Edit tour

Windows Analysis Report
https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/

Overview

General Information

Sample URL:	https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/
Analysis ID:	1562770
Infos:

Detection

Score:	20
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2028 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2200,i,2661925225389726080,10877470526721508930,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1Host: anz.pfm.lawConnection: keep-aliveContent-Length: 0Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version)sec-ch-ua-platform: "Windows"Accept: */*Origin: https://anz.pfm.lawSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=6jAXzmd0+D+1UfYOMsSQl5nV4T7a2eyIpgQRitHr0pzK82uxqgNLlVn+Pi5JEOaHj+el06C8pgfRXVNQGPdrV6QZcRjv1MOGVxfLZZYu4J4J9nelKqvkdnuLDApR; AWSALBCORS=6jAXzmd0+D+1UfYOMsSQl5nV4T7a2eyIpgQRitHr0pzK82uxqgNLlVn+Pi5JEOaHj+el06C8pgfRXVNQGPdrV6QZcRjv1MOGVxfLZZYu4J4J9nelKqvkdnuLDApR

Source: chromecache_78.1.dr, chromecache_102.1.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_78.1.dr, chromecache_102.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_93.1.dr, chromecache_96.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_93.1.dr, chromecache_96.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_102.1.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_78.1.dr, chromecache_102.1.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_78.1.dr, chromecache_102.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_105.1.dr, chromecache_70.1.dr, chromecache_107.1.dr, chromecache_88.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_102.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_78.1.dr, chromecache_102.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_102.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_111.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/versions#beta-channel
Source: chromecache_93.1.dr, chromecache_96.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_93.1.dr, chromecache_96.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_93.1.dr, chromecache_96.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_89.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_89.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxI9kq1umA.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxIvkq1umA.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJBkq0.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJFkq1umA.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJMkq1umA.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJOkq1umA.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJPkq1umA.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxy7mw9c.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCAIT5lu.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCIIT5lu.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCMIT5lu.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCkIT5lu.woff2)
Source: chromecache_94.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCFPrEHJA.woff2)
Source: chromecache_94.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCGPrEHJA.woff2)
Source: chromecache_94.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCHPrEHJA.woff2)
Source: chromecache_94.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2)
Source: chromecache_94.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCMPrEHJA.woff2)
Source: chromecache_69.1.dr, chromecache_110.1.dr, chromecache_83.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_109.1.dr, chromecache_112.1.dr	String found in binary or memory: https://gist.github.com/mjackson/5311256
Source: chromecache_82.1.dr	String found in binary or memory: https://github.com/Simonwep/pickr
Source: chromecache_109.1.dr, chromecache_112.1.dr	String found in binary or memory: https://github.com/nodeca/js-yaml
Source: chromecache_74.1.dr, chromecache_79.1.dr	String found in binary or memory: https://github.com/szimek/signature_pad
Source: chromecache_69.1.dr, chromecache_110.1.dr, chromecache_83.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_69.1.dr, chromecache_83.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_78.1.dr, chromecache_102.1.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_104.1.dr, chromecache_111.1.dr	String found in binary or memory: https://goo.gle/js-open-now
Source: chromecache_104.1.dr, chromecache_111.1.dr	String found in binary or memory: https://goo.gle/js-open-now.
Source: chromecache_76.1.dr, chromecache_95.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/59/1/main.js
Source: chromecache_76.1.dr, chromecache_95.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/59/1/places.js
Source: chromecache_104.1.dr, chromecache_111.1.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/staticmap
Source: chromecache_104.1.dr, chromecache_111.1.dr	String found in binary or memory: https://places.googleapis.com/v1/places/$
Source: chromecache_109.1.dr, chromecache_112.1.dr	String found in binary or memory: https://planetcalc.com/7779
Source: chromecache_96.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_104.1.dr, chromecache_111.1.dr	String found in binary or memory: https://support.google.com/contributionpolicy/answer/7422880
Source: chromecache_78.1.dr, chromecache_102.1.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_104.1.dr, chromecache_111.1.dr	String found in binary or memory: https://support.google.com/maps/answer/3092445
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_93.1.dr, chromecache_96.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_93.1.dr, chromecache_96.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_93.1.dr, chromecache_96.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_70.1.dr, chromecache_88.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_104.1.dr, chromecache_111.1.dr	String found in binary or memory: https://www.google.com/maps/dir/
Source: chromecache_93.1.dr, chromecache_96.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_93.1.dr, chromecache_96.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/pPK749sccDmVW_9DSeTMVvh2/recaptcha__.
Source: chromecache_75.1.dr, chromecache_90.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/pPK749sccDmVW_9DSeTMVvh2/recaptcha__en.js
Source: chromecache_75.1.dr, chromecache_90.1.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/api2/
Source: chromecache_109.1.dr, chromecache_112.1.dr	String found in binary or memory: https://www.yaml.org/spec/1.2/spec.html#id2803231

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49810 version: TLS 1.2

Source: classification engine

Classification label: sus20.win@16/74@18/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2200,i,2661925225389726080,10877470526721508930,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2200,i,2661925225389726080,10877470526721508930,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/	0%	Avira URL Cloud	safe
https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/	4%	Virustotal		Browse

Source	Detection	Scanner	Label
https://anz.pfm.law/_blazor/negotiate?negotiateVersion=1	0%	Avira URL Cloud	safe
https://anz.pfm.law/_content/Blazorise.Bootstrap/blazorise.bootstrap.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	0%	Avira URL Cloud	safe
https://anz.pfm.law/_content/Blazorise.Icons.FontAwesome/v6/css/all.min.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	0%	Avira URL Cloud	safe
https://anz.pfm.law/_blazor?id=pK0fipVt-34eDd4VgEtMgw	0%	Avira URL Cloud	safe
https://anz.pfm.law/_content/CaseFunnel.CaseSites.Controls/CaseFunnel.CaseSites.Controls.bundle.scp.css	0%	Avira URL Cloud	safe
https://anz.pfm.law/_blazor?id=pK0fipVt-34eDd4VgEtMgw&_=1732579308595	0%	Avira URL Cloud	safe
https://cases.au.casefunnel.io/pfm_brisbane/live/favicon.ico?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	0%	Avira URL Cloud	safe
https://www.yaml.org/spec/1.2/spec.html#id2803231	0%	Avira URL Cloud	safe
https://anz.pfm.law/_framework/blazor.web.js	0%	Avira URL Cloud	safe
https://anz.pfm.law/_content/Blazorise.SpinKit/blazorise.spinkit.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	0%	Avira URL Cloud	safe
https://anz.pfm.law/_content/Blazorise.LoadingIndicator/blazorise.loadingindicator.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	0%	Avira URL Cloud	safe
https://anz.pfm.law/CaseFunnel.CaseSites.Host.styles.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	0%	Avira URL Cloud	safe
https://anz.pfm.law/_content/Blazorise.Snackbar/blazorise.snackbar.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	0%	Avira URL Cloud	safe
https://anz.pfm.law/_content/Blazorise/blazorise.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	0%	Avira URL Cloud	safe
https://anz.pfm.law/_blazor?id=XV31ZbJYMyP6SAXIY6UZnw	0%	Avira URL Cloud	safe
https://anz.pfm.law/_blazor?id=pK0fipVt-34eDd4VgEtMgw&_=1732579305386	0%	Avira URL Cloud	safe
https://anz.pfm.law/_blazor/initializers	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
d1aqjsl8x3ggu4.cloudfront.net	108.158.75.57	true	false	unknown
www.recaptcha.net	172.217.19.227	true	false	high
d3jw5edstn5jte.cloudfront.net	13.227.8.109	true	false	unknown
www.google.com	172.217.21.36	true	false	high
cases.au.casefunnel.io	unknown	unknown	false	unknown
anz.pfm.law	unknown	unknown	true	unknown
cdn.jsdelivr.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://anz.pfm.law/_blazor/negotiate?negotiateVersion=1	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/_content/Blazorise.Bootstrap/blazorise.bootstrap.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/_content/Blazorise.Icons.FontAwesome/v6/css/all.min.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/mermaid@10/dist/mermaid-5a5980d4.js	false		high
https://anz.pfm.law/_blazor?id=pK0fipVt-34eDd4VgEtMgw	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/_content/CaseFunnel.CaseSites.Controls/CaseFunnel.CaseSites.Controls.bundle.scp.css	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/js/bootstrap.min.js	false		high
https://anz.pfm.law/_blazor?id=pK0fipVt-34eDd4VgEtMgw&_=1732579308595	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js	false		high
https://cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/css/bootstrap.min.css	false		high
https://cases.au.casefunnel.io/pfm_brisbane/live/favicon.ico?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/signature_pad@4.0.4/dist/signature_pad.umd.min.js	false		high
https://anz.pfm.law/_framework/blazor.web.js	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/_content/Blazorise.SpinKit/blazorise.spinkit.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/_content/Blazorise.LoadingIndicator/blazorise.loadingindicator.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/CaseFunnel.CaseSites.Host.styles.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/mermaid@10/dist/mermaid.esm.min.mjs	false		high
https://anz.pfm.law/_content/Blazorise.Snackbar/blazorise.snackbar.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/_content/Blazorise/blazorise.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/_blazor?id=XV31ZbJYMyP6SAXIY6UZnw	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/_blazor?id=pK0fipVt-34eDd4VgEtMgw&_=1732579305386	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/_blazor/initializers	false	Avira URL Cloud: safe	unknown
https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.broofa.com	chromecache_78.1.dr, chromecache_102.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_93.1.dr, chromecache_96.1.dr	false		high
https://github.com/szimek/signature_pad	chromecache_74.1.dr, chromecache_79.1.dr	false		high
http://g.co/dev/maps-no-account	chromecache_78.1.dr, chromecache_102.1.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_93.1.dr, chromecache_96.1.dr	false		high
https://planetcalc.com/7779	chromecache_109.1.dr, chromecache_112.1.dr	false		high
https://gist.github.com/mjackson/5311256	chromecache_109.1.dr, chromecache_112.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_102.1.dr	false		high
https://goo.gle/js-open-now.	chromecache_104.1.dr, chromecache_111.1.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_93.1.dr, chromecache_96.1.dr	false		high
https://cloud.google.com/contact	chromecache_93.1.dr, chromecache_96.1.dr	false		high
https://fontawesome.com/license/free	chromecache_89.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_78.1.dr, chromecache_102.1.dr	false		high
https://fontawesome.com	chromecache_89.1.dr	false		high
https://www.google.com	chromecache_70.1.dr, chromecache_88.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_69.1.dr, chromecache_83.1.dr	false		high
https://www.recaptcha.net/recaptcha/api2/	chromecache_75.1.dr, chromecache_90.1.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_93.1.dr, chromecache_96.1.dr	false		high
https://goo.gle/js-api-loading	chromecache_78.1.dr, chromecache_102.1.dr	false		high
https://support.google.com/contributionpolicy/answer/7422880	chromecache_104.1.dr, chromecache_111.1.dr	false		high
https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener	chromecache_102.1.dr	false		high
https://support.google.com/maps/answer/3092445	chromecache_104.1.dr, chromecache_111.1.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_93.1.dr, chromecache_96.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_102.1.dr	false		high
https://support.google.com/recaptcha	chromecache_96.1.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_78.1.dr, chromecache_102.1.dr	false		high
https://developers.google.com/maps/deprecations	chromecache_78.1.dr, chromecache_102.1.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_69.1.dr, chromecache_110.1.dr, chromecache_83.1.dr	false		high
https://www.yaml.org/spec/1.2/spec.html#id2803231	chromecache_109.1.dr, chromecache_112.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/nodeca/js-yaml	chromecache_109.1.dr, chromecache_112.1.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_93.1.dr, chromecache_96.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#	chromecache_105.1.dr, chromecache_70.1.dr, chromecache_107.1.dr, chromecache_88.1.dr	false		high
https://getbootstrap.com/)	chromecache_69.1.dr, chromecache_110.1.dr, chromecache_83.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_93.1.dr, chromecache_96.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_96.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_93.1.dr, chromecache_96.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_111.1.dr	false		high
https://goo.gle/js-open-now	chromecache_104.1.dr, chromecache_111.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_78.1.dr, chromecache_102.1.dr	false		high
https://www.google.com/maps/dir/	chromecache_104.1.dr, chromecache_111.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/pPK749sccDmVW_9DSeTMVvh2/recaptcha__.	chromecache_93.1.dr, chromecache_96.1.dr	false		high
https://github.com/Simonwep/pickr	chromecache_82.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.229	unknown	United States	54113	FASTLYUS	false
172.217.19.227	www.recaptcha.net	United States	15169	GOOGLEUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
108.158.75.57	d1aqjsl8x3ggu4.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.227.8.67	unknown	United States	16509	AMAZON-02US	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
13.227.8.109	d3jw5edstn5jte.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562770
Start date and time:	2024-11-26 01:00:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus20.win@16/74@18/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 93.184.221.240, 216.58.208.227, 74.125.205.84, 172.217.19.238, 34.104.35.123, 172.217.19.170, 142.250.181.74, 172.217.17.42, 172.217.17.74, 172.217.19.234, 172.217.19.202, 142.250.181.106, 142.250.181.131, 172.217.17.67
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, maps.googleapis.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://anz.pfm.law Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://anz.pfm.law

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	187457
Entropy (8bit):	5.2032192990898825
Encrypted:	false
SSDEEP:	3072:j2RaaA+1qioyJE0eKB3lqooM/N0pM0+pm:M1qihJE07B3RB0
MD5:	970AE96B856C881C7D9827261FE17502
SHA1:	EF6EB647127478567951C7C5CF43EAF69E62FD20
SHA-256:	216D1AE942153A1663BC2EBE7C434D30E99D1B749F9D00A61DCC3C7C57C1B751
SHA-512:	A202095EA33AF74D3BAC4FAEEF1F8435FC9BB6A7B2105EFE6D24B56C1F8E6533F5E021663FBCC70D088122B7CE2D1AEDA2ACC9C43B9AF2D5AFE49324B6943B6A
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(o){var r=t[o];if(void 0!==r)return r.exports;var i=t[o]={exports:{}};return e[o](i,i.exports,n),i.exports}n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),(()=>{"use strict";var e,t,o;!function(e){const t=[],n="__jsObjectId",o="__dotNetObject",r="__byte[]",i="__dotNetStream",s="__jsStreamReferenceLength";let a,c;class l{constructor(e){this._jsObject=e,this._cachedFunctions=new Map}findFunction(e){const t=this._cachedFunctions.get(e);if(t)return t;let n,o=this._jsObject;if(e.split(".").forEach((t=>{if(!(t in o))throw new Error(`Could not find '${e}' ('${t}' was undefined).`);n=o,o=o[t]})),o instanceof Function)return o=o.bind(n),this._cachedFunctions.set(e,o),o;throw new Error(`The value '${e}' is not a function.`)}getWrappedObject(){return this._jsObject}}const h={0:new l(window

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://anz.pfm.law/_blazor/initializers
Preview:	[]

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (854)
Category:	dropped
Size (bytes):	230744
Entropy (8bit):	5.575856168375489
Encrypted:	false
SSDEEP:	6144:20jvaMkmt5/2W+1NHZkHzx5NWzgLUP4nOEN6h1qbyc3sAwpFt/no7envRnOKN08s:20jvaMkmt5/2W+PZkHzx5kzgLUP4nOE3
MD5:	4A5FCAE2A48B5CA79FDB9ACCB6077458
SHA1:	BF81CA63E33F11C153E675FD48C5906A4225C5E2
SHA-256:	191A1458C389F54D3036CD028F10A0721297E755CEED1545BC775BE2CF402F37
SHA-512:	5EE78E157EDF24549061DBEF002AEEAA228776DED5C32C87D2692928A113E0F773F4DFA5C6EC0F94E0C9FD4B4BEF929C08A05DE87CAC10FE80E5D767CC28D06E
Malicious:	false
Reputation:	low
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././..Math.uuid.js (v1.4).http://www.broofa.com.mailto:robert@broofa.com.Copyright (c) 2010 Robert Kieffer.Dual licensed under the MIT and GPL licenses../.var aaa,ma,pa,oa,ta,caa,daa,Na,Ab,Eb,eaa,xc,yc,faa,Hc,Ic,Nc,od,kaa,Od,Fd,Gd,Kd,ce,maa,naa,$d,laa,oaa,le,paa,oe,ne,pe,qaa,xe,taa,ef,waa,zaa,ff,yaa,xaa,vaa,uaa,gf,Aaa,vf,Baa,Gf,Lf,Eaa,$f,ag,bg,cg,Gaa,Haa,Laa,Iaa,Kaa,fg,ng,Maa,Naa,pg,Paa,Oaa,Qaa,rg,Saa,Taa,Uaa,Vaa,Waa,Yaa,$aa,cba,vg,zg,Ag,aba,bba,fba,Bg,Fg,Gg,gba,Ig,Hg,hba,jba,lba,pba,rba,qba,tba,sba,yba,zba,Dba,Eba,Zi,Gba,Hba,Iba,Lba,Kba,Mba,Nba,hj,Jba,Oba,Ej,Kj,Uba,ak,Wba,ck,Yba,lk,aca,dca,vk,Jk,Lk,Ik,Mk,$k,nl,lca,ql,tl,ul,wl,zl,qca,Cl,sca,vca,xca,.wca,Il,zca,Ll,Nl,Ol,Aca,Ul,Fca,Yl,

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37828, version 1.0
Category:	downloaded
Size (bytes):	37828
Entropy (8bit):	7.994199601770781
Encrypted:	true
SSDEEP:	768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk
MD5:	50B140B1E97D859D6D0603414F4298EE
SHA1:	500E4872EE1BA9CF89F1BA626D64987B0F9AB5C9
SHA-256:	FDC9964050BFA24C27A3C76C6791B3674292A5F352CBC83D7A4DC49595BC3FB1
SHA-512:	55EF84E956A7943E3FC61A8A349E64E9F35B7DFC63402AB52B995F43A7CD4B1D2ACD300126DCDD610D0B106AF426848F998CCF154F712034422D242D6AD9130D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2..............~....C..........................^...V..D?HVAR.'?MVARF.`?STAT.8'2..L+..\|.../~.....$.u....0..x.6.$.... .....e..([.lq...{En.0..I..h...[....-y2..)..@(.....T...K....$E.U.uA.b...AO..CU"O.W.]7..'............a.@...kF9.3.....xV..7.tg4#Ol.x}o.M...w...Q..))..-.i.R..&.P.......N..[F.C...x..9.\|.;......d$..L.<......=.M.S..HlLHr.#+.S}..+..C....D..'^..~.}..TeT`%.......^..$....0....1 A.. ...bm..]T.E...n;._Qqm....RK.....=....\{.h.O&.D$.U......YS U..i...@.:W........p..pS....-.w.EQwp@.....},.G.@,....0IAV....P...~..0.....8..f...5..Os...5..P...n&wS+.P:.7.e.$t~.s_...z..3..Z.....}.A..2Uj...@{.:Ln.}.t.....i.>Kl.."RQ..h.;.........%...eY.E?...W..00(.z.ml.J.TPP...........G...6.=.Z%...\T....W..q...9D.m...)6..1..\.....v7......U..jr..-i.c.3iL..,\..!...b.d.A...d..C.....Ra:Q.!.M,.e.SMC$$M.w..c.151=.m..o@.G$.X..P'..\|.E."..Z.k......i"......S8..@.d.....2..t..........{..X.]SN..$....K....j5..e..,.%...T..)+.";@.v...9.R..]......,...W.iY...f..r...Q.FY.P.#...X...S

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1004)
Category:	downloaded
Size (bytes):	157181
Entropy (8bit):	5.586828185603878
Encrypted:	false
SSDEEP:	3072:s8xd3OCaG318OX23WAjRSXtOpGTRV19MHEzwshntFYX6YtnxdOmDlJRGPl9PuuV:s8PYG31LX23WAjRSXtOpGTRV19MHEzw0
MD5:	64B864566012864B6A62EAFB72CA2F8C
SHA1:	2A2203E030520C41F5D3E74DE0DEF94049800AFA
SHA-256:	D001C8A5A3CFFD4AC9D878022192D4810AEFE8FF64386A6BE24A3360F7D82555
SHA-512:	7BB6F97E5DA5AF9C39C2B48151E93C06B9E568C5CDBE78B506784CB043F55B1FF1C807792D7094B45494E7AC671F31C6B6D728B8122E3773DB1E1950D6FFB3EC
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/1/places.js
Preview:	google.maps.__gjsload__('places', function(_){var rqa=function(a){const b={notation:"standard",minimumIntegerDigits:1};a.Lg?(b.minimumSignificantDigits=1,b.maximumSignificantDigits=1):a.Kg&&(b.minimumFractionDigits=Math.max(0,a.Fg),b.maximumFractionDigits=3);b.style="decimal";try{let c;(c="en".replace("_","-"))&&c in pqa&&(b.numberingSystem=pqa[c]);a.Eg=new Intl.NumberFormat(c,b)}catch(c){throw a.Eg=null,Error("ECMAScript NumberFormat error: "+c);}qqa=a.Mg=a.Lg=a.Kg=!1},sqa=function(a){a=a.codePointAt(0);if(48<=a&&a<58)return a-48;const b=iz.iC.codePointAt(0);.return b<=a&&a<b+10?a-b:-1},jz=function(a,b){if(!a\|\|!isFinite(a)\|\|b==0)return a;a=String(a).split("e");return parseFloat(a[0]+"e"+(parseInt(a[1]\|\|0,10)+b))},tqa=function(a,b){return a&&isFinite(a)?jz(Math.round(jz(a,b)),-b):a},kz=function(){this.Eg=null;this.Mg=this.Kg=this.Lg=!1;this.Fg=0;this.Jg=iz.RF;this.Ig=1;this.Hg=[];rqa(this)},uqa=function(a,b){const c=a.Jg,d=(0,_.Da)(a.Ig,a);b=b.replace(_.dga,function(){c.push("'");retur

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	195339
Entropy (8bit):	5.631215123326387
Encrypted:	false
SSDEEP:	3072:g3AZzctEut7oE5UetupKwtZx2hCrLKZoqGZhaV2lQD7hqAYZN8HK1hg1Md01m6jf:gQZzcmutf5UetsKwzx2hCreZoqGZhaai
MD5:	CE4DFF39124FC25BB414CB5D839233DF
SHA1:	08343FA62873457B13BB894227E3DAFBBDE17716
SHA-256:	7B367E5B3A94A7704B66F17ADC9D8F44D1F19AF96E59E8E528745B9DADC303D1
SHA-512:	7AC2A1AAC2ED73C50E7B25A0F65AF83636CB3CC7047D57A190AF84E221359B443AF6691C060EC3BD3AA1253D2B5D644484BE496DC773253937051E41F6965139
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/1/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var jxa,kxa,mxa,oxa,HB,pxa,qxa,sxa,JB,LB,txa,MB,NB,uxa,QB,wxa,UB,WB,XB,YB,ZB,$B,bC,cC,xxa,dC,yxa,gC,iC,jC,kC,Axa,Bxa,lC,Cxa,oC,rC,sC,Dxa,vC,Gxa,wC,yC,zC,Ixa,Jxa,Kxa,Mxa,FC,Oxa,GC,Qxa,HC,Sxa,Rxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,Zxa,$xa,aya,bya,cya,dya,eya,fya,gya,hya,iya,jya,kya,LC,nya,NC,oya,pya,qya,rya,sya,tya,uya,vya,wya,xya,yya,Aya,Cya,Eya,Gya,Iya,Kya,Mya,Oya,Qya,Sya,Tya,Uya,Vya,Wya,Xya,Yya,Zya,OC,$ya,aza,bza,cza,dza,eza,gza,QC,RC,hza,iza,jza,kza,lza,mza,nza,oza,pza,qza,rza,SC,sza,TC,tza,uza,vza,wza,xza,.yza,zza,UC,Aza,VC,Bza,Cza,Dza,Eza,Fza,Gza,Hza,Iza,Jza,Kza,Lza,Mza,Nza,Oza,Pza,Qza,Rza,Sza,Tza,Vza,Wza,Xza,Zza,XC,$za,aAa,bAa,cAa,dAa,eAa,iAa,jAa,lAa,oAa,pAa,qAa,hD,rAa,iD,sAa,jD,tAa,uAa,uD,vD,wAa,xD,yD,zD,yAa,zAa,AAa,CD,DD,FD,GD,BAa,HD,JD,CAa,EAa,FAa,HAa,LAa,MAa,PD,QAa,UAa,VAa,WAa,SD,XAa,ZAa,$Aa,aBa,bBa,VD,dBa,iBa,cE,lBa,kBa,dE,mBa,fE,oBa,pBa,qBa,sBa,uBa,EE,vBa,FE,wBa,xBa,yBa,zBa,HE,B

