e 26 26 70 3d 3d 3d 6e 29 7b 68 5b 74 5d 3d 67 2e 76 61 6c 75 65 3b 62 72 65 61 6b 7d 65 3d 71 3b 68 3d 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ak}else if(null==p\|\|!Ta(p,g.j))throw Va({O:k,oa:m},p,g.j,f);f.push(n);h[t]=d.Sc(p,v,f);f.pop();break;case 1:var q=v.vd;n=v.Le;if(null==p&&g.Ci){h[t]=g.value;break}if(p===q){h[t]=g.value;break}if(null!=n&&p===n){h[t]=g.value;break}e=q;h=n;throw new TypeEr
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6b 3f 66 2e 64 65 66 61 75 6c 74 3a 6b 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 74 68 69 73 5b 68 5d 3d 6b 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6b 3f 5b 5d 3a 6b 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6b 3f 6e 65 77 20 4d 61 70 3a 6b 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 75 28 66 29 3b 7d 7d 7d 7d 64 2e 69 6e 69 74 3d 63 3b 64 2e 75 63 3d 62 2e 47 64 3f 28 65 2c 66 29 3d 3e 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 55 6e 70 72 6f 64 75 63 69 62 6c 65 20 6f 6e 65 6f 66 20 63 61 73 65 20 24 7b 58 61 28 66 29 7d 60 29 3b 7d 3a 28 65 2c 66 29 3d 3e 7b 69 66 28 6e 75 6c 6c Data Ascii: is[h]=null==k?f.default:k;break;case 3:this[h]=k;break;case 4:this[h]=null==k?[]:k;break;case 5:this[h]=null==k?new Map:k;break;default:throw new u(f);}}}}d.init=c;d.uc=b.Gd?(e,f)=>{throw new TypeError(`Unproducible oneof case ${Xa(f)}`);}:(e,f)=>{if(null
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 7d 60 29 3b 66 2e 70 75 73 68 28 60 24 7b 71 7d 5b 22 24 7b 72 7d 22 5d 60 29 3b 6d 3d 64 2e 79 64 28 76 2c 70 2c 66 29 3b 66 2e 70 6f 70 28 29 3b 69 66 28 21 54 61 28 6d 2c 67 2e 6a 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 24 7b 67 2e 6a 7d 20 6d 61 70 20 76 61 6c 75 65 20 66 6f 72 20 6d 61 70 20 6b 65 79 20 22 24 7b 72 7d 22 2c 20 66 6f 75 6e 64 3a 20 24 7b 5a 61 28 6d 29 7d 20 24 7b 58 61 28 5b 2e 2e 2e 66 2c 71 5d 29 7d 60 29 3b 6b 5b 72 5d 3d 6d 7d 68 5b 71 5d 3d 6b 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 75 28 67 29 3b 7d 7d 72 65 74 75 72 6e 20 68 7d 3b 72 65 74 75 72 6e 20 64 7d 3b 0a 62 62 3d 5f 5f 63 2e 62 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 Data Ascii: }`);f.push(`${q}["${r}"]`);m=d.yd(v,p,f);f.pop();if(!Ta(m,g.j))throw new TypeError(`Expected ${g.j} map value for map key "${r}", found: ${Za(m)} ${Xa([...f,q])}`);k[r]=m}h[q]=k;break;default:throw new u(g);}}return h};return d};bb=__c.bb=function(a,b){v
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 3a 6b 2c 45 69 3a 6d 2c 42 69 3a 6e 7d 3d 64 28 29 3b 76 61 72 20 70 3d 6d 2e 6f 61 3b 6c 65 74 20 71 3d 67 5b 6d 2e 4f 5d 3b 6e 75 6c 6c 3d 3d 71 26 26 70 26 26 28 71 3d 67 5b 70 5d 29 3b 69 66 28 6e 75 6c 6c 3d 3d 71 26 26 6e 29 72 65 74 75 72 6e 20 6e 2e 73 62 28 67 2c 68 29 3b 70 3d 6b 2e 67 65 74 28 71 29 3b 69 66 28 21 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 55 6e 6b 6e 6f 77 6e 20 6f 6e 65 6f 66 20 73 65 72 69 61 6c 69 7a 65 64 20 63 61 73 65 3a 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 71 29 7d 20 24 7b 58 61 28 68 29 7d 60 29 3b 72 65 74 75 72 6e 20 70 2e 73 62 28 67 2c 68 29 7d 3b 72 65 74 75 72 6e 7b 69 6e 69 74 3a 64 2c 58 3a 67 3d 3e 65 28 67 2c 5b 5d 29 2c 75 63 3a 65 2c 4d 3a 67 3d 3e 66 28 67 2c 5b Data Ascii: :k,Ei:m,Bi:n}=d();var p=m.oa;let q=g[m.O];null==q&&p&&(q=g[p]);if(null==q&&n)return n.sb(g,h);p=k.get(q);if(!p)throw new TypeError(`Unknown oneof serialized case: ${JSON.stringify(q)} ${Xa(h)}`);return p.sb(g,h)};return{init:d,X:g=>e(g,[]),uc:e,M:g=>f(g,[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	104.16.79.73	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:23 UTC	614	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:23 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:23 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8d84eb1f78f36c3c-DFW
2024-10-25 20:22:23 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-10-25 20:22:23 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:24 UTC	623	OUT	GET /web/205dddee09e475f6.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:24 UTC	1190	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:24 GMT Content-Type: text/javascript Content-Length: 11132 Connection: close CF-Ray: 8d84eb24efc16b2f-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 66677 Cache-Control: public, max-age=31556926 ETag: "870f2226fad953c4977cd23934d57233" Expires: Sun, 26 Oct 2025 02:11:10 GMT Last-Modified: Fri, 25 Oct 2024 01:35:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: S30Rhbc9gkF3XoMDIm1J3d+g7RxmUCWLTaR9ktgwBXCwEj/FW5C+84aOftr6q3nVAyEPSBOCtjw= x-amz-replication-status: COMPLETED x-amz-request-id: X4JPZSXX4JF9VXYJ x-amz-server-side-encryption: AES256 x-amz-version-id: DlunCOP2zt8JmXQm7CPLkrSCkIaH_w.O X-Content-Type-Options: nosniff
2024-10-25 20:22:24 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 41 72 7a 68 52 37 36 4e 50 49 78 34 7a 5a 53 42 74 7a 36 67 67 46 6c 61 62 65 36 30 79 39 32 38 56 53 59 51 31 62 44 52 4a 56 7a 48 41 56 65 4d 4b 4e 46 44 79 57 58 4c 58 75 36 46 53 6a 69 45 6c 37 41 73 78 71 4a 74 6a 74 79 78 72 35 25 32 42 47 64 71 47 5a 35 69 65 38 6c 51 6e 6c 48 4e 72 42 6c 77 6b 34 25 32 46 6a 31 58 76 4b 76 77 36 76 66 25 32 42 70 34 38 45 78 57 31 6b 47 47 50 32 6b 57 6d 4f 69 54 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ArzhR76NPIx4zZSBtz6ggFlabe60y928VSYQ1bDRJVzHAVeMKNFDyWXLXu6FSjiEl7AsxqJtjtyxr5%2BGdqGZ5ie8lQnlHNrBlwk4%2Fj1XvKvw6vf%2Bp48ExW1kGGP2kWmOiT4%3D"}],"group":"cf-nel","max_age":604800
2024-10-25 20:22:24 UTC	1198	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 72 2c 6e 2c 6f 2c 73 3d 7b 7d 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 69 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 73 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 61 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 73 2c 65 3d 5b 5d 2c 61 2e 4f 3d 28 74 2c 72 2c 6e 2c 6f 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 73 3d 31 2f 30 3b 66 6f 72 28 66 3d 30 3b 66 Data Ascii: (()=>{"use strict";var e,t,r,n,o,s={},i={};function a(e){var t=i[e];if(void 0!==t)return t.exports;var r=i[e]={id:e,loaded:!1,exports:{}};return s[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=s,e=[],a.O=(t,r,n,o)=>{if(!r){var s=1/0;for(f=0;f
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 2e 6b 65 79 73 28 61 2e 66 29 2e 72 65 64 75 63 65 28 28 28 74 2c 72 29 3d 3e 28 61 2e 66 5b 72 5d 28 65 2c 74 29 2c 74 29 29 2c 5b 5d 29 29 2c 61 2e 75 3d 65 3d 3e 7b 69 66 28 38 36 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 38 34 63 61 34 35 34 61 34 39 37 33 36 30 32 2e 6a 73 22 3b 69 66 28 34 30 34 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 30 37 62 35 66 31 33 32 32 34 35 31 65 31 31 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 31 37 36 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 33 62 35 64 31 65 34 38 35 39 31 62 64 31 38 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 32 36 38 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 64 61 34 65 32 36 66 35 37 36 63 62 30 62 32 2e 6a 73 22 3b 69 66 28 39 37 33 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 61 63 31 30 36 35 Data Ascii: .keys(a.f).reduce(((t,r)=>(a.f[r](e,t),t)),[])),a.u=e=>{if(869===e)return"e84ca454a4973602.js";if(4043===e)return"c07b5f1322451e11.vendor.js";if(1761===e)return"63b5d1e48591bd18.vendor.js";if(2689===e)return"6da4e26f576cb0b2.js";if(9739===e)return"eac1065
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 3d 3e 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 45 53 20 4d 6f 64 75 6c 65 73 20 6d 61 79 20 6e 6f 74 20 61 73 73 69 67 6e 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 6f 72 20 65 78 70 6f 72 74 73 2e 2a 2c 20 55 73 65 20 45 53 4d 20 65 78 70 6f 72 74 20 73 79 6e 74 61 78 2c 20 69 6e 73 74 65 61 64 3a 20 22 2b 65 2e 69 64 29 7d 7d 29 2c 65 7d 2c 61 2e 6f 3d 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 2c 6e 3d 7b 7d 2c 6f 3d 22 40 63 61 6e 76 61 2f 77 65 62 3a 22 2c 61 2e 6c 3d 28 65 2c 74 2c 72 2c 73 29 3d 3e 7b 69 66 28 21 6e 5b 65 5d 29 7b 76 61 72 20 69 2c 6c 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 66 6f 72 28 76 61 72 20 63 3d 64 6f Data Ascii: =>{throw new Error("ES Modules may not assign module.exports or exports.*, Use ESM export syntax, instead: "+e.id)}}),e},a.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),n={},o="@canva/web:",a.l=(e,t,r,s)=>{if(!n[e]){var i,l;if(void 0!==r)for(var c=do
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 68 75 6e 6b 73 5f 5f 29 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 2c 6f 2c 73 2c 69 2c 61 2c 6c 29 7b 63 6f 6e 73 74 20 63 3d 65 2e 6c 3b 6c 65 74 20 66 3d 5b 5d 2c 75 3d 5b 5d 3b 63 6f 6e 73 74 20 64 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 45 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 6c 69 6e 6b 5b 72 65 6c 3d 22 70 72 65 66 65 74 63 68 22 5d 5b 68 72 65 66 5d 27 29 29 7b 63 6f 6e 73 74 20 65 3d 45 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 26 26 64 2e 70 75 73 68 28 65 29 7d 6c 65 74 20 68 3d 65 3d 3e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 2c 69 29 7b Data Ascii: hunks__)!function(e,t,r,n,o,s,i,a,l){const c=e.l;let f=[],u=[];const d=[];for(const E of document.head.querySelectorAll('link[rel="prefetch"][href]')){const e=E.getAttribute("href");e&&d.push(e)}let h=e=>document.head.appendChild(e);e.l=function(e,t,o,i){
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 64 28 6e 29 7d 6c 65 74 20 62 3d 30 2c 76 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 72 2e 6f 6e 65 72 72 6f 72 3d 65 3d 3e 74 28 65 29 2c 72 2e 68 72 65 66 3d 65 2c 72 2e 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 2c 68 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 74 20 74 3d 6f 28 29 2c 72 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 72 3f 69 5b 72 5d 7c 7c 30 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 63 6f 6e 73 74 20 65 3d 6f 28 29 2c 74 3d 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 Data Ascii: d(n)}let b=0,v=0;function y(e,t){const r=document.createElement("link");r.onload=r.onerror=e=>t(e),r.href=e,r.rel="stylesheet",h(r)}function _(e){const t=o(),r=e.substring(t.length);return r?i[r]\|\|0:0}function j(){const e=o(),t=new URL(window.location.hre
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 22 2b 22 29 7d 60 2c 28 74 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 7b 63 61 6c 6c 62 61 63 6b 3a 72 2c 73 72 63 3a 6e 7d 6f 66 20 65 29 72 28 7b 74 79 70 65 3a 74 2e 74 79 70 65 2c 74 61 72 67 65 74 3a 7b 73 72 63 3a 6e 2c 68 72 65 66 3a 6e 7d 7d 29 7d 29 29 3b 65 6c 73 65 20 65 5b 30 5d 2e 6f 72 69 67 69 6e 61 6c 4c 6f 61 64 28 29 7d 7d 28 61 2c 31 32 65 34 2c 73 65 6c 66 2e 5f 5f 73 79 6e 63 5f 62 61 74 63 68 5f 63 68 75 6e 6b 73 5f 5f 2c 34 30 2c 28 28 29 3d 3e 61 2e 70 29 2c 31 30 34 38 35 37 36 30 2c 7b 22 6c 72 78 6c 63 76 2e 34 30 63 64 64 62 30 66 61 30 64 34 64 66 61 64 2e 6c 74 72 2e 63 73 73 22 3a 31 36 38 36 36 31 2c 22 6c 72 78 6c 63 76 2e 36 66 32 35 32 63 38 39 63 32 66 37 31 66 35 37 2e 6a 73 22 3a 31 36 33 33 39 34 38 2c 22 6c 72 78 6c 63 76 Data Ascii: "+")}`,(t=>{for(const{callback:r,src:n}of e)r({type:t.type,target:{src:n,href:n}})}));else e[0].originalLoad()}}(a,12e4,self.__sync_batch_chunks__,40,(()=>a.p),10485760,{"lrxlcv.40cddb0fa0d4dfad.ltr.css":168661,"lrxlcv.6f252c89c2f71f57.js":1633948,"lrxlcv
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 34 33 22 3a 5b 5d 2c 22 34 34 35 30 22 3a 5b 5d 2c 22 35 31 33 36 22 3a 5b 5d 2c 22 35 34 33 36 22 3a 5b 5d 2c 22 38 32 30 32 22 3a 5b 5d 2c 22 39 37 33 39 22 3a 5b 32 36 38 39 5d 7d 27 29 2c 72 3d 28 65 2c 6e 2c 6f 29 3d 3e 7b 69 66 28 21 6f 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 6f 2e 61 64 64 28 65 29 2c 74 5b 65 5d 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 72 28 65 2c 6e 2c 6f 29 29 29 2c 6e 2e 70 75 73 68 28 65 29 2c 6e 7d 3b 61 2e 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 65 5b 74 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 61 28 74 29 29 3b 63 6f 6e 73 74 20 6f 3d 72 28 6e 2c 5b 5d 2c 6e 65 77 20 53 65 74 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e Data Ascii: 43":[],"4450":[],"5136":[],"5436":[],"8202":[],"9739":[2689]}'),r=(e,n,o)=>{if(!o.has(e))return o.add(e),t[e].forEach((e=>r(e,n,o))),n.push(e),n};a.me=function(t){const n=e[t];if(null==n)return Promise.resolve(a(t));const o=r(n,[],new Set);return Promise.