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	9785
Entropy (8bit):	5.399069261500151
Encrypted:	false
SSDEEP:	192:n6XKTq6zbqGIwV40XKt5/a4z00ukZ/44t0Gu24/Z4E0juTk:6TwqY4rzoaJq/6BN
MD5:	FFC5281A3E53A3971FDE2A82FB54D3C4
SHA1:	9706D58BF2ADE349922AFA18EFC8CFCC926E8B4A
SHA-256:	3BAFC2F10BBA9FF3777FA24E276D70E886907BD044AF300AE801E6AF6DBC70B9
SHA-512:	6C0A4954A02E9B2CE419CD6B14D893C4E01A50BCAC4200E74F28EB58FE1DE00B592BCDEAB049FDD15E4625684D3793EE6E02EB1893C6DFEEF051C7C540ECB95A
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Lora\|Raleway:400,600,900"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Lora';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJMkq1umA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Lora';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJFkq1umA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ math */.@font-face {. font-family: 'Lora';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxI9kq1umA.woff2) format('woff2');. unicode-range: U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6,

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	dropped
Size (bytes):	195339
Entropy (8bit):	5.631215123326387
Encrypted:	false
SSDEEP:	3072:g3AZzctEut7oE5UetupKwtZx2hCrLKZoqGZhaV2lQD7hqAYZN8HK1hg1Md01m6jf:gQZzcmutf5UetsKwzx2hCreZoqGZhaai
MD5:	CE4DFF39124FC25BB414CB5D839233DF
SHA1:	08343FA62873457B13BB894227E3DAFBBDE17716
SHA-256:	7B367E5B3A94A7704B66F17ADC9D8F44D1F19AF96E59E8E528745B9DADC303D1
SHA-512:	7AC2A1AAC2ED73C50E7B25A0F65AF83636CB3CC7047D57A190AF84E221359B443AF6691C060EC3BD3AA1253D2B5D644484BE496DC773253937051E41F6965139
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var jxa,kxa,mxa,oxa,HB,pxa,qxa,sxa,JB,LB,txa,MB,NB,uxa,QB,wxa,UB,WB,XB,YB,ZB,$B,bC,cC,xxa,dC,yxa,gC,iC,jC,kC,Axa,Bxa,lC,Cxa,oC,rC,sC,Dxa,vC,Gxa,wC,yC,zC,Ixa,Jxa,Kxa,Mxa,FC,Oxa,GC,Qxa,HC,Sxa,Rxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,Zxa,$xa,aya,bya,cya,dya,eya,fya,gya,hya,iya,jya,kya,LC,nya,NC,oya,pya,qya,rya,sya,tya,uya,vya,wya,xya,yya,Aya,Cya,Eya,Gya,Iya,Kya,Mya,Oya,Qya,Sya,Tya,Uya,Vya,Wya,Xya,Yya,Zya,OC,$ya,aza,bza,cza,dza,eza,gza,QC,RC,hza,iza,jza,kza,lza,mza,nza,oza,pza,qza,rza,SC,sza,TC,tza,uza,vza,wza,xza,.yza,zza,UC,Aza,VC,Bza,Cza,Dza,Eza,Fza,Gza,Hza,Iza,Jza,Kza,Lza,Mza,Nza,Oza,Pza,Qza,Rza,Sza,Tza,Vza,Wza,Xza,Zza,XC,$za,aAa,bAa,cAa,dAa,eAa,iAa,jAa,lAa,oAa,pAa,qAa,hD,rAa,iD,sAa,jD,tAa,uAa,uD,vD,wAa,xD,yD,zD,yAa,zAa,AAa,CD,DD,FD,GD,BAa,HD,JD,CAa,EAa,FAa,HAa,LAa,MAa,PD,QAa,UAa,VAa,WAa,SD,XAa,ZAa,$Aa,aBa,bBa,VD,dBa,iBa,cE,lBa,kBa,dE,mBa,fE,oBa,pBa,qBa,sBa,uBa,EE,vBa,FE,wBa,xBa,yBa,zBa,HE,B

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65245)
Category:	dropped
Size (bytes):	72380
Entropy (8bit):	5.291235892642397
Encrypted:	false
SSDEEP:	1536:KDFXTRMYFbeDtyZxg6V4mMeexs1Lzu3JlQ5uCe/ZiEm4kWpfBogmzmPx3SgQ47Gl:AuIy3JlQ5cF7m+SgQ47GKA
MD5:	FB8409A092ADC6E8BE17E87D59E0595E
SHA1:	CF8D9821552D51BB50CE572E696ABA1309065800
SHA-256:	E3E5F35D586C0E6A9A9D7187687BE087580C40A5F8D0E52F0C4053BBC25C98DB
SHA-512:	FC35D35EBEA742874C522ABE2142580ADD8F3CE523AC727DC05AEAA49DD79203CD39955F32893B711C3A092C72090C579FAA339444AC4A1D7FB0C093175ACBFE
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,v=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),m={},b=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},w=g.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function C(e,t,n){var r,i,o=(

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	328729
Entropy (8bit):	5.102282734296869
Encrypted:	false
SSDEEP:	6144:+MDrqb5SKHsKWWlvpxhiWMQV/87tq5sr40Q/IJCfVML3Y4aJVMtj3383e3z3Lam6:+MDrqb5SKMKWWlvpxhiWMQV/87tq5sr6
MD5:	74251EAF1453DC3578082509E6F95E6A
SHA1:	F46DA29A9FCBAA7C2FDB73813A1794B68C7FB48D
SHA-256:	7DE210A3D00CCFF5CAD4AB489C6668F9820AF7C67C4D21348A0AB54AC1169A16
SHA-512:	8977653966C3DFEB1861F4E271EE2456D59099D2FB0AD3833D7C13D45B7F09F01721CDBC482535F6109E84D7ED214C2CE7795BFB1182EEFE51C42995F9D40DB3
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/mermaid@10/dist/mermaid-5a5980d4.js
Preview:	function bh(t) {. for (var e = [], i = 1; i < arguments.length; i++). e[i - 1] = arguments[i];. var r = Array.from(typeof t == "string" ? [t] : t);. r[r.length - 1] = r[r.length - 1].replace(/\r?\n([\t ])$/, "");. var n = r.reduce(function(a, l) {. var h = l.match(/\n([\t ]+\|(?!\s).)/g);. return h ? a.concat(h.map(function(u) {. var f, c;. return (c = (f = u.match(/[\t ]/g)) === null \|\| f === void 0 ? void 0 : f.length) !== null && c !== void 0 ? c : 0;. })) : a;. }, []);. if (n.length) {. var o = new RegExp(`.[. ]{` + Math.min.apply(Math, n) + "}", "g");. r = r.map(function(a) {. return a.replace(o, `.`);. });. }. r[0] = r[0].replace(/^\r?\n/, "");. var s = r[0];. return e.forEach(function(a, l) {. var h = s.match(/(?:^\|\n)( )$/), u = h ? h[1] : "", f = a;. typeof a == "string" && a.includes(`.`) && (f = String(a).split(`.`).map(function(c, p) {. return p === 0 ? c : "" + u + c;. }).join(`.`)), s += f + r[l + 1];. }), s;.}

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	162017
Entropy (8bit):	5.0777447254323524
Encrypted:	false
SSDEEP:	1536:/C7bIJNTq+rMqFVD2DEBi8yNcuSElAf/uJpq3SYiLENM6HN26B:q7kdGLq3SYiLENM6HN26B
MD5:	D44328CEE87C2B405213893BA35EAF78
SHA1:	1FB83FC595CF28BF9362D87610EADFA3B7BBBE59
SHA-256:	0C5ED985FDBDDC027124D4E6879CE1A1860832CDA85E2B517C18D8FBD2FFFC06
SHA-512:	4F9F38C90FED7514794303A97EF0DF5505227737E0736DF7F4B73CB810ED729FF062EF3477B8F00600316F2321D1AF5833D17C377B5D12BA4523C89A1B1EB1E6
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.6.1 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::be

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1004)
Category:	dropped
Size (bytes):	157181
Entropy (8bit):	5.586828185603878
Encrypted:	false
SSDEEP:	3072:s8xd3OCaG318OX23WAjRSXtOpGTRV19MHEzwshntFYX6YtnxdOmDlJRGPl9PuuV:s8PYG31LX23WAjRSXtOpGTRV19MHEzw0
MD5:	64B864566012864B6A62EAFB72CA2F8C
SHA1:	2A2203E030520C41F5D3E74DE0DEF94049800AFA
SHA-256:	D001C8A5A3CFFD4AC9D878022192D4810AEFE8FF64386A6BE24A3360F7D82555
SHA-512:	7BB6F97E5DA5AF9C39C2B48151E93C06B9E568C5CDBE78B506784CB043F55B1FF1C807792D7094B45494E7AC671F31C6B6D728B8122E3773DB1E1950D6FFB3EC
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('places', function(_){var rqa=function(a){const b={notation:"standard",minimumIntegerDigits:1};a.Lg?(b.minimumSignificantDigits=1,b.maximumSignificantDigits=1):a.Kg&&(b.minimumFractionDigits=Math.max(0,a.Fg),b.maximumFractionDigits=3);b.style="decimal";try{let c;(c="en".replace("_","-"))&&c in pqa&&(b.numberingSystem=pqa[c]);a.Eg=new Intl.NumberFormat(c,b)}catch(c){throw a.Eg=null,Error("ECMAScript NumberFormat error: "+c);}qqa=a.Mg=a.Lg=a.Kg=!1},sqa=function(a){a=a.codePointAt(0);if(48<=a&&a<58)return a-48;const b=iz.iC.codePointAt(0);.return b<=a&&a<b+10?a-b:-1},jz=function(a,b){if(!a\|\|!isFinite(a)\|\|b==0)return a;a=String(a).split("e");return parseFloat(a[0]+"e"+(parseInt(a[1]\|\|0,10)+b))},tqa=function(a,b){return a&&isFinite(a)?jz(Math.round(jz(a,b)),-b):a},kz=function(){this.Eg=null;this.Mg=this.Kg=this.Lg=!1;this.Fg=0;this.Jg=iz.RF;this.Ig=1;this.Hg=[];rqa(this)},uqa=function(a,b){const c=a.Jg,d=(0,_.Da)(a.Ig,a);b=b.replace(_.dga,function(){c.push("'");retur

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	dropped
Size (bytes):	328729
Entropy (8bit):	5.102282734296869
Encrypted:	false
SSDEEP:	6144:+MDrqb5SKHsKWWlvpxhiWMQV/87tq5sr40Q/IJCfVML3Y4aJVMtj3383e3z3Lam6:+MDrqb5SKMKWWlvpxhiWMQV/87tq5sr6
MD5:	74251EAF1453DC3578082509E6F95E6A
SHA1:	F46DA29A9FCBAA7C2FDB73813A1794B68C7FB48D
SHA-256:	7DE210A3D00CCFF5CAD4AB489C6668F9820AF7C67C4D21348A0AB54AC1169A16
SHA-512:	8977653966C3DFEB1861F4E271EE2456D59099D2FB0AD3833D7C13D45B7F09F01721CDBC482535F6109E84D7ED214C2CE7795BFB1182EEFE51C42995F9D40DB3
Malicious:	false
Reputation:	low
Preview:	function bh(t) {. for (var e = [], i = 1; i < arguments.length; i++). e[i - 1] = arguments[i];. var r = Array.from(typeof t == "string" ? [t] : t);. r[r.length - 1] = r[r.length - 1].replace(/\r?\n([\t ])$/, "");. var n = r.reduce(function(a, l) {. var h = l.match(/\n([\t ]+\|(?!\s).)/g);. return h ? a.concat(h.map(function(u) {. var f, c;. return (c = (f = u.match(/[\t ]/g)) === null \|\| f === void 0 ? void 0 : f.length) !== null && c !== void 0 ? c : 0;. })) : a;. }, []);. if (n.length) {. var o = new RegExp(`.[. ]{` + Math.min.apply(Math, n) + "}", "g");. r = r.map(function(a) {. return a.replace(o, `.`);. });. }. r[0] = r[0].replace(/^\r?\n/, "");. var s = r[0];. return e.forEach(function(a, l) {. var h = s.match(/(?:^\|\n)( )$/), u = h ? h[1] : "", f = a;. typeof a == "string" && a.includes(`.`) && (f = String(a).split(`.`).map(function(c, p) {. return p === 0 ? c : "" + u + c;. }).join(`.`)), s += f + r[l + 1];. }), s;.}

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65245)
Category:	downloaded
Size (bytes):	72380
Entropy (8bit):	5.291235892642397
Encrypted:	false
SSDEEP:	1536:KDFXTRMYFbeDtyZxg6V4mMeexs1Lzu3JlQ5uCe/ZiEm4kWpfBogmzmPx3SgQ47Gl:AuIy3JlQ5cF7m+SgQ47GKA
MD5:	FB8409A092ADC6E8BE17E87D59E0595E
SHA1:	CF8D9821552D51BB50CE572E696ABA1309065800
SHA-256:	E3E5F35D586C0E6A9A9D7187687BE087580C40A5F8D0E52F0C4053BBC25C98DB
SHA-512:	FC35D35EBEA742874C522ABE2142580ADD8F3CE523AC727DC05AEAA49DD79203CD39955F32893B711C3A092C72090C579FAA339444AC4A1D7FB0C093175ACBFE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js
Preview:	/! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,v=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),m={},b=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},w=g.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function C(e,t,n){var r,i,o=(

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62161)
Category:	downloaded
Size (bytes):	62440
Entropy (8bit):	5.125685141410089
Encrypted:	false
SSDEEP:	768:RQDfR+YhTVSwU7NUgu7MTCmDBKRMIBOiAAcFcQsI20xIl6jnV3IR8oXBO:RIfRVWw1AHumVsYxdVSXBO
MD5:	99E3544139E4735274587A831002EBAE
SHA1:	24A900BDFCEFD52CBCFF3BC36440AF9B87CD5067
SHA-256:	4B24EEE82C2B7CE85ACE76193E8A25570DABC6863B94A60A42FA9BB6A37DDC72
SHA-512:	511DB950EF787939C25708DB5E8CF279577A66AA5A004F676A211404AFC0F900DB7D24D01613C68F994E47A77CB6C81B064F381A06F90371248EC3A03D13DC28
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.6.1 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var o=i(e),a=i(n);function s(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function l(t,e,n){return e&&s(t.prototype,e),n&&s(t,n),t}function r(){return r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.p

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10643)
Category:	dropped
Size (bytes):	274617
Entropy (8bit):	5.408496759284294
Encrypted:	false
SSDEEP:	6144:Un6e7IhYBtqhKCNgYCsGsRtBXCiPy8HmHEuYyrs2/6M/6VZA1a:Un6e7IhYBtqhKJY1XCiPy8GHEuYyrs2c
MD5:	53F03F3BF5AC50ECFE0EA1E1E2ED79E6
SHA1:	BD57A795674792A15CF3E53B5565E39C1B66E1D5
SHA-256:	0061A2D076D7E51D46D0F48ECB18F343E53FBB63FC93B7851073FE1FE5C78BFD
SHA-512:	EB471BDB13E6E927550D97D5E10CAD69A8A863048B0E4A98CE3CA3C4AE20FB5D97BF3FB9420209AE112D7AB4602C2EE10AA3B61F6D187704384EBE30D38D78EC
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('common', function(_){var Kia,Jia,Mia,Sia,Zia,$ia,cja,Cr,dja,Dr,eja,Er,fja,Fr,Ir,Kr,hja,ija,lja,mja,oja,us,qja,sja,tja,Fs,xja,jt,Fja,Hja,Gja,Lja,Mja,Pja,Qja,Rja,Ot,Ut,Wja,Vt,Yt,Xja,Zt,Yja,bu,dka,eka,ju,fka,gka,Xka,Yka,vla,zla,Ala,Bla,Cla,Dla,Lw,Hla,Mw,Ila,Jla,Lla,Nla,Mla,Pla,Ola,Kla,Qla,Sla,Ula,bma,fma,gma,pma,nma,gx,hx,rma,sma,tma,uma,wma,xma,Pw,Qw,Rla,Ow,jw,Pia,yma,Qia,Vla,Ria,Wia,Yia,Dma,Ema,Fma,Gma,Hma,ox,xv,Kma,Lma,Mma,uja,zs;.Kia=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.Pg(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Jia(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Jia(f,a,d+1));e&&b.push(e);return b};Jia=function(a,b,c){a instanceof _.dh&&(a=a.Jl(b,+c));return Array.isArray(a)?Kia(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.gc(a):a instanceof _.ic?_.qc(a):a};_.Kq=function(a){return!!a.handled};._.Lia=function(a,b){functio

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	4.285441009393909
Encrypted:	false
SSDEEP:	3:5smnAFvRnmKYmEDUAFvRnmKYwQLAh6:pAFJmKsUAFJmKULAU
MD5:	54F4098C24EA453E1A9B9B19E5042376
SHA1:	9D1B25A4E16494C634858949AFE184DE7872F3E2
SHA-256:	C41F02006FE41868EE9981B82C15C1934EE8B61AC83F09D5B8ED70D2A13A21E9
SHA-512:	5D774B361794CE92F5F1D44A8166C1D8D0E2F9A61D21C311154BA3C215F661437E671461A667BBACFB98A8703CA2503FB694A13C88D984B6AEAF1143E309C913
Malicious:	false
Reputation:	low
URL:	https://anz.pfm.law/CaseFunnel.CaseSites.Host.styles.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee
Preview:	@import '_content/CaseFunnel.CaseSites.Controls/CaseFunnel.CaseSites.Controls.bundle.scp.css';..

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	7406
Entropy (8bit):	3.6015754861866096
Encrypted:	false
SSDEEP:	48:26vnB0TVnclmAItZyhlaSqXqG6G736g1TDUlxnvpW:2SBinvASZyqXqkeghaxvp
MD5:	2EB32B29028D571990ABC761C58BB486
SHA1:	56117264B6DC440C9F9E997E296B7A7B090482B2
SHA-256:	C12E9AE7C9A54C5782F9359798361B0C109BD77854C0CF43415F3BE8B1D2D148
SHA-512:	7612D844436F2E366D1AB99E04F31A87394D5E7F0A3AC0FA7C2C06CD4A5DF66A22D9E6DB51A5E3315CE6F12C794B24B6AD6049B10D48A3028906FE4735C911AD
Malicious:	false
Reputation:	low
Preview:	......00..........6... ......................h.......(...0...`...............................> .....@ ..rbR.;#...yi.;'..teR.<'.........ZC-.....[G0.9...:...6!..;...<...=...>...?...@...A.......=$..>%......fQ<........5...K2..9...;...9.....v.:...<...;...<.......=...=!..>!..>...?...N7..A!..A...>#..M9#.:%......S>).........XA)....{k].fXI.YB,............9...<...;...=...<...=!..>...>!..?!..@!..B...A!..=#..B!..................E'......\|j[.E/..[D...{.8.......8...:...<...^K6.<!..=!..>!..;!..?!..M8".B...A!..<%..B(......E/..J0..8...<...:...;...< ..= ..> ..=!..? ..@ ..>!.......wh.....Q8#.@'..bQ@.........8.....w.9...;...; ..< ..?...= ..> ..?...? ..^L;.@ ..B .........@(......\|o.Q@.gS>.........E,..hXD......r[.9...:...9 ..; ..< .....= ..K7".> ..<!..;"..? ..@ ..A ..........YB(.....J0..9...p\H.;.......;...9 ......;...: ..; ..=...< ..>..._L4.;!..= ..="..> ..? ..@ ..A".._P7.B"..sbQ.......\|.>#......?&..R>&...q.................L1..;...<...=...; ..>...8"................................................

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	760
Entropy (8bit):	4.743484468640647
Encrypted:	false
SSDEEP:	12:r+E1Avb1fdfyaEvtqRZvmFA/sJG/oDn143yVbtFb7d3WthS3m9y8IB3W3KrKVfY:aIARL0tsZvfs++nq34F/gu3mDIc3FVfY
MD5:	57474855A1362C0F3E583B2CF20B027B
SHA1:	9DBB5B3F31EE78AAE3E24D61B11AFC473A3043A7
SHA-256:	0E0B5465CE71A2C694FACCAE9AE2D9483F168F9751E32884A6728BA21887B0D9
SHA-512:	F6BE52B251E58F9C2CDDB468848BE8B9986CEEDA98604DC1A6A02101AE773BD7E226377F6C8EADF73EBA05A631C4A0C8A29E864DB1D6A3CE705E2998DE19C2FD
Malicious:	false
Reputation:	low
URL:	https://anz.pfm.law/_content/Blazorise.LoadingIndicator/blazorise.loadingindicator.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee
Preview:	@keyframes b-loading-indicator-overlay-fadein {.. 0% {.. opacity: 0;.. }.. 100% {.. opacity: 1;.. } ..}.....b-loading-indicator-overlay {.. top: 0;.. left: 0;.. width: 100%;.. height: 100%;.. display: flex;..}.....b-loading-indicator-wrapper-relative {.. position: relative;..}.....b-loading-indicator-wrapper-inline {.. display: inline-block;..}.....b-loading-indicator-overlay-fixed {.. position: fixed;.. z-index: 2147483647;..}.....b-loading-indicator-overlay-relative {.. position: absolute;..}....@keyframes b-loading-indicator-blazorise-flipper {.. 100% {.. transform: rotateY(360deg);.. } ..}.....b-loading-indicator-blazorise {.. animation: b-loading-indicator-blazorise-flipper 1200ms linear infinite;..}

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10635)
Category:	downloaded
Size (bytes):	10818
Entropy (8bit):	5.171571795979709
Encrypted:	false
SSDEEP:	192:z7qKGShJuJDB1z9vLiEZwQAe83T/AoMOXRY9YUD9R3ryX6trFLEnSd60KMsIB5W:z7dt3uJD9LjwQAe83T/AoMOXRY9Yo3rQ
MD5:	7A202404879F21A9713C3A4E25299F67
SHA1:	F141F88EF335352D2564DB644ED650A8C16A5B13
SHA-256:	C6E420644D950B54A8CB0F0B09095C3D7A5FA8EE871108451317CB55C4976377
SHA-512:	FF1910C923B232AD83FA15D5B62FBC3BD0151AE0000CECB7741EC67D806EF33EA0B6E0202B3A6C63395ECFCC6706AF3D092010120DB027EBB714CE6B3176B984
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/signature_pad@4.0.4/dist/signature_pad.umd.min.js
Preview:	/!. Signature Pad v4.0.4 \| https://github.com/szimek/signature_pad. * (c) 2022 Szymon Nowak \| Released under the MIT license. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).SignaturePad=e()}(this,(function(){"use strict";class t{constructor(t,e,i,n){if(isNaN(t)\|\|isNaN(e))throw new Error(`Point is invalid: (${t}, ${e})`);this.x=+t,this.y=+e,this.pressure=i\|\|0,this.time=n\|\|Date.now()}distanceTo(t){return Math.sqrt(Math.pow(this.x-t.x,2)+Math.pow(this.y-t.y,2))}equals(t){return this.x===t.x&&this.y===t.y&&this.pressure===t.pressure&&this.time===t.time}velocityFrom(t){return this.time!==t.time?this.distanceTo(t)/(this.time-t.time):0}}class e{constructor(t,e,i,n,s,o){this.startPoint=t,this.control2=e,this.control1=i,this.endPoint=n,this.startWidth=s,this.endWidth=o}static fromPoints(t,i){const n=this.calculateControlPoints(t[0],t[1],t[2]).c2,s=t

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1750), with no line terminators
Category:	dropped
Size (bytes):	1750
Entropy (8bit):	5.873192176001267
Encrypted:	false
SSDEEP:	48:VKEAhixKo75XI2ovtUjPKtXsDXx/gDq1p9jLrwUnG:fAQgMI5czmIp9XsuG
MD5:	77FBFA7F6F53D9B414994D14B6154AF5
SHA1:	C84C3D3DE8E2F22849173C554FC0F928830DD65D
SHA-256:	C94B6770CD31264850C4F7D1EEC9718A6F211EE64C9229EA2AF284A60CA2201C
SHA-512:	D4BDA260169C926BF5DCAE4351D8B05BC32804F272E7BA971FF30C85D447E1F17728B2F8986418A5B9A259B00CC6999E3DB264AFD13FA4EE9EAE79D87C60DECE
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.p

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10696)
Category:	dropped
Size (bytes):	11766
Entropy (8bit):	5.929339246297934
Encrypted:	false
SSDEEP:	192:2IGIsmhPPAICxOUPvROGXNXaDYNFa2kdmdBkiqnvDBMnVMnKi2pjb3CDiqnRnk2Q:lVsm5A3x7PJOGXNXJNFa2kAPkiONWdis
MD5:	A4CA8C5B200999A9BA2F7B1B1D25A438
SHA1:	A838C7199006D99A19DEEAF7793FA310825E2E50
SHA-256:	585F3FA5E0D8ACE62B9F72640366AB6E5A5D97AB7B40BE4AFDF21CA8279CC1C9
SHA-512:	DBA2E3E580D21202BFFDC9436A4966175CF6BA59CFC3EA535A4BE2D64C6E2ADAA1B2188F250EB5B3CA3B29B59B39FD1028EC04FE00A4B0BF81C10B592F8F9FE1
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. var rules = {. createHTML: function(src) {. return src;. },. createScriptURL: function(src) {. return src;. }. };. var ttPolicy;. . try {. ttPolicy = window.trustedTypes.createPolicy('google-maps-api-loader', rules);. } catch(e) {. ttPolicy = rules;. }. . function getScript(src) {. var a, nonce = ((a = document.querySelector("script[nonce]")) == null ? void 0 : a.nonce) \|\| "";. var s = document.createElement('script');. . s.src = ttPolicy.createScriptURL(src);. s.nonce = nonce;. document.head.appendChild(s);. }. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=991\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=991\u00

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	7406
Entropy (8bit):	3.6015754861866096
Encrypted:	false
SSDEEP:	48:26vnB0TVnclmAItZyhlaSqXqG6G736g1TDUlxnvpW:2SBinvASZyqXqkeghaxvp
MD5:	2EB32B29028D571990ABC761C58BB486
SHA1:	56117264B6DC440C9F9E997E296B7A7B090482B2
SHA-256:	C12E9AE7C9A54C5782F9359798361B0C109BD77854C0CF43415F3BE8B1D2D148
SHA-512:	7612D844436F2E366D1AB99E04F31A87394D5E7F0A3AC0FA7C2C06CD4A5DF66A22D9E6DB51A5E3315CE6F12C794B24B6AD6049B10D48A3028906FE4735C911AD
Malicious:	false
Reputation:	low
URL:	https://cases.au.casefunnel.io/pfm_brisbane/live/favicon.ico?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee
Preview:	......00..........6... ......................h.......(...0...`...............................> .....@ ..rbR.;#...yi.;'..teR.<'.........ZC-.....[G0.9...:...6!..;...<...=...>...?...@...A.......=$..>%......fQ<........5...K2..9...;...9.....v.:...<...;...<.......=...=!..>!..>...?...N7..A!..A...>#..M9#.:%......S>).........XA)....{k].fXI.YB,............9...<...;...=...<...=!..>...>!..?!..@!..B...A!..=#..B!..................E'......\|j[.E/..[D...{.8.......8...:...<...^K6.<!..=!..>!..;!..?!..M8".B...A!..<%..B(......E/..J0..8...<...:...;...< ..= ..> ..=!..? ..@ ..>!.......wh.....Q8#.@'..bQ@.........8.....w.9...;...; ..< ..?...= ..> ..?...? ..^L;.@ ..B .........@(......\|o.Q@.gS>.........E,..hXD......r[.9...:...9 ..; ..< .....= ..K7".> ..<!..;"..? ..@ ..A ..........YB(.....J0..9...p\H.;.......;...9 ......;...: ..; ..=...< ..>..._L4.;!..= ..="..> ..? ..@ ..A".._P7.B"..sbQ.......\|.>#......?&..R>&...q.................L1..;...<...=...; ..>...8"................................................

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (854)
Category:	downloaded
Size (bytes):	230744
Entropy (8bit):	5.575856168375489
Encrypted:	false
SSDEEP:	6144:20jvaMkmt5/2W+1NHZkHzx5NWzgLUP4nOEN6h1qbyc3sAwpFt/no7envRnOKN08s:20jvaMkmt5/2W+PZkHzx5kzgLUP4nOE3
MD5:	4A5FCAE2A48B5CA79FDB9ACCB6077458
SHA1:	BF81CA63E33F11C153E675FD48C5906A4225C5E2
SHA-256:	191A1458C389F54D3036CD028F10A0721297E755CEED1545BC775BE2CF402F37
SHA-512:	5EE78E157EDF24549061DBEF002AEEAA228776DED5C32C87D2692928A113E0F773F4DFA5C6EC0F94E0C9FD4B4BEF929C08A05DE87CAC10FE80E5D767CC28D06E
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/1/main.js
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././..Math.uuid.js (v1.4).http://www.broofa.com.mailto:robert@broofa.com.Copyright (c) 2010 Robert Kieffer.Dual licensed under the MIT and GPL licenses../.var aaa,ma,pa,oa,ta,caa,daa,Na,Ab,Eb,eaa,xc,yc,faa,Hc,Ic,Nc,od,kaa,Od,Fd,Gd,Kd,ce,maa,naa,$d,laa,oaa,le,paa,oe,ne,pe,qaa,xe,taa,ef,waa,zaa,ff,yaa,xaa,vaa,uaa,gf,Aaa,vf,Baa,Gf,Lf,Eaa,$f,ag,bg,cg,Gaa,Haa,Laa,Iaa,Kaa,fg,ng,Maa,Naa,pg,Paa,Oaa,Qaa,rg,Saa,Taa,Uaa,Vaa,Waa,Yaa,$aa,cba,vg,zg,Ag,aba,bba,fba,Bg,Fg,Gg,gba,Ig,Hg,hba,jba,lba,pba,rba,qba,tba,sba,yba,zba,Dba,Eba,Zi,Gba,Hba,Iba,Lba,Kba,Mba,Nba,hj,Jba,Oba,Ej,Kj,Uba,ak,Wba,ck,Yba,lk,aca,dca,vk,Jk,Lk,Ik,Mk,$k,nl,lca,ql,tl,ul,wl,zl,qca,Cl,sca,vca,xca,.wca,Il,zca,Ll,Nl,Ol,Aca,Ul,Fca,Yl,

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10635)
Category:	dropped
Size (bytes):	10818
Entropy (8bit):	5.171571795979709
Encrypted:	false
SSDEEP:	192:z7qKGShJuJDB1z9vLiEZwQAe83T/AoMOXRY9YUD9R3ryX6trFLEnSd60KMsIB5W:z7dt3uJD9LjwQAe83T/AoMOXRY9Yo3rQ
MD5:	7A202404879F21A9713C3A4E25299F67
SHA1:	F141F88EF335352D2564DB644ED650A8C16A5B13
SHA-256:	C6E420644D950B54A8CB0F0B09095C3D7A5FA8EE871108451317CB55C4976377
SHA-512:	FF1910C923B232AD83FA15D5B62FBC3BD0151AE0000CECB7741EC67D806EF33EA0B6E0202B3A6C63395ECFCC6706AF3D092010120DB027EBB714CE6B3176B984
Malicious:	false
Reputation:	low
Preview:	/!. Signature Pad v4.0.4 \| https://github.com/szimek/signature_pad. * (c) 2022 Szymon Nowak \| Released under the MIT license. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).SignaturePad=e()}(this,(function(){"use strict";class t{constructor(t,e,i,n){if(isNaN(t)\|\|isNaN(e))throw new Error(`Point is invalid: (${t}, ${e})`);this.x=+t,this.y=+e,this.pressure=i\|\|0,this.time=n\|\|Date.now()}distanceTo(t){return Math.sqrt(Math.pow(this.x-t.x,2)+Math.pow(this.y-t.y,2))}equals(t){return this.x===t.x&&this.y===t.y&&this.pressure===t.pressure&&this.time===t.time}velocityFrom(t){return this.time!==t.time?this.distanceTo(t)/(this.time-t.time):0}}class e{constructor(t,e,i,n,s,o){this.startPoint=t,this.control2=e,this.control1=i,this.endPoint=n,this.startWidth=s,this.endWidth=o}static fromPoints(t,i){const n=this.calculateControlPoints(t[0],t[1],t[2]).c2,s=t

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12650
Entropy (8bit):	5.004685061246951
Encrypted:	false
SSDEEP:	384:oN3u2mVugzr76xh0SGpx38K/pfV/A8Yznbhx9xsSXQmt5e4TzcCZVqvfkYct7gMp:oN3u2mVugzr76xh0SGpx38K/pfV/A8Yz
MD5:	504F0BC1E455EF1AEE11EAE8DBB97AAC
SHA1:	AFD8700032CFC2A476E59A6016B60288FEB99954
SHA-256:	80228B563F9D8133C83F1A7E9ECEB4E1D4A1725981D75A19A5055103EE2FE6E6
SHA-512:	C05A4FE4768EB4896F529F8A0AFB93B9F2C2B8128FF5B4BA486BB4E0A518F2F0F3F1982CC60AE189337C2DD08682CD074EBEFFBFA8D8EB3A847896A6C91B9E0F
Malicious:	false
Reputation:	low
URL:	https://anz.pfm.law/_content/Blazorise.SpinKit/blazorise.spinkit.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee
Preview:	.:root {.. --sk-size: var(--b-spinkit-size, 40px);.. --sk-color: var(--b-spinkit-color, #333);..}..../* Utility class for centering /...sk-center {.. margin: auto;..}..../ Plane /...sk-plane {.. width: var(--sk-size);.. height: var(--sk-size);.. background-color: var(--sk-color);.. animation: sk-plane 1.2s infinite ease-in-out;..}....@keyframes sk-plane {.. 0% {.. transform: perspective(120px) rotateX(0deg) rotateY(0deg);.. }.. 50% {.. transform: perspective(120px) rotateX(-180.1deg) rotateY(0deg);.. }.. 100% {.. transform: perspective(120px) rotateX(-180deg) rotateY(-179.9deg);.. }..}../ Chase */...sk-chase {.. width: var(--sk-size);.. height: var(--sk-size);.. position: relative;.. animation: sk-chase 2.5s infinite linear both;..}.....sk-chase-dot {.. width: 100%;.. height: 100%;.. position: absolute;.. left: 0;.. top: 0;.. animation: sk-chase-dot 2s infinite ease-in-out both;..}.....sk-chase-dot:before {.. content: "";.. display: block;.. w

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	70280
Entropy (8bit):	5.056683093499005
Encrypted:	false
SSDEEP:	384:tJyPXyiKHNsNDNcSNcfNcR3Wmn8mn98jO6wFOXyWxGJ0HrjGuHEio+:2pn6wFOXyWHrjGk
MD5:	D915719B342807440BCF795CA17FAF45
SHA1:	EC1F58EFAB9A86C1E6C2E0CD59DA0DB0C1C1501A
SHA-256:	9B889CE9B029822CC33447BDDD2357025EDC7FD4D5E2090E69E230025219C88A
SHA-512:	57B23649C55A3E44CA50579AE6F595649A87D3483DA72B10DAB823B88E2225D5F1D208B1BF80EF6619A58FB291EE66BD760859E9A797AF3138169B36B84B8ED2
Malicious:	false
Reputation:	low
URL:	https://anz.pfm.law/_content/Blazorise/blazorise.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee
Preview:	.body:before {.. content: "mobile";.. display: none;.. visibility: hidden;..}....@media (min-width: 768px) {.. body:before {.. content: "tablet";.. }..}..@media (min-width: 992px) {.. body:before {.. content: "desktop";.. }..}..@media (min-width: 1200px) {.. body:before {.. content: "widescreen";.. }..}..@media (min-width: 1400px) {.. body:before {.. content: "fullhd";.. }..}..hr.divider.divider-solid {.. border-top: var(--b-divider-thickness, 1px) solid var(--b-divider-color, #999);..}..hr.divider.divider-dashed {.. border-top: var(--b-divider-thickness, 1px) dashed var(--b-divider-color, #999);..}..hr.divider.divider-dotted {.. border-top: var(--b-divider-thickness, 1px) dotted var(--b-divider-color, #999);..}..hr.divider.divider-text {.. position: relative;.. border: none;.. height: var(--b-divider-thickness, 1px);.. background: var(--b-divider-color, #999);..}..hr.divider.divider-text::before {.. content: attr(data-content);.. display: inline-block

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62161)
Category:	dropped
Size (bytes):	62440
Entropy (8bit):	5.125685141410089
Encrypted:	false
SSDEEP:	768:RQDfR+YhTVSwU7NUgu7MTCmDBKRMIBOiAAcFcQsI20xIl6jnV3IR8oXBO:RIfRVWw1AHumVsYxdVSXBO
MD5:	99E3544139E4735274587A831002EBAE
SHA1:	24A900BDFCEFD52CBCFF3BC36440AF9B87CD5067
SHA-256:	4B24EEE82C2B7CE85ACE76193E8A25570DABC6863B94A60A42FA9BB6A37DDC72
SHA-512:	511DB950EF787939C25708DB5E8CF279577A66AA5A004F676A211404AFC0F900DB7D24D01613C68F994E47A77CB6C81B064F381A06F90371248EC3A03D13DC28
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.6.1 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var o=i(e),a=i(n);function s(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function l(t,e,n){return e&&s(t.prototype,e),n&&s(t,n),t}function r(){return r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.p

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11949
Entropy (8bit):	4.948864740510569
Encrypted:	false
SSDEEP:	192:S7Ix7IHYEXLzp3nKJUiEbsIjpviQMHSgQaw2DzprK9JoPhfuKL+TIQLKZC9EnSG7:JSA1KbosI
MD5:	6F0BF3C322A0DB99B2D3BA31F99E171E
SHA1:	E77E39188FF1F40CACEC8ED9CB3979D4DABA9072
SHA-256:	F12F0171D5D19F3F1D8D10E78C43DD529CADC181A9C17C87BF2A3B43B7E6FD8A
SHA-512:	904F0AA14963048D8A510C2DDFD502F586B2176B9FA2E625E5C4262041FFB213A62CB357B1F751EF413DC6CC15A07DD763A055B27EA06085EE69596AC9FDF57D
Malicious:	false
Reputation:	low
URL:	https://anz.pfm.law/_content/Blazorise.Snackbar/blazorise.snackbar.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee
Preview:	..snackbar {.. align-items: center;.. background-color: var(--b-snackbar-background, #323232);.. color: var(--b-snackbar-text-color, rgb(255, 255, 255));.. font-size: 0.875rem;.. line-height: 1.428572;.. opacity: 0;.. padding: 0.875rem 1.5rem;.. position: fixed;.. bottom: 0;.. left: 0;.. transform: translateY(100%);.. transition: opacity 0s var(--transition-duration-mobile-leaving, 0.195s), transform var(--transition-duration-mobile-leaving, 0.195s) cubic-bezier(0.4, 0, 1, 1);.. width: 100%;.. z-index: 60;..}..@media (min-width: 768px) {.. .snackbar {.. border-radius: 2px;.. max-width: 35.5rem;.. min-width: 18rem;.. left: 50%;.. transform: translate(-50%, 100%);.. width: auto;.. }..}..@media (min-width: 768px) {.. .snackbar {.. transition: opacity 0s var(--transition-duration-tablet-leaving, 0.2535s), transform var(--transition-duration-tablet-leaving, 0.2535s) cubic-bezier(0.4, 0, 1, 1);.. }..}..@media (min-width: 1200px) {.. .snackbar {..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	121005
Entropy (8bit):	5.0123743141486905
Encrypted:	false
SSDEEP:	1536:WqsE9lesgw4O0QMuMhaAsAEoksIKob+EYIQUDW6:F9zDW6
MD5:	532F640ABE5C8DF307A8F4A032D5C53B
SHA1:	3A25082DC8EDDF1E2B4388AC671FCDEB7DEAFA9A
SHA-256:	C6B45A055E80D4E2AD82A79A693432962124E45D5A09A4A71DA4974E775E2F39
SHA-512:	95D409A61037E32679573E9484021AAA21B42F1A03C6E945ECA00AF37C940C1D07ACE46FCEC28BB409F961C4750485660EDB16405568657616075B85A18277D5
Malicious:	false
Reputation:	low
URL:	https://anz.pfm.law/_content/Blazorise.Bootstrap/blazorise.bootstrap.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee
Preview:	..badge-close {.. cursor: pointer;..}...badge-close::before {.. height: 2px;.. width: 50%;..}...badge-close::after {.. height: 50%;.. width: 2px;..}...badge-close:hover, .badge-close:focus {.. background-color: rgba(10, 10, 10, 0.3);..}...badge-close:active {.. background-color: rgba(10, 10, 10, 0.4);..}.....navbar-nav .nav-item:hover {.. cursor: pointer;..}.....navbar-nav .nav-link:hover {.. cursor: pointer;..}.....nav .nav-link:hover {.. cursor: pointer;..}.....nav-item {.. position: relative;..}.....b-bar-horizontal .nav-item.dropdown .dropdown-menu > .dropdown > .dropdown-item {.. width: 100%;..}...b-bar-horizontal .nav-item.dropdown .dropdown-menu > .dropdown > .dropdown-item::after {.. display: inline-block;.. margin-left: 0.255em;.. vertical-align: 0.255em;.. content: "";.. border-top: 0.3em solid;.. border-right: 0.3em solid transparent;.. border-bottom: 0;.. border-left: 0.3em solid transparent;..}...b-bar-horizontal .nav-item.dropdown .dropdown-menu > .d

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5579
Entropy (8bit):	5.197144573107441
Encrypted:	false
SSDEEP:	96:EFxRjAIZdsF582prJB2CECKT8yflqmEjCD+9FK+4+U++nPcDYdm+RR7RrFZR7Rh9:EFxRsIZOFlN1r2Fx+9FK+4+U++IYddRH
MD5:	6DF77402AF59920BB24E2C78A48A35DC
SHA1:	E020DB3E16912C60ECEBAE1681724AF789E7F32F
SHA-256:	2F99A65DE0291D94E0130FF0C3D2A1B6D00E78DC3FE3482DA2ED514BDD194314
SHA-512:	112643297BDB0AD3CA18A062C193837EFCBF6E265546A32810DF223D6B8BB361D795387CA61D7C0C88C0355938896B851B4334A19EF4E3907D0E104CE3EB0CE9
Malicious:	false
Reputation:	low
URL:	https://anz.pfm.law/_content/CaseFunnel.CaseSites.Controls/CaseFunnel.CaseSites.Controls.bundle.scp.css
Preview:	/* _content/CaseFunnel.CaseSites.Controls/Components/CaseOutOfDateModal.razor.rz.scp.css /..mode-switch[b-xsjmkjoeg1],.[b-xsjmkjoeg1] .mode-switch {. border: 0;. color: #0088cc;. padding: .25rem .5rem;. margin-top: 5px;. text-transform: capitalize;.}...modal-header[b-xsjmkjoeg1],.[b-xsjmkjoeg1] .modal-header {. border-bottom: 0;.}...action-buttons[b-xsjmkjoeg1],.[b-xsjmkjoeg1] .action-buttons {. margin-bottom: 35px;. margin-top: 25px;. text-align: center;.}...case-out-of-date .title[b-xsjmkjoeg1] {. text-align: center;. margin-bottom: 20px;. color: #6c757d;.}./ _content/CaseFunnel.CaseSites.Controls/Components/Chat.razor.rz.scp.css */...m-b-0[b-f8klfk6h76] { margin-bottom: 0;}...panel-chat[b-f8klfk6h76] {. border: 1px solid #CCCCCC;. display: block;. height: 250px;. overflow-y: scroll;. padding: 10px;. margin-bottom: 2px;.}...message.my-message[b-f8klfk6h76] {. text-align: right;.}...panel-chat .chat-name[b-f8klfk6h76] {. display: inline-block;. font-size: 0.8em;

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	dropped
Size (bytes):	76
Entropy (8bit):	4.558406092471112
Encrypted:	false
SSDEEP:	3:JSwSF4wIsZYHFQkvL+C2YQfrn:o4iYHykaCCjn
MD5:	95C37C3F2EB9F0E12209DF931DEE1330
SHA1:	CC4E4598BBB894A0D2CCCA8B710040FD43B02059
SHA-256:	4CEC3F0BFEB57B8E4044FCC279BE27EF85B20D16AF954351571041384C11A0FC
SHA-512:	005302C85326F73D998AD7FBF6D012F55D5A0238781A24051CBA2BD0A5B3BE75514F4FBA30E90948DC506E4C1A312331173FACCE75B972250F4E1E80AD7E8CB0
Malicious:	false
Reputation:	low
Preview:	import { b9 as f } from "./mermaid-5a5980d4.js";.export {. f as default.};.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10643)
Category:	downloaded
Size (bytes):	274617
Entropy (8bit):	5.408496759284294
Encrypted:	false
SSDEEP:	6144:Un6e7IhYBtqhKCNgYCsGsRtBXCiPy8HmHEuYyrs2/6M/6VZA1a:Un6e7IhYBtqhKJY1XCiPy8GHEuYyrs2c
MD5:	53F03F3BF5AC50ECFE0EA1E1E2ED79E6
SHA1:	BD57A795674792A15CF3E53B5565E39C1B66E1D5
SHA-256:	0061A2D076D7E51D46D0F48ECB18F343E53FBB63FC93B7851073FE1FE5C78BFD
SHA-512:	EB471BDB13E6E927550D97D5E10CAD69A8A863048B0E4A98CE3CA3C4AE20FB5D97BF3FB9420209AE112D7AB4602C2EE10AA3B61F6D187704384EBE30D38D78EC
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/1/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Kia,Jia,Mia,Sia,Zia,$ia,cja,Cr,dja,Dr,eja,Er,fja,Fr,Ir,Kr,hja,ija,lja,mja,oja,us,qja,sja,tja,Fs,xja,jt,Fja,Hja,Gja,Lja,Mja,Pja,Qja,Rja,Ot,Ut,Wja,Vt,Yt,Xja,Zt,Yja,bu,dka,eka,ju,fka,gka,Xka,Yka,vla,zla,Ala,Bla,Cla,Dla,Lw,Hla,Mw,Ila,Jla,Lla,Nla,Mla,Pla,Ola,Kla,Qla,Sla,Ula,bma,fma,gma,pma,nma,gx,hx,rma,sma,tma,uma,wma,xma,Pw,Qw,Rla,Ow,jw,Pia,yma,Qia,Vla,Ria,Wia,Yia,Dma,Ema,Fma,Gma,Hma,ox,xv,Kma,Lma,Mma,uja,zs;.Kia=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.Pg(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Jia(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Jia(f,a,d+1));e&&b.push(e);return b};Jia=function(a,b,c){a instanceof _.dh&&(a=a.Jl(b,+c));return Array.isArray(a)?Kia(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.gc(a):a instanceof _.ic?_.qc(a):a};_.Kq=function(a){return!!a.handled};._.Lia=function(a,b){functio