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 6f 3d 3d 3d 74 29 29 72 65 74 75 72 6e 20 69 7d 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 74 79 6c 65 22 29 3b 66 6f 72 28 6e 3d 30 3b 6e 3c 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3b 69 66 28 28 6f 3d 28 69 3d 73 5b 6e 5d 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 68 72 65 66 22 29 29 3d 3d 3d 65 7c 7c 6f 3d 3d 3d 74 29 72 65 74 75 72 6e 20 69 7d 7d 29 28 6e 2c 6f 29 29 72 65 74 75 72 6e 20 74 28 29 3b 28 28 65 2c 74 2c 72 2c 6e 2c 6f 29 3d 3e 7b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 73 2e 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 2c 73 2e 74 79 70 65 3d 22 74 65 78 74 Data Ascii: o===t))return i}var s=document.getElementsByTagName("style");for(n=0;n<s.length;n++){var i;if((o=(i=s[n]).getAttribute("data-href"))===e\|\|o===t)return i}})(n,o))return t();((e,t,r,n,o)=>{var s=document.createElement("link");s.rel="stylesheet",s.type="text
2024-10-25 20:22:24 UTC	351	IN	Data Raw: 28 28 74 3d 3e 30 21 3d 3d 65 5b 74 5d 29 29 29 7b 66 6f 72 28 6e 20 69 6e 20 69 29 69 66 28 61 2e 6f 28 69 2c 6e 29 29 61 2e 6d 5b 6e 5d 3d 69 5b 6e 5d 3b 69 66 28 6c 29 76 61 72 20 66 3d 6c 28 61 29 7d 69 66 28 74 29 74 28 72 29 3b 66 6f 72 28 3b 63 3c 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 69 66 28 6f 3d 73 5b 63 5d 2c 61 2e 6f 28 65 2c 6f 29 26 26 65 5b 6f 5d 29 65 5b 6f 5d 5b 30 5d 28 29 3b 65 5b 6f 5d 3d 30 7d 72 65 74 75 72 6e 20 61 2e 4f 28 66 29 7d 2c 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 3b 72 2e 66 6f 72 45 61 63 68 28 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 74 2e 62 69 Data Ascii: ((t=>0!==e[t]))){for(n in i)if(a.o(i,n))a.m[n]=i[n];if(l)var f=l(a)}if(t)t(r);for(;c<s.length;c++){if(o=s[c],a.o(e,o)&&e[o])e[o][0]();e[o]=0}return a.O(f)},r=self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[];r.forEach(t.bind(null,0)),r.push=t.bi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:24 UTC	623	OUT	GET /web/143b3cccb450cc5d.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:24 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:24 GMT Content-Type: text/javascript Content-Length: 2287 Connection: close CF-Ray: 8d84eb250d4a6c33-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 78549 Cache-Control: public, max-age=31556926 ETag: "d631573fb1805fda9c7668b7f1534161" Expires: Sun, 26 Oct 2025 02:11:10 GMT Last-Modified: Tue, 10 Sep 2024 01:29:24 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 11 Sep 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: +3XiBZ+p77/xodyOE7+X5zWUfTLltzlUa5bVcckGiYUdrfdhfc7kWco1IRIy2wCpHAX4FDXU14o= x-amz-replication-status: COMPLETED x-amz-request-id: A6T9EFVB1A5CZNT0 x-amz-server-side-encryption: AES256 x-amz-version-id: aBX5COE5i8SgmPwRNNlVns3uDpEXsql. X-Content-Type-Options: nosniff
2024-10-25 20:22:24 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 30 68 68 4a 30 38 4b 75 74 31 6d 44 75 33 38 62 46 74 4e 70 65 59 38 51 50 71 30 58 65 44 37 77 71 69 35 6d 47 77 4c 46 72 68 6a 33 49 74 75 50 30 76 56 66 41 6e 64 78 72 44 76 53 74 4f 41 72 6d 45 37 63 46 56 66 42 64 79 64 63 25 32 46 49 6f 53 6f 7a 56 6a 74 4c 25 32 46 67 34 63 50 58 32 56 62 78 6f 48 48 78 41 59 38 72 45 43 55 54 4b 68 63 38 31 45 71 77 64 6c 32 35 53 79 50 55 4c 61 6b 6a 5a 66 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0hhJ08Kut1mDu38bFtNpeY8QPq0XeD7wqi5mGwLFrhj3ItuP0vVfAndxrDvStOArmE7cFVfBdydc%2FIoSozVjtL%2Fg4cPX2VbxoHHxAY8rECUTKhc81Eqwdl25SyPULakjZfU%3D"}],"group":"cf-nel","max_age":604800}
2024-10-25 20:22:24 UTC	1369	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 4c 45 34 4d 65 51 5c 22 3a 5c 22 45 73 63 5c 22 2c 5c 22 4d 35 30 6b 42 41 5c 22 3a 5c 22 50 72 65 76 69 6f 75 73 5c 22 2c 5c 22 79 4c 57 69 5a 41 5c 22 3a 5c 22 43 74 72 6c 5c 22 2c 5c 22 50 52 66 4e 7a 51 5c 22 3a 5c 22 54 68 65 20 70 61 67 65 20 79 6f 75 20 69 6e 74 65 6e 64 20 74 6f 20 76 69 73 69 74 20 3c 73 74 72 6f 6e 67 3e 28 7b 30 7d 29 3c 2f 73 74 72 6f 6e 67 3e 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 20 6f 72 20 69 73 20 69 6e 76 61 6c 69 64 2e 5c 22 2c 5c 22 6d 7a 34 53 34 51 5c 22 3a 5c 22 49 66 20 74 68 69 73 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 77 72 6f 6e 67 6c 79 20 66 6c 61 67 67 65 64 Data Ascii: (function() { const messages = JSON.parse("{\"LE4MeQ\":\"Esc\",\"M50kBA\":\"Previous\",\"yLWiZA\":\"Ctrl\",\"PRfNzQ\":\"The page you intend to visit <strong>({0})</strong> does not exist or is invalid.\",\"mz4S4Q\":\"If this page has been wrongly flagged
2024-10-25 20:22:24 UTC	918	IN	Data Raw: 6e e2 80 99 74 20 6f 70 65 6e 20 43 61 6e 76 61 20 72 69 67 68 74 20 6e 6f 77 2e 20 43 6c 6f 73 65 20 43 61 6e 76 61 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 5c 22 2c 5c 22 64 6d 57 7a 44 51 5c 22 3a 5c 22 59 6f 75 20 61 72 65 20 61 62 6f 75 74 20 74 6f 20 6c 65 61 76 65 20 43 61 6e 76 61 5c 22 2c 5c 22 50 38 77 50 5a 51 5c 22 3a 5c 22 53 70 61 63 65 5c 22 2c 5c 22 4d 66 48 36 49 77 5c 22 3a 5c 22 53 74 61 72 74 20 6f 66 20 64 69 61 6c 6f 67 5c 22 2c 5c 22 45 4b 76 55 6e 77 5c 22 3a 5c 22 54 68 61 6e 6b 73 20 66 6f 72 20 72 65 70 6f 72 74 69 6e 67 20 7b 30 7d 2e 20 57 65 20 61 70 70 72 65 63 69 61 74 65 20 79 6f 75 72 20 65 66 66 6f 72 74 73 20 74 6f 20 68 65 6c 70 20 6b 65 65 70 20 6f 75 72 20 63 6f 6d 6d 75 6e 69 74 79 20 73 61 66 65 2e 20 59 6f 75 Data Ascii: nt open Canva right now. Close Canva and try again.\",\"dmWzDQ\":\"You are about to leave Canva\",\"P8wPZQ\":\"Space\",\"MfH6Iw\":\"Start of dialog\",\"EKvUnw\":\"Thanks for reporting {0}. We appreciate your efforts to help keep our community safe. You

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	104.16.79.73	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:24 UTC	413	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:25 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:24 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8d84eb25cf4fe98f-DFW
2024-10-25 20:22:25 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-10-25 20:22:25 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-10-25 20:22:25 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-10-25 20:22:25 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-10-25 20:22:25 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-10-25 20:22:25 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-10-25 20:22:25 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-10-25 20:22:25 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-10-25 20:22:25 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-10-25 20:22:25 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49738	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:25 UTC	1319	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; CPA=cnvanoQwrdsh8z5xPgBoIEjqVxp9YHVsLUTp5t2dBEL34xeOhbaDFzDpBvlpCIp60QROjAe_N3JiGEm1XKaXqRPyeJ76evORElpePaUHKHXPztFKQj93_fPugElwRBqkDR8w_LKiNhKZFi_UBMahiy3MbV0YLRhGbbkk4S4kQBgU74vmhK05q-2D5KL8RQI7ZLn4OzWfcDGHjfQ0NC57wEXNMuuMnjK0SVeehw7uiyhy-a-pecFsRaz9ykaaPUQ6MdghG1-n8Ljc47wccYZ9sa2bstJ9m8GL08Dd5wT3uGY2Soap-lxcxqCX1FiCNaTaprbD6G2AFq_ey1ScLDX4Rbe4AyIp1oaKAw70gy2uBKN4YskKu9fSy7v6Qj2AGgj8Spss8E80nSya32fAvqFbDZImxdlxCRFzU8M3GKqx9_StVBDiF2M5limqSFofY5Sla-I7te8l9BQ9d78374b; CCK=R2oerGQIqdEdKxGnExUctg; __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:25 UTC	776	IN	HTTP/1.1 302 Found Date: Fri, 25 Oct 2024 20:22:25 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/e1a56f38220d/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1LX94Lu4lakvDVk9Z4DaEd6VeVubNgWMG%2B5Yy1HjdoQ98%2FM9mkX7JrdB2kGq8ifVfcYLmEND7bhRKyBR7%2BV8F36AkzTtuS9YX17ZcPrFuA4Pt5w94l7rJZPysQ%2BHQnY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d84eb289f406b9b-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	34.120.195.249	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:25 UTC	740	OUT	POST /api/5403944/envelope/?sentry_key=c50fa9f3bfcc4ee3bd4a5eca6add3a1b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive Content-Length: 465 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:25 UTC	465	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 30 2d 32 35 54 32 30 3a 32 32 3a 32 33 2e 31 33 30 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 36 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 63 33 39 63 32 36 34 38 31 34 31 34 34 37 32 61 39 35 62 63 35 35 32 62 64 30 63 32 64 33 63 39 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 31 30 2d 32 35 54 32 30 3a 32 32 3a 32 33 2e 31 32 39 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 32 35 54 32 30 3a 32 32 3a 32 33 2e 31 32 39 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-10-25T20:22:23.130Z","sdk":{"name":"sentry.javascript.browser","version":"7.16.0"}}{"type":"session"}{"sid":"c39c26481414472a95bc552bd0c2d3c9","init":true,"started":"2024-10-25T20:22:23.129Z","timestamp":"2024-10-25T20:22:23.129Z","stat
2024-10-25 20:22:25 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 20:22:25 GMT Content-Type: application/json Content-Length: 2 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-25 20:22:25 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:25 UTC	623	OUT	GET /static/lib/sentry/7.16.0.min.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:26 UTC	1358	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d84eb2c7ec0315a-DFW CF-Cache-Status: HIT Age: 183184 Cache-Control: public, max-age=31556926 ETag: W/"91258797204803263e4c46f8400f1bda" Expires: Sun, 26 Oct 2025 02:11:12 GMT Last-Modified: Mon, 14 Oct 2024 22:43:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-id-2: n/tgAv7nhdMK8+ZDRGJEaCxpKxVhLFJZMQK/5RvJNADTgttBr37iBiAAR/bcmMUlTegrHaZW7D4= x-amz-meta-vary: Origin x-amz-replication-status: COMPLETED x-amz-request-id: 4BC7Q2FFFT5VZFJY x-amz-server-side-encryption: AES256 x-amz-version-id: tozEOUZEBcqjRpGz85aK0Lg42bZme1w8 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gibZCf7aIASjz%2FBk067mubTyURdOkPluzicTcwORVMxXq2sDoAngEaTd%2BVlfTT%2BKDYA%2FunhW7M4S1f16b4ds28HLPOw7MxrOl2qZy7%2BD%2FphuNEhhRFPXyVj%2FMysWxOtWLhQ%3D"}],"group":"cf-nel","max_age":604800}
2024-10-25 20:22:26 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 37 2e 31 36 2e 30 20 28 35 33 38 36 63 65 37 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 73 77 69 74 63 68 28 6e 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e Data Ascii: 7ffa/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 2c 73 2c 63 2c 75 2c 61 3b 69 66 28 21 65 7c 7c 21 65 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 72 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 66 3d 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 29 29 2e 6d 61 70 28 28 74 3d 3e 5b 74 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 5d 29 29 3a 6e 75 6c 6c 3b 69 66 28 66 26 26 66 2e 6c 65 6e 67 74 68 29 66 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 72 2e 70 75 73 68 28 60 5b 24 7b 74 5b 30 5d 7d 3d 22 24 7b 74 5b 31 5d 7d 22 5d 60 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 65 2e 69 64 26 26 72 2e 70 75 73 68 28 60 23 24 7b 65 2e 69 64 7d 60 29 2c 69 Data Ascii: ,s,c,u,a;if(!e\|\|!e.tagName)return"";r.push(e.tagName.toLowerCase());const f=n&&n.length?n.filter((t=>e.getAttribute(t))).map((t=>[t,e.getAttribute(t)])):null;if(f&&f.length)f.forEach((t=>{r.push(`[${t[0]}="${t[1]}"]`)}));else if(e.id&&r.push(`#${e.id}`),i
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 6f 2c 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 75 62 6c 69 63 4b 65 79 3a 72 7d 29 7d 28 74 29 3a 77 28 74 29 7d 63 6f 6e 73 74 20 53 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 24 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 30 3d 3d 3d 6e 7c 7c 74 2e 6c 65 6e 67 74 68 3c 3d 6e 3f 74 3a 60 24 7b 74 2e 73 75 62 73 74 72 28 30 2c 6e 29 7d 2e 2e 2e 60 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 6e 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b Data Ascii: o,protocol:e,publicKey:r})}(t):w(t)}const S=["debug","info","warn","error","log","assert","trace"];function $(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?t:`${t.substr(0,n)}...`}function x(t,n){if(!Array.isArray(t))return"";const e=[];for(let n=0;
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 52 28 74 29 29 3b 69 66 28 65 2e 73 6f 72 74 28 29 2c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 68 61 73 20 6e 6f 20 6b 65 79 73 5d 22 3b 69 66 28 65 5b 30 5d 2e 6c 65 6e 67 74 68 3e 3d 6e 29 72 65 74 75 72 6e 20 24 28 65 5b 30 5d 2c 6e 29 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 3b 74 3e 30 3b 74 2d 2d 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 73 6c 69 63 65 28 30 2c 74 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 69 66 28 21 28 72 2e 6c 65 6e 67 74 68 3e 6e 29 29 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 72 3a 24 28 72 2c 6e 29 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 41 28 74 2c 6e 65 77 20 Data Ascii: onst e=Object.keys(R(t));if(e.sort(),!e.length)return"[object has no keys]";if(e[0].length>=n)return $(e[0],n);for(let t=e.length;t>0;t--){const r=e.slice(0,t).join(", ");if(!(r.length>n))return t===e.length?r:$(r,n)}return""}function N(t){return A(t,new
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 75 72 6e 20 6e 65 77 20 48 65 61 64 65 72 73 2c 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 6e 65 77 20 52 65 73 70 6f 6e 73 65 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 2f 5e 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 5c 28 5c 29 5c 73 2b 5c 7b 5c 73 2b 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 5c 73 2b 5c 7d 24 2f 2e 74 65 73 74 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 6f 6e 73 74 20 46 3d 7b 7d 2c 42 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 69 66 28 21 42 5b 74 5d 29 73 77 69 74 63 68 28 42 5b 74 5d 3d 21 30 2c 74 29 7b 63 61 73 65 22 63 6f 6e 73 6f 6c 65 22 3a 21 Data Ascii: urn new Headers,new Request("http://www.example.com"),new Response,!0}catch(t){return!1}}function H(t){return t&&/^function fetch\s+\{\s+\[native code\]\s+\}$/.test(t.toString())}const F={},B={};function X(t){if(!B[t])switch(B[t]=!0,t){case"console":!