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52269), with CRLF line terminators
Category:	downloaded
Size (bytes):	102649
Entropy (8bit):	4.782587950455262
Encrypted:	false
SSDEEP:	1536:yjMCMPMCMjMCM4MCMwMCM3sVM7709gbPMfjSFOTyPG9SpgSLCJ:N709gMGFiyPG9SiSLCJ
MD5:	D04B0CF35ABB0E22EECCA58C52984615
SHA1:	9A0821025BA59E2602AE3A03467842A5D80F77CD
SHA-256:	CE6F72D6B4C728F562906A8E51E2456A9011ACB20B4C90E0EB79B580CCE8F229
SHA-512:	0BB42546A13D12035276562D4D2E01B8569649AB9DCF6E67CAEDAE652AF9DF3F90FDA288B4F646F057EFBB399D6E02D4E33A5FFAD3DBE920482FFD975010838A
Malicious:	false
Reputation:	low
URL:	https://anz.pfm.law/_content/Blazorise.Icons.FontAwesome/v6/css/all.min.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee
Preview:	/!.. Font Awesome Free 6.5.1 by @fontawesome - https://fontawesome.com.. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License).. * Copyright 2023 Fonticons, Inc... */...fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1750), with no line terminators
Category:	downloaded
Size (bytes):	1750
Entropy (8bit):	5.873192176001267
Encrypted:	false
SSDEEP:	48:VKEAhixKo75XI2ovtUjPKtXsDXx/gDq1p9jLrwUnG:fAQgMI5czmIp9XsuG
MD5:	77FBFA7F6F53D9B414994D14B6154AF5
SHA1:	C84C3D3DE8E2F22849173C554FC0F928830DD65D
SHA-256:	C94B6770CD31264850C4F7D1EEC9718A6F211EE64C9229EA2AF284A60CA2201C
SHA-512:	D4BDA260169C926BF5DCAE4351D8B05BC32804F272E7BA971FF30C85D447E1F17728B2F8986418A5B9A259B00CC6999E3DB264AFD13FA4EE9EAE79D87C60DECE
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/api.js?render=explicit&hl=en
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.p

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	187457
Entropy (8bit):	5.2032192990898825
Encrypted:	false
SSDEEP:	3072:j2RaaA+1qioyJE0eKB3lqooM/N0pM0+pm:M1qihJE07B3RB0
MD5:	970AE96B856C881C7D9827261FE17502
SHA1:	EF6EB647127478567951C7C5CF43EAF69E62FD20
SHA-256:	216D1AE942153A1663BC2EBE7C434D30E99D1B749F9D00A61DCC3C7C57C1B751
SHA-512:	A202095EA33AF74D3BAC4FAEEF1F8435FC9BB6A7B2105EFE6D24B56C1F8E6533F5E021663FBCC70D088122B7CE2D1AEDA2ACC9C43B9AF2D5AFE49324B6943B6A
Malicious:	false
Reputation:	low
URL:	https://anz.pfm.law/_framework/blazor.web.js
Preview:	(()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(o){var r=t[o];if(void 0!==r)return r.exports;var i=t[o]={exports:{}};return e[o](i,i.exports,n),i.exports}n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),(()=>{"use strict";var e,t,o;!function(e){const t=[],n="__jsObjectId",o="__dotNetObject",r="__byte[]",i="__dotNetStream",s="__jsStreamReferenceLength";let a,c;class l{constructor(e){this._jsObject=e,this._cachedFunctions=new Map}findFunction(e){const t=this._cachedFunctions.get(e);if(t)return t;let n,o=this._jsObject;if(e.split(".").forEach((t=>{if(!(t in o))throw new Error(`Could not find '${e}' ('${t}' was undefined).`);n=o,o=o[t]})),o instanceof Function)return o=o.bind(n),this._cachedFunctions.set(e,o),o;throw new Error(`The value '${e}' is not a function.`)}getWrappedObject(){return this._jsObject}}const h={0:new l(window

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	downloaded
Size (bytes):	560083
Entropy (8bit):	5.670807885144341
Encrypted:	false
SSDEEP:	6144:2ToGBa353/EApIyArkA6WiFvT7XCjDpEj/8U4LkgdLRsNY7d5/PwL18WS3mmPfGY:2ThwOA1Avi5f4L7LCYe63mm4M
MD5:	81697E6CDD98E37117D7BDDCECF07576
SHA1:	0EA9EFEB29EFC158CD175BB05B72C8516DBAA965
SHA-256:	73DD640564004EC8730E7F3433B9DFAA6876AC3A27E6964A17834F07F6D56116
SHA-512:	FC29D4A1FD39A7C78B7F57B221596ACEE9B805A133CE2D6FF4BC497A7B3584AB10E3D4FFDE30C86884F1ABEAC7D521598EBDA6E0B01FC92525986C98250FA3F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/pPK749sccDmVW_9DSeTMVvh2/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var T=function(){return[function(r,d,h,V,R,K,Y,S,N,D,F,E,l,B,C,m){return(r\|32)==(((C=["fr","flat",2],r)-C[2]>>4\|\|(m=new Promise(function(P){window.addEventListener("visibilitychange",P,{once:!0}),document.hidden\|\|P()})),r-7>>4)\|\|(E=[2654435761,0,"1"],Y.wb=K===void 0?!1:K,B=b[38](26,Y,V),N=g[16](55,B),Y[C[0]]=N.next().value,Y.C=N.next().value,Y.rI=N.next().value,Y.Zf=N.next().value,F=Y.R()[C[1]](Infinity),S=F.findIndex(function(P){return P instanceof dy&&k[17](15,P,h)==d}),l=g[9](5,F[S],lj,3,p[12](77)),.D=[n[48](22,Y[C[0]]),A[43](38,Y.rI,U[9](11,Y[C[0]]),E[0]),A[10](27,3,Y.rI,U[9](19,Y.rI),E[1]),A[10](28,3,Y.Zf,U[9

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1816
Entropy (8bit):	5.496797520018262
Encrypted:	false
SSDEEP:	48:vOLAfOLbFZOGOLP4EOLsJc+uKOLEycN0xD:vOLAfOLbFZOGOLPlOLsJc+uKOLtcNE
MD5:	06D519FB0B9FA33902A7C3D6B8B19246
SHA1:	4F87D3C8B03B0E7342E8BCC9D2713520F7061595
SHA-256:	139681A94FAA2BC84B1493A573777C22280C12F293B42C3F2D3940DAB9467D9D
SHA-512:	A779952CF9331F7942D7EE416D90F50E543E685CC6367544D9756375D4E744EE54201456F48D7DEFFB1CD2CE26FB657E1937071D76B1F99C759072E6E4F6C24A
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Raleway
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCFPrEHJA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCMPrEHJA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCHPrEHJA.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10696)
Category:	downloaded
Size (bytes):	11766
Entropy (8bit):	5.929339246297934
Encrypted:	false
SSDEEP:	192:2IGIsmhPPAICxOUPvROGXNXaDYNFa2kdmdBkiqnvDBMnVMnKi2pjb3CDiqnRnk2Q:lVsm5A3x7PJOGXNXJNFa2kAPkiONWdis
MD5:	A4CA8C5B200999A9BA2F7B1B1D25A438
SHA1:	A838C7199006D99A19DEEAF7793FA310825E2E50
SHA-256:	585F3FA5E0D8ACE62B9F72640366AB6E5A5D97AB7B40BE4AFDF21CA8279CC1C9
SHA-512:	DBA2E3E580D21202BFFDC9436A4966175CF6BA59CFC3EA535A4BE2D64C6E2ADAA1B2188F250EB5B3CA3B29B59B39FD1028EC04FE00A4B0BF81C10B592F8F9FE1
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?key=AIzaSyBFyxlOzQOjx6kjKiMODe8t2yMLTTxOTdY&libraries=places&region=AU&language=en&loading=async&callback=blazor.addressScriptsHaveLoaded
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. var rules = {. createHTML: function(src) {. return src;. },. createScriptURL: function(src) {. return src;. }. };. var ttPolicy;. . try {. ttPolicy = window.trustedTypes.createPolicy('google-maps-api-loader', rules);. } catch(e) {. ttPolicy = rules;. }. . function getScript(src) {. var a, nonce = ((a = document.querySelector("script[nonce]")) == null ? void 0 : a.nonce) \|\| "";. var s = document.createElement('script');. . s.src = ttPolicy.createScriptURL(src);. s.nonce = nonce;. document.head.appendChild(s);. }. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=991\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=991\u00

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	dropped
Size (bytes):	560083
Entropy (8bit):	5.670807885144341
Encrypted:	false
SSDEEP:	6144:2ToGBa353/EApIyArkA6WiFvT7XCjDpEj/8U4LkgdLRsNY7d5/PwL18WS3mmPfGY:2ThwOA1Avi5f4L7LCYe63mm4M
MD5:	81697E6CDD98E37117D7BDDCECF07576
SHA1:	0EA9EFEB29EFC158CD175BB05B72C8516DBAA965
SHA-256:	73DD640564004EC8730E7F3433B9DFAA6876AC3A27E6964A17834F07F6D56116
SHA-512:	FC29D4A1FD39A7C78B7F57B221596ACEE9B805A133CE2D6FF4BC497A7B3584AB10E3D4FFDE30C86884F1ABEAC7D521598EBDA6E0B01FC92525986C98250FA3F8
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var T=function(){return[function(r,d,h,V,R,K,Y,S,N,D,F,E,l,B,C,m){return(r\|32)==(((C=["fr","flat",2],r)-C[2]>>4\|\|(m=new Promise(function(P){window.addEventListener("visibilitychange",P,{once:!0}),document.hidden\|\|P()})),r-7>>4)\|\|(E=[2654435761,0,"1"],Y.wb=K===void 0?!1:K,B=b[38](26,Y,V),N=g[16](55,B),Y[C[0]]=N.next().value,Y.C=N.next().value,Y.rI=N.next().value,Y.Zf=N.next().value,F=Y.R()[C[1]](Infinity),S=F.findIndex(function(P){return P instanceof dy&&k[17](15,P,h)==d}),l=g[9](5,F[S],lj,3,p[12](77)),.D=[n[48](22,Y[C[0]]),A[43](38,Y.rI,U[9](11,Y[C[0]]),E[0]),A[10](27,3,Y.rI,U[9](19,Y.rI),E[1]),A[10](28,3,Y.Zf,U[9

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.558406092471112
Encrypted:	false
SSDEEP:	3:JSwSF4wIsZYHFQkvL+C2YQfrn:o4iYHykaCCjn
MD5:	95C37C3F2EB9F0E12209DF931DEE1330
SHA1:	CC4E4598BBB894A0D2CCCA8B710040FD43B02059
SHA-256:	4CEC3F0BFEB57B8E4044FCC279BE27EF85B20D16AF954351571041384C11A0FC
SHA-512:	005302C85326F73D998AD7FBF6D012F55D5A0238781A24051CBA2BD0A5B3BE75514F4FBA30E90948DC506E4C1A312331173FACCE75B972250F4E1E80AD7E8CB0
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/mermaid@10/dist/mermaid.esm.min.mjs
Preview:	import { b9 as f } from "./mermaid-5a5980d4.js";.export {. f as default.};.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3828
Entropy (8bit):	5.430616156716064
Encrypted:	false
SSDEEP:	96:AOYg4aLwOYg4aZFZOhOYg4alOYg4agfJc+udOYg4afNtOO4a9wOO4a2FZOhOO4a0:AyLwyQFypy0uy59kD3bC6dw
MD5:	ADD3C9FC6E6AB824C00449A228F3023A
SHA1:	E61E53B4B37714A6F967ED383322E50F1FBFA133
SHA-256:	8A4A80FDB1C1F9AB2C6ADC8167C02E29CCB147EA8BB4E95C142FB4C7B711558A
SHA-512:	51821A0C4C767E6853B441A7E1CC387579CA866BE89FAFC43BE830D0E0C5010DA12107B5F75B3D8B86203DC2D8468C58705C8BC787C69A31DEB16E2A20C3F240
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 26, 2024 01:01:14.819619894 CET	49675	443	192.168.2.4	173.222.162.32
Nov 26, 2024 01:01:18.294651031 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:18.294682026 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:18.294760942 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:18.295083046 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:18.295103073 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:18.295164108 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:18.295331955 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:18.295342922 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:18.295552015 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:18.295562983 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:19.827003002 CET	49744	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:01:19.827043056 CET	443	49744	172.217.21.36	192.168.2.4
Nov 26, 2024 01:01:19.827130079 CET	49744	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:01:19.827409983 CET	49744	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:01:19.827429056 CET	443	49744	172.217.21.36	192.168.2.4
Nov 26, 2024 01:01:20.150392056 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:20.150726080 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:20.150739908 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:20.151705980 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:20.151801109 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:20.153198957 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:20.153244019 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:20.153256893 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:20.153619051 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:20.153640985 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:20.153765917 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:20.153772116 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:20.154606104 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:20.154656887 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:20.155695915 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:20.155756950 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:20.196645975 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:20.196681023 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:20.196691036 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:20.243747950 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:20.908384085 CET	49745	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:20.908428907 CET	443	49745	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:20.908495903 CET	49745	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:20.909959078 CET	49745	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:20.909972906 CET	443	49745	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:21.567501068 CET	443	49744	172.217.21.36	192.168.2.4
Nov 26, 2024 01:01:21.567761898 CET	49744	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:01:21.567797899 CET	443	49744	172.217.21.36	192.168.2.4
Nov 26, 2024 01:01:21.568756104 CET	443	49744	172.217.21.36	192.168.2.4
Nov 26, 2024 01:01:21.568814039 CET	49744	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:01:21.570452929 CET	49744	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:01:21.570519924 CET	443	49744	172.217.21.36	192.168.2.4
Nov 26, 2024 01:01:21.617584944 CET	49744	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:01:21.617599010 CET	443	49744	172.217.21.36	192.168.2.4
Nov 26, 2024 01:01:21.664762020 CET	49744	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:01:21.967515945 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:21.967539072 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:21.967573881 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:21.967601061 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:21.967602015 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:21.967612028 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:21.967626095 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:21.967650890 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.019925117 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.035465956 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.035510063 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.035566092 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.035888910 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.035916090 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.035974026 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.036118984 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.036422968 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.036438942 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.036731958 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.036751032 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.036807060 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.037365913 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.037379026 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.037432909 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.037892103 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.037904024 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.039560080 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.039572001 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.039729118 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.039737940 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.083336115 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.136162996 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.136183023 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.136225939 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.136262894 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.136266947 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.136277914 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.136328936 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.143908978 CET	49741	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.143914938 CET	443	49741	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.144613981 CET	49750	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.144623995 CET	443	49750	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.144678116 CET	49750	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.145802975 CET	49750	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:22.145812988 CET	443	49750	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:22.199357033 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:22.199418068 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:22.199489117 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:22.200274944 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.200328112 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:22.200380087 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.200496912 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.200525999 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:22.200579882 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.200680971 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.200691938 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:22.200735092 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.200875044 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.200903893 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:22.200951099 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.207236052 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.207247972 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:22.207530975 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.207551956 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:22.207659960 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.207673073 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:22.207787037 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:22.207801104 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:22.208195925 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:22.208205938 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:22.290322065 CET	443	49745	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:22.290393114 CET	49745	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:22.294843912 CET	49745	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:22.294862032 CET	443	49745	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:22.295077085 CET	443	49745	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:22.336308002 CET	49745	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:22.342967987 CET	49745	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:22.387367010 CET	443	49745	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:22.804147005 CET	443	49745	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:22.804189920 CET	443	49745	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:22.804353952 CET	49745	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:22.804353952 CET	49745	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:22.804402113 CET	443	49745	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:22.804430962 CET	49745	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:22.804440022 CET	443	49745	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:22.839325905 CET	49761	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:22.839354038 CET	443	49761	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:22.839528084 CET	49761	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:22.839767933 CET	49761	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:22.839783907 CET	443	49761	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:23.339082003 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.339107990 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.339113951 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.339174032 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.339201927 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.339227915 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.339330912 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.420185089 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.420506954 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.420542002 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.421307087 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.421508074 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.421525955 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.421570063 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.421638012 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.422554016 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.422667027 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.423717022 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.423774004 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.424000978 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.424011946 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.426831961 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.426831961 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.426850080 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.426898956 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.461472988 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.461651087 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.461960077 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.461971998 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.461993933 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.462009907 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.462860107 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.462865114 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.462927103 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.462929010 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.463332891 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.463386059 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.463635921 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.463638067 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.463641882 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.463694096 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.463699102 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.476627111 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.476633072 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.476635933 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.507189035 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.507191896 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.507210016 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.523027897 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.524667025 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.524673939 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.524729967 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.524748087 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.524768114 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.524768114 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.524787903 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.524821997 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.525140047 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.554219961 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.555003881 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.555063009 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.555074930 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.598629951 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.598644972 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.598696947 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.598702908 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.646450043 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.731744051 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.731750965 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.731796026 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.731811047 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.731812954 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.731832981 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.731864929 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.731874943 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.755939007 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.755945921 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.755985975 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.756012917 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.756021023 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.756062984 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.756068945 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.756117105 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.780247927 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.780261993 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.780339956 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.780347109 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.781732082 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.785657883 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.785726070 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.785729885 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.785742044 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.785783052 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.785921097 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.785929918 CET	443	49742	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.785938978 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.786330938 CET	49762	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.786348104 CET	49742	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.786396027 CET	443	49762	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.786453962 CET	49762	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.787287951 CET	49762	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.787307024 CET	443	49762	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.847062111 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.849184036 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.849529982 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.849545002 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.849570036 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.849596977 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.849642038 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.849648952 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.849683046 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.849700928 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.850053072 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.853547096 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.853807926 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.853876114 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.854315996 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.854331017 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.854480028 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.854820013 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.855742931 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.855822086 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.855875969 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.858124971 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.861737967 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.861753941 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.866425991 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.866472006 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.866482973 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.897836924 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.897844076 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.899318933 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.901773930 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.904741049 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.904989004 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.905003071 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.905806065 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.905833006 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.905855894 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.905859947 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.905875921 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.905883074 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.905893087 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.905904055 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.905937910 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.905965090 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.905965090 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.906009912 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.906054974 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.906080961 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.906097889 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.906122923 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.906137943 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.906397104 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.906446934 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.906563044 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.906569004 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.913702011 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.913713932 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.914213896 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.922652960 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.923516989 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.923587084 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.923593044 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.923620939 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.923635960 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.927791119 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.927814960 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.927867889 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.927879095 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.927920103 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.930989027 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.933733940 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.933739901 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.936183929 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.936584949 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.936697006 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.936724901 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.936757088 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.936774015 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.936779976 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.936789036 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.936791897 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.937737942 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.937743902 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.943192959 CET	443	49750	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.944655895 CET	49750	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.944663048 CET	443	49750	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.944933891 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.944982052 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.944988012 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.945168018 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.945199966 CET	443	49756	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.945249081 CET	49756	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.945502996 CET	443	49750	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.945569992 CET	49750	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.945900917 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.946348906 CET	49750	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.946402073 CET	443	49750	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.946475983 CET	49750	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.946481943 CET	443	49750	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.961117983 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.963701963 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:23.969207048 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.973426104 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.973838091 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.973876953 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:23.982554913 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.982558012 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:23.996527910 CET	49750	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:23.996984959 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.010492086 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.017149925 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.017158031 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.017272949 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.017280102 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.018021107 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.018033981 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.018084049 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.018094063 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.018132925 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.018338919 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.018384933 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.018760920 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.025624990 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.025880098 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.028774977 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.041309118 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.045473099 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.045846939 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.045885086 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.052234888 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.053733110 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.053744078 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.060612917 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.060771942 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.060800076 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.060808897 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.066983938 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.066989899 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.073087931 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.073100090 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.077263117 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.077383041 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.077435017 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.077445030 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.077719927 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.085649014 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.094033003 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.094142914 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.094197989 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.094208002 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.097726107 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.102411032 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.107161999 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.107218981 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.107275963 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.107281923 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.107311010 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.107320070 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.110856056 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.113730907 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.113739014 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.116750956 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.116799116 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.116806984 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.117660999 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.117706060 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.117713928 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.118791103 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.118900061 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.118949890 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.118956089 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.118999958 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.122555017 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.125719070 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.125741959 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.125751019 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.125773907 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.125781059 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.126688004 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.132504940 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.133738041 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.133749962 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.133946896 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.133995056 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.134004116 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.134516001 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.134692907 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.134732008 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.134737968 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.134779930 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.136603117 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.136673927 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.138987064 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:24.139005899 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:24.139067888 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:24.139328003 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.139400005 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.139777899 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:24.139790058 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:24.139930964 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.139942884 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.140043020 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.140058041 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.141995907 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.142406940 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.142467022 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.142477036 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.150106907 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.150295019 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.150362015 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.150373936 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.150403976 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.150408983 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.158201933 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.161737919 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.161750078 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.172673941 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.172713995 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.172764063 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.172782898 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.172831059 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.179136992 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.179750919 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.185596943 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.185698032 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.185739994 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.185755014 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.185801029 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.192421913 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.195338964 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.195368052 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.195365906 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.198625088 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.199124098 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.199135065 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.233290911 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.241925001 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.241940022 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.259166002 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.259172916 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.259207964 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.259228945 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.259238005 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.259239912 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.259255886 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.259283066 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.259285927 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.259305000 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.287028074 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.287036896 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.287065029 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.287075996 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.287098885 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.287110090 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.287136078 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.287146091 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.288630009 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.308281898 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.308491945 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.308500051 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.308525085 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.308533907 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.308553934 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.308553934 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.308564901 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.308589935 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.308620930 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.310532093 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.313756943 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.313767910 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.314132929 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.314847946 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.314855099 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.314881086 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.314893007 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.314915895 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.314929962 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.314959049 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.314959049 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.314973116 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.314984083 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.318346977 CET	443	49761	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:24.318416119 CET	49761	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:24.318600893 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.320960045 CET	49761	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:24.320969105 CET	443	49761	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:24.320982933 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.320991993 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.321172953 CET	443	49761	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:24.322721958 CET	49761	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:24.323081017 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.323131084 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.323134899 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.323177099 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.323338985 CET	49753	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.323357105 CET	443	49753	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.327038050 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:24.327073097 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:24.327153921 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:24.327321053 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:24.327336073 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:24.338430882 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.338454008 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.338490009 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.338515997 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.338541031 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.338546991 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.338577986 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.338598013 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.351942062 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.352008104 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.352029085 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.352072001 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.353311062 CET	49754	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.353318930 CET	443	49754	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.357094049 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:24.357115984 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:24.357187986 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:24.357367992 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:24.357378960 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:24.363333941 CET	443	49761	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:24.436821938 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.436829090 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.436872005 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.436920881 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.436948061 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.436963081 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.436988115 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.455352068 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.455368042 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.455435991 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.455446005 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.455794096 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.476582050 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.476597071 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.476655006 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.476664066 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.477726936 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.489415884 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.489450932 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.489479065 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.489486933 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.489533901 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.489784002 CET	49755	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:24.489800930 CET	443	49755	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:24.784745932 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.784764051 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.784780025 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.784810066 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.784820080 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.784852982 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.807753086 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.817881107 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.817933083 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.817950964 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.818208933 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.818258047 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.818375111 CET	443	49751	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.818423033 CET	49751	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.834445000 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.856978893 CET	443	49761	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:24.857033014 CET	443	49761	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:24.857084036 CET	49761	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:24.857877970 CET	49761	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:24.857903957 CET	443	49761	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:24.857929945 CET	49761	443	192.168.2.4	23.218.208.109
Nov 26, 2024 01:01:24.857944012 CET	443	49761	23.218.208.109	192.168.2.4
Nov 26, 2024 01:01:24.944005013 CET	443	49750	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.944087029 CET	443	49750	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.944135904 CET	49750	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.946366072 CET	49750	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.946377039 CET	443	49750	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.946669102 CET	49766	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.946682930 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.946734905 CET	49766	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.947428942 CET	49766	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.947438955 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.964943886 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.964960098 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.965008020 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.965015888 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.965048075 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.965070009 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:24.965194941 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.965248108 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.965311050 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.965504885 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:24.965534925 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:24.972502947 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:24.972553968 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.020781994 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.020809889 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.020844936 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.020849943 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.020881891 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.020895958 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.138799906 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.138817072 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.138906002 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.138914108 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.138953924 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.147758007 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.147823095 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.147838116 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.147877932 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.148292065 CET	49747	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.148298025 CET	443	49747	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.217325926 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.217358112 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.217395067 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.217406034 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.217416048 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.217427969 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.217458010 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.217477083 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.217478991 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.217519999 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.218662024 CET	49748	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.218669891 CET	443	49748	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.278562069 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.278584003 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.278593063 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.278623104 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.278633118 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.278652906 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.278665066 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.296219110 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.296241999 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.296288967 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.296308041 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.296344995 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.296622992 CET	49749	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.296629906 CET	443	49749	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.350497007 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.350559950 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.350595951 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.350615025 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.350625992 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.350645065 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.350661039 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.396559000 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.441381931 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.441663980 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.441673994 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.442533016 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.442605019 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.448810101 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.448862076 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.449245930 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.449255943 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.492233038 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.532476902 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.532548904 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.532578945 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.532598972 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.532627106 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.532640934 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.532660961 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.532682896 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.532696009 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.532712936 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.532730103 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.533740044 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.533957005 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.533974886 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.534837961 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.534899950 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.535233021 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.535291910 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.535444021 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.535451889 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.555068970 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.555161953 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.555179119 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.565598965 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.565814972 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.565843105 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.566709995 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.566767931 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.567089081 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.567151070 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.567209005 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.567214012 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.585500956 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.600838900 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.603535891 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.603555918 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.603594065 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.603622913 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.603626013 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.603641987 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.603668928 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.603682041 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.616616011 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.699037075 CET	443	49762	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.699268103 CET	49762	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.699292898 CET	443	49762	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.700146914 CET	443	49762	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.700211048 CET	49762	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.700525045 CET	49762	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.700581074 CET	443	49762	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.700661898 CET	49762	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.700670958 CET	443	49762	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.722230911 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.722280025 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.722305059 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.722312927 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.722357035 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.722373962 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.742428064 CET	49762	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.751147032 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.751198053 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.751218081 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.751225948 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.751260042 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.751270056 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.776810884 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.776854038 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.776887894 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.776896000 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.776926994 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.776941061 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.793447018 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.793494940 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.793515921 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.793523073 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.793565989 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.793577909 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.801671982 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.801743984 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.801752090 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.801790953 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.801861048 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.801908016 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.802202940 CET	49746	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:25.802216053 CET	443	49746	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:25.967701912 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.968682051 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.968735933 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.968750954 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.968791962 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.968827963 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.968832016 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.968839884 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.968878984 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.976629019 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.976888895 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.976929903 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.976942062 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.977008104 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.977039099 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.977046967 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.977054119 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.977087021 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.977088928 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.985470057 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.985519886 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.985527039 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.993947983 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.993993998 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.994005919 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.995320082 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.999568939 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.999614000 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:25.999617100 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.999651909 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.999875069 CET	49763	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:25.999881983 CET	443	49763	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.000433922 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.038846970 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.054846048 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.088835955 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.121942043 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.121951103 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.121984005 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.121999025 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.122005939 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.122015953 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.122025967 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.122068882 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.135241985 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.135262012 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.160832882 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.160876989 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.160885096 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.173240900 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.173290968 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.173299074 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.181622028 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.181663036 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.181670904 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.190004110 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.190051079 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.190059900 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.198345900 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.198390961 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.198398113 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.206873894 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.206934929 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.206942081 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.215302944 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.215352058 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.215359926 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.223666906 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.223714113 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.223721981 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.238204002 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.238265038 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.238276005 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.239417076 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.239424944 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.239453077 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.239489079 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.239496946 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.239506006 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.239525080 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.239542007 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.244402885 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.244453907 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.244461060 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.256217957 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.256266117 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.256273985 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.289079905 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.289094925 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.289139986 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.289146900 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.289182901 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.304470062 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.352617979 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.355176926 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.355218887 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.355232954 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.360049009 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.360095024 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.360102892 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.364901066 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.364958048 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.364965916 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.369776011 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.369822979 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.369837999 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.378890038 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.378925085 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.378945112 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.378952980 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.378974915 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.378999949 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.379028082 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.379262924 CET	49764	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.379278898 CET	443	49764	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.407584906 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.407619953 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.407653093 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.407665014 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.407690048 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.407711983 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.420392990 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.420444965 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.420454979 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.420490026 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.420767069 CET	49765	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:26.420778036 CET	443	49765	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:26.623529911 CET	443	49762	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:26.623598099 CET	443	49762	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:26.623845100 CET	49762	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:26.624594927 CET	49762	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:26.624612093 CET	443	49762	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:26.627387047 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:26.627407074 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:26.627495050 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:26.627728939 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:26.627738953 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:26.702124119 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:26.702352047 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:26.702367067 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:26.702789068 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:26.702804089 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:26.702855110 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:26.702863932 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:26.703063011 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:26.703404903 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:26.703569889 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:26.703634024 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:26.703722000 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:26.703737974 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:26.748150110 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:26.748388052 CET	49766	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:26.748399973 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:26.748680115 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:26.748971939 CET	49766	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:26.749023914 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:26.749075890 CET	49766	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:26.758136034 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:26.789884090 CET	49766	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:26.789890051 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:27.517375946 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:27.527439117 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:27.527530909 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:27.527573109 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:27.528171062 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:27.528225899 CET	443	49767	172.217.19.227	192.168.2.4
Nov 26, 2024 01:01:27.528302908 CET	49767	443	192.168.2.4	172.217.19.227
Nov 26, 2024 01:01:27.667181015 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:27.667205095 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:27.667269945 CET	49766	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:27.667284012 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:27.668163061 CET	49766	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:27.668193102 CET	443	49766	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:27.668251991 CET	49766	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:28.477536917 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:28.477755070 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:28.477766037 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:28.478039980 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:28.478327036 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:28.478377104 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:28.478451967 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:28.519350052 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.426119089 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.426143885 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.426161051 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.426218987 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.426229954 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.426270962 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.612934113 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.612950087 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.613014936 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.613022089 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.613064051 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.620238066 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.620309114 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.662137985 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.662158012 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.662215948 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.662224054 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.662252903 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.662271023 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.794398069 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.794414997 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.794466019 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.794475079 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.794507980 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.821259975 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.821289062 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.821320057 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.821338892 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.821345091 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.821381092 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.844428062 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.844445944 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.844504118 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.844508886 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.844549894 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.863375902 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.863399029 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.863428116 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.863430977 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.863460064 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.914387941 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.997078896 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.997095108 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.997172117 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:29.997178078 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:29.997220039 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.001374006 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.001436949 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.012207031 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.012243032 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.012284040 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.012286901 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.012306929 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.019607067 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:30.019654036 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:30.019751072 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:30.020910025 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:30.020929098 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:30.025314093 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.025329113 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.025389910 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.025396109 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.029659033 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.029727936 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.029732943 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.044742107 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.044754982 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.044812918 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.044817924 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.044877052 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.044919014 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.045187950 CET	49771	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.045196056 CET	443	49771	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.052208900 CET	49777	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:30.052248001 CET	443	49777	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:30.052313089 CET	49777	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:30.052536011 CET	49777	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:30.052553892 CET	443	49777	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:30.188911915 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.188926935 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:30.188982964 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.189188004 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:30.189198971 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:31.256980896 CET	443	49744	172.217.21.36	192.168.2.4
Nov 26, 2024 01:01:31.257026911 CET	443	49744	172.217.21.36	192.168.2.4
Nov 26, 2024 01:01:31.257085085 CET	49744	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:01:31.306915998 CET	443	49777	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:31.307151079 CET	49777	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:31.307177067 CET	443	49777	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:31.307466984 CET	443	49777	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:31.307770014 CET	49777	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:31.307825089 CET	443	49777	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:31.307882071 CET	49777	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:31.351331949 CET	443	49777	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:31.572348118 CET	49744	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:01:31.572413921 CET	443	49744	172.217.21.36	192.168.2.4