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 65 2c 72 29 7d 7d 29 29 29 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 68 72 22 3a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 69 6e 20 79 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 3b 6b 28 74 2c 22 6f 70 65 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2c 72 3d 6e 5b 31 5d 2c 69 3d 65 2e 5f 5f 73 65 6e 74 72 79 5f 78 68 Data Ascii: try_instrumentation_handlers__)}catch(t){}return t.call(this,n,e,r)}})))}))}();break;case"xhr":!function(){if(!("XMLHttpRequest"in y))return;const t=XMLHttpRequest.prototype;k(t,"open",(function(t){return function(...n){const e=this,r=n[1],i=e.__sentry_xh
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 44 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 4a 28 6e 29 2c 75 72 6c 3a 4b 28 6e 29 7d 2c 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 72 65 74 75 72 6e 20 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 7d 29 2c 74 2e 61 70 70 6c 79 28 79 2c 6e 29 2e 74 68 65 6e 28 28 74 3d 3e 28 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 72 65 73 70 6f 6e 73 65 3a 74 7d 29 2c 74 29 29 2c 28 74 3d 3e 7b 74 68 72 6f 77 20 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 65 72 72 6f 72 3a 74 7d 29 2c 74 7d 29 29 7d 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 69 73 74 6f 72 79 22 3a 21 66 Data Ascii: Data:{method:J(n),url:K(n)},startTimestamp:Date.now()};return W("fetch",{...e}),t.apply(y,n).then((t=>(W("fetch",{...e,endTimestamp:Date.now(),response:t}),t)),(t=>{throw W("fetch",{...e,endTimestamp:Date.now(),error:t}),t}))}}))}();break;case"history":!f
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 47 45 54 22 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 3d 5b 5d 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 30 5d 3f 74 5b 30 5d 3a 22 52 65 71 75 65 73 74 22 69 6e 20 79 26 26 68 28 74 5b 30 5d 2c 52 65 71 75 65 73 74 29 3f 74 5b 30 5d 2e 75 72 6c 3a 53 74 72 69 6e 67 28 74 5b 30 5d 29 7d 6c 65 74 20 47 3b 6c 65 74 20 56 2c 51 3b 66 75 6e 63 74 69 6f 6e 20 59 28 74 2c 6e 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 3d 3e 7b 69 66 28 21 65 7c 7c 51 3d 3d 3d 65 29 72 65 74 75 72 6e 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6b 65 79 70 72 65 73 73 22 21 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 74 2e 74 61 72 67 65 74 3b 69 66 28 21 6e 7c 7c 21 6e 2e 74 61 67 4e 61 Data Ascii: GET"}function K(t=[]){return"string"==typeof t[0]?t[0]:"Request"in y&&h(t[0],Request)?t[0].url:String(t[0])}let G;let V,Q;function Y(t,n=!1){return e=>{if(!e\|\|Q===e)return;if(function(t){if("keypress"!==t.type)return!1;try{const n=t.target;if(!n\|\|!n.tagNa
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 65 3d 65 74 28 74 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6d 65 63 68 61 6e 69 73 6d 3b 69 66 28 65 2e 6d 65 63 68 61 6e 69 73 6d 3d 7b 74 79 70 65 3a 22 67 65 6e 65 72 69 63 22 2c 68 61 6e 64 6c 65 64 3a 21 30 2c 2e 2e 2e 72 2c 2e 2e 2e 6e 7d 2c 6e 26 26 22 64 61 74 61 22 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 74 3d 7b 2e 2e 2e 72 26 26 72 2e 64 61 74 61 2c 2e 2e 2e 6e 2e 64 61 74 61 7d 3b 65 2e 6d 65 63 68 61 6e 69 73 6d 2e 64 61 74 61 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 4f 28 74 2c 22 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 22 2c 21 30 29 7d 63 61 74 63 68 28 74 Data Ascii: e=et(t);if(!e)return;const r=e.mechanism;if(e.mechanism={type:"generic",handled:!0,...r,...n},n&&"data"in n){const t={...r&&r.data,...n.data};e.mechanism.data=t}}function ot(t){if(t&&t.__sentry_captured__)return!0;try{O(t,"__sentry_captured__",!0)}catch(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:25 UTC	1570	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1655 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; CPA=cnvanoQwrdsh8z5xPgBoIEjqVxp9YHVsLUTp5t2dBEL34xeOhbaDFzDpBvlpCIp60QROjAe_N3JiGEm1XKaXqRPyeJ76evORElpePaUHKHXPztFKQj93_fPugElwRBqkDR8w_LKiNhKZFi_UBMahiy3MbV0YLRhGbbkk4S4kQBgU74vmhK05q-2D5KL8RQI7ZLn4OzWfcDGHjfQ0NC57wEXNMuuMnjK0SVeehw7uiyhy-a-pecFsRaz9ykaaPUQ6MdghG1-n8Ljc47wccYZ9sa2bstJ9m8GL08Dd5wT3uGY2Soap-lxcxqCX1FiCNaTaprbD6G2AFq_ey1ScLDX4Rbe4AyIp1oaKAw70gy2uBKN4YskKu9fSy7v6Qj2AGgj8Spss8E80nSya32fAvqFbDZImxdlxCRFzU8M3GKqx9_StVBDiF2M5limqSFofY5Sla-I7te8l9BQ9d78374b; CCK=R2oerGQIqdEdKxGnExUctg; __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:25 UTC	1655	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 36 31 33 30 30 31 36 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 34 30 34 34 36 34 38 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 30 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 30 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 32 39 38 38 37 37 34 30 34 31 32 2e 31 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 30 32 34 2e 31 30 2e 34 22 2c 22 6a 73 22 3a 22 32 30 32 34 2e 36 2e 31 22 2c 22 74 69 6d 69 6e 67 Data Ascii: {"memory":{"totalJSHeapSize":6130016,"usedJSHeapSize":4044648,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":0,"firstContentfulPaint":0,"startTime":1729887740412.1,"versions":{"fl":"2024.10.4","js":"2024.6.1","timing
2024-10-25 20:22:26 UTC	370	IN	HTTP/1.1 204 No Content Date: Fri, 25 Oct 2024 20:22:26 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 8d84eb2c88cd4618-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	35.190.80.1	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:25 UTC	545	OUT	OPTIONS /report/v4?s=bac7nTFLeSwiHRrvUckC%2FEtvsS7Zx3AbrL3WxBUqgH3EN6r6WHvYh%2FdpTbYKahRi%2BQW3FCX0ss1%2Fco8FQ1ulmBaBRuiRcKMHwKg6oLsiryxfTNVrbdh5FNx4%2FiI6%2BrMI%2BBU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://static.canva.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:26 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 25 Oct 2024 20:22:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49759	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:26 UTC	851	OUT	GET /static/images/favicon-1.ico HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:26 UTC	1360	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:26 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 4414 Connection: close CF-Ray: 8d84eb2d4ef3144c-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 36664 Cache-Control: public, max-age=31556926 ETag: "a0c86da7fc37ea50e848c4733761d53e" Expires: Sun, 26 Oct 2025 02:11:12 GMT Last-Modified: Thu, 26 Sep 2024 23:42:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-id-2: qmu3uJIrITcBkPZN3RSh6KNHzdpLU8UCmnheU/729R4Vqvv6b0vAIElprWUjy17EBzhwaUtlF5dAgmBSrNX8MJi3cY706Gq5 x-amz-replication-status: COMPLETED x-amz-request-id: QHY2G6YRGMK0V2M3 x-amz-server-side-encryption: AES256 x-amz-version-id: REYKMVSvn4pQBvQM7t126sw17ADi9h4U X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BWvE8hNnqm87ib6YAPcLkvRMFa9SPKN2Xqw7na7TOOm%2BqHsWG5qmThfvhUa1DTUIdh8G0UDvgd7l9QZJOP%2Fd10eTrTIxYr2YVlNOLP99osbE6X2JlI%2FHbg6csd3rKxsNxAA%3D"}],"group":"cf-nel","max_age":604800}
2024-10-25 20:22:26 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-10-25 20:22:26 UTC	1286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 28 11 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 01 ff 40 80 04 00 00 00 00 00 00 00 00 f3 23 68 16 f9 21 67 5c fc 22 68 9d fa 21 69 c9 f8 23 6b e3 f7 24 6c fb f6 24 6e fb f5 24 6f e3 f2 25 71 c9 f2 25 72 9d f1 27 73 5b e8 23 74 16 00 00 00 00 00 00 00 00 ff 40 80 04 ff 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 55 55 03 00 00 00 00 00 00 00 00 f9 2c 5d 29 fa 2b 5f 9f fb 29 62 f2 ff 2a 6a ff ff 29 6c ff ff 27 6c ff ff 25 6c ff f8 24 6b ff f7 Data Ascii: (( @ @#h!g\"h!i#k$l$n$o%q%r's[#t@UU,])+_)b*j)l'l%l$k
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: e6 4d 28 ff e5 3c 00 ff f4 cb c8 ff ff ff ff ff e9 88 85 ff e3 3f 42 ff e4 53 5e ff e4 49 60 ff e5 43 65 ff e5 3d 6b ff e7 37 71 fa f6 36 7e ff e5 30 78 9f 00 00 00 00 dc 74 2e 16 e1 78 33 f2 e4 78 32 ff e2 75 32 fe e3 74 33 ff e4 73 33 ff e5 74 3d ff e4 5f 00 ff f8 e2 dc ff ff ff ff ff ff ff ff ff fa e7 e4 ff e5 58 00 ff e7 6d 45 ff e7 69 3e ff e6 67 3c ff e6 67 3d ff e5 66 3f ff e5 6a 48 ff e5 67 48 ff e1 35 00 ff f7 dd db ff fa ea ea ff e0 3e 27 ff e2 5b 59 ff e3 51 59 ff e3 4c 5f ff e3 46 64 ff e4 40 6a fe e7 3a 72 ff e6 35 75 f2 dc 2e 74 16 e0 81 2d 5b ed 89 30 ff de 80 2d fb e0 7f 2d ff e0 7d 2e ff e1 7d 33 ff e1 75 16 ff e5 8b 5e ff fe fa f9 ff ff fe fe ff ff ff ff ff ef b9 a9 ff e2 5d 00 ff e5 75 41 ff e4 6f 36 ff e4 6f 38 ff e4 6e 39 ff e3 6d 3a Data Ascii: M(<?BS^I`Ce=k7q6~0xt.x3x2u2t3s3t=_XmEi>g<g=f?jHgH5>'[YQYL_Fd@j:r5u.t-[0--}.}3u^]uAo6o8n9m:
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: bf 4e ff fd fc f9 ff ff ff ff ff ff ff ff ff dc ca 85 ff cd ae 00 ff d1 b2 26 ff d1 ae 0e ff d1 ac 12 ff d2 aa 1d ff d1 a4 00 ff d6 ad 4f ff fc f8 f5 ff ff ff ff ff ea d5 bb ff d0 8e 00 ff d5 97 36 ff d5 90 2a ff d6 8b 2f ff d7 85 33 ff d8 80 38 ff d8 7a 3c fb e8 7a 46 ff db 6f 45 5c d1 ae 0c 16 d0 b3 0e f2 d1 b7 0c ff cf b7 0a fe ce b8 09 ff ce b9 08 ff ce ba 05 ff cf bc 26 ff c9 b5 00 ff e6 de b3 ff ff ff ff ff ff ff ff ff f5 f1 e2 ff cc b4 00 ff cf b7 20 ff cf b4 16 ff cf b1 0d ff d0 af 0f ff d1 ae 28 ff ce a2 00 ff f1 e7 d6 ff ff ff ff ff f8 f3 ec ff d3 9d 1d ff d3 98 23 ff d4 94 29 ff d5 8f 2c ff d6 89 30 ff d7 85 34 fe da 7f 3a ff d9 78 3e f2 dc 74 46 16 00 00 00 00 cf b5 0b 9f dd c3 0b ff ce b9 09 fa ce ba 08 ff ce bb 07 ff cd bc 07 ff cd bd 0a ff Data Ascii: N&O6*/38z<zFoE\& (#),04:x>tF
2024-10-25 20:22:26 UTC	390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 01 bf bf 00 04 00 00 00 00 00 00 00 00 c5 b9 00 16 ca bf 03 5c cd c0 03 9d cc c0 04 c9 ce bf 04 e3 cd be 05 fb cd bd 06 fb ce bd 07 e3 ce ba 08 c9 ce b9 0a 9d cd b4 0b 5c d1 ae 0c 16 00 00 00 00 00 00 00 00 ff bf 00 04 ff ff 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49760	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:26 UTC	1337	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e1a56f38220d/main.js? HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; CPA=cnvanoQwrdsh8z5xPgBoIEjqVxp9YHVsLUTp5t2dBEL34xeOhbaDFzDpBvlpCIp60QROjAe_N3JiGEm1XKaXqRPyeJ76evORElpePaUHKHXPztFKQj93_fPugElwRBqkDR8w_LKiNhKZFi_UBMahiy3MbV0YLRhGbbkk4S4kQBgU74vmhK05q-2D5KL8RQI7ZLn4OzWfcDGHjfQ0NC57wEXNMuuMnjK0SVeehw7uiyhy-a-pecFsRaz9ykaaPUQ6MdghG1-n8Ljc47wccYZ9sa2bstJ9m8GL08Dd5wT3uGY2Soap-lxcxqCX1FiCNaTaprbD6G2AFq_ey1ScLDX4Rbe4AyIp1oaKAw70gy2uBKN4YskKu9fSy7v6Qj2AGgj8Spss8E80nSya32fAvqFbDZImxdlxCRFzU8M3GKqx9_StVBDiF2M5limqSFofY5Sla-I7te8l9BQ9d78374b; CCK=R2oerGQIqdEdKxGnExUctg; __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:26 UTC	728	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:26 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8052 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fwK31hP%2BnnbPeKwKulCMNi7NHMMQ%2FaCaR25RWMg9INK1nGI2A3NQnWkkXVyUS7zXZXu6n1vMyoedzZXEuJnd%2BIxUHa5THUU1P9%2BTU4qBC4FKQp%2F3%2Bwg%2BwL3AcPyrb8w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8d84eb2d59ec2e34-DFW
2024-10-25 20:22:26 UTC	641	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 68 2c 69 2c 6a 2c 6b 2c 6f 2c 73 2c 78 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 67 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 67 3d 70 61 72 73 65 49 6e 74 28 55 28 34 30 37 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 37 33 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 37 38 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 32 31 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 35 38 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 55 28 33 39 35 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 33 34 35 29 29 2f 37 29 2b 70 61 72 73 Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,o,s,x){V=b,function(d,e,U,f,g){for(U=b,f=d();!![];)try{if(g=parseInt(U(407))/1+-parseInt(U(373))/2+-parseInt(U(378))/3+-parseInt(U(321))/4+-parseInt(U(358))/5+parseInt(U(395))/6*(-parseInt(U(345))/7)+pars
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 61 30 28 33 35 37 29 5d 26 26 67 5b 61 30 28 33 31 33 29 5d 3f 67 5b 61 30 28 33 34 30 29 5d 5b 61 30 28 33 35 37 29 5d 28 6e 65 77 20 67 5b 28 61 30 28 33 31 33 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 31 2c 4f 29 7b 66 6f 72 28 61 31 3d 61 30 2c 4e 5b 61 31 28 33 32 39 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 31 28 33 35 35 29 5d 3b 4e 5b 4f 5d 3d 3d 3d 4e 5b 4f 2b 31 5d 3f 4e 5b 61 31 28 33 34 36 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 30 28 33 38 38 29 5d 5b 61 30 28 33 34 38 29 5d 28 49 29 2c 4a 3d 30 3b 4a 3c 48 5b 61 30 28 33 35 35 29 5d 3b 4b 3d 48 5b 4a 5d 2c 4c 3d 6d 28 67 2c 44 2c 4b 29 2c 49 28 Data Ascii: a0(357)]&&g[a0(313)]?g[a0(340)][a0(357)](new g[(a0(313))](H)):function(N,a1,O){for(a1=a0,N[a1(329)](),O=0;O<N[a1(355)];N[O]===N[O+1]?N[a1(346)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(388)][a0(348)](I),J=0;J<H[a0(355)];K=H[J],L=m(g,D,K),I(
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 4e 5b 61 36 28 33 39 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 4f 3c 3c 31 7c 54 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 36 28 33 39 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 36 28 33 30 33 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 4f 3c 3c 31 2e 38 7c 31 2e 36 38 26 54 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 36 28 33 39 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 4b 3d 3d 30 26 26 28 4b 3d 4d 61 74 68 5b 61 36 28 33 35 39 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 64 65 6c 65 74 65 20 49 Data Ascii: N[a6(398)](F(O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=0;G<M;O=O<<1\|T,P==E-1?(P=0,N[a6(398)](F(O)),O=0):P++,T=0,G++);for(T=J[a6(303)](0),G=0;16>G;O=O<<1.8\|1.68&T,P==E-1?(P=0,N[a6(398)](F(O)),O=0):P++,T>>=1,G++);}K--,K==0&&(K=Math[a6(359)](2,M),M++),delete I
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 61 74 68 5b 61 39 28 33 35 39 29 5d 28 32 2c 32 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 33 35 39 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 33 35 39 29 5d 28 32 2c 31 36 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4e 26 Data Ascii: ath[a9(359)](2,2),M=1;M!=R;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);switch(Q){case 0:for(Q=0,R=Math[a9(359)](2,8),M=1;M!=R;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);T=e(Q);break;case 1:for(Q=0,R=Math[a9(359)](2,16),M=1;R!=M;S=N&
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 75 72 6e 27 69 27 7d 72 65 74 75 72 6e 20 65 5b 58 28 33 34 30 29 5d 5b 58 28 33 30 39 29 5d 28 67 5b 44 5d 29 3f 27 61 27 3a 67 5b 44 5d 3d 3d 3d 65 5b 58 28 33 34 30 29 5d 3f 27 44 27 3a 21 30 3d 3d 3d 67 5b 44 5d 3f 27 54 27 3a 67 5b 44 5d 3d 3d 3d 21 31 3f 27 46 27 3a 28 45 3d 74 79 70 65 6f 66 20 67 5b 44 5d 2c 58 28 33 32 30 29 3d 3d 45 3f 6c 28 65 2c 67 5b 44 5d 29 3f 27 4e 27 3a 27 66 27 3a 6b 5b 45 5d 7c 7c 27 3f 27 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 64 2c 61 61 29 7b 72 65 74 75 72 6e 20 61 61 3d 56 2c 4d 61 74 68 5b 61 61 28 33 38 34 29 5d 28 29 3c 64 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 65 2c 64 2c 65 2c 66 2c 67 29 7b 69 66 28 61 65 3d 56 2c 64 3d 68 5b 61 65 28 33 34 37 29 5d 2c 21 64 29 72 65 74 75 72 6e 3b 69 66 28 21 7a 28 29 29 72 Data Ascii: urn'i'}return e[X(340)][X(309)](g[D])?'a':g[D]===e[X(340)]?'D':!0===g[D]?'T':g[D]===!1?'F':(E=typeof g[D],X(320)==E?l(e,g[D])?'N':'f':k[E]\|\|'?')}function y(d,aa){return aa=V,Math[aa(384)]()<d}function C(ae,d,e,f,g){if(ae=V,d=h[ae(347)],!d)return;if(!z())r
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 72 65 6d 6f 76 65 43 68 69 6c 64 2c 2f 69 6e 76 69 73 69 62 6c 65 2f 6a 73 64 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 3b 70 71 50 6a 5a 35 3b 67 46 45 69 38 3b 67 51 42 68 43 31 3b 51 49 4b 58 30 3b 4c 73 77 73 30 3b 5a 51 6b 6e 38 3b 78 70 75 4a 62 31 3b 41 45 46 73 36 3b 74 44 70 70 34 3b 54 6f 61 68 36 3b 65 4c 5a 64 6b 32 3b 48 53 68 4e 31 3b 58 58 6e 66 65 37 3b 51 79 4c 53 75 37 3b 4f 6b 55 4a 62 32 3b 71 47 4a 6c 65 33 3b 76 6e 66 58 51 31 2c 41 72 72 61 79 2c 73 65 6e 64 2c 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 2c 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 2f 62 65 61 63 6f 6e 2f 6f 76 2c 31 33 33 56 6a 57 43 6b 4d 2c 73 70 6c 69 63 65 2c 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 2c 62 69 6e 64 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 Data Ascii: removeChild,/invisible/jsd,_cf_chl_opt;pqPjZ5;gFEi8;gQBhC1;QIKX0;Lsws0;ZQkn8;xpuJb1;AEFs6;tDpp4;Toah6;eLZdk2;HShN1;XXnfe7;QyLSu7;OkUJb2;qGJle3;vnfXQ1,Array,send,onreadystatechange,fromCharCode,/beacon/ov,133VjWCkM,splice,__CF$cv$params,bind,application/js
2024-10-25 20:22:26 UTC	566	IN	Data Raw: 2b 68 5b 61 64 28 33 32 32 29 5d 5b 61 64 28 33 38 32 29 5d 2b 61 64 28 33 34 34 29 2b 31 2b 61 64 28 33 39 34 29 2b 48 2e 72 2b 61 64 28 33 33 38 29 2c 4a 3d 6e 65 77 20 68 5b 28 61 64 28 33 31 38 29 29 5d 28 29 2c 21 4a 29 72 65 74 75 72 6e 3b 4b 3d 61 64 28 33 30 32 29 2c 4c 3d 7b 7d 2c 4c 5b 61 64 28 33 36 35 29 5d 3d 68 5b 61 64 28 33 32 32 29 5d 5b 61 64 28 33 36 35 29 5d 2c 4c 5b 61 64 28 33 32 38 29 5d 3d 68 5b 61 64 28 33 32 32 29 5d 5b 61 64 28 33 32 38 29 5d 2c 4c 5b 61 64 28 34 30 32 29 5d 3d 68 5b 61 64 28 33 32 32 29 5d 5b 61 64 28 34 30 32 29 5d 2c 4c 5b 61 64 28 33 37 34 29 5d 3d 68 5b 61 64 28 33 32 32 29 5d 5b 61 64 28 33 36 36 29 5d 2c 4d 3d 4c 2c 4a 5b 61 64 28 33 31 37 29 5d 28 4b 2c 49 2c 21 21 5b 5d 29 2c 4a 5b 61 64 28 33 30 35 29 Data Ascii: +h[ad(322)][ad(382)]+ad(344)+1+ad(394)+H.r+ad(338),J=new h[(ad(318))](),!J)return;K=ad(302),L={},L[ad(365)]=h[ad(322)][ad(365)],L[ad(328)]=h[ad(322)][ad(328)],L[ad(402)]=h[ad(322)][ad(402)],L[ad(374)]=h[ad(322)][ad(366)],M=L,J[ad(317)](K,I,!![]),J[ad(305)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49756	35.190.80.1	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:26 UTC	486	OUT	POST /report/v4?s=bac7nTFLeSwiHRrvUckC%2FEtvsS7Zx3AbrL3WxBUqgH3EN6r6WHvYh%2FdpTbYKahRi%2BQW3FCX0ss1%2Fco8FQ1ulmBaBRuiRcKMHwKg6oLsiryxfTNVrbdh5FNx4%2FiI6%2BrMI%2BBU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 477 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:26 UTC	477	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 37 33 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 39 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 31 30 33 2e 31 31 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 76 61 6c 69 64 2e 63 6f 6e 74 65 6e 74 5f 6c 65 6e 67 74 68 5f 6d 69 73 6d Data Ascii: [{"age":473,"body":{"elapsed_time":1193,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.canva.com/","sampling_fraction":1.0,"server_ip":"104.16.103.112","status_code":200,"type":"http.response.invalid.content_length_mism
2024-10-25 20:22:26 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 25 Oct 2024 20:22:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49762	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:26 UTC	622	OUT	GET /web/9a2311e7590ee117.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:26 UTC	1191	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:26 GMT Content-Type: text/javascript Content-Length: 117628 Connection: close CF-Ray: 8d84eb319fb82836-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 66679 Cache-Control: public, max-age=31556926 ETag: "73f32f62890eaf397e25db19c6f9fb11" Expires: Sun, 26 Oct 2025 02:11:12 GMT Last-Modified: Fri, 25 Oct 2024 01:35:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: zFyh1w3JmGhM6LniyniFOnut0+0bUXnW0ftyqLTIfAko7WBrc5K94v/NqC5WzKi8KclOFK/+Vi0= x-amz-replication-status: COMPLETED x-amz-request-id: X4JRHTHV6N1G16Z1 x-amz-server-side-encryption: AES256 x-amz-version-id: xs7XO5dwd36SNjkijaz_rO80eXzf7Ae_ X-Content-Type-Options: nosniff
2024-10-25 20:22:26 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 52 6e 71 6b 69 46 44 34 56 75 70 56 4d 49 41 79 46 49 69 6c 42 6e 36 6e 68 45 78 4c 49 4c 4d 4a 49 42 4f 67 54 36 70 6e 47 42 75 66 6e 6b 33 25 32 42 72 25 32 46 4d 42 30 42 75 52 63 55 6e 56 34 69 77 79 7a 79 55 79 4f 72 5a 73 57 68 74 6b 4b 63 70 31 4a 68 7a 6c 34 62 25 32 42 6a 61 31 78 43 76 49 46 48 67 25 32 46 78 77 4c 34 55 50 66 6c 54 7a 34 62 6c 55 44 72 4f 58 31 67 65 4b 4a 30 74 75 6b 25 32 46 52 64 35 53 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RnqkiFD4VupVMIAyFIilBn6nhExLILMJIBOgT6pnGBufnk3%2Br%2FMB0BuRcUnV4iwyzyUyOrZsWhtkKcp1Jhzl4b%2Bja1xCvIFHg%2FxwL4UPflTz4blUDrOX1geKJ0tuk%2FRd5SE%3D"}],"group":"cf-nel","max_age":60
2024-10-25 20:22:26 UTC	1193	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 39 61 32 33 31 31 65 37 35 39 30 65 65 31 31 37 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 36 5d 2c 7b 32 33 32 37 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 61 63 68 65 3f 74 2e 63 61 63 68 65 3a 63 2c 72 3d 74 26 26 74 2e 73 65 72 69 61 6c 69 7a 65 72 3f 74 2e 73 65 72 69 61 6c Data Ascii: /! For license information please see 9a2311e7590ee117.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{23278:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serial
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 28 35 36 33 38 31 37 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 22 22 2c 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 65 2e 63 68 61 72 41 74 28 72 29 3b 69 66 28 22 6a 22 3d 3d 3d 6f 29 7b 66 6f 72 28 76 61 72 20 73 3d 30 3b 72 2b 31 3c 65 2e 6c 65 6e 67 74 68 26 26 65 2e 63 68 61 72 41 74 28 72 2b 31 29 3d 3d 3d 6f 3b 29 73 2b 2b 2c 72 2b 2b 3b 76 61 72 20 61 3d 31 2b 28 31 26 73 29 2c 6c 3d 73 3c 32 3f 31 3a 33 2b 28 73 3e 3e 31 29 2c 75 3d 69 28 74 29 3b 66 6f 72 28 22 48 22 21 3d 75 26 26 22 6b 22 21 3d 75 7c 7c 28 6c 3d 30 29 3b 6c 2d 2d 20 3e 30 3b 29 6e 2b 3d 22 61 22 3b 66 6f 72 28 3b 61 2d 2d 20 3e 30 3b 29 6e 3d 75 2b 6e 7d 65 6c 73 65 20 6e 2b 3d 22 4a 22 3d 3d 3d 6f 3f Data Ascii: (563817);function o(e,t){for(var n="",r=0;r<e.length;r++){var o=e.charAt(r);if("j"===o){for(var s=0;r+1<e.length&&e.charAt(r+1)===o;)s++,r++;var a=1+(1&s),l=s<2?1:3+(s>>1),u=i(t);for("H"!=u&&"k"!=u\|\|(l=0);l-- >0;)n+="a";for(;a-- >0;)n=u+n}else n+="J"===o?