Nov 26, 2024 01:01:31.677475929 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:31.677553892 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:31.679972887 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:31.679980993 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:31.680191040 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:31.731033087 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:31.738570929 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:31.783333063 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:31.919249058 CET	443	49777	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:31.919416904 CET	443	49777	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:31.919482946 CET	49777	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:31.920921087 CET	49777	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:31.920939922 CET	443	49777	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:31.929682970 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:31.929713011 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:31.930161953 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:31.930449009 CET	49782	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:31.930457115 CET	443	49782	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:31.930538893 CET	49782	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:31.930783987 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:31.930794954 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:31.931057930 CET	49782	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:31.931067944 CET	443	49782	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:32.097867012 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:32.098073006 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:32.098083973 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:32.098937035 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:32.098989010 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:32.099397898 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:32.099447966 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:32.099543095 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:32.099550009 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:32.146109104 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:32.335335970 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:32.335356951 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:32.335365057 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:32.335372925 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:32.335411072 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:32.335417032 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:32.335436106 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:32.335459948 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:32.335496902 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:32.355987072 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:32.356040001 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:32.356065989 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:32.356120110 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:32.357048988 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:32.357065916 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:32.357085943 CET	49776	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:01:32.357093096 CET	443	49776	20.109.210.53	192.168.2.4
Nov 26, 2024 01:01:33.035865068 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.035902977 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.035948992 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.035964966 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.035975933 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.036014080 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.036029100 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.085340023 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.225848913 CET	443	49782	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:33.226300955 CET	49782	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:33.226336002 CET	443	49782	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:33.226700068 CET	443	49782	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:33.227020025 CET	49782	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:33.227088928 CET	443	49782	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:33.227118969 CET	49782	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:33.232881069 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.233061075 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.233078003 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.233443022 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.233731985 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.233797073 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.233798027 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.234606028 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.234620094 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.234652996 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.234668016 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.234675884 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.234689951 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.234699011 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.234714031 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.234741926 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.263659000 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.263669014 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.263711929 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.263861895 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.263890028 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.263953924 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.271332026 CET	443	49782	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:33.272433043 CET	49782	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:33.275345087 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.288549900 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.302963972 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.302989006 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.303112984 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.303136110 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.303674936 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.451246023 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.451270103 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.451308966 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.451322079 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.451354980 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.451374054 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.474824905 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.474850893 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.474920988 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.474936008 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.475394011 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.495001078 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.495022058 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.495074987 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.495081902 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.495493889 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.513881922 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.513906956 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.513978004 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.513983965 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.514394045 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.659224033 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.659251928 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.659379005 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.659392118 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.659437895 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.669426918 CET	443	49782	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:33.669579029 CET	443	49782	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:33.669641018 CET	49782	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:33.670492887 CET	49782	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:33.670516968 CET	443	49782	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:33.672792912 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.672815084 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.672894001 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.672903061 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.672946930 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.688282967 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.688311100 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.688442945 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.688451052 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.688548088 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.703938961 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.703958988 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.704076052 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.704085112 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.704176903 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.708388090 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.708468914 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.708494902 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.708580971 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.708900928 CET	49778	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:33.708910942 CET	443	49778	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:33.768553972 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.769395113 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.769464970 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.769491911 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.769495964 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.769505978 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.769550085 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.787175894 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.787230015 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.787275076 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.787291050 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.787364006 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.791346073 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.799719095 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.799807072 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.799813032 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.849255085 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.889370918 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.944071054 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:33.944078922 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:33.996757030 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.025933027 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.025942087 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.025984049 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.026005983 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.026025057 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.026036978 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.026072979 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.026113033 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.026140928 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.071507931 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.071520090 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.071552038 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.071561098 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.071595907 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.071603060 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.071604967 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.071655035 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.211086035 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.211111069 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.211129904 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.211160898 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.211180925 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.211211920 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.211239100 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.211266041 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.239100933 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.239120007 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.239202023 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.239217997 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.239278078 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.256582975 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.256598949 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.256659031 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.256664991 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.256707907 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.315198898 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.315216064 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.315310955 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.315320969 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.315387011 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.443248987 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.443269014 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.443334103 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.443342924 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.443393946 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.455251932 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.455271959 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.455332994 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.455339909 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.455385923 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.467102051 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.467117071 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.467200994 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.467214108 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.467267990 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.479087114 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.479101896 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.479152918 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.479157925 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.479199886 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.489458084 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.489473104 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.489528894 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.489533901 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.489573002 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.501435041 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.501451015 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.501518965 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.501523972 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.501564980 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.558053970 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.558069944 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.558142900 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.558157921 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.558203936 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.651585102 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.651599884 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.651694059 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.651707888 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.651751041 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.662332058 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.662345886 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.662429094 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.662437916 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.662477016 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.672974110 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.672988892 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.673059940 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.673070908 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.673120975 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.681020021 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.681034088 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.681094885 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.681103945 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.681143999 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.687614918 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.687634945 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.687674046 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.687686920 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.687702894 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.687727928 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.693660021 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.693675041 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.693736076 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.693742990 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.693809032 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.694493055 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.694565058 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.694611073 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.694789886 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.694801092 CET	443	49781	151.101.65.229	192.168.2.4
Nov 26, 2024 01:01:34.694849968 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.694849968 CET	49781	443	192.168.2.4	151.101.65.229
Nov 26, 2024 01:01:34.698936939 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:34.698981047 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:34.699062109 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:34.699233055 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:34.699249983 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:34.743413925 CET	49786	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:34.743449926 CET	443	49786	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:34.743530035 CET	49786	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:34.743691921 CET	49786	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:34.743705988 CET	443	49786	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:36.000479937 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.000685930 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.000711918 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.001060963 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.001302958 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.001363039 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.001409054 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.044605970 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.044653893 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.455686092 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.455823898 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.455862999 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.455883980 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.455909014 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.455955982 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.455962896 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.464282990 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.464343071 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.464350939 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.472105026 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.472173929 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.472181082 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.516248941 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.516252995 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.568639040 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.575803041 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.575900078 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.575946093 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.575953007 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.630201101 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.648694038 CET	443	49786	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:36.648941994 CET	49786	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:36.648964882 CET	443	49786	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:36.649307013 CET	443	49786	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:36.649583101 CET	49786	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:36.649641037 CET	443	49786	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:36.649694920 CET	49786	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:36.691329002 CET	443	49786	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:36.710315943 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.710329056 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.710376978 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.710392952 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.710406065 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.710407019 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.710422993 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.710459948 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.710481882 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.749474049 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.749483109 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.749516010 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.749526978 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.749543905 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.749552965 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.749583006 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.749600887 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.896692038 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.896722078 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.896749020 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.896775007 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.896784067 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.896811008 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.896826982 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.923795938 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.923813105 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.923868895 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.923875093 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.923917055 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.953715086 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.953737020 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.953803062 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.953811884 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.953851938 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.984389067 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.984436989 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.984477997 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.984488010 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:36.984514952 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:36.984534025 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.105428934 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.105454922 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.105508089 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.105516911 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.105556965 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.105556965 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.126558065 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.126574993 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.126636028 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.126641989 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.126687050 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.144642115 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.144659996 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.144717932 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.144726038 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.144771099 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.165760040 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.165776968 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.165838003 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.165851116 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.165890932 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.186503887 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.186522007 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.186580896 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.186589956 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.186634064 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.204570055 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.204588890 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.204627037 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.204633951 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.204663038 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.204687119 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.298533916 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.298556089 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.298636913 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.298645020 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.298687935 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.313635111 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.313652039 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.313719034 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.313725948 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.313774109 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.327702999 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.327721119 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.327776909 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.327784061 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.327824116 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.337569952 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.337589979 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.337646961 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.337654114 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.337692976 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.344918013 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.344943047 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.344978094 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.344984055 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.345010996 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.345030069 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.351787090 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.351804972 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.351871967 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.351881981 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.351917028 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.351923943 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.358989954 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.359006882 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.359071016 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.359083891 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.359124899 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.359991074 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.360047102 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.360054970 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.360065937 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.360101938 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.360477924 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.360488892 CET	443	49785	151.101.1.229	192.168.2.4
Nov 26, 2024 01:01:37.360497952 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.360529900 CET	49785	443	192.168.2.4	151.101.1.229
Nov 26, 2024 01:01:37.934612036 CET	443	49786	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:37.934720993 CET	443	49786	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:37.934823990 CET	49786	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:37.935930967 CET	49786	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:37.935962915 CET	443	49786	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:37.939024925 CET	49790	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:37.939068079 CET	443	49790	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:37.939136982 CET	49790	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:37.939495087 CET	49790	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:37.939507008 CET	443	49790	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:37.941543102 CET	49791	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:37.941581011 CET	443	49791	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:37.941637993 CET	49791	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:37.941930056 CET	49791	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:37.941941977 CET	443	49791	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:38.348747969 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:38.348793983 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:38.348880053 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:38.349087000 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:38.349101067 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:39.762629032 CET	443	49790	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:39.763011932 CET	49790	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:39.763047934 CET	443	49790	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:39.763407946 CET	443	49790	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:39.763784885 CET	49790	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:39.763839006 CET	443	49790	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:39.763937950 CET	49790	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:39.795470953 CET	443	49791	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:39.795687914 CET	49791	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:39.795718908 CET	443	49791	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:39.796065092 CET	443	49791	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:39.796365023 CET	49791	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:39.796425104 CET	443	49791	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:39.796488047 CET	49791	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:39.807343006 CET	443	49790	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:39.839334965 CET	443	49791	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:40.020423889 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:40.020622015 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:40.020658970 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:40.022113085 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:40.022157907 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:40.023147106 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:40.023226023 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:40.023317099 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:40.023324013 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:40.068144083 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:40.665570021 CET	443	49790	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:40.665848970 CET	443	49790	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:40.666584969 CET	49790	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:40.666815042 CET	49790	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:40.666835070 CET	443	49790	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:41.092634916 CET	443	49791	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:41.092745066 CET	443	49791	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:41.092861891 CET	49791	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:41.094542980 CET	49791	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:41.094582081 CET	443	49791	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:41.097666025 CET	49793	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:41.097769976 CET	443	49793	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:41.097865105 CET	49793	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:41.098052979 CET	49793	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:41.098089933 CET	443	49793	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:41.100158930 CET	49794	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:41.100225925 CET	443	49794	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:41.100291014 CET	49794	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:41.100478888 CET	49794	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:41.100492001 CET	443	49794	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:41.549187899 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:41.560214043 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:41.560225964 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:41.560393095 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:41.560436010 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:41.560847998 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:41.560904026 CET	443	49792	13.227.8.109	192.168.2.4
Nov 26, 2024 01:01:41.560959101 CET	49792	443	192.168.2.4	13.227.8.109
Nov 26, 2024 01:01:41.705071926 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:41.705120087 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:41.705199957 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:41.705404997 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:41.705419064 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:42.950853109 CET	443	49793	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:42.951154947 CET	49793	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:42.951212883 CET	443	49793	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:42.951592922 CET	443	49793	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:42.951999903 CET	49793	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:42.952076912 CET	443	49793	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:42.952569008 CET	49793	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:42.957007885 CET	443	49794	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:42.957262039 CET	49794	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:42.957321882 CET	443	49794	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:42.957720041 CET	443	49794	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:42.958108902 CET	49794	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:42.958195925 CET	443	49794	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:42.958229065 CET	49794	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:42.995357037 CET	443	49793	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:43.003329992 CET	443	49794	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:43.005590916 CET	49794	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:43.364114046 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:43.393399000 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:43.393462896 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:43.394695997 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:43.394781113 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:43.395215034 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:43.395298958 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:43.395397902 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:43.395416975 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:43.445496082 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:43.867607117 CET	443	49793	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:43.867697001 CET	443	49793	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:43.867777109 CET	49793	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:43.867930889 CET	49793	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:43.867954969 CET	443	49793	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:43.870529890 CET	49796	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:43.870598078 CET	443	49796	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:43.870671034 CET	49796	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:43.871022940 CET	49796	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:43.871046066 CET	443	49796	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:44.238502026 CET	443	49794	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:44.238589048 CET	443	49794	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:44.238646984 CET	49794	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:44.239327908 CET	49794	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:44.239352942 CET	443	49794	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:44.292195082 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:44.292232037 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:44.292242050 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:44.292330980 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:44.292367935 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:44.292414904 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:44.298949957 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:44.299057007 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:44.299114943 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:44.299307108 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:44.299340010 CET	443	49795	13.227.8.67	192.168.2.4
Nov 26, 2024 01:01:44.299356937 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:44.299386978 CET	49795	443	192.168.2.4	13.227.8.67
Nov 26, 2024 01:01:45.789480925 CET	443	49796	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:45.789860964 CET	49796	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:45.789891005 CET	443	49796	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:45.790256977 CET	443	49796	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:45.790581942 CET	49796	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:45.790656090 CET	443	49796	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:45.790729046 CET	49796	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:45.831350088 CET	443	49796	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:46.711829901 CET	443	49796	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:46.712040901 CET	443	49796	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:46.712110043 CET	49796	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:46.712827921 CET	49796	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:46.712858915 CET	443	49796	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:46.715533972 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:46.715578079 CET	443	49797	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:46.715672016 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:46.716114044 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:46.716128111 CET	443	49797	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:46.716691971 CET	49798	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:46.716728926 CET	443	49798	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:46.716800928 CET	49798	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:46.716984987 CET	49798	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:46.717000008 CET	443	49798	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:48.623811007 CET	443	49798	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:48.624159098 CET	49798	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:48.624208927 CET	443	49798	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:48.624634981 CET	443	49798	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:48.625206947 CET	49798	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:48.625312090 CET	443	49798	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:48.625403881 CET	49798	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:48.626982927 CET	443	49797	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:48.628963947 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:48.628988981 CET	443	49797	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:48.629384995 CET	443	49797	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:48.635299921 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:48.635421038 CET	443	49797	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:48.635479927 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:48.667346001 CET	443	49798	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:48.678183079 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:48.678201914 CET	443	49797	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.910936117 CET	443	49798	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.911056995 CET	443	49798	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.911746025 CET	49798	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.911778927 CET	443	49798	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.911792994 CET	49798	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.911792994 CET	49798	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.913201094 CET	49798	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.921335936 CET	443	49797	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.921550989 CET	443	49797	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.921605110 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.921905041 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.921921968 CET	443	49797	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.921932936 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.921964884 CET	49797	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.925477982 CET	49799	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.925499916 CET	443	49799	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.925621986 CET	49799	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.926245928 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.926285982 CET	443	49800	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.926482916 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.926582098 CET	49799	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.926595926 CET	443	49799	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.927012920 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.927026987 CET	443	49800	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.927454948 CET	49801	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.927491903 CET	443	49801	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:49.927558899 CET	49801	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.928085089 CET	49801	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:49.928098917 CET	443	49801	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.722116947 CET	443	49800	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.722472906 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.722501040 CET	443	49800	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.723535061 CET	443	49800	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.723607063 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.724138975 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.724195957 CET	443	49800	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.724446058 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.724453926 CET	443	49800	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.772058010 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.836163044 CET	443	49799	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.838581085 CET	49799	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.838604927 CET	443	49799	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.838942051 CET	443	49799	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.839512110 CET	49799	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.839571953 CET	443	49799	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.839693069 CET	49799	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.882020950 CET	443	49801	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.882601976 CET	49801	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.882623911 CET	443	49801	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.882972956 CET	443	49801	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.883343935 CET	443	49799	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.883497000 CET	49801	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.883558989 CET	49801	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:51.883564949 CET	443	49801	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.927364111 CET	443	49801	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:51.927563906 CET	49801	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:52.784075022 CET	443	49800	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:52.784207106 CET	443	49800	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:52.784274101 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:52.784791946 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:52.784805059 CET	443	49800	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:52.784815073 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:52.784862995 CET	49800	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:53.133006096 CET	443	49801	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:53.133080959 CET	443	49801	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:53.133158922 CET	49801	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:53.133972883 CET	49801	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:53.133994102 CET	443	49801	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:53.135292053 CET	443	49799	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:53.135366917 CET	443	49799	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:53.135426044 CET	49799	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:53.135782003 CET	49799	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:53.135795116 CET	443	49799	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:53.135814905 CET	49799	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:53.135840893 CET	49799	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:53.139431953 CET	49802	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:53.139471054 CET	443	49802	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:53.139559031 CET	49802	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:53.139887094 CET	49802	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:53.139928102 CET	443	49802	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:54.939492941 CET	443	49802	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:54.939910889 CET	49802	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:54.939934969 CET	443	49802	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:54.940268993 CET	443	49802	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:54.940587044 CET	49802	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:54.940639019 CET	443	49802	108.158.75.57	192.168.2.4
Nov 26, 2024 01:01:54.940722942 CET	49802	443	192.168.2.4	108.158.75.57
Nov 26, 2024 01:01:54.987333059 CET	443	49802	108.158.75.57	192.168.2.4
Nov 26, 2024 01:02:04.361675024 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:04.361696005 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:04.361772060 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:04.362138987 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:04.362150908 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.081835032 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.081934929 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.084223986 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.084233999 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.084511042 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.092104912 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.135337114 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.560436010 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.560468912 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.560482979 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.560643911 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.560709953 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.560800076 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.739020109 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.739056110 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.739181042 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.739233971 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.739295959 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.783252001 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.783287048 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.783401966 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.783442974 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.783509970 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.912487030 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.912537098 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.912666082 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.912702084 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.912754059 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.950944901 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.950974941 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.951066017 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.951105118 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.951158047 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.974687099 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.974714994 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.974874020 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.974905014 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.974984884 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.992979050 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.993012905 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.993097067 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:06.993105888 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:06.993283033 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.100693941 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.100725889 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.100908995 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.100951910 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.101041079 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.119060993 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.119091988 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.119153976 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.119194984 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.119215965 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.119241953 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.132852077 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.132885933 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.132947922 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.132958889 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.132975101 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.133152008 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.148497105 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.148536921 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.148617029 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.148631096 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.148715973 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.164314985 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.164367914 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.164462090 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.164470911 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.164591074 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.178996086 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.179042101 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.179100990 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.179107904 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.179141998 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.179152012 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.183638096 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.183717966 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.183723927 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.183773994 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.183825016 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.183845997 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.183861971 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.183868885 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.233774900 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.233824968 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.233890057 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.234040976 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.234077930 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.234141111 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.234554052 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.234566927 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.234911919 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.234926939 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.237404108 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.237417936 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.237473965 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.237626076 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.237637043 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.239168882 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.239196062 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.239253044 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.239869118 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.239954948 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.239974022 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.239991903 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:07.240020990 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.240114927 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:07.240139008 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:08.657794952 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:08.657838106 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:08.657913923 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:08.658330917 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:08.658343077 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:08.949356079 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:08.949372053 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:08.949937105 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:08.949964046 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:08.950216055 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:08.950242996 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:08.951776981 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:08.951783895 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:08.951811075 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:08.951817036 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.022743940 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.023164988 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.023185015 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.023619890 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.023624897 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.026638985 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.028929949 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.028960943 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.029438972 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.029445887 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.093322992 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.093815088 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.093848944 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.094204903 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.094212055 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.403364897 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.403388977 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.403458118 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.403486013 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.403532028 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.403738976 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.403743982 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.403759956 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.403920889 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.403950930 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.403990984 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.404294014 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.404356956 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.404407024 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.404524088 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.404545069 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.404560089 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.404566050 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.406280994 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.406336069 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.406411886 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.406497955 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.406522989 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.406567097 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.406586885 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.406593084 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.406723022 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.406738997 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.472879887 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.472909927 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.472979069 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.473006964 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.473047972 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.473244905 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.473249912 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.473264933 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.473424911 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.473453045 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.473490000 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.475878954 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.475931883 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.476119995 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.476152897 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.476152897 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.476203918 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.476236105 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.476268053 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.476279974 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.476372004 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.476392031 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.476402998 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.476598978 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.476634026 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.476669073 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.478365898 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.478394032 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.478461027 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.478581905 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.478590012 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.547815084 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.547895908 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.547966957 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.548125982 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.548142910 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.548157930 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.548166037 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.550517082 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.550563097 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:09.550656080 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.550821066 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:09.550834894 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:10.356668949 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:10.356766939 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:10.359571934 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:10.359582901 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:10.359786987 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:10.368084908 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:10.415344000 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:11.040173054 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:11.040205956 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:11.040219069 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:11.040301085 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:11.040333986 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:11.040385008 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:11.076833963 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:11.076875925 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:11.076917887 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:11.076963902 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:11.076992989 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:11.077096939 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:11.077120066 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:11.077132940 CET	49810	443	192.168.2.4	20.109.210.53
Nov 26, 2024 01:02:11.077137947 CET	443	49810	20.109.210.53	192.168.2.4