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 58 50 45 43 54 5f 53 45 4c 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 4f 50 54 49 4f 4e 53 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 4f 46 46 53 45 54 5f 56 41 4c 55 45 3d 31 33 5d 3d 22 45 58 50 45 43 54 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 4f 46 46 53 45 54 5f 56 41 4c 55 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 4f 46 46 53 45 54 5f 56 41 4c 55 45 3d 31 34 5d 3d 22 49 4e 56 41 4c 49 44 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 4f 46 46 53 45 54 5f 56 41 4c 55 45 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 53 45 4c 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 3d 31 35 5d 3d 22 45 58 50 45 43 54 5f 53 45 4c 45 43 54 5f 41 52 47 Data Ascii: XPECT_SELECT_ARGUMENT_OPTIONS",e[e.EXPECT_PLURAL_ARGUMENT_OFFSET_VALUE=13]="EXPECT_PLURAL_ARGUMENT_OFFSET_VALUE",e[e.INVALID_PLURAL_ARGUMENT_OFFSET_VALUE=14]="INVALID_PLURAL_ARGUMENT_OFFSET_VALUE",e[e.EXPECT_SELECT_ARGUMENT_SELECTOR=15]="EXPECT_SELECT_ARG
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 73 5b 74 5d 2e 76 61 6c 75 65 29 3b 65 6c 73 65 28 30 2c 73 2e 75 66 29 28 65 29 26 26 28 30 2c 73 2e 57 68 29 28 65 2e 73 74 79 6c 65 29 7c 7c 28 28 30 2c 73 2e 72 70 29 28 65 29 7c 7c 28 30 2c 73 2e 70 65 29 28 65 29 29 26 26 28 30 2c 73 2e 49 69 29 28 65 2e 73 74 79 6c 65 29 3f 64 65 6c 65 74 65 20 65 2e 73 74 79 6c 65 2e 6c 6f 63 61 74 69 6f 6e 3a 28 30 2c 73 2e 48 49 29 28 65 29 26 26 61 28 65 2e 63 68 69 6c 64 72 65 6e 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 74 3d 28 30 2c 72 2e 70 69 29 28 7b 73 68 6f 75 6c 64 50 61 72 73 65 53 6b 65 6c 65 74 6f 6e 73 3a 21 30 2c 72 65 71 75 69 72 65 73 4f 74 68 65 72 43 6c 61 75 73 65 3a 21 30 7d 2c 74 29 3b 76 61 72 Data Ascii: options[t].value);else(0,s.uf)(e)&&(0,s.Wh)(e.style)\|\|((0,s.rp)(e)\|\|(0,s.pe)(e))&&(0,s.Ii)(e.style)?delete e.style.location:(0,s.HI)(e)&&a(e.children)}))}function l(e,t){void 0===t&&(t={}),t=(0,r.pi)({shouldParseSkeletons:!0,requiresOtherClause:!0},t);var
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 22 22 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 6f 3e 69 3b 29 7b 69 66 28 28 6e 3d 65 5b 69 2b 2b 5d 29 3e 31 31 31 34 31 31 31 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 6e 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 63 6f 64 65 20 70 6f 69 6e 74 22 29 3b 72 2b 3d 6e 3c 36 35 35 33 36 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 35 35 32 39 36 2b 28 28 6e 2d 3d 36 35 35 33 36 29 3e 3e 31 30 29 2c 6e 25 31 30 32 34 2b 35 36 33 32 30 29 7d 72 65 74 75 72 6e 20 72 7d 2c 78 3d 67 3f 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: =arguments[t];for(var n,r="",o=e.length,i=0;o>i;){if((n=e[i++])>1114111)throw RangeError(n+" is not a valid code point");r+=n<65536?String.fromCharCode(n):String.fromCharCode(55296+((n-=65536)>>10),n%1024+56320)}return r},x=g?Object.fromEntries:function(e
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 65 64 20 6f 6e 63 65 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 73 65 4d 65 73 73 61 67 65 28 30 2c 22 22 2c 21 31 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 73 65 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 3b 21 74 68 69 73 2e 69 73 45 4f 46 28 29 3b 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 63 68 61 72 28 29 3b 69 66 28 31 32 33 3d 3d 3d 6f 29 7b 69 66 28 28 61 3d 74 68 69 73 2e 70 61 72 73 65 41 72 67 75 6d 65 6e 74 28 65 2c 6e 29 29 2e 65 72 72 29 72 65 74 75 72 6e 20 61 3b 72 2e 70 75 73 68 28 61 2e 76 61 6c 29 7d 65 6c 73 65 7b 69 66 28 31 32 35 3d 3d 3d 6f 26 26 65 3e 30 29 62 72 65 61 6b 3b 69 66 28 33 35 21 3d 3d 6f 7c 7c 22 70 6c 75 72 61 6c 22 21 3d 3d 74 26 26 Data Ascii: ed once");return this.parseMessage(0,"",!1)},e.prototype.parseMessage=function(e,t,n){for(var r=[];!this.isEOF();){var o=this.char();if(123===o){if((a=this.parseArgument(e,n)).err)return a;r.push(a.val)}else{if(125===o&&e>0)break;if(35!==o\|\|"plural"!==t&&
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 72 2c 63 68 69 6c 64 72 65 6e 3a 61 2c 6c 6f 63 61 74 69 6f 6e 3a 70 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 7d 2c 65 72 72 3a 6e 75 6c 6c 7d 3a 74 68 69 73 2e 65 72 72 6f 72 28 69 2e 6f 2e 49 4e 56 41 4c 49 44 5f 54 41 47 2c 70 28 6c 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 69 2e 6f 2e 55 4e 43 4c 4f 53 45 44 5f 54 41 47 2c 70 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 69 2e 6f 2e 49 4e 56 41 4c 49 44 5f 54 41 47 2c 70 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 73 65 Data Ascii: r,children:a,location:p(n,this.clonePosition())},err:null}:this.error(i.o.INVALID_TAG,p(l,this.clonePosition())))}return this.error(i.o.UNCLOSED_TAG,p(n,this.clonePosition()))}return this.error(i.o.INVALID_TAG,p(n,this.clonePosition()))},e.prototype.parse
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 33 35 3a 69 66 28 22 70 6c 75 72 61 6c 22 3d 3d 3d 65 7c 7c 22 73 65 6c 65 63 74 6f 72 64 69 6e 61 6c 22 3d 3d 3d 65 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 74 68 69 73 2e 62 75 6d 70 28 29 3b 76 61 72 20 74 3d 5b 74 68 69 73 2e 63 68 61 72 28 29 5d 3b 66 6f 72 28 74 68 69 73 2e 62 75 6d 70 28 29 3b 21 74 68 69 73 2e 69 73 45 4f 46 28 29 3b 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 63 68 61 72 28 29 3b 69 66 28 33 39 3d 3d 3d 6e 29 7b 69 66 28 33 39 21 3d 3d 74 68 69 73 2e 70 65 65 6b 28 29 29 7b 74 68 69 73 2e 62 75 6d 70 28 29 3b 62 72 65 61 6b 7d 74 2e 70 75 73 68 28 33 39 29 2c 74 68 69 73 2e 62 75 6d 70 28 29 7d 65 6c 73 65 20 74 2e 70 75 73 68 28 6e 29 3b 74 68 69 73 2e 62 75 Data Ascii: 35:if("plural"===e\|\|"selectordinal"===e)break;return null;default:return null}this.bump();var t=[this.char()];for(this.bump();!this.isEOF();){var n=this.char();if(39===n){if(39!==this.peek()){this.bump();break}t.push(39),this.bump()}else t.push(n);this.bu
2024-10-25 20:22:27 UTC	1369	IN	Data Raw: 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 73 65 49 64 65 6e 74 69 66 69 65 72 49 66 50 6f 73 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 2c 74 3d 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2c 6e 3d 5f 28 74 68 69 73 2e 6d 65 73 73 61 67 65 2c 74 29 2c 72 3d 74 2b 6e 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 75 6d 70 54 6f 28 72 29 2c 7b 76 61 6c 75 65 3a 6e 2c 6c 6f 63 61 74 69 6f 6e 3a 70 28 65 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 73 65 41 72 67 75 6d 65 6e 74 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 61 2c 75 3d 74 68 Data Ascii: ,e.prototype.parseIdentifierIfPossible=function(){var e=this.clonePosition(),t=this.offset(),n=_(this.message,t),r=t+n.length;return this.bumpTo(r),{value:n,location:p(e,this.clonePosition())}},e.prototype.parseArgumentOptions=function(e,t,n,r){var a,u=th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49763	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:26 UTC	622	OUT	GET /web/387e316e7fce97e3.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:26 UTC	1193	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:26 GMT Content-Type: text/javascript Content-Length: 204452 Connection: close CF-Ray: 8d84eb31ba093470-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 1938437 Cache-Control: public, max-age=31556926 ETag: "02d8436722f1f2095dc9706bbf600d74" Expires: Sun, 26 Oct 2025 02:11:12 GMT Last-Modified: Thu, 03 Oct 2024 03:57:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 04 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: vKZn+ZvdZMl85JKiLmR0GQ1kYraEsJqd9rj9RImPLbwha3baKrLGLrV1js/PZew1Y3+vp7JD3QM= x-amz-replication-status: COMPLETED x-amz-request-id: VSM8ZEEC94NP2EZY x-amz-server-side-encryption: AES256 x-amz-version-id: OJAf1gcov6i6r1Q.GSk9wV_hd1JSU0xI X-Content-Type-Options: nosniff
2024-10-25 20:22:26 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 67 54 36 78 75 39 33 61 75 66 4e 25 32 42 37 49 46 75 44 35 43 78 25 32 42 37 42 32 6f 66 59 78 69 6b 38 79 74 56 56 72 73 5a 6a 44 61 50 6c 43 64 79 56 6e 36 41 25 32 42 66 4a 51 63 32 4d 25 32 42 38 47 7a 4e 51 41 6d 62 51 42 25 32 42 76 47 72 4f 6b 41 66 6c 56 56 76 35 58 4a 5a 32 65 77 55 31 4d 6b 6b 67 55 74 31 79 45 71 73 6f 4a 62 6c 79 41 44 64 37 6d 72 73 59 68 61 25 32 46 72 61 45 6c 31 44 54 53 6f 61 65 30 64 41 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gT6xu93aufN%2B7IFuD5Cx%2B7B2ofYxik8ytVVrsZjDaPlCdyVn6A%2BfJQc2M%2B8GzNQAmbQB%2BvGrOkAflVVv5XJZ2ewU1MkkgUt1yEqsoJblyADd7mrsYha%2FraEl1DTSoae0dAQ%3D"}],"group":"cf-nel","max_age":
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 33 38 37 65 33 31 36 65 37 66 63 65 39 37 65 33 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 35 33 5d 2c 7b 34 30 37 34 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 28 33 36 36 39 39 35 29 7d 2c 37 33 36 32 34 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 44 54 3a 28 29 3d 3e 6f 2e 44 2c 46 59 3a 28 29 3d 3e 6f 2e 46 2c 50 69 3a 28 29 3d 3e 75 2e 50 2c 66 Data Ascii: /! For license information please see 387e316e7fce97e3.vendor.js.LICENSE.txt /"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{40749:(e,t,n)=>{n(366995)},736241:(e,t,n)=>{n.d(t,{DT:()=>o.D,FY:()=>o.F,Pi:()=>u.P,f
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 65 5d 20 60 72 65 6e 64 65 72 60 20 70 72 6f 70 65 72 74 79 20 6f 66 20 46 6f 72 77 61 72 64 52 65 66 20 77 61 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 2c 68 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 6c 2e 53 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 74 29 7d 29 2c 75 29 7d 3b 72 65 74 75 72 6e 20 76 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2c 73 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 76 2c 22 6e 61 6d 65 22 2c 7b 76 61 6c 75 65 3a 65 2e 6e 61 6d 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 65 2e 63 6f 6e 74 65 78 74 54 79 70 65 73 26 26 Data Ascii: e] `render` property of ForwardRef was not a function");var d,h,v=function(e,t){return(0,l.S)((function(){return a(e,t)}),u)};return v.displayName=e.displayName,s&&Object.defineProperty(v,"name",{value:e.name,writable:!0,configurable:!0}),e.contextTypes&&
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 76 61 72 20 72 3d 7b 72 65 61 63 74 69 6f 6e 3a 6e 75 6c 6c 2c 6f 6e 53 74 6f 72 65 43 68 61 6e 67 65 3a 6e 75 6c 6c 2c 73 74 61 74 65 56 65 72 73 69 6f 6e 3a 53 79 6d 62 6f 6c 28 29 2c 6e 61 6d 65 3a 74 2c 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 2e 4f 2e 75 6e 72 65 67 69 73 74 65 72 28 72 29 2c 72 2e 6f 6e 53 74 6f 72 65 43 68 61 6e 67 65 3d 65 2c 72 2e 72 65 61 63 74 69 6f 6e 7c 7c 28 73 28 72 29 2c 72 2e 73 74 61 74 65 56 65 72 73 69 6f 6e 3d 53 79 6d 62 6f 6c 28 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 2e 6f 6e 53 74 6f 72 65 43 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 72 2e 72 65 61 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 65 2e 64 69 73 Data Ascii: var r={reaction:null,onStoreChange:null,stateVersion:Symbol(),name:t,subscribe:function(e){return l.O.unregister(r),r.onStoreChange=e,r.reaction\|\|(s(r),r.stateVersion=Symbol()),function(){var e;r.onStoreChange=null,null===(e=r.reaction)\|\|void 0===e\|\|e.dis
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 77 65 65 70 28 30 29 7d 7d 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 65 67 69 73 74 65 72 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 73 2e 73 65 74 28 6e 2c 7b 76 61 6c 75 65 3a 74 2c 72 65 67 69 73 74 65 72 65 64 41 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 29 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 53 77 65 65 70 28 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 Data Ascii: 0,writable:!0,value:function(){t.sweep(0)}})}return Object.defineProperty(e.prototype,"register",{enumerable:!1,configurable:!0,writable:!0,value:function(e,t,n){this.registrations.set(n,{value:t,registeredAt:Date.now()}),this.scheduleSweep()}}),Object.de
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 29 3d 3e 24 74 2c 4c 4a 3a 28 29 3d 3e 58 6e 2c 4c 4f 3a 28 29 3d 3e 4d 65 2c 4d 35 3a 28 29 3d 3e 68 6e 2c 4e 37 3a 28 29 3d 3e 77 6e 2c 50 53 3a 28 29 3d 3e 45 6e 2c 50 62 3a 28 29 3d 3e 6c 72 2c 53 57 3a 28 29 3d 3e 61 74 2c 55 35 3a 28 29 3d 3e 51 74 2c 56 4f 3a 28 29 3d 3e 62 6e 2c 58 50 3a 28 29 3d 3e 79 6e 2c 5a 4e 3a 28 29 3d 3e 78 6e 2c 61 44 3a 28 29 3d 3e 46 74 2c 63 70 3a 28 29 3d 3e 47 2c 64 77 3a 28 29 3d 3e 6e 6e 2c 65 4a 3a 28 29 3d 3e 76 6e 2c 6a 51 3a 28 29 3d 3e 74 6e 2c 6b 53 3a 28 29 3d 3e 6b 72 2c 6c 65 3a 28 29 3d 3e 4f 74 2c 6d 4a 3a 28 29 3d 3e 64 74 2c 70 36 3a 28 29 3d 3e 59 2c 70 41 3a 28 29 3d 3e 59 74 2c 70 75 3a 28 29 3d 3e 79 74 2c 71 68 3a 28 29 3d 3e 5f 6e 2c 71 70 3a 28 29 3d 3e 77 72 2c 72 43 3a 28 29 3d 3e 52 6e 2c 73 Data Ascii: )=>$t,LJ:()=>Xn,LO:()=>Me,M5:()=>hn,N7:()=>wn,PS:()=>En,Pb:()=>lr,SW:()=>at,U5:()=>Qt,VO:()=>bn,XP:()=>yn,ZN:()=>xn,aD:()=>Ft,cp:()=>G,dw:()=>nn,eJ:()=>vn,jQ:()=>tn,kS:()=>kr,le:()=>Ot,mJ:()=>dt,p6:()=>Y,pA:()=>Yt,pu:()=>yt,qh:()=>_n,qp:()=>wr,rC:()=>Rn,s
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3d 3d 3d 70 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 74 26 26 28 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 2e 6e 61 6d 65 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 2c 6e 29 7b 75 28 65 2c Data Ascii: =Object.hasOwnProperty.call(t,"constructor")&&t.constructor;return"function"==typeof n&&n.toString()===p}function w(e){var t=null==e?void 0:e.constructor;return!!t&&("GeneratorFunction"===t.name\|\|"GeneratorFunction"===t.displayName)}function k(e,t,n){u(e,
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 55 28 72 2e 6b 65 79 29 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 26 26 4d 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 6e 26 26 4d 28 65 2c 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 Data Ascii: 0,"value"in r&&(r.writable=!0),Object.defineProperty(e,U(r.key),r)}}function j(e,t,n){return t&&M(e.prototype,t),n&&M(e,n),Object.defineProperty(e,"prototype",{writable:!1}),e}function D(e,t){var n="undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iter
2024-10-25 20:22:26 UTC	1369	IN	Data Raw: 20 65 3b 76 61 72 20 6e 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 7b 76 61 72 20 72 3d 6e 2e 63 61 6c 6c 28 65 2c 74 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 72 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 65 29 7d 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 74 2b 22 Data Ascii: e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,t\|\|"default");if("object"!=typeof r)return r;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==typeof t?t:t+"
2024-10-25 20:22:27 UTC	1369	IN	Data Raw: 6e 64 69 6e 67 55 6e 6f 62 73 65 72 76 61 74 69 6f 6e 4d 61 73 6b 5f 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 66 6c 61 67 73 5f 3d 7a 28 74 68 69 73 2e 66 6c 61 67 73 5f 2c 65 2e 69 73 50 65 6e 64 69 6e 67 55 6e 6f 62 73 65 72 76 61 74 69 6f 6e 4d 61 73 6b 5f 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 64 69 66 66 56 61 6c 75 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 28 74 68 69 73 2e 66 6c 61 67 73 5f 2c 65 2e 64 69 66 66 56 61 6c 75 65 4d 61 73 6b 5f 29 3f 31 3a 30 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 66 6c 61 67 73 5f 3d 7a 28 74 68 69 73 2e 66 6c 61 67 73 5f 2c 65 2e 64 69 66 66 56 61 6c 75 65 4d 61 73 6b 5f 2c 31 3d 3d 3d 74 29 7d 7d 5d 29 7d 28 29 3b 51 2e 69 Data Ascii: ndingUnobservationMask_)},set:function(t){this.flags_=z(this.flags_,e.isPendingUnobservationMask_,t)}},{key:"diffValue",get:function(){return L(this.flags_,e.diffValueMask_)?1:0},set:function(t){this.flags_=z(this.flags_,e.diffValueMask_,1===t)}}])}();Q.i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49764	34.120.195.249	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:26 UTC	478	OUT	GET /api/5403944/envelope/?sentry_key=c50fa9f3bfcc4ee3bd4a5eca6add3a1b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:22:26 UTC	518	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Fri, 25 Oct 2024 20:22:26 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49761	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:27 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 20:22:27 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=159755 Date: Fri, 25 Oct 2024 20:22:27 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49765	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:27 UTC	1409	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/8d84eb191be92cab HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 15955 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; CPA=cnvanoQwrdsh8z5xPgBoIEjqVxp9YHVsLUTp5t2dBEL34xeOhbaDFzDpBvlpCIp60QROjAe_N3JiGEm1XKaXqRPyeJ76evORElpePaUHKHXPztFKQj93_fPugElwRBqkDR8w_LKiNhKZFi_UBMahiy3MbV0YLRhGbbkk4S4kQBgU74vmhK05q-2D5KL8RQI7ZLn4OzWfcDGHjfQ0NC57wEXNMuuMnjK0SVeehw7uiyhy-a-pecFsRaz9ykaaPUQ6MdghG1-n8Ljc47wccYZ9sa2bstJ9m8GL08Dd5wT3uGY2Soap-lxcxqCX1FiCNaTaprbD6G2AFq_ey1ScLDX4Rbe4AyIp1oaKAw70gy2uBKN4YskKu9fSy7v6Qj2AGgj8Spss8E80nSya32fAvqFbDZImxdlxCRFzU8M3GKqx9_StVBDiF2M5limqSFofY5Sla-I7te8l9BQ9d78374b; CCK=R2oerGQIqdEdKxGnExUctg; __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:27 UTC	15955	OUT	Data Raw: 7b 22 77 70 22 3a 22 38 37 44 71 6d 4d 2b 36 6d 75 44 6d 34 6b 39 2b 51 2b 61 46 4f 71 4d 63 46 6a 50 46 62 7a 62 32 32 4d 36 2b 77 78 46 58 59 63 73 59 79 44 46 55 58 49 47 39 59 75 2b 4e 46 34 51 44 70 52 37 37 46 6a 65 32 46 4b 46 32 63 32 44 2b 46 5a 32 2b 74 39 35 71 65 75 37 6e 33 64 71 58 59 69 37 50 6a 30 4e 61 6b 70 4c 71 74 69 6d 4a 50 6c 2b 30 78 58 65 62 46 6d 44 44 31 62 55 4d 6e 52 46 43 70 52 79 66 6e 46 66 71 6b 55 46 4d 4a 44 46 62 71 4d 4d 71 69 34 71 62 46 2b 59 46 4f 75 42 46 2b 6c 6e 46 54 45 36 6a 70 37 49 2b 6a 65 52 44 46 4d 45 6e 46 4d 39 47 4f 46 47 4d 46 2b 6e 5a 79 48 44 64 4e 50 63 4d 70 4d 2b 66 74 50 37 78 6d 69 53 76 66 58 46 7a 71 4d 62 6f 57 37 46 36 42 37 59 6b 79 58 72 5a 70 46 47 76 66 65 69 7a 6a 71 46 48 65 7a 79 62 Data Ascii: {"wp":"87DqmM+6muDm4k9+Q+aFOqMcFjPFbzb22M6+wxFXYcsYyDFUXIG9Yu+NF4QDpR77Fje2FKF2c2D+FZ2+t95qeu7n3dqXYi7Pj0NakpLqtimJPl+0xXebFmDD1bUMnRFCpRyfnFfqkUFMJDFbqMMqi4qbF+YFOuBF+lnFTE6jp7I+jeRDFMEnFM9GOFGMF+nZyHDdNPcMpM+ftP7xmiSvfXFzqMboW7F6B7YkyXrZpFGvfeizjqFHezyb
2024-10-25 20:22:28 UTC	1351	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:27 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.canva.com; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=.awNK3Z_7Lk8HN7_yTzD9_WNKN8es1mVuOhfLtTmsK0-1729887747-1.2.1.1-O6zeOfaXsn5C3_r8fYOhZnKHJuzzYVjnWhvD6yo93f.KNjhuuVWzCfyC6nwm.oErMXuCppvhHxGYn7MkwJnjnq4k7QSa9fPyZrE_xer5mOYzM0u.avZaO1uwmbTlUHfpUxJ52gYyCVQ4N2HIehiJY9nRGa1T1D8DIcRd7O0ZQ0gNYaM3jxKzQlsOHLwHud206TuhysuA87BuwBewdkZ1gWpK_KmofQrQWOr9fpoRLzhPNMmyDbZcEv8ix_Ue_5fD7PvgIzwYVsm8eHYVbKwye16nTKoZN7HhSPeFvm7yymc9x.clY_DFWMYzEIRq6_n0WxDDPbZgBQyXz423Y5KNwtgKf_TION0ZG0F6lPoWUZ1J9Umms5HRUms.m7_1ekY6; Path=/; Expires=Sat, 25-Oct-25 20:22:27 GMT; Domain=.canva.com; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=znLfTk5pumVHtjBOan8HbTByOGpkhiQfUxP33m2TpeY7faHi4NGJc42DmJpxFPnM6%2BqpscGWrA0aWlCEXxwh4r8NoHgRTB5fPuBBtsuXh0G%2F77dXJLZlVPy14YEDyE0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d84eb3878f6477a-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49767	104.16.103.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:28 UTC	619	OUT	GET /static/images/favicon-1.ico HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:28 UTC	1364	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:28 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 4414 Connection: close CF-Ray: 8d84eb3cefb16b04-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 36666 Cache-Control: public, max-age=31556926 ETag: "a0c86da7fc37ea50e848c4733761d53e" Expires: Sun, 26 Oct 2025 02:11:14 GMT Last-Modified: Thu, 26 Sep 2024 23:42:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-id-2: qmu3uJIrITcBkPZN3RSh6KNHzdpLU8UCmnheU/729R4Vqvv6b0vAIElprWUjy17EBzhwaUtlF5dAgmBSrNX8MJi3cY706Gq5 x-amz-replication-status: COMPLETED x-amz-request-id: QHY2G6YRGMK0V2M3 x-amz-server-side-encryption: AES256 x-amz-version-id: REYKMVSvn4pQBvQM7t126sw17ADi9h4U X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AXzRxWkjUU%2BfoMHcgCTLQJ30luApWomLyzXDdEq6qp1U4MYWED8i%2F%2FgWG6gqWkhz7ZpIT5NGzA9hI1JEPth3sNXElNEODELEtYhWLdSVb5f4pXNCquJeHcny%2B1X0UDcMj%2Fs%3D"}],"group":"cf-nel","max_age":604800}
2024-10-25 20:22:28 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-10-25 20:22:28 UTC	1282	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 28 11 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 01 ff 40 80 04 00 00 00 00 00 00 00 00 f3 23 68 16 f9 21 67 5c fc 22 68 9d fa 21 69 c9 f8 23 6b e3 f7 24 6c fb f6 24 6e fb f5 24 6f e3 f2 25 71 c9 f2 25 72 9d f1 27 73 5b e8 23 74 16 00 00 00 00 00 00 00 00 ff 40 80 04 ff 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 55 55 03 00 00 00 00 00 00 00 00 f9 2c 5d 29 fa 2b 5f 9f fb 29 62 f2 ff 2a 6a ff ff 29 6c ff ff 27 6c ff ff 25 6c ff f8 24 6b ff f7 Data Ascii: (( @ @#h!g\"h!i#k$l$n$o%q%r's[#t@UU,])+_)b*j)l'l%l$k
2024-10-25 20:22:28 UTC	1369	IN	Data Raw: e8 62 48 ff e6 4d 28 ff e5 3c 00 ff f4 cb c8 ff ff ff ff ff e9 88 85 ff e3 3f 42 ff e4 53 5e ff e4 49 60 ff e5 43 65 ff e5 3d 6b ff e7 37 71 fa f6 36 7e ff e5 30 78 9f 00 00 00 00 dc 74 2e 16 e1 78 33 f2 e4 78 32 ff e2 75 32 fe e3 74 33 ff e4 73 33 ff e5 74 3d ff e4 5f 00 ff f8 e2 dc ff ff ff ff ff ff ff ff ff fa e7 e4 ff e5 58 00 ff e7 6d 45 ff e7 69 3e ff e6 67 3c ff e6 67 3d ff e5 66 3f ff e5 6a 48 ff e5 67 48 ff e1 35 00 ff f7 dd db ff fa ea ea ff e0 3e 27 ff e2 5b 59 ff e3 51 59 ff e3 4c 5f ff e3 46 64 ff e4 40 6a fe e7 3a 72 ff e6 35 75 f2 dc 2e 74 16 e0 81 2d 5b ed 89 30 ff de 80 2d fb e0 7f 2d ff e0 7d 2e ff e1 7d 33 ff e1 75 16 ff e5 8b 5e ff fe fa f9 ff ff fe fe ff ff ff ff ff ef b9 a9 ff e2 5d 00 ff e5 75 41 ff e4 6f 36 ff e4 6f 38 ff e4 6e 39 Data Ascii: bHM(<?BS^I`Ce=k7q6~0xt.x3x2u2t3s3t=_XmEi>g<g=f?jHgH5>'[YQYL_Fd@j:r5u.t-[0--}.}3u^]uAo6o8n9
2024-10-25 20:22:28 UTC	1369	IN	Data Raw: b6 00 ff d3 bf 4e ff fd fc f9 ff ff ff ff ff ff ff ff ff dc ca 85 ff cd ae 00 ff d1 b2 26 ff d1 ae 0e ff d1 ac 12 ff d2 aa 1d ff d1 a4 00 ff d6 ad 4f ff fc f8 f5 ff ff ff ff ff ea d5 bb ff d0 8e 00 ff d5 97 36 ff d5 90 2a ff d6 8b 2f ff d7 85 33 ff d8 80 38 ff d8 7a 3c fb e8 7a 46 ff db 6f 45 5c d1 ae 0c 16 d0 b3 0e f2 d1 b7 0c ff cf b7 0a fe ce b8 09 ff ce b9 08 ff ce ba 05 ff cf bc 26 ff c9 b5 00 ff e6 de b3 ff ff ff ff ff ff ff ff ff f5 f1 e2 ff cc b4 00 ff cf b7 20 ff cf b4 16 ff cf b1 0d ff d0 af 0f ff d1 ae 28 ff ce a2 00 ff f1 e7 d6 ff ff ff ff ff f8 f3 ec ff d3 9d 1d ff d3 98 23 ff d4 94 29 ff d5 8f 2c ff d6 89 30 ff d7 85 34 fe da 7f 3a ff d9 78 3e f2 dc 74 46 16 00 00 00 00 cf b5 0b 9f dd c3 0b ff ce b9 09 fa ce ba 08 ff ce bb 07 ff cd bc 07 ff Data Ascii: N&O6*/38z<zFoE\& (#),04:x>tF
2024-10-25 20:22:28 UTC	394	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 01 bf bf 00 04 00 00 00 00 00 00 00 00 c5 b9 00 16 ca bf 03 5c cd c0 03 9d cc c0 04 c9 ce bf 04 e3 cd be 05 fb cd bd 06 fb ce bd 07 e3 ce ba 08 c9 ce b9 0a 9d cd b4 0b 5c d1 ae 0c 16 00 00 00 00 00 00 00 00 ff bf 00 04 ff ff 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49768	104.16.102.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:28 UTC	1196	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e1a56f38220d/main.js? HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; CPA=cnvanoQwrdsh8z5xPgBoIEjqVxp9YHVsLUTp5t2dBEL34xeOhbaDFzDpBvlpCIp60QROjAe_N3JiGEm1XKaXqRPyeJ76evORElpePaUHKHXPztFKQj93_fPugElwRBqkDR8w_LKiNhKZFi_UBMahiy3MbV0YLRhGbbkk4S4kQBgU74vmhK05q-2D5KL8RQI7ZLn4OzWfcDGHjfQ0NC57wEXNMuuMnjK0SVeehw7uiyhy-a-pecFsRaz9ykaaPUQ6MdghG1-n8Ljc47wccYZ9sa2bstJ9m8GL08Dd5wT3uGY2Soap-lxcxqCX1FiCNaTaprbD6G2AFq_ey1ScLDX4Rbe4AyIp1oaKAw70gy2uBKN4YskKu9fSy7v6Qj2AGgj8Spss8E80nSya32fAvqFbDZImxdlxCRFzU8M3GKqx9_StVBDiF2M5limqSFofY5Sla-I7te8l9BQ9d78374b; CCK=R2oerGQIqdEdKxGnExUctg; __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:28 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:22:28 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8181 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6hlzYaFTF87mzFHNeK%2FkRJ2j38YPSu8h2ZDmtzDJZf5xFfxyy3PHnJUvfQ3b5C2PObcF9gVLupMEMvpWDgmFyamtZT%2FzWilXGjkJvDsS5PalTYkGa0YsKyD%2FV8CL6E8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8d84eb3d5d2eeab0-DFW
2024-10-25 20:22:28 UTC	649	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 68 2c 69 2c 6a 2c 6b 2c 6f 2c 73 2c 42 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 67 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 67 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 32 33 33 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 31 36 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 37 32 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 32 38 34 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 30 35 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 55 28 32 39 38 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 55 28 32 34 33 29 29 2f 37 2a 28 2d Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,o,s,B){V=b,function(d,e,U,f,g){for(U=b,f=d();!![];)try{if(g=-parseInt(U(233))/1+-parseInt(U(216))/2+-parseInt(U(272))/3(-parseInt(U(284))/4)+-parseInt(U(305))/5(parseInt(U(298))/6)+parseInt(U(243))/7*(-
2024-10-25 20:22:28 UTC	1369	IN	Data Raw: 28 48 3d 6e 28 44 29 2c 67 5b 61 30 28 33 30 39 29 5d 5b 61 30 28 32 37 38 29 5d 26 26 28 48 3d 48 5b 61 30 28 32 37 34 29 5d 28 67 5b 61 30 28 33 30 39 29 5d 5b 61 30 28 32 37 38 29 5d 28 44 29 29 29 2c 48 3d 67 5b 61 30 28 32 36 30 29 5d 5b 61 30 28 33 31 38 29 5d 26 26 67 5b 61 30 28 32 35 34 29 5d 3f 67 5b 61 30 28 32 36 30 29 5d 5b 61 30 28 33 31 38 29 5d 28 6e 65 77 20 67 5b 28 61 30 28 32 35 34 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 31 2c 4f 29 7b 66 6f 72 28 61 31 3d 61 30 2c 4e 5b 61 31 28 32 36 39 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 31 28 32 37 37 29 5d 3b 4e 5b 4f 5d 3d 3d 3d 4e 5b 4f 2b 31 5d 3f 4e 5b 61 31 28 32 33 35 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e Data Ascii: (H=n(D),g[a0(309)][a0(278)]&&(H=H[a0(274)](g[a0(309)][a0(278)](D))),H=g[a0(260)][a0(318)]&&g[a0(254)]?g[a0(260)][a0(318)](new g[(a0(254))](H)):function(N,a1,O){for(a1=a0,N[a1(269)](),O=0;O<N[a1(277)];N[O]===N[O+1]?N[a1(235)](O+1,1):O+=1);return N}(H),I='n
2024-10-25 20:22:28 UTC	1369	IN	Data Raw: 61 28 32 31 39 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 33 31 35 29 5d 28 30 29 2c 47 3d 30 3b 38 3e 47 3b 4f 3d 4f 3c 3c 31 2e 36 34 7c 54 26 31 2e 34 36 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 32 31 39 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 4f 3c 3c 31 2e 35 33 7c 54 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 61 28 32 31 39 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 33 31 35 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 54 26 31 7c 4f 3c 3c 31 2e 39 36 2c 50 3d 3d 45 2d 31 3f 28 50 Data Ascii: a(219)](F(O)),O=0):P++,G++);for(T=J[aa(315)](0),G=0;8>G;O=O<<1.64\|T&1.46,E-1==P?(P=0,N[aa(219)](F(O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=0;G<M;O=O<<1.53\|T,P==E-1?(P=0,N[aa(219)](F(O)),O=0):P++,T=0,G++);for(T=J[aa(315)](0),G=0;16>G;O=T&1\|O<<1.96,P==E-1?(P
2024-10-25 20:22:28 UTC	1369	IN	Data Raw: 4f 2c 50 2c 51 2c 52 2c 54 2c 53 29 7b 66 6f 72 28 61 64 3d 61 38 2c 47 3d 5b 5d 2c 48 3d 34 2c 49 3d 34 2c 4a 3d 33 2c 4b 3d 5b 5d 2c 4e 3d 46 28 30 29 2c 4f 3d 45 2c 50 3d 31 2c 4c 3d 30 3b 33 3e 4c 3b 47 5b 4c 5d 3d 4c 2c 4c 2b 3d 31 29 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 32 37 36 29 5d 28 32 2c 32 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 32 37 36 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 Data Ascii: O,P,Q,R,T,S){for(ad=a8,G=[],H=4,I=4,J=3,K=[],N=F(0),O=E,P=1,L=0;3>L;G[L]=L,L+=1);for(Q=0,R=Math[ad(276)](2,2),M=1;M!=R;S=N&O,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=(0<S?1:0)*M,M<<=1);switch(Q){case 0:for(Q=0,R=Math[ad(276)](2,8),M=1;R!=M;S=O&N,O>>=1,O==0&&(O=E,N=F
2024-10-25 20:22:28 UTC	1369	IN	Data Raw: 72 3d 7b 7d 2c 47 2e 65 3d 48 2c 47 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 65 2c 64 2c 65 2c 66 2c 67 29 7b 69 66 28 61 65 3d 56 2c 64 3d 68 5b 61 65 28 32 35 39 29 5d 2c 21 64 29 72 65 74 75 72 6e 3b 69 66 28 21 79 28 29 29 72 65 74 75 72 6e 3b 28 65 3d 21 5b 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 66 2c 44 29 7b 28 61 66 3d 61 65 2c 21 65 29 26 26 28 65 3d 21 21 5b 5d 2c 44 3d 76 28 29 2c 7a 28 64 2e 72 2c 44 2e 72 29 2c 44 2e 65 26 26 41 28 61 66 28 32 37 31 29 2c 44 2e 65 29 29 7d 2c 69 5b 61 65 28 33 30 30 29 5d 21 3d 3d 61 65 28 32 32 37 29 29 3f 66 28 29 3a 68 5b 61 65 28 32 36 38 29 5d 3f 69 5b 61 65 28 32 36 38 29 5d 28 61 65 28 32 38 32 29 2c 66 29 3a 28 67 3d 69 5b 61 65 28 32 36 34 29 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 5b Data Ascii: r={},G.e=H,G}}function C(ae,d,e,f,g){if(ae=V,d=h[ae(259)],!d)return;if(!y())return;(e=![],f=function(af,D){(af=ae,!e)&&(e=!![],D=v(),z(d.r,D.r),D.e&&A(af(271),D.e))},i[ae(300)]!==ae(227))?f():h[ae(268)]?i[ae(268)](ae(282),f):(g=i[ae(264)]\|\|function(){},i[
2024-10-25 20:22:28 UTC	1369	IN	Data Raw: 6c 41 70 69 55 72 6c 2c 69 6e 63 6c 75 64 65 73 2c 2f 6a 73 64 2f 72 2f 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 2c 62 6f 64 79 2c 77 6c 30 6d 56 73 76 4b 6b 69 36 41 55 46 43 37 4e 75 4a 68 71 48 39 50 45 58 52 6f 53 54 7a 78 59 47 31 51 6e 74 2d 5a 38 79 34 67 42 61 4f 44 63 4d 70 4c 6a 66 72 24 65 32 33 35 64 62 2b 49 57 2c 73 65 6e 64 2c 62 69 6e 64 2c 72 65 70 6c 61 63 65 2c 31 36 32 34 31 36 34 33 77 6b 6b 53 66 6c 2c 72 61 6e 64 6f 6d 2c 6b 65 79 73 2c 31 31 36 38 32 75 54 72 68 69 41 2c 2f 62 65 61 63 6f 6e 2f 6f 76 2c 72 65 61 64 79 53 74 61 74 65 2c 30 2e 31 31 39 38 39 33 36 32 30 33 39 34 34 33 30 31 36 3a 31 37 32 39 38 38 33 35 30 35 3a 36 30 75 52 74 4f 69 35 30 41 35 45 65 6d 72 Data Ascii: lApiUrl,includes,/jsd/r/,application/x-www-form-urlencoded,body,wl0mVsvKki6AUFC7NuJhqH9PEXRoSTzxYG1Qnt-Z8y4gBaODcMpLjfr$e235db+IW,send,bind,replace,16241643wkkSfl,random,keys,11682uTrhiA,/beacon/ov,readyState,0.11989362039443016:1729883505:60uRtOi50A5Eemr
2024-10-25 20:22:28 UTC	687	IN	Data Raw: 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 3d 66 2d 32 31 33 2c 68 3d 65 5b 66 5d 2c 68 7d 2c 62 28 63 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 2c 61 34 29 7b 72 65 74 75 72 6e 20 61 34 3d 56 2c 4d 61 74 68 5b 61 34 28 32 39 36 29 5d 28 29 3c 64 7d 66 75 6e 63 74 69 6f 6e 20 41 28 44 2c 45 2c 61 37 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 29 7b 69 66 28 61 37 3d 56 2c 21 78 28 2e 30 31 29 29 72 65 74 75 72 6e 21 5b 5d 3b 47 3d 28 46 3d 7b 7d 2c 46 5b 61 37 28 33 32 33 29 5d 3d 44 2c 46 5b 61 37 28 32 38 30 29 5d 3d 45 2c 46 29 3b 74 72 79 7b 69 66 28 48 3d 68 5b 61 37 28 32 35 39 29 5d 2c 49 3d 61 37 28 32 33 30 29 2b 68 5b 61 37 28 32 35 37 29 5d 5b 61 37 28 32 37 30 29 5d 2b 61 37 28 32 39 Data Ascii: ,b=function(f,g,h){return f=f-213,h=e[f],h},b(c,d)}function x(d,a4){return a4=V,Math[a4(296)]()<d}function A(D,E,a7,F,G,H,I,J,K,L,M,N,O){if(a7=V,!x(.01))return![];G=(F={},F[a7(323)]=D,F[a7(280)]=E,F);try{if(H=h[a7(259)],I=a7(230)+h[a7(257)][a7(270)]+a7(29

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49766	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:28 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 20:22:29 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=159754 Date: Fri, 25 Oct 2024 20:22:28 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 20:22:29 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49769	104.16.102.112	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:22:29 UTC	1185	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/8d84eb191be92cab HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; CPA=cnvanoQwrdsh8z5xPgBoIEjqVxp9YHVsLUTp5t2dBEL34xeOhbaDFzDpBvlpCIp60QROjAe_N3JiGEm1XKaXqRPyeJ76evORElpePaUHKHXPztFKQj93_fPugElwRBqkDR8w_LKiNhKZFi_UBMahiy3MbV0YLRhGbbkk4S4kQBgU74vmhK05q-2D5KL8RQI7ZLn4OzWfcDGHjfQ0NC57wEXNMuuMnjK0SVeehw7uiyhy-a-pecFsRaz9ykaaPUQ6MdghG1-n8Ljc47wccYZ9sa2bstJ9m8GL08Dd5wT3uGY2Soap-lxcxqCX1FiCNaTaprbD6G2AFq_ey1ScLDX4Rbe4AyIp1oaKAw70gy2uBKN4YskKu9fSy7v6Qj2AGgj8Spss8E80nSya32fAvqFbDZImxdlxCRFzU8M3GKqx9_StVBDiF2M5limqSFofY5Sla-I7te8l9BQ9d78374b; CCK=R2oerGQIqdEdKxGnExUctg; __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
2024-10-25 20:22:29 UTC	607	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 25 Oct 2024 20:22:29 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s70mUGCgEkJKJiZ8aPZxfepMUzV8%2FS0mJAjcQpiGBEfgcXVkI%2BKQOLauCvUaX7BbcFM5iXvHCl8UBRn27VmxBjFR0JfGr0JZf5FZx0eIJ%2Fq7DwMt4Fq%2BeNSu%2BoZEwy4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d84eb404e9647a2-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	51975	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:15 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:15 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:15 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 44315f87-b01e-0070-2fac-251cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202315Z-17c5cb586f6gkqkwd0x1ge8t0400000001c00000000045cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:15 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 20:23:15 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-25 20:23:15 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-25 20:23:15 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-25 20:23:15 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-25 20:23:15 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-25 20:23:16 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-25 20:23:16 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-25 20:23:16 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-25 20:23:16 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	51979	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:17 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:17 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202317Z-16849878b785jrf8dn0d2rczaw000000025g00000000fz1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:17 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	51978	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:17 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6b50d5b8-301e-005d-5751-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202317Z-17c5cb586f6tzc2wxh3rxnapb000000000pg00000000m87z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:17 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	51976	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:17 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:17 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202317Z-17c5cb586f67p8ffw0hbk5rahw00000003ag0000000048bv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:17 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	51977	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:17 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:17 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202317Z-16849878b785g992cz2s9gk35c00000009pg00000000q66b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 20:23:17 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	51980	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:17 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:17 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: c9a7c7e9-301e-0099-19dc-266683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202317Z-r197bdfb6b48pcqqxhenwd2uz800000001sg00000000amgb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:17 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	51985	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:18 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:18 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202318Z-16849878b78bcpfn2qf7sm6hsn00000002p000000000b9hq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:18 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	51983	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:18 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: d919e2dc-e01e-001f-153d-261633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202318Z-r197bdfb6b4wmcgqdschtyp7yg00000000yg0000000050eq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	51982	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:18 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:18 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202318Z-16849878b78q4pnrt955f8nkx800000009pg00000000385m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	51984	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:18 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:18 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:18 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d2ec1471-a01e-0032-1827-261949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202318Z-17c5cb586f6sqz6fff89etrx0800000000ng00000000cdbx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:18 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	51981	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:18 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:18 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 0c5ae494-501e-0029-6ca4-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202318Z-16849878b78rjhv97f3nhawr7s00000009p000000000f0bf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	51986	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:19 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 1ae852e8-d01e-008e-29f5-24387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202319Z-15b8d89586fnsf5zd126eyaetw0000000280000000005p5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	51987	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:19 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: a568b4a7-501e-0035-1a18-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202319Z-17c5cb586f6qkkscezt8hb00a00000000380000000007csr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	51988	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:19 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 802631a9-901e-002a-57ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202319Z-15b8d89586flspj6y6m5fk442w00000006t000000000bx1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	51990	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:19 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e4cbed29-601e-0002-4328-26a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202319Z-17c5cb586f6dsb4r19gvkc9r7s0000000380000000007s30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	51989	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:19 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: d7788b78-601e-0084-2f37-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202320Z-15b8d89586f5s5nz3ffrgxn5ac00000001n000000000az7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	51992	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:20 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f94f539d-b01e-001e-773a-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202320Z-15b8d89586f2hk28h0h6zye26c00000003eg00000000a81w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	51991	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:20 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:20 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c47ae6f3-801e-007b-6937-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202320Z-r197bdfb6b42rt68rzg9338g1g000000022000000000nmdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:20 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	51993	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:20 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 94fafadb-001e-0049-3f27-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202320Z-17c5cb586f6hn8cl90dxzu28kw00000000vg00000000c0zm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	51995	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:20 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:20 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:20 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202320Z-16849878b78p49s6zkwt11bbkn00000000rg000000007cka x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:20 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	51996	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:20 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:20 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f981d888-e01e-0099-4d18-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202320Z-r197bdfb6b47gqdjqh2kwsuz8c00000001ag00000000prs4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:20 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	51997	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:21 