Nov 26, 2024 01:02:11.122117996 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.122596979 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.122658014 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.123030901 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.123048067 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.189699888 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.190134048 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.190157890 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.190613031 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.190618992 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.198560953 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.198925972 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.198934078 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.199331045 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.199337006 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.399893999 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.400399923 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.400430918 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.400933981 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.400938988 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.573261023 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.573328972 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.573389053 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.573554039 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.573596001 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.573622942 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.573637962 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.576714993 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.576756954 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.576828957 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.577008009 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.577020884 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.633862019 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.633914948 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.633975029 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.634270906 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.634294033 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.634305000 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.634310961 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.636528015 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.636562109 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.636631966 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.636769056 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.636780977 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.711869955 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.711940050 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.712148905 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.712222099 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.712228060 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.712236881 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.712243080 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.714651108 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.714674950 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.714751959 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.714894056 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.714906931 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.823072910 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.823616028 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.823641062 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.824165106 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.824170113 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.852740049 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.852936029 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.852999926 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.853112936 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.853122950 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.853133917 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.853137970 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.856142044 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.856177092 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:11.856267929 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.856425047 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:11.856439114 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:12.268198013 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:12.268274069 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:12.268332005 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:12.276526928 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:12.276542902 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:12.276554108 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:12.276557922 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:12.281827927 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:12.281876087 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:12.281990051 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:12.282293081 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:12.282308102 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.226324081 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.226921082 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.226942062 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.227364063 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.227368116 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.356165886 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.356843948 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.356861115 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.357228041 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.357234955 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.434256077 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.434871912 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.434889078 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.435224056 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.435229063 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.670948029 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.670998096 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.671076059 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.671283007 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.671300888 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.671310902 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.671319962 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.674213886 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.674243927 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.674340963 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.674509048 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.674520969 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.700604916 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.700969934 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.700988054 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.701406002 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.701410055 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.802149057 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.802205086 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.802306890 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.802442074 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.802442074 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.802459002 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.802469015 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.805808067 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.805838108 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.805926085 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.806042910 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.806056023 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.871392965 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.871566057 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.871639967 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.871740103 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.871740103 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.871757030 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.871764898 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.874525070 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.874546051 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.874635935 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.874799013 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.874810934 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.998195887 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.998789072 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.998800993 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:13.999231100 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:13.999237061 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.168868065 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.168934107 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.168991089 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.169169903 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.169178009 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.169188976 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.169193029 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.171986103 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.172012091 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.172092915 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.172274113 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.172288895 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.434297085 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.434370041 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.434429884 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.434636116 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.434654951 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.434664965 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.434672117 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.437673092 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.437762976 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:14.437880993 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.438041925 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:14.438079119 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:15.585661888 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:15.586119890 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:15.586137056 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:15.586648941 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:15.586654902 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:15.660238981 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:15.660667896 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:15.660700083 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:15.661066055 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:15.661070108 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.007941961 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.008562088 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.008577108 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.008991003 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.008997917 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.125205994 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.125264883 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.125325918 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.125529051 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.125551939 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.125567913 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.125576019 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.128340960 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.128417015 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.128513098 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.128714085 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.128740072 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.245446920 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.245604992 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.245668888 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.246279001 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.246285915 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.246294975 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.246299982 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.249061108 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.249104023 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.249187946 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.249346972 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.249356031 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.283943892 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.284334898 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.284379959 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.284750938 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.284764051 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.571784973 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.571862936 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.571943998 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.572078943 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.572093010 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.572104931 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.572108984 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.574932098 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.574961901 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.575110912 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.575166941 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.575176001 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.739202976 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.739303112 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.739377975 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.739543915 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.739543915 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.739593029 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.739638090 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.742307901 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.742351055 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:16.742419004 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.742552042 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:16.742566109 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.397336006 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.397789001 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:17.397815943 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.398363113 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:17.398367882 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.842756987 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.842833042 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.842894077 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:17.843044996 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:17.843065023 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.843076944 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:17.843081951 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.845290899 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:17.845344067 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.845421076 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:17.845549107 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:17.845560074 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.907387972 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.907974958 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:17.908041954 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:17.908541918 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:17.908556938 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.102715969 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.103226900 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.103254080 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.103831053 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.103836060 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.352802038 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.352874994 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.352926016 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.353113890 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.353156090 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.353188038 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.353204012 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.356539011 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.356575012 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.356621981 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.356669903 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.356825113 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.356843948 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.357034922 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.357060909 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.357594967 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.357599974 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.463155985 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.463628054 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.463665962 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.464386940 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.464392900 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.558012009 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.558173895 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.558233023 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.558319092 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.558341980 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.558355093 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.558361053 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.561520100 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.561557055 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.561616898 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.561753035 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.561765909 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.801412106 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.801489115 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.801541090 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.801758051 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.801779032 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.801791906 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.801798105 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.804806948 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.804841042 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.804910898 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.805100918 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.805114031 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.897516012 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.897680998 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.897744894 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.897779942 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.897798061 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.897808075 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.897814035 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.900453091 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.900479078 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:18.900538921 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.900713921 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:18.900727034 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:19.630920887 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:19.631484985 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:19.631501913 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:19.631961107 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:19.631964922 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:19.741820097 CET	49836	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:02:19.741877079 CET	443	49836	172.217.21.36	192.168.2.4
Nov 26, 2024 01:02:19.741969109 CET	49836	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:02:19.742233992 CET	49836	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:02:19.742248058 CET	443	49836	172.217.21.36	192.168.2.4
Nov 26, 2024 01:02:20.076523066 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.076591015 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.076659918 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.076864004 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.076888084 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.076900959 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.076905966 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.080049992 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.080091000 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.080173969 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.080353022 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.080367088 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.201160908 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.201675892 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.201695919 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.202270031 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.202275038 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.352189064 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.352663994 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.352699995 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.353256941 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.353260994 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.651163101 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.651705980 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.651719093 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.652328014 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.652333021 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.655014992 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.655098915 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.655149937 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.655293941 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.655307055 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.655319929 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.655324936 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.658343077 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.658374071 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.658456087 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.658602953 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.658616066 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.746195078 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.746727943 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.746798038 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.747328997 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.747337103 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.798525095 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.798804045 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.798877954 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.798913002 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.798932076 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.798942089 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.798949003 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.802107096 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.802148104 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:20.802247047 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.802398920 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:20.802412033 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.104346991 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.104413033 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.104490042 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.104665995 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.104686022 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.104696989 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.104707956 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.107820988 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.107868910 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.107964993 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.108138084 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.108151913 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.202908993 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.202969074 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.203022957 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.203170061 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.203181982 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.203193903 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.203197956 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.205698967 CET	49841	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.205725908 CET	443	49841	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.205797911 CET	49841	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.205943108 CET	49841	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.205954075 CET	443	49841	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.479932070 CET	443	49836	172.217.21.36	192.168.2.4
Nov 26, 2024 01:02:21.480242014 CET	49836	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:02:21.480266094 CET	443	49836	172.217.21.36	192.168.2.4
Nov 26, 2024 01:02:21.480596066 CET	443	49836	172.217.21.36	192.168.2.4
Nov 26, 2024 01:02:21.481096029 CET	49836	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:02:21.481156111 CET	443	49836	172.217.21.36	192.168.2.4
Nov 26, 2024 01:02:21.521505117 CET	49836	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:02:21.929547071 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.930145025 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.930169106 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:21.930757046 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:21.930761099 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.375557899 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.376250029 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.376266003 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.376724005 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.376729012 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.384351969 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.384417057 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.384548903 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.384614944 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.384638071 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.384649992 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.384654999 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.388499022 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.388531923 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.388637066 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.388823032 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.388835907 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.530893087 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.531409025 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.531426907 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.532021999 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.532027006 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.824233055 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.824316025 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.824371099 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.824513912 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.824533939 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.824543953 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.824549913 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.827601910 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.827640057 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.827728987 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.827898026 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.827910900 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.888151884 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.888566971 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.888588905 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.889138937 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.889143944 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.931772947 CET	443	49841	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.932120085 CET	49841	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.932141066 CET	443	49841	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.932621956 CET	49841	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.932627916 CET	443	49841	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.966003895 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.966152906 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.966223001 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.966275930 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.966285944 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.966295004 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.966299057 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.968734980 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.968749046 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:22.968821049 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.968956947 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:22.968974113 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.334256887 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.334325075 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.334378958 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.334628105 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.334642887 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.334652901 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.334657907 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.337439060 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.337481022 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.337573051 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.337722063 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.337734938 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.369693995 CET	443	49841	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.369752884 CET	443	49841	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.369807005 CET	49841	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.370105982 CET	49841	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.370121002 CET	443	49841	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.370132923 CET	49841	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.370138884 CET	443	49841	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.372937918 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.372965097 CET	443	49846	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:23.373047113 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.373200893 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:23.373214006 CET	443	49846	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.105014086 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.105478048 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.105493069 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.105943918 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.105952024 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.541367054 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.541410923 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.541465998 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.541641951 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.541659117 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.541670084 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.541675091 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.544478893 CET	49847	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.544524908 CET	443	49847	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.544584036 CET	49847	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.544707060 CET	49847	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.544720888 CET	443	49847	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.549542904 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.549962997 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.549984932 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.550463915 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.550470114 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.819607973 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.820198059 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.820228100 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.820673943 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.820679903 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.974031925 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.974704981 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.974719048 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.975181103 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:24.975186110 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:24.999948978 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.000015974 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.000083923 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.000267029 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.000284910 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.000294924 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.000300884 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.003129959 CET	49848	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.003205061 CET	443	49848	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.003329039 CET	49848	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.003460884 CET	49848	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.003479958 CET	443	49848	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.095134974 CET	443	49846	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.095995903 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.096007109 CET	443	49846	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.096327066 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.096330881 CET	443	49846	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.273202896 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.273386955 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.273446083 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.273550987 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.273561954 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.273572922 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.273576975 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.276566982 CET	49849	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.276592016 CET	443	49849	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.276695013 CET	49849	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.276875019 CET	49849	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.276889086 CET	443	49849	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.428412914 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.428481102 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.428565025 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.428761959 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.428783894 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.428812981 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.428818941 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.431710958 CET	49850	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.431768894 CET	443	49850	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.431879997 CET	49850	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.432090044 CET	49850	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.432121038 CET	443	49850	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.530680895 CET	443	49846	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.530740976 CET	443	49846	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.530792952 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.530962944 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.530970097 CET	443	49846	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.530977964 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.530982018 CET	443	49846	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.533756971 CET	49851	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.533771992 CET	443	49851	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:25.534035921 CET	49851	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.534035921 CET	49851	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:25.534056902 CET	443	49851	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.388515949 CET	443	49847	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.388998032 CET	49847	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:26.389014006 CET	443	49847	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.389456987 CET	49847	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:26.389465094 CET	443	49847	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.721795082 CET	443	49848	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.722464085 CET	49848	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:26.722521067 CET	443	49848	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.722940922 CET	49848	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:26.722954988 CET	443	49848	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.847889900 CET	443	49847	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.847946882 CET	443	49847	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.848004103 CET	49847	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:26.848186970 CET	49847	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:26.848198891 CET	443	49847	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.848211050 CET	49847	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:26.848217010 CET	443	49847	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.851068020 CET	49852	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:26.851102114 CET	443	49852	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:26.851186037 CET	49852	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:26.851373911 CET	49852	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:26.851387978 CET	443	49852	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.157356024 CET	443	49848	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.157426119 CET	443	49848	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.157499075 CET	49848	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.157676935 CET	49848	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.157725096 CET	443	49848	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.157752991 CET	49848	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.157769918 CET	443	49848	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.160114050 CET	443	49849	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.160346985 CET	49853	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.160397053 CET	443	49853	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.160469055 CET	49853	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.160487890 CET	49849	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.160511971 CET	443	49849	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.160629034 CET	49853	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.160641909 CET	443	49853	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.160927057 CET	49849	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.160933971 CET	443	49849	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.256702900 CET	443	49851	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.257224083 CET	49851	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.257231951 CET	443	49851	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.257680893 CET	49851	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.257684946 CET	443	49851	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.294462919 CET	443	49850	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.294858932 CET	49850	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.294925928 CET	443	49850	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.295277119 CET	49850	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.295289993 CET	443	49850	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.603903055 CET	443	49849	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.603996992 CET	443	49849	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.604051113 CET	49849	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.607120037 CET	49849	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.607134104 CET	443	49849	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.607144117 CET	49849	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.607150078 CET	443	49849	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.610075951 CET	49854	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.610095978 CET	443	49854	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.610156059 CET	49854	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.610323906 CET	49854	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.610337973 CET	443	49854	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.692955971 CET	443	49851	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.693013906 CET	443	49851	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.693072081 CET	49851	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.693316936 CET	49851	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.693322897 CET	443	49851	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.693334103 CET	49851	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.693337917 CET	443	49851	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.696326971 CET	49855	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.696374893 CET	443	49855	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.696441889 CET	49855	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.696568966 CET	49855	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.696583986 CET	443	49855	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.751528978 CET	443	49850	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.751615047 CET	443	49850	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.751667023 CET	49850	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.751930952 CET	49850	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.751930952 CET	49850	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.751961946 CET	443	49850	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.751998901 CET	443	49850	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.754765034 CET	49856	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.754801035 CET	443	49856	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:27.754863977 CET	49856	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.755062103 CET	49856	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:27.755074024 CET	443	49856	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:28.634152889 CET	443	49852	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:28.634718895 CET	49852	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:28.634754896 CET	443	49852	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:28.635158062 CET	49852	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:28.635163069 CET	443	49852	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:28.877132893 CET	443	49853	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:28.877995014 CET	49853	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:28.878026009 CET	443	49853	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:28.878489971 CET	49853	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:28.878495932 CET	443	49853	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.079617977 CET	443	49852	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.079683065 CET	443	49852	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.079915047 CET	49852	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.079952955 CET	49852	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.079972982 CET	443	49852	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.079982996 CET	49852	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.079988003 CET	443	49852	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.082621098 CET	49857	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.082639933 CET	443	49857	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.082725048 CET	49857	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.082860947 CET	49857	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.082875967 CET	443	49857	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.313405037 CET	443	49853	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.313496113 CET	443	49853	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.313550949 CET	49853	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.313713074 CET	49853	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.313734055 CET	443	49853	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.313744068 CET	49853	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.313750029 CET	443	49853	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.316665888 CET	49858	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.316692114 CET	443	49858	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.316778898 CET	49858	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.316943884 CET	49858	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.316953897 CET	443	49858	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.395628929 CET	443	49854	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.396143913 CET	49854	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.396173954 CET	443	49854	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.396610975 CET	49854	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.396615982 CET	443	49854	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.476855040 CET	443	49855	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.477360964 CET	49855	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.477396965 CET	443	49855	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.477965117 CET	49855	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.477971077 CET	443	49855	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.535413027 CET	443	49856	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.535926104 CET	49856	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.535943031 CET	443	49856	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.536453962 CET	49856	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.536458969 CET	443	49856	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.840176105 CET	443	49854	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.840341091 CET	443	49854	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.840677977 CET	49854	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.840725899 CET	49854	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.840735912 CET	443	49854	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.840745926 CET	49854	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.840751886 CET	443	49854	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.843343973 CET	49859	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.843360901 CET	443	49859	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.843425989 CET	49859	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.843565941 CET	49859	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.843580008 CET	443	49859	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.921813965 CET	443	49855	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.921873093 CET	443	49855	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.921972036 CET	49855	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.922416925 CET	49855	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.922434092 CET	443	49855	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.922442913 CET	49855	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.922447920 CET	443	49855	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.924665928 CET	49860	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.924700975 CET	443	49860	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.924781084 CET	49860	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.924920082 CET	49860	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.924932957 CET	443	49860	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.981592894 CET	443	49856	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.981656075 CET	443	49856	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.981754065 CET	49856	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.981964111 CET	49856	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.981971979 CET	443	49856	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.981980085 CET	49856	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.981983900 CET	443	49856	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.983988047 CET	49861	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.984075069 CET	443	49861	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:29.984303951 CET	49861	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.984304905 CET	49861	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:29.984385967 CET	443	49861	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:30.863396883 CET	443	49857	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:30.863900900 CET	49857	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:30.863926888 CET	443	49857	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:30.864516020 CET	49857	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:30.864521027 CET	443	49857	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.161911964 CET	443	49858	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.162472963 CET	49858	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.162498951 CET	443	49858	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.163120031 CET	49858	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.163125992 CET	443	49858	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.170958042 CET	443	49836	172.217.21.36	192.168.2.4
Nov 26, 2024 01:02:31.171014071 CET	443	49836	172.217.21.36	192.168.2.4
Nov 26, 2024 01:02:31.171152115 CET	49836	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:02:31.309288979 CET	443	49857	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.309371948 CET	443	49857	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.309537888 CET	49857	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.309568882 CET	49857	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.309588909 CET	443	49857	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.309601068 CET	49857	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.309606075 CET	443	49857	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.312747955 CET	49862	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.312777042 CET	443	49862	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.312854052 CET	49862	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.313035965 CET	49862	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.313049078 CET	443	49862	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.579544067 CET	443	49859	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.580235958 CET	49859	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.580267906 CET	443	49859	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.580595970 CET	49859	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.580600977 CET	443	49859	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.618551016 CET	443	49858	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.618618965 CET	443	49858	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.618803978 CET	49858	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.618837118 CET	49858	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.618853092 CET	443	49858	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.618863106 CET	49858	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.618869066 CET	443	49858	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.621566057 CET	49863	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.621620893 CET	443	49863	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.621716022 CET	49863	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.621884108 CET	49863	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.621901989 CET	443	49863	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.700151920 CET	443	49861	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.700530052 CET	49861	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.700575113 CET	443	49861	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.700932026 CET	49861	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.700946093 CET	443	49861	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.704066992 CET	443	49860	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.704324961 CET	49860	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.704341888 CET	443	49860	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:31.704667091 CET	49860	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:31.704672098 CET	443	49860	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.014204025 CET	443	49859	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.014377117 CET	443	49859	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.014612913 CET	49859	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.014672041 CET	49859	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.014672041 CET	49859	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.014689922 CET	443	49859	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.014698029 CET	443	49859	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.017735004 CET	49864	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.017765045 CET	443	49864	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.017832994 CET	49864	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.017980099 CET	49864	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.017992973 CET	443	49864	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.134815931 CET	443	49861	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.134887934 CET	443	49861	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.134987116 CET	49861	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.135188103 CET	49861	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.135188103 CET	49861	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.135224104 CET	443	49861	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.135248899 CET	443	49861	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.137785912 CET	49865	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.137815952 CET	443	49865	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.137909889 CET	49865	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.138053894 CET	49865	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.138066053 CET	443	49865	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.147964001 CET	443	49860	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.148020983 CET	443	49860	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.148159981 CET	49860	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.148185015 CET	49860	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.148200035 CET	443	49860	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.148211002 CET	49860	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.148216009 CET	443	49860	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.150341034 CET	49866	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.150378942 CET	443	49866	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.150453091 CET	49866	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.150582075 CET	49866	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:32.150594950 CET	443	49866	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:32.195442915 CET	49836	443	192.168.2.4	172.217.21.36
Nov 26, 2024 01:02:32.195450068 CET	443	49836	172.217.21.36	192.168.2.4
Nov 26, 2024 01:02:33.096261024 CET	443	49862	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.096853971 CET	49862	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.096880913 CET	443	49862	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.097261906 CET	49862	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.097265959 CET	443	49862	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.442934036 CET	443	49863	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.443767071 CET	49863	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.443846941 CET	443	49863	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.444116116 CET	49863	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.444133043 CET	443	49863	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.541918039 CET	443	49862	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.541970015 CET	443	49862	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.542015076 CET	49862	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.542318106 CET	49862	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.542330980 CET	443	49862	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.542363882 CET	49862	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.542368889 CET	443	49862	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.545712948 CET	49867	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.545746088 CET	443	49867	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.545802116 CET	49867	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.546009064 CET	49867	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.546024084 CET	443	49867	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.805756092 CET	443	49864	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.806303024 CET	49864	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.806318998 CET	443	49864	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.806735039 CET	49864	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.806740999 CET	443	49864	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.888725996 CET	443	49863	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.888802052 CET	443	49863	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.888874054 CET	49863	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.889060974 CET	49863	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.889060974 CET	49863	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.889105082 CET	443	49863	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.889132977 CET	443	49863	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.891556978 CET	49868	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.891593933 CET	443	49868	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.891659975 CET	49868	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.891799927 CET	49868	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.891808987 CET	443	49868	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.972933054 CET	443	49866	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.973325968 CET	49866	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.973337889 CET	443	49866	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:33.973776102 CET	49866	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:33.973781109 CET	443	49866	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.001390934 CET	443	49865	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.001931906 CET	49865	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.001961946 CET	443	49865	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.002340078 CET	49865	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.002346039 CET	443	49865	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.254477978 CET	443	49864	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.254646063 CET	443	49864	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.254755974 CET	49864	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.254787922 CET	49864	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.254808903 CET	443	49864	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.254818916 CET	49864	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.254825115 CET	443	49864	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.257283926 CET	49869	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.257309914 CET	443	49869	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.257380009 CET	49869	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.259953976 CET	49869	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.259967089 CET	443	49869	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.418194056 CET	443	49866	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.418250084 CET	443	49866	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.418303013 CET	49866	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.430319071 CET	49866	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.430349112 CET	443	49866	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.430403948 CET	49866	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.430416107 CET	443	49866	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.452714920 CET	49870	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.452758074 CET	443	49870	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.452820063 CET	49870	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.460939884 CET	49870	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.460953951 CET	443	49870	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.466592073 CET	443	49865	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.466665030 CET	443	49865	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.466706038 CET	49865	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.466929913 CET	49865	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.466943979 CET	443	49865	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.466954947 CET	49865	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.466959953 CET	443	49865	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.469420910 CET	49871	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.469435930 CET	443	49871	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:34.469494104 CET	49871	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.469813108 CET	49871	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:34.469826937 CET	443	49871	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.271545887 CET	443	49867	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.272181034 CET	49867	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.272198915 CET	443	49867	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.272689104 CET	49867	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.272694111 CET	443	49867	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.671847105 CET	443	49868	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.672444105 CET	49868	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.672462940 CET	443	49868	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.672954082 CET	49868	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.672960043 CET	443	49868	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.708277941 CET	443	49867	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.708333015 CET	443	49867	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.708537102 CET	49867	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.708574057 CET	49867	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.708587885 CET	443	49867	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.708597898 CET	49867	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.708602905 CET	443	49867	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.711491108 CET	49872	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.711507082 CET	443	49872	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.711561918 CET	49872	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.711733103 CET	49872	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.711745977 CET	443	49872	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.987802982 CET	443	49869	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.988322020 CET	49869	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.988359928 CET	443	49869	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:35.988945007 CET	49869	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:35.988955975 CET	443	49869	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:36.115885973 CET	443	49868	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:36.115953922 CET	443	49868	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:36.116161108 CET	49868	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:36.116214991 CET	49868	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:36.116214991 CET	49868	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:36.116260052 CET	443	49868	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:36.116286993 CET	443	49868	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:36.119364023 CET	49873	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:36.119398117 CET	443	49873	13.107.246.63	192.168.2.4
Nov 26, 2024 01:02:36.119476080 CET	49873	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:36.119702101 CET	49873	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:02:36.119713068 CET	443	49873	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 26, 2024 01:01:16.087464094 CET	53	52147	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:16.125849962 CET	53	51494	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:17.362786055 CET	64430	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:17.362986088 CET	55421	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:18.290136099 CET	53	64430	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:18.293884039 CET	53	55421	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:18.855187893 CET	53	57747	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:19.686913967 CET	61614	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:19.687119961 CET	51405	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:19.825985909 CET	53	51405	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:19.826090097 CET	53	61614	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:22.033952951 CET	62951	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:22.034404039 CET	53022	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:22.039026976 CET	61291	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:22.039223909 CET	51385	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:22.189850092 CET	53	53022	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:22.189923048 CET	53	52836	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:22.190031052 CET	53	62951	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:22.190176964 CET	53	61291	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:22.190771103 CET	53	63910	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:22.192939997 CET	53	51385	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:23.953739882 CET	50901	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:23.953879118 CET	53478	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:24.092683077 CET	53	50901	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:24.092963934 CET	53	53478	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:24.824312925 CET	51071	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:24.824448109 CET	56768	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:24.963140011 CET	53	51071	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:24.964663982 CET	53	56768	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:25.013725042 CET	53	54454	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:28.044625998 CET	138	138	192.168.2.4	192.168.2.255
Nov 26, 2024 01:01:30.048989058 CET	62672	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:30.049120903 CET	65145	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:30.187804937 CET	53	62672	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:30.188546896 CET	53	65145	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:35.958527088 CET	53	61776	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:37.379479885 CET	62224	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:37.379637957 CET	51504	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:38.346012115 CET	53	51504	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:38.348261118 CET	53	62224	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:41.564491034 CET	52704	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:41.564632893 CET	62238	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:01:41.704242945 CET	53	52704	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:41.704380035 CET	53	62238	1.1.1.1	192.168.2.4
Nov 26, 2024 01:01:54.709856033 CET	53	60768	1.1.1.1	192.168.2.4
Nov 26, 2024 01:02:15.289997101 CET	53	64202	1.1.1.1	192.168.2.4
Nov 26, 2024 01:02:17.131519079 CET	53	57637	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 26, 2024 01:01:16.201975107 CET	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 26, 2024 01:01:17.362786055 CET	192.168.2.4	1.1.1.1	0x9af9	Standard query (0)	anz.pfm.law	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:17.362986088 CET	192.168.2.4	1.1.1.1	0x19cc	Standard query (0)	anz.pfm.law	65	IN (0x0001)	false
Nov 26, 2024 01:01:19.686913967 CET	192.168.2.4	1.1.1.1	0x8359	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:19.687119961 CET	192.168.2.4	1.1.1.1	0x16ce	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 26, 2024 01:01:22.033952951 CET	192.168.2.4	1.1.1.1	0x44c5	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:22.034404039 CET	192.168.2.4	1.1.1.1	0xf780	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Nov 26, 2024 01:01:22.039026976 CET	192.168.2.4	1.1.1.1	0x9432	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:22.039223909 CET	192.168.2.4	1.1.1.1	0xe5a3	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Nov 26, 2024 01:01:23.953739882 CET	192.168.2.4	1.1.1.1	0xe57d	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:23.953879118 CET	192.168.2.4	1.1.1.1	0x1166	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Nov 26, 2024 01:01:24.824312925 CET	192.168.2.4	1.1.1.1	0xc727	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:24.824448109 CET	192.168.2.4	1.1.1.1	0xea99	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Nov 26, 2024 01:01:30.048989058 CET	192.168.2.4	1.1.1.1	0xc2b5	Standard query (0)	anz.pfm.law	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:30.049120903 CET	192.168.2.4	1.1.1.1	0x3a36	Standard query (0)	anz.pfm.law	65	IN (0x0001)	false
Nov 26, 2024 01:01:37.379479885 CET	192.168.2.4	1.1.1.1	0x9b15	Standard query (0)	cases.au.casefunnel.io	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:37.379637957 CET	192.168.2.4	1.1.1.1	0xc9e6	Standard query (0)	cases.au.casefunnel.io	65	IN (0x0001)	false
Nov 26, 2024 01:01:41.564491034 CET	192.168.2.4	1.1.1.1	0x3ff9	Standard query (0)	cases.au.casefunnel.io	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:41.564632893 CET	192.168.2.4	1.1.1.1	0x3028	Standard query (0)	cases.au.casefunnel.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 26, 2024 01:01:18.290136099 CET	1.1.1.1	192.168.2.4	0x9af9	No error (0)	anz.pfm.law	d1aqjsl8x3ggu4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:18.290136099 CET	1.1.1.1	192.168.2.4	0x9af9	No error (0)	d1aqjsl8x3ggu4.cloudfront.net		108.158.75.57	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:18.290136099 CET	1.1.1.1	192.168.2.4	0x9af9	No error (0)	d1aqjsl8x3ggu4.cloudfront.net		108.158.75.99	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:18.290136099 CET	1.1.1.1	192.168.2.4	0x9af9	No error (0)	d1aqjsl8x3ggu4.cloudfront.net		108.158.75.8	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:18.290136099 CET	1.1.1.1	192.168.2.4	0x9af9	No error (0)	d1aqjsl8x3ggu4.cloudfront.net		108.158.75.24	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:18.293884039 CET	1.1.1.1	192.168.2.4	0x19cc	No error (0)	anz.pfm.law	d1aqjsl8x3ggu4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:19.825985909 CET	1.1.1.1	192.168.2.4	0x16ce	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 26, 2024 01:01:19.826090097 CET	1.1.1.1	192.168.2.4	0x8359	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:22.189850092 CET	1.1.1.1	192.168.2.4	0xf780	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:22.190031052 CET	1.1.1.1	192.168.2.4	0x44c5	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:22.190031052 CET	1.1.1.1	192.168.2.4	0x44c5	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:22.190031052 CET	1.1.1.1	192.168.2.4	0x44c5	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:22.190031052 CET	1.1.1.1	192.168.2.4	0x44c5	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:22.190031052 CET	1.1.1.1	192.168.2.4	0x44c5	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:22.190176964 CET	1.1.1.1	192.168.2.4	0x9432	No error (0)	www.recaptcha.net		172.217.19.227	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:24.092683077 CET	1.1.1.1	192.168.2.4	0xe57d	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:24.092683077 CET	1.1.1.1	192.168.2.4	0xe57d	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:24.092683077 CET	1.1.1.1	192.168.2.4	0xe57d	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:24.092683077 CET	1.1.1.1	192.168.2.4	0xe57d	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:24.092683077 CET	1.1.1.1	192.168.2.4	0xe57d	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:24.092963934 CET	1.1.1.1	192.168.2.4	0x1166	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:24.963140011 CET	1.1.1.1	192.168.2.4	0xc727	No error (0)	www.recaptcha.net		172.217.19.227	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:30.187804937 CET	1.1.1.1	192.168.2.4	0xc2b5	No error (0)	anz.pfm.law	d1aqjsl8x3ggu4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:30.187804937 CET	1.1.1.1	192.168.2.4	0xc2b5	No error (0)	d1aqjsl8x3ggu4.cloudfront.net		108.158.75.57	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:30.187804937 CET	1.1.1.1	192.168.2.4	0xc2b5	No error (0)	d1aqjsl8x3ggu4.cloudfront.net		108.158.75.8	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:30.187804937 CET	1.1.1.1	192.168.2.4	0xc2b5	No error (0)	d1aqjsl8x3ggu4.cloudfront.net		108.158.75.24	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:30.187804937 CET	1.1.1.1	192.168.2.4	0xc2b5	No error (0)	d1aqjsl8x3ggu4.cloudfront.net		108.158.75.99	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:30.188546896 CET	1.1.1.1	192.168.2.4	0x3a36	No error (0)	anz.pfm.law	d1aqjsl8x3ggu4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:38.346012115 CET	1.1.1.1	192.168.2.4	0xc9e6	No error (0)	cases.au.casefunnel.io	d3jw5edstn5jte.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:38.348261118 CET	1.1.1.1	192.168.2.4	0x9b15	No error (0)	cases.au.casefunnel.io	d3jw5edstn5jte.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:38.348261118 CET	1.1.1.1	192.168.2.4	0x9b15	No error (0)	d3jw5edstn5jte.cloudfront.net		13.227.8.109	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:38.348261118 CET	1.1.1.1	192.168.2.4	0x9b15	No error (0)	d3jw5edstn5jte.cloudfront.net		13.227.8.129	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:38.348261118 CET	1.1.1.1	192.168.2.4	0x9b15	No error (0)	d3jw5edstn5jte.cloudfront.net		13.227.8.22	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:38.348261118 CET	1.1.1.1	192.168.2.4	0x9b15	No error (0)	d3jw5edstn5jte.cloudfront.net		13.227.8.67	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:41.704242945 CET	1.1.1.1	192.168.2.4	0x3ff9	No error (0)	cases.au.casefunnel.io	d3jw5edstn5jte.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:01:41.704242945 CET	1.1.1.1	192.168.2.4	0x3ff9	No error (0)	d3jw5edstn5jte.cloudfront.net		13.227.8.67	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:41.704242945 CET	1.1.1.1	192.168.2.4	0x3ff9	No error (0)	d3jw5edstn5jte.cloudfront.net		13.227.8.22	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:41.704242945 CET	1.1.1.1	192.168.2.4	0x3ff9	No error (0)	d3jw5edstn5jte.cloudfront.net		13.227.8.129	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:41.704242945 CET	1.1.1.1	192.168.2.4	0x3ff9	No error (0)	d3jw5edstn5jte.cloudfront.net		13.227.8.109	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:01:41.704380035 CET	1.1.1.1	192.168.2.4	0x3028	No error (0)	cases.au.casefunnel.io	d3jw5edstn5jte.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