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b140b4a4-501e-000a-80f9-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202321Z-15b8d89586fx2hlt035xdehq580000000gvg0000000050vr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	51998	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:21 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 1cb97257-a01e-0070-50f3-24573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202321Z-15b8d89586fsx9lfqmgrbzpgmg0000000gsg00000000bpkf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	51999	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:21 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202321Z-17c5cb586f6gkqkwd0x1ge8t04000000016g00000000kp7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	52000	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:21 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202321Z-16849878b78k8q5pxkgux3mbgg00000009h00000000112p2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	52001	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:21 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:21 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 73bfd404-001e-0066-7fd4-26561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202321Z-17c5cb586f6gkqkwd0x1ge8t04000000019g00000000ax1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:21 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	52003	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:21 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:22 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 111e84cc-b01e-003e-6d58-268e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202321Z-17c5cb586f6qs7hge7b080kmr0000000033g0000000050rs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	52002	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:21 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:22 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:21 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 06b72246-101e-0079-2a0d-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202321Z-16849878b78rjhv97f3nhawr7s00000009r0000000005vn0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 20:23:22 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	52004	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:21 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9b0fb70e-e01e-0020-42f5-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202322Z-r197bdfb6b4tq6ldv3s2dcykm800000003pg000000006zy4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	52005	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:22 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202322Z-16849878b7898p5f6vryaqvp5800000001x0000000007e05 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	52006	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:22 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:22 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202322Z-16849878b7898p5f6vryaqvp5800000001r0000000011vmc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:22 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	52008	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:22 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:22 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 96a66594-b01e-0070-61ef-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202322Z-16849878b787wpl5wqkt5731b400000001w0000000001ptm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	52007	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:22 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:22 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:22 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 06960f57-101e-000b-0c20-265e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202322Z-r197bdfb6b4grkz4xgvkar0zcs00000000p0000000004914 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:22 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	52009	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:22 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: e3c75742-001e-0014-79f3-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202322Z-r197bdfb6b46kdskt78qagqq1c000000013000000000bvvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	52010	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:23 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:23 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202323Z-16849878b78p49s6zkwt11bbkn00000000q000000000enza x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	52011	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:23 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:23 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:23 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202323Z-16849878b787wpl5wqkt5731b400000001u0000000009f1x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:23 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	52012	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:23 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:23 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202323Z-15b8d89586frzkk2umu6w8qnt80000000ggg000000007mqp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:23 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	52013	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:23 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202323Z-16849878b785dznd7xpawq9gcn00000002dg00000000d8qx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	52014	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:23 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:23 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202323Z-16849878b78bcpfn2qf7sm6hsn00000002q000000000728z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 20:23:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	52015	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:24 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:24 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 0a130610-701e-001e-4a1f-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202324Z-17c5cb586f6sqz6fff89etrx0800000000p000000000baxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:24 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	52016	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:24 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202324Z-16849878b785jrf8dn0d2rczaw000000025g00000000fzh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	52017	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:24 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:24 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 24b9edea-d01e-002b-4c3d-2625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202324Z-17c5cb586f66g7mvbfuqdb2m3n000000011g00000000f99f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:24 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	52018	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:24 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202324Z-16849878b78qg9mlz11wgn0wcc00000000f000000000g0f0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	52019	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:24 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:24 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: a706a42d-501e-008c-4ef2-24cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202324Z-r197bdfb6b4hsj5bywyqk9r2xw000000029000000000n1kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:24 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	52020	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:24 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:25 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:25 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202325Z-16849878b786vsxz21496wc2qn00000009vg000000005m76 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:25 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	52021	35.190.80.1	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:25 UTC	534	OUT	OPTIONS /report/v4?s=s70mUGCgEkJKJiZ8aPZxfepMUzV8%2FS0mJAjcQpiGBEfgcXVkI%2BKQOLauCvUaX7BbcFM5iXvHCl8UBRn27VmxBjFR0JfGr0JZf5FZx0eIJ%2Fq7DwMt4Fq%2BeNSu%2BoZEwy4%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.canva.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:23:25 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 25 Oct 2024 20:23:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	52022	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:25 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:25 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:25 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202325Z-16849878b78bcpfn2qf7sm6hsn00000002ng00000000dv74 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:25 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	52023	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:25 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:25 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202325Z-16849878b78s2lqfdex4tmpp7800000009ng00000000ukka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	52024	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:25 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 5383ad11-b01e-0053-0c56-26cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202325Z-17c5cb586f6zrq5bnguxgu7frc00000001t0000000009agu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	52025	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:25 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: cb602259-c01e-0046-02b2-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202325Z-16849878b78k46f8kzwxznephs00000009k000000000kqmg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	52027	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:25 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 97925bc6-b01e-0002-7e3b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202325Z-17c5cb586f65j4snyp1hqk5z2s00000002g0000000000dtm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	52028	35.190.80.1	443	2800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:25 UTC	478	OUT	POST /report/v4?s=s70mUGCgEkJKJiZ8aPZxfepMUzV8%2FS0mJAjcQpiGBEfgcXVkI%2BKQOLauCvUaX7BbcFM5iXvHCl8UBRn27VmxBjFR0JfGr0JZf5FZx0eIJ%2Fq7DwMt4Fq%2BeNSu%2BoZEwy4%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 441 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 20:23:25 UTC	441	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 35 31 34 38 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 35 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 31 30 32 2e 31 31 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 Data Ascii: [{"age":55148,"body":{"elapsed_time":751,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.16.102.112","status_code":405,"type":"http.error"},"type":"network-error","url":"https://www.canva.c
2024-10-25 20:23:25 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 25 Oct 2024 20:23:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	52029	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:26 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202326Z-16849878b786lft2mu9uftf3y4000000026g00000000tafn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	52030	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:26 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 03f0aa2d-d01e-007a-29f2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202326Z-15b8d89586fxdh48qknu9dqk2g0000000520000000002m5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	52031	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:26 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 989513d0-f01e-0096-5813-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202326Z-r197bdfb6b4tq6ldv3s2dcykm800000003pg00000000702c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	52032	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:26 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b7b81bb6-b01e-0084-3bc8-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202326Z-r197bdfb6b4kq4j5t834fh90qn0000000d3g00000000bhnt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	52033	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:26 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:26 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202326Z-16849878b78q4pnrt955f8nkx800000009h000000000nz3q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	52034	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:27 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6113d354-c01e-00a1-29f4-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202327Z-15b8d89586fvk4kmbg8pf84y8800000001u000000000h2mu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	52035	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:27 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:27 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 384d3f9c-b01e-003d-2424-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202327Z-r197bdfb6b4bq7nf8mnywhn9e000000001z000000000nmc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:27 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	52036	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:27 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:27 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:27 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 75bf4e1c-f01e-0085-073a-2688ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202327Z-r197bdfb6b4hsj5bywyqk9r2xw00000002f00000000038a7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 20:23:27 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	52037	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:27 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:27 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c1ca1df0-401e-0029-1e3a-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202327Z-r197bdfb6b4mcssrvu34xzqc54000000010g00000000gyk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:27 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	52038	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:27 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c1144745-701e-0098-7f2c-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202327Z-r197bdfb6b4hsj5bywyqk9r2xw00000002a000000000knkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	52039	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:27 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:28 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: fc13fe58-401e-000a-0af3-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202328Z-15b8d89586f989rkfw99rwd68g0000000290000000006dt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:28 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	52040	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:28 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:28 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 3c45f43b-a01e-00ab-363f-269106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202328Z-17c5cb586f6z6tw6g7cmdv30m80000000270000000005b8g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	52041	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:28 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:28 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 201153eb-a01e-0032-53d1-261949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202328Z-r197bdfb6b4grkz4xgvkar0zcs00000000eg000000008pmn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	52042	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:28 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ab726c5d-b01e-0098-175a-26cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202328Z-17c5cb586f6w4mfs5xcmnrny6n00000002h000000000bwvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	52043	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:28 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202328Z-16849878b78x6gn56mgecg60qc00000002tg00000000n3xm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	52044	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:28 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:28 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: fffa9526-501e-0035-49f2-24c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202328Z-r197bdfb6b4wmcgqdschtyp7yg00000000v000000000fk7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	52045	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:29 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:29 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202329Z-16849878b78hz7zj8u0h2zng1400000009vg000000005bau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 20:23:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	52046	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:29 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:29 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 63249b2a-c01e-0046-2e2c-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202329Z-17c5cb586f6zrq5bnguxgu7frc00000001u0000000005nwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:29 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	52047	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:29 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:29 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202329Z-r197bdfb6b4jlq9hb8xf0re6t4000000015g000000000bbk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:29 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	52048	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:29 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:29 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202329Z-16849878b78k46f8kzwxznephs00000009gg00000000txcd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	52050	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:29 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:30 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202329Z-16849878b78x6gn56mgecg60qc00000002rg00000000wv8b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	52051	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:29 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:30 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 4e85c478-401e-002a-713d-26c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202329Z-r197bdfb6b4d9xksru4x6qbqr000000000w000000000nftq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 20:23:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	52052	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:29 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:29 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202329Z-16849878b78nx5sne3fztmu6xc00000001zg00000000fccn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:30 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	52049	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:30 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 28e3a13f-d01e-0049-4f16-25e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202330Z-r197bdfb6b4wmcgqdschtyp7yg0000000100000000000kq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	52053	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:30 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4f86bdfb-c01e-00ad-5e84-25a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202330Z-15b8d89586fx2hlt035xdehq580000000gug000000007ykz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	52055	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:30 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:30 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: e37aa075-401e-0067-7f3f-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202330Z-17c5cb586f6qs7hge7b080kmr000000002zg00000000ft0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:30 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	52054	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:30 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:30 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4104ef10-001e-0046-6521-26da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202330Z-r197bdfb6b4d9xksru4x6qbqr000000000x000000000hs7c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:30 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	52056	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:30 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:30 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 28e57d84-e01e-003c-4a46-26c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202330Z-r197bdfb6b4hdk8h12qtxfwscn00000001h000000000nd83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:31 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	52057	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:30 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:30 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202330Z-16849878b78qfbkc5yywmsbg0c00000000pg00000000kmkh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:31 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	52058	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:31 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:31 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:31 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202331Z-16849878b782d4lwcu6h6gmxnw00000000p000000000nfd7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:31 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	52060	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:31 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:31 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:31 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202331Z-16849878b78qf2gleqhwczd21s00000001ag000000000ggm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:31 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	52059	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:31 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:31 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:31 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: cd066ebd-401e-0035-394c-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202331Z-r197bdfb6b48v72xb403uy6hns00000001p0000000000m7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:31 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	52061	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:31 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:31 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 9bebe7cf-201e-0033-1046-26b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202331Z-r197bdfb6b4mcssrvu34xzqc5400000000z000000000mnz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 20:23:31 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	52062	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:31 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:31 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:31 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202331Z-16849878b7898p5f6vryaqvp5800000001tg00000000pvy7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:31 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	52063	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:32 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:32 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202332Z-16849878b787wpl5wqkt5731b400000001q000000000vbsm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	52064	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:32 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:32 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 9f682ba9-701e-006f-730e-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202332Z-17c5cb586f6f69jxsre6kx2wmc00000003c0000000009r7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	52065	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:32 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:32 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 90c23955-201e-0096-7520-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202332Z-r197bdfb6b4b4pw6nr8czsrctg00000001ng00000000ccxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	52066	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:32 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:32 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: c4fdf5e3-f01e-0003-490d-264453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202332Z-15b8d89586flzzks5bs37v2b90000000058g000000009527 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	52067	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:32 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:32 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202332Z-15b8d89586fxdh48qknu9dqk2g00000004wg00000000f21w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	52068	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:32 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 24d97458-301e-0051-6fef-2638bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202332Z-16849878b78nx5sne3fztmu6xc000000021g0000000084xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:33 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	52069	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:33 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:33 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:33 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 9bc6d014-801e-008f-4946-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202333Z-r197bdfb6b4g24ztpxkw4umce800000002gg00000000eem9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:33 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	52070	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:33 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:33 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:33 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202333Z-16849878b78smng4k6nq15r6s400000002h000000000ewrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 20:23:33 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	52071	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:33 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:33 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202333Z-16849878b78wc6ln1zsrz6q9w800000000t00000000039x4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:33 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	52072	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:33 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:33 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:33 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202333Z-16849878b78nx5sne3fztmu6xc00000001z000000000hx01 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:33 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	52073	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:33 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:33 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202333Z-16849878b78tg5n42kspfr0x48000000012000000000azpe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	52075	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:34 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:34 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9cf5c506-801e-0083-443d-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202334Z-17c5cb586f6mkpfk79wxvcahc000000001gg000000003dnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	52076	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:34 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:34 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202334Z-16849878b78p8hrf1se7fucxk800000001sg0000000103vm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	52074	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:34 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:34 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 275a1f3a-c01e-007a-47a4-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202334Z-16849878b78fssff8btnns3b14000000015g000000010z5x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	52077	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:34 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:34 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 432a0cec-a01e-0098-6be6-258556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202334Z-17c5cb586f67hhlz1ecw6yxtp000000003a000000000htcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	52078	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:34 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:34 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202334Z-16849878b78hz7zj8u0h2zng1400000009q000000000xhws x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	52079	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:35 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:35 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:35 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 27230864-a01e-0070-6533-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202335Z-17c5cb586f6zrq5bnguxgu7frc00000001v0000000003m66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:35 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	52080	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:35 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:35 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:35 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 219fbbc4-201e-0071-49b1-26ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202335Z-16849878b785g992cz2s9gk35c00000009p000000000r2e5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:35 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	52081	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:35 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:35 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:35 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 81a8d0db-401e-0047-0515-258597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202335Z-r197bdfb6b4tq6ldv3s2dcykm800000003s00000000000eg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:35 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	52082	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:35 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:35 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:35 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202335Z-16849878b78nx5sne3fztmu6xc000000020000000000e6n5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:35 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	52083	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:35 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:35 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:35 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ee736da1-b01e-001e-7be0-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202335Z-17c5cb586f64v7xs992vpxwchg00000000xg00000000k5wn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:35 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	52085	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:36 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:36 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:36 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ded904a3-601e-000d-0f3d-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202336Z-17c5cb586f67p8ffw0hbk5rahw000000039g000000007t5m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:36 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	52086	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:36 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:36 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:36 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202336Z-16849878b78hh85qc40uyr8sc800000001a000000000csvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:36 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	52088	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:36 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:36 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202336Z-16849878b78p8hrf1se7fucxk800000001v000000000pp2m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	52087	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:36 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:36 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: a6d15796-a01e-00ab-7f80-269106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202336Z-16849878b786fl7gm2qg4r5y70000000019000000000gt6y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	52089	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:37 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:37 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202337Z-16849878b78smng4k6nq15r6s400000002fg00000000nv32 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	52084	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:37 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:37 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:37 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: b2ef1849-d01e-00ad-023d-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202337Z-r197bdfb6b4gx6v9pg74w9f47s00000002u000000000c6u2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:37 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	52090	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:37 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:37 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 22a25694-101e-007a-3b3f-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202337Z-17c5cb586f6w4mfs5xcmnrny6n00000002m0000000007k8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	52092	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:37 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:37 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202337Z-16849878b785dznd7xpawq9gcn000000029g00000000xubw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	52091	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:37 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:37 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: eb22034c-601e-0070-2f28-26a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202337Z-r197bdfb6b4wmcgqdschtyp7yg00000000x0000000009m6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	52093	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:38 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:38 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 5383d0ca-b01e-0053-2a56-26cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202338Z-r197bdfb6b4c8q4qvwwy2byzsw00000001ag000000000ygx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	52094	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:38 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:38 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202338Z-16849878b78q4pnrt955f8nkx800000009m000000000dbfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 20:23:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	52095	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:38 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:38 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:38 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 5ece5f0b-101e-0028-1a52-268f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202338Z-r197bdfb6b42rt68rzg9338g1g0000000290000000000ey7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:38 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	52097	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:38 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:38 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 2dbb46b4-901e-0067-695f-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202338Z-16849878b787sbpl0sv29sm89s00000009t000000000g2c0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	52096	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 20:23:38 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 20:23:38 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 20:23:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 26ef0c66-a01e-0070-7425-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T202338Z-17c5cb586f64v7xs992vpxwchg00000000z000000000dxs2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 20:23:38 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Target ID:	0
Start time:	16:22:14
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:22:18
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1976,i,3445806602069595460,3655185590131097478,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:22:20
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/lrxlcv.40cddb0fa0d4dfad.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/lib/sentry/7.16.0.min.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/143b3cccb450cc5d.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/205dddee09e475f6.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/387e316e7fce97e3.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/9a2311e7590ee117.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/lrxlcv.6f252c89c2f71f57.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/205dddee09e475f6.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/143b3cccb450cc5d.strings.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; CPA=cnvanoQwrdsh8z5xPgBoIEjqVxp9YHVsLUTp5t2dBEL34xeOhbaDFzDpBvlpCIp60QROjAe_N3JiGEm1XKaXqRPyeJ76evORElpePaUHKHXPztFKQj93_fPugElwRBqkDR8w_LKiNhKZFi_UBMahiy3MbV0YLRhGbbkk4S4kQBgU74vmhK05q-2D5KL8RQI7ZLn4OzWfcDGHjfQ0NC57wEXNMuuMnjK0SVeehw7uiyhy-a-pecFsRaz9ykaaPUQ6MdghG1-n8Ljc47wccYZ9sa2bstJ9m8GL08Dd5wT3uGY2Soap-lxcxqCX1FiCNaTaprbD6G2AFq_ey1ScLDX4Rbe4AyIp1oaKAw70gy2uBKN4YskKu9fSy7v6Qj2AGgj8Spss8E80nSya32fAvqFbDZImxdlxCRFzU8M3GKqx9_StVBDiF2M5limqSFofY5Sla-I7te8l9BQ9d78374b; CCK=R2oerGQIqdEdKxGnExUctg; __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /static/lib/sentry/7.16.0.min.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /static/images/favicon-1.ico HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e1a56f38220d/main.js? HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; CPA=cnvanoQwrdsh8z5xPgBoIEjqVxp9YHVsLUTp5t2dBEL34xeOhbaDFzDpBvlpCIp60QROjAe_N3JiGEm1XKaXqRPyeJ76evORElpePaUHKHXPztFKQj93_fPugElwRBqkDR8w_LKiNhKZFi_UBMahiy3MbV0YLRhGbbkk4S4kQBgU74vmhK05q-2D5KL8RQI7ZLn4OzWfcDGHjfQ0NC57wEXNMuuMnjK0SVeehw7uiyhy-a-pecFsRaz9ykaaPUQ6MdghG1-n8Ljc47wccYZ9sa2bstJ9m8GL08Dd5wT3uGY2Soap-lxcxqCX1FiCNaTaprbD6G2AFq_ey1ScLDX4Rbe4AyIp1oaKAw70gy2uBKN4YskKu9fSy7v6Qj2AGgj8Spss8E80nSya32fAvqFbDZImxdlxCRFzU8M3GKqx9_StVBDiF2M5limqSFofY5Sla-I7te8l9BQ9d78374b; CCK=R2oerGQIqdEdKxGnExUctg; __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/9a2311e7590ee117.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/387e316e7fce97e3.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /api/5403944/envelope/?sentry_key=c50fa9f3bfcc4ee3bd4a5eca6add3a1b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/favicon-1.ico HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e1a56f38220d/main.js? HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; CPA=cnvanoQwrdsh8z5xPgBoIEjqVxp9YHVsLUTp5t2dBEL34xeOhbaDFzDpBvlpCIp60QROjAe_N3JiGEm1XKaXqRPyeJ76evORElpePaUHKHXPztFKQj93_fPugElwRBqkDR8w_LKiNhKZFi_UBMahiy3MbV0YLRhGbbkk4S4kQBgU74vmhK05q-2D5KL8RQI7ZLn4OzWfcDGHjfQ0NC57wEXNMuuMnjK0SVeehw7uiyhy-a-pecFsRaz9ykaaPUQ6MdghG1-n8Ljc47wccYZ9sa2bstJ9m8GL08Dd5wT3uGY2Soap-lxcxqCX1FiCNaTaprbD6G2AFq_ey1ScLDX4Rbe4AyIp1oaKAw70gy2uBKN4YskKu9fSy7v6Qj2AGgj8Spss8E80nSya32fAvqFbDZImxdlxCRFzU8M3GKqx9_StVBDiF2M5limqSFofY5Sla-I7te8l9BQ9d78374b; CCK=R2oerGQIqdEdKxGnExUctg; __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8d84eb191be92cab HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=5da150b1-89c4-4c1b-97fc-10f685d2c69f; CPA=cnvanoQwrdsh8z5xPgBoIEjqVxp9YHVsLUTp5t2dBEL34xeOhbaDFzDpBvlpCIp60QROjAe_N3JiGEm1XKaXqRPyeJ76evORElpePaUHKHXPztFKQj93_fPugElwRBqkDR8w_LKiNhKZFi_UBMahiy3MbV0YLRhGbbkk4S4kQBgU74vmhK05q-2D5KL8RQI7ZLn4OzWfcDGHjfQ0NC57wEXNMuuMnjK0SVeehw7uiyhy-a-pecFsRaz9ykaaPUQ6MdghG1-n8Ljc47wccYZ9sa2bstJ9m8GL08Dd5wT3uGY2Soap-lxcxqCX1FiCNaTaprbD6G2AFq_ey1ScLDX4Rbe4AyIp1oaKAw70gy2uBKN4YskKu9fSy7v6Qj2AGgj8Spss8E80nSya32fAvqFbDZImxdlxCRFzU8M3GKqx9_StVBDiF2M5limqSFofY5Sla-I7te8l9BQ9d78374b; CCK=R2oerGQIqdEdKxGnExUctg; __cf_bm=sW.hIwBSaTURBZj_gmCKSSnN3_FAAWAxr_0x1lLODh0-1729887742-1.0.1.1-0KVu0mT5JOEAPosxLpcnoQRLRE5AGPBC4elapPxux7254wkqrdXV2p1ZoRSc8ePcLviqHuEZvH8dFbQA4yling; _cfuvid=sbIdY9ijQQrOnlkIBuH3updpKVkTm_.ZFpD.gnE6kEM-1729887742979-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: www.canva.com
Source: global traffic	DNS traffic detected: DNS query: static.canva.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: o13855.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

Windows Analysis Report
https://www.canva.com/link?target=https%3A%2F%2Fxxx.f2e48acf9fceba4c863bc3ac7ba32a0f29b4cb01.site&design=DAGUl-uYzdA&accessRole=viewer&linkSource=document