anz.pfm.law

https:

cdn.jsdelivr.net

www.recaptcha.net

cases.au.casefunnel.io

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:20 UTC	678	OUT	GET /go/xmKDa5CjvX27AwGjR5C3/ HTTP/1.1 Host: anz.pfm.law Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:21 UTC	1277	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Tue, 26 Nov 2024 00:01:21 GMT blazor-enhanced-nav: allow X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; Expires=Tue, 03 Dec 2024 00:01:21 GMT; Path=/ Set-Cookie: AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; Expires=Tue, 03 Dec 2024 00:01:21 GMT; Path=/; SameSite=None; Secure Set-Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; path=/ Set-Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; path=/; samesite=strict; httponly Cache-Control: no-cache, no-store, max-age=0 Pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 eb2f49b78dae5a2d3df4afb2aa3e99b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: BjeRGghqFNaNE3WDW6GsVu4aBrcw83uKNEc0iTsVGrFm1J5ZFWV_ew== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:21 UTC	13605	IN	Data Raw: 33 35 31 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 74 72 61 6e 73 6c 61 74 65 3d 22 6e 6f 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 73 63 Data Ascii: 351d<!DOCTYPE html><html lang="en" translate="no"><head><base href="/"> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0"><meta name="robots" content="noindex,nofollow"><sc
2024-11-26 00:01:22 UTC	8750	IN	Data Raw: 32 32 32 36 0d 0a 63 6f 6c 6f 72 3a 20 23 30 30 38 38 63 63 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 72 61 67 2d 64 72 6f 70 2d 7a 6f 6e 65 20 7b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 64 61 73 68 65 64 20 23 63 66 64 38 64 63 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 6a 75 73 74 69 66 79 Data Ascii: 2226color: #0088cc; background: none; text-decoration: underline; } .drag-drop-zone { border: 2px dashed #cfd8dc !important; padding: 8px; display: flex; align-items: center; justify
2024-11-26 00:01:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:22 UTC	1177	OUT	GET /_content/Blazorise.Icons.FontAwesome/v6/css/all.min.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1 Host: anz.pfm.law Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
2024-11-26 00:01:23 UTC	930	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 102649 Connection: close Date: Tue, 26 Nov 2024 00:01:22 GMT Last-Modified: Fri, 14 Jun 2024 11:17:26 GMT Set-Cookie: AWSALB=O+xs3GaqhYZ+Z66awTfdsATiyyWuujK0ND625KHdDpgc39Phb9PJnjMCC2Sf7wJIE/4c8AQ4zgGZ6NFYqZ7wflp6rECpLfLKSRySgTw9Mu00LVd/qCZW0MGlLaYi; Expires=Tue, 03 Dec 2024 00:01:22 GMT; Path=/ Set-Cookie: AWSALBCORS=O+xs3GaqhYZ+Z66awTfdsATiyyWuujK0ND625KHdDpgc39Phb9PJnjMCC2Sf7wJIE/4c8AQ4zgGZ6NFYqZ7wflp6rECpLfLKSRySgTw9Mu00LVd/qCZW0MGlLaYi; Expires=Tue, 03 Dec 2024 00:01:22 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1dabe4c6f9877f9" X-Cache: Miss from cloudfront Via: 1.1 7499a2cb4ce8411b56e7edcaead781a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: 2FXfj5RB7Kd_Hr7yEAP3SlhYd8mfqNCCBwimkumsnnvBdEWLo_qeIQ== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:23 UTC	7560	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 35 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0d 0a 20 2a 2f 0d 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 2d Data Ascii: /! Font Awesome Free 6.5.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2023 Fonticons, Inc. */.fa{font-family:var(--fa-style-
2024-11-26 00:01:23 UTC	16384	IN	Data Raw: 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 6f 75 6e 63 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 31 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 73 74 61 72 74 2d 73 Data Ascii: 5%{-webkit-transform:scale(var(--fa-beat-scale,1.25));transform:scale(var(--fa-beat-scale,1.25))}}@-webkit-keyframes fa-bounce{0%{-webkit-transform:scale(1) translateY(0);transform:scale(1) translateY(0)}10%{-webkit-transform:scale(var(--fa-bounce-start-s
2024-11-26 00:01:23 UTC	8627	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 32 66 32 22 7d 2e 66 61 2d 66 61 63 65 2d 6b 69 73 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6b 69 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 39 36 22 7d 2e 66 61 2d 62 72 69 64 67 65 2d 63 69 72 63 6c 65 2d 78 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 34 63 62 22 7d 2e 66 61 2d 66 61 63 65 2d 67 72 69 6e 2d 74 6f 6e 67 75 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 67 72 69 6e 2d 74 6f 6e 67 75 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 39 22 7d 2e 66 61 2d 63 68 65 73 73 2d 62 69 73 68 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 33 61 22 7d 2e 66 61 2d 66 61 63 65 2d 67 72 69 6e 2d 77 69 6e 6b 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 67 72 69 6e 2d Data Ascii: tent:"\f2f2"}.fa-face-kiss:before,.fa-kiss:before{content:"\f596"}.fa-bridge-circle-xmark:before{content:"\e4cb"}.fa-face-grin-tongue:before,.fa-grin-tongue:before{content:"\f589"}.fa-chess-bishop:before{content:"\f43a"}.fa-face-grin-wink:before,.fa-grin-
2024-11-26 00:01:23 UTC	16384	IN	Data Raw: 62 22 7d 2e 66 61 2d 68 61 6e 64 2d 62 61 63 6b 2d 66 69 73 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 68 61 6e 64 2d 72 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 35 22 7d 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 71 75 61 72 65 2d 63 61 72 65 74 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 31 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 73 68 6f 77 65 72 73 2d 77 61 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 34 65 34 22 7d 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 68 61 72 74 2d 62 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2d 68 61 6e 64 73 2d 62 75 62 62 Data Ascii: b"}.fa-hand-back-fist:before,.fa-hand-rock:before{content:"\f255"}.fa-caret-square-up:before,.fa-square-caret-up:before{content:"\f151"}.fa-cloud-showers-water:before{content:"\e4e4"}.fa-bar-chart:before,.fa-chart-bar:before{content:"\f080"}.fa-hands-bubb
2024-11-26 00:01:23 UTC	16384	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 38 22 7d 2e 66 61 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 74 69 6d 65 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 78 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 33 22 7d 2e 66 61 2d 63 68 69 6c 64 2d 72 65 61 63 68 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 39 64 22 7d 2e 66 61 2d 68 65 61 64 2d 73 69 64 65 2d 76 69 72 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 34 22 7d 2e 66 61 2d 75 73 65 72 2d 63 6f 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 75 73 65 72 2d 67 65 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: efore{content:"\f588"}.fa-phone:before{content:"\f095"}.fa-calendar-times:before,.fa-calendar-xmark:before{content:"\f273"}.fa-child-reaching:before{content:"\e59d"}.fa-head-side-virus:before{content:"\e064"}.fa-user-cog:before,.fa-user-gear:before{conten
2024-11-26 00:01:23 UTC	15104	IN	Data Raw: 69 74 63 61 73 65 2d 72 6f 6c 6c 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 63 31 22 7d 2e 66 61 2d 70 65 72 73 6f 6e 2d 63 69 72 63 6c 65 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 33 66 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 38 22 7d 2e 66 61 2d 62 61 74 74 65 72 79 2d 35 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 74 74 65 72 79 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 74 74 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 30 22 7d 2e 66 61 2d 73 6b 75 6c 6c 2d 63 72 6f 73 73 62 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 31 34 22 7d Data Ascii: itcase-rolling:before{content:"\f5c1"}.fa-person-circle-exclamation:before{content:"\e53f"}.fa-chevron-down:before{content:"\f078"}.fa-battery-5:before,.fa-battery-full:before,.fa-battery:before{content:"\f240"}.fa-skull-crossbones:before{content:"\f714"}
2024-11-26 00:01:23 UTC	1280	IN	Data Raw: 64 69 6e 67 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 63 22 7d 2e 66 61 2d 70 65 72 73 6f 6e 2d 63 69 72 63 6c 65 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 33 65 22 7d 2e 66 61 2d 6c 65 76 65 6c 2d 75 70 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 75 72 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 66 22 7d 0d 0a 2e 66 61 2d 73 72 2d 6f 6e 6c 79 2c 2e 66 61 2d 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 2c 2e 73 72 2d 6f 6e 6c 79 2c 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 Data Ascii: ding-medical:before{content:"\e05c"}.fa-person-circle-check:before{content:"\e53e"}.fa-level-up-alt:before,.fa-turn-up:before{content:"\f3bf"}.fa-sr-only,.fa-sr-only-focusable:not(:focus),.sr-only,.sr-only-focusable:not(:focus){position:absolute;width:1
2024-11-26 00:01:23 UTC	16384	IN	Data Raw: 2d 73 74 61 63 6b 70 61 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 32 22 7d 2e 66 61 2d 62 75 79 73 65 6c 6c 61 64 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 64 22 7d 2e 66 61 2d 66 69 72 73 74 2d 6f 72 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 30 22 7d 2e 66 61 2d 6d 6f 64 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 35 22 7d 2e 66 61 2d 67 75 69 6c 64 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 65 22 7d 2e 66 61 2d 76 6e 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 30 62 22 7d 2e 66 61 2d 6a 73 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 71 75 61 72 65 2d 6a 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: -stackpath:before{content:"\f842"}.fa-buysellads:before{content:"\f20d"}.fa-first-order:before{content:"\f2b0"}.fa-modx:before{content:"\f285"}.fa-guilded:before{content:"\e07e"}.fa-vnv:before{content:"\f40b"}.fa-js-square:before,.fa-square-js:before{cont
2024-11-26 00:01:23 UTC	4542	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 33 22 7d 2e 66 61 2d 69 6e 74 65 72 6e 65 74 2d 65 78 70 6c 6f 72 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 62 22 7d 2e 66 61 2d 73 74 75 62 62 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 63 37 22 7d 2e 66 61 2d 74 65 6c 65 67 72 61 6d 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 65 6c 65 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 36 22 7d 2e 66 61 2d 6f 6c 64 2d 72 65 70 75 62 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 30 22 7d 2e 66 61 2d 6f 64 79 73 65 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 63 36 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 77 68 61 74 73 61 70 Data Ascii: fore{content:"\f1a3"}.fa-internet-explorer:before{content:"\f26b"}.fa-stubber:before{content:"\e5c7"}.fa-telegram-plane:before,.fa-telegram:before{content:"\f2c6"}.fa-old-republic:before{content:"\f510"}.fa-odysee:before{content:"\e5c6"}.fa-square-whatsap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-26 00:01:22 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=34329 Date: Tue, 26 Nov 2024 00:01:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49756	151.101.65.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:23 UTC	564	OUT	GET /npm/signature_pad@4.0.4/dist/signature_pad.umd.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://anz.pfm.law/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:23 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10818 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 4.0.4 X-JSD-Version-Type: version ETag: W/"2a42-8UH4jvM1NS0lZNtkTtZQqMFqWxM" Accept-Ranges: bytes Age: 1067488 Date: Tue, 26 Nov 2024 00:01:23 GMT X-Served-By: cache-fra-eddf8230039-FRA, cache-ewr-kewr1740023-EWR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 69 67 6e 61 74 75 72 65 20 50 61 64 20 76 34 2e 30 2e 34 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 7a 69 6d 65 6b 2f 73 69 67 6e 61 74 75 72 65 5f 70 61 64 0a 20 2a 20 28 63 29 20 32 30 32 32 20 53 7a 79 6d 6f 6e 20 4e 6f 77 61 6b 20 7c 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d Data Ascii: /! Signature Pad v4.0.4 \| https://github.com/szimek/signature_pad * (c) 2022 Szymon Nowak \| Released under the MIT license */!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.am
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 65 2c 69 3d 30 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 3d 31 30 3b 6e 2b 3d 31 29 7b 63 6f 6e 73 74 20 73 3d 6e 2f 31 30 2c 6f 3d 74 68 69 73 2e 70 6f 69 6e 74 28 73 2c 74 68 69 73 2e 73 74 61 72 74 50 6f 69 6e 74 2e 78 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 31 2e 78 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 32 2e 78 2c 74 68 69 73 2e 65 6e 64 50 6f 69 6e 74 2e 78 29 2c 68 3d 74 68 69 73 2e 70 6f 69 6e 74 28 73 2c 74 68 69 73 2e 73 74 61 72 74 50 6f 69 6e 74 2e 79 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 31 2e 79 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 32 2e 79 2c 74 68 69 73 2e 65 6e 64 50 6f 69 6e 74 2e 79 29 3b 69 66 28 6e 3e 30 29 7b 63 6f 6e 73 74 20 6e 3d 6f 2d 74 2c 73 3d 68 2d 65 3b 69 2b 3d 4d 61 74 68 2e 73 71 72 74 28 6e 2a 6e 2b 73 2a 73 29 7d Data Ascii: e,i=0;for(let n=0;n<=10;n+=1){const s=n/10,o=this.point(s,this.startPoint.x,this.control1.x,this.control2.x,this.endPoint.x),h=this.point(s,this.startPoint.y,this.control1.y,this.control2.y,this.endPoint.y);if(n>0){const n=o-t,s=h-e;i+=Math.sqrt(nn+ss)}
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 69 73 2e 5f 68 61 6e 64 6c 65 50 6f 69 6e 74 65 72 4d 6f 76 65 3d 74 3d 3e 7b 74 68 69 73 2e 5f 64 72 61 77 6e 69 6e 67 53 74 72 6f 6b 65 26 26 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 5f 73 74 72 6f 6b 65 4d 6f 76 65 55 70 64 61 74 65 28 74 29 29 7d 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 50 6f 69 6e 74 65 72 45 6e 64 3d 74 3d 3e 7b 74 68 69 73 2e 5f 64 72 61 77 6e 69 6e 67 53 74 72 6f 6b 65 26 26 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 5f 64 72 61 77 6e 69 6e 67 53 74 72 6f 6b 65 3d 21 31 2c 74 68 69 73 2e 5f 73 74 72 6f 6b 65 45 6e 64 28 74 29 29 7d 2c 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 46 69 6c 74 65 72 57 65 69 67 68 74 3d 65 2e 76 65 6c 6f 63 69 74 79 46 69 6c 74 65 72 57 65 69 Data Ascii: is._handlePointerMove=t=>{this._drawningStroke&&(t.preventDefault(),this._strokeMoveUpdate(t))},this._handlePointerEnd=t=>{this._drawningStroke&&(t.preventDefault(),this._drawningStroke=!1,this._strokeEnd(t))},this.velocityFilterWeight=e.velocityFilterWei
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 74 68 69 73 2e 5f 63 74 78 2e 64 72 61 77 49 6d 61 67 65 28 73 2c 61 2c 64 2c 68 2c 72 29 2c 69 28 29 7d 2c 73 2e 6f 6e 65 72 72 6f 72 3d 74 3d 3e 7b 6e 28 74 29 7d 2c 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2c 73 2e 73 72 63 3d 74 2c 74 68 69 73 2e 5f 69 73 45 6d 70 74 79 3d 21 31 7d 29 7d 74 6f 44 61 74 61 55 52 4c 28 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 2c 65 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 6f 53 56 47 28 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 6e 76 61 73 2e 74 6f 44 61 74 61 55 52 4c 28 74 2c 65 29 7d 7d 6f 6e 28 29 7b 74 68 69 73 2e 63 61 6e 76 61 73 2e 73 74 79 6c 65 2e 74 6f Data Ascii: this._ctx.drawImage(s,a,d,h,r),i()},s.onerror=t=>{n(t)},s.crossOrigin="anonymous",s.src=t,this._isEmpty=!1})}toDataURL(t="image/png",e){switch(t){case"image/svg+xml":return this._toSVG();default:return this.canvas.toDataURL(t,e)}}on(){this.canvas.style.to
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 65 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 64 72 61 77 44 6f 74 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 3d 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 7d 74 6f 44 61 74 61 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 61 74 61 7d 5f 73 74 72 6f 6b 65 42 65 67 69 6e 28 74 29 7b 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 62 65 67 69 6e 53 74 72 6f 6b 65 22 2c 7b 64 65 74 61 69 6c 3a 74 7d 29 29 3b 63 6f 6e 73 74 20 65 3d 7b 64 6f 74 53 69 7a 65 3a 74 68 69 73 2e 64 6f 74 53 69 7a 65 2c 6d 69 6e 57 69 64 74 68 3a 74 68 69 73 2e 6d 69 6e 57 69 64 74 68 2c 6d 61 78 57 69 64 74 68 3a 74 68 69 73 2e 6d 61 78 57 69 64 74 68 2c 70 65 6e Data Ascii: e.bind(this),this._drawDot.bind(this)),this._data=this._data.concat(t)}toData(){return this._data}_strokeBegin(t){this.dispatchEvent(new CustomEvent("beginStroke",{detail:t}));const e={dotSize:this.dotSize,minWidth:this.minWidth,maxWidth:this.maxWidth,pen
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 73 2e 5f 68 61 6e 64 6c 65 50 6f 69 6e 74 65 72 45 6e 64 29 7d 5f 68 61 6e 64 6c 65 4d 6f 75 73 65 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 5f 64 72 61 77 6e 69 6e 67 53 74 72 6f 6b 65 3d 21 31 2c 74 68 69 73 2e 63 61 6e 76 61 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 4d 6f 75 73 65 44 6f 77 6e 29 2c 74 68 69 73 2e 63 61 6e 76 61 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 4d 6f 75 73 65 4d 6f 76 65 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 75 70 22 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 4d 6f 75 73 65 55 70 29 7d 5f 68 61 6e Data Ascii: s._handlePointerEnd)}_handleMouseEvents(){this._drawningStroke=!1,this.canvas.addEventListener("mousedown",this._handleMouseDown),this.canvas.addEventListener("mousemove",this._handleMouseMove),document.addEventListener("mouseup",this._handleMouseUp)}_han
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 28 74 2e 6c 65 6e 67 74 68 28 29 29 3b 69 2e 62 65 67 69 6e 50 61 74 68 28 29 2c 69 2e 66 69 6c 6c 53 74 79 6c 65 3d 65 2e 70 65 6e 43 6f 6c 6f 72 3b 66 6f 72 28 6c 65 74 20 69 3d 30 3b 69 3c 73 3b 69 2b 3d 31 29 7b 63 6f 6e 73 74 20 6f 3d 69 2f 73 2c 68 3d 6f 2a 6f 2c 72 3d 68 2a 6f 2c 61 3d 31 2d 6f 2c 64 3d 61 2a 61 2c 63 3d 64 2a 61 3b 6c 65 74 20 6c 3d 63 2a 74 2e 73 74 61 72 74 50 6f 69 6e 74 2e 78 3b 6c 2b 3d 33 2a 64 2a 6f 2a 74 2e 63 6f 6e 74 72 6f 6c 31 2e 78 2c 6c 2b 3d 33 2a 61 2a 68 2a 74 2e 63 6f 6e 74 72 6f 6c 32 2e 78 2c 6c 2b 3d 72 2a 74 2e 65 6e 64 50 6f 69 6e 74 2e 78 3b 6c 65 74 20 75 3d 63 2a 74 2e 73 74 61 72 74 50 6f 69 6e 74 2e 79 3b 75 2b 3d 33 2a 64 2a 6f 2a 74 2e 63 6f 6e 74 72 6f 6c 31 2e 79 2c 75 2b 3d 33 2a 61 2a 68 2a 74 2e Data Ascii: (t.length());i.beginPath(),i.fillStyle=e.penColor;for(let i=0;i<s;i+=1){const o=i/s,h=oo,r=ho,a=1-o,d=aa,c=da;let l=ct.startPoint.x;l+=3dot.control1.x,l+=3aht.control2.x,l+=rt.endPoint.x;let u=ct.startPoint.y;u+=3dot.control1.y,u+=3ah*t.
2024-11-26 00:01:23 UTC	1172	IN	Data Raw: 32 2e 79 29 29 29 7b 63 6f 6e 73 74 20 6e 3d 60 4d 20 24 7b 74 2e 73 74 61 72 74 50 6f 69 6e 74 2e 78 2e 74 6f 46 69 78 65 64 28 33 29 7d 2c 24 7b 74 2e 73 74 61 72 74 50 6f 69 6e 74 2e 79 2e 74 6f 46 69 78 65 64 28 33 29 7d 20 43 20 24 7b 74 2e 63 6f 6e 74 72 6f 6c 31 2e 78 2e 74 6f 46 69 78 65 64 28 33 29 7d 2c 24 7b 74 2e 63 6f 6e 74 72 6f 6c 31 2e 79 2e 74 6f 46 69 78 65 64 28 33 29 7d 20 24 7b 74 2e 63 6f 6e 74 72 6f 6c 32 2e 78 2e 74 6f 46 69 78 65 64 28 33 29 7d 2c 24 7b 74 2e 63 6f 6e 74 72 6f 6c 32 2e 79 2e 74 6f 46 69 78 65 64 28 33 29 7d 20 24 7b 74 2e 65 6e 64 50 6f 69 6e 74 2e 78 2e 74 6f 46 69 78 65 64 28 33 29 7d 2c 24 7b 74 2e 65 6e 64 50 6f 69 6e 74 2e 79 2e 74 6f 46 69 78 65 64 28 33 29 7d 60 3b 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: 2.y))){const n=`M ${t.startPoint.x.toFixed(3)},${t.startPoint.y.toFixed(3)} C ${t.control1.x.toFixed(3)},${t.control1.y.toFixed(3)} ${t.control2.x.toFixed(3)},${t.control2.y.toFixed(3)} ${t.endPoint.x.toFixed(3)},${t.endPoint.y.toFixed(3)}`;i.setAttribute

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49755	151.101.65.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:23 UTC	597	OUT	GET /npm/bootstrap@4.6.1/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://anz.pfm.law sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://anz.pfm.law/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:23 UTC	762	IN	HTTP/1.1 200 OK Connection: close Content-Length: 162017 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 4.6.1 X-JSD-Version-Type: version ETag: W/"278e1-H7g/xZXPKL+TYth2EOrfo7e7vlk" Accept-Ranges: bytes Age: 572818 Date: Tue, 26 Nov 2024 00:01:23 GMT X-Served-By: cache-fra-eddf8230108-FRA, cache-ewr-kewr1740063-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d 70 75 Data Ascii: /! Bootstrap v4.6.1 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--pu
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 72 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 5b 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 5d 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 Data Ascii: r Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus:not(:focus-visible){outline:0!important}hr{box-sizing:content-box;heigh
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 6d 3a 31 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 73 63 72 6f 6c 6c 62 61 72 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 73 76 67 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 7d 63 61 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 37 35 72 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 3b 74 65 Data Ascii: m:1rem;overflow:auto;-ms-overflow-style:scrollbar}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;te
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 Data Ascii: webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appe
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 6f 74 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 30 31 34 5c 30 30 41 30 22 7d 2e 69 6d 67 2d 66 6c 75 69 64 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 Data Ascii: oter{display:block;font-size:80%;color:#6c757d}.blockquote-footer::before{content:"\2014\00A0"}.img-fluid{max-width:100%;height:auto}.img-thumbnail{padding:.25rem;background-color:#fff;border:1px solid #dee2e6;border-radius:.25rem;max-width:100%;height:au
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 66 74 3a 2d 31 35 70 78 7d 2e 6e 6f 2d 67 75 74 74 65 72 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6e 6f 2d 67 75 74 74 65 72 73 3e 2e 63 6f 6c 2c 2e 6e 6f 2d 67 75 74 74 65 72 73 3e 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 63 6f 6c 2c 2e 63 6f 6c 2d 31 2c 2e 63 6f 6c 2d 31 30 2c 2e 63 6f 6c 2d 31 31 2c 2e 63 6f 6c 2d 31 32 2c 2e 63 6f 6c 2d 32 2c 2e 63 6f 6c 2d 33 2c 2e 63 6f 6c 2d 34 2c 2e 63 6f 6c 2d 35 2c 2e 63 6f 6c 2d 36 2c 2e 63 6f 6c 2d 37 2c 2e 63 6f 6c 2d 38 2c 2e 63 6f 6c 2d 39 2c 2e 63 6f 6c 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6c 67 2c 2e 63 6f 6c 2d 6c 67 2d 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c Data Ascii: ft:-15px}.no-gutters{margin-right:0;margin-left:0}.no-gutters>.col,.no-gutters>[class*=col-]{padding-right:0;padding-left:0}.col,.col-1,.col-10,.col-11,.col-12,.col-2,.col-3,.col-4,.col-5,.col-6,.col-7,.col-8,.col-9,.col-auto,.col-lg,.col-lg-1,.col-lg-10,
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 6f 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6c 2d 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 33 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 34 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 Data Ascii: o;flex:0 0 auto;width:auto;max-width:100%}.col-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-4{-ms-flex:0 0 3
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 Data Ascii: .333333%}.offset-2{margin-left:16.666667%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.of
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e Data Ascii: %;max-width:58.333333%}.col-sm-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-sm-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-sm-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-sm-11{-ms-flex:0 0 91.
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 Data Ascii: flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.row-cols-md-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-md-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-md-3>*{-ms-flex:0 0 33.333333%;flex:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49754	151.101.65.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:23 UTC	577	OUT	GET /npm/jquery@3.5.1/dist/jquery.slim.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://anz.pfm.law sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://anz.pfm.law/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:23 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72380 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.5.1 X-JSD-Version-Type: version ETag: W/"11abc-z42YIVUtUbtQzlcuaWq6EwkGWAA" Accept-Ranges: bytes Age: 948869 Date: Tue, 26 Nov 2024 00:01:23 GMT X-Served-By: cache-fra-etou8220123-FRA, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 Data Ascii: /*! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other c
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 22 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 45 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 2c 6e 3d 54 28 65 29 3b 72 65 74 75 72 6e 21 62 28 65 29 26 26 21 78 28 65 29 26 26 28 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 30 3d 3d 3d Data Ascii: query,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector",E=function(e,t){return new E.fn.init(e,t)};function d(e){var t=!!e&&"length"in e&&e.length,n=T(e);return!b(e)&&!x(e)&&("array"===n\|\|0===
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 61 21 3d 3d 72 26 26 28 6c 26 26 72 26 26 28 45 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 7c 7c 28 69 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 29 3f 28 6e 3d 61 5b 74 5d 2c 6f 3d 69 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 5b 5d 3a 69 7c 7c 45 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 6e 29 3f 6e 3a 7b 7d 2c 69 3d 21 31 2c 61 5b 74 5d 3d 45 2e 65 78 74 65 6e 64 28 6c 2c 6f 2c 72 29 29 3a 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 61 5b 74 5d 3d 72 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 45 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 Data Ascii: !=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(E.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|E.isPlainObject(n)?n:{},i=!1,a[t]=E.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},E.extend({expando:"jQuer
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 6c 26 26 28 45 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 45 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 5d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 70 2c 78 2c 6f 2c 69 2c 68 2c 66 2c 67 2c 77 2c 75 2c 6c 2c 43 2c 54 2c 61 2c 45 2c 76 2c 73 2c 63 2c 79 2c 41 3d 22 73 69 7a 7a 6c Data Ascii: l&&(E.fn[Symbol.iterator]=t[Symbol.iterator]),E.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var p=function(n){var e,p,x,o,i,h,f,g,w,u,l,C,T,a,E,v,s,c,y,A="sizzl
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 52 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 52 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 52 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 52 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 49 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 52 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 52 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 52 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d Data Ascii: ype)(?:\$"+R+"(even\|odd\|(([+-]\|)(\\d)n\|)"+R+"(?:([+-]\|)"+R+"(\\d+)\|))"+R+"\$\|)","i"),bool:new RegExp("^(?:"+I+")$","i"),needsContext:new RegExp("^"+R+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+R+"((?:-\\d)?\\d)"+R+"*\$\|)(?=[^-]\|$)","i")}
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 20 69 66 28 66 26 26 28 61 3d 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 26 26 79 28 65 2c 61 29 26 26 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 75 5b 32 5d 29 72 65 74 75 72 6e 20 4f 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 29 2c 6e 3b 69 66 28 28 69 3d 75 5b 33 5d 29 26 26 70 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 4f 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 69 29 29 2c Data Ascii: n n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return O.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&p.getElementsByClassName&&e.getElementsByClassName)return O.apply(n,e.getElementsByClassName(i)),
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 74 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 74 29 26 26 65 2e 74 79 70 65 3d 3d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 Data Ascii: r t=e.nodeName.toLowerCase();return("input"===t\|\|"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.is
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 70 2e 67 65 74 42 79 49 64 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 41 2c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 41 29 2e 6c 65 6e 67 74 68 7d 29 2c 70 2e 67 65 74 42 79 49 64 3f 28 78 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 78 2e 66 69 6e 64 2e 49 44 3d Data Ascii: .getElementsByClassName),p.getById=ce(function(e){return a.appendChild(e).id=A,!T.getElementsByName\|\|!T.getElementsByName(A).length}),p.getById?(x.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},x.find.ID=
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 52 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 52 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 49 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 41 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 7e 3d 22 29 2c Data Ascii: ption selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[^$]="+R+"(?:''\|\"\")"),e.querySelectorAll("[selected]").length\|\|v.push("\\["+R+"*(?:value\|"+I+")"),e.querySelectorAll("[id~="+A+"-]").length\|\|v.push("~="),
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 2c 74 3d 4a 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4a 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 72 29 Data Ascii: ,t=J.test(a.compareDocumentPosition),y=t\|\|J.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49753	151.101.65.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:23 UTC	581	OUT	GET /npm/bootstrap@4.6.1/dist/js/bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://anz.pfm.law sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://anz.pfm.law/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:23 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 62440 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 4.6.1 X-JSD-Version-Type: version ETag: W/"f3e8-JKkAvfzv1Sy8/zvDZECvm4fNUGc" Accept-Ranges: bytes Age: 2246949 Date: Tue, 26 Nov 2024 00:01:23 GMT X-Served-By: cache-fra-eddf8230043-FRA, cache-nyc-kteb1890079-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.6.1 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 65 3d 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 Data Ascii: bute("data-target");if(!e\|\|"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():""}try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:function(t){if(!t)return 0;var e=o.default(t).css("transition-dur
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 51 75 65 72 79 20 6d 75 73 74 20 62 65 20 69 6e 63 6c 75 64 65 64 20 62 65 66 6f 72 65 20 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 2e 22 29 3b 76 61 72 20 74 3d 6f 2e 64 65 66 61 75 6c 74 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 74 5b 30 5d 3c 32 26 26 74 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 74 5b 30 5d 26 26 39 3d 3d 3d 74 5b 31 5d 26 26 74 5b 32 5d 3c 31 7c 7c 74 5b 30 5d 3e 3d 34 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 61 74 20 6c 65 61 73 74 20 6a 51 75 65 72 79 20 76 31 2e 39 2e 31 20 62 75 74 20 6c 65 73 73 20 74 68 61 6e 20 76 34 2e 30 2e 30 22 Data Ascii: Query must be included before Bootstrap's JavaScript.");var t=o.default.fn.jquery.split(" ")[0].split(".");if(t[0]<2&&t[1]<9\|\|1===t[0]&&9===t[1]&&t[2]<1\|\|t[0]>=4)throw new Error("Bootstrap's JavaScript requires at least jQuery v1.9.1 but less than v4.0.0"
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 3b 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 6f 6e 65 28 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6e 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 64 65 74 61 63 68 28 29 2e 74 72 69 67 67 65 72 28 22 63 6c 6f 73 65 64 2e 62 73 2e 61 6c 65 72 74 22 29 2e 72 65 6d 6f 76 65 28 29 7d 2c 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: ;o.default(t).one(d.TRANSITION_END,(function(n){return e._destroyElement(t,n)})).emulateTransitionEnd(n)}else this._destroyElement(t)},e._destroyElement=function(t){o.default(t).detach().trigger("closed.bs.alert").remove()},t._jQueryInterface=function(e){
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 6e 74 61 69 6e 73 28 5f 29 29 2c 74 68 69 73 2e 73 68 6f 75 6c 64 41 76 6f 69 64 54 72 69 67 67 65 72 43 68 61 6e 67 65 7c 7c 6f 2e 64 65 66 61 75 6c 74 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 29 2c 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 Data Ascii: ntains(_)),this.shouldAvoidTriggerChange\|\|o.default(i).trigger("change")),i.focus(),e=!1}}this._element.hasAttribute("disabled")\|\|this._element.classList.contains("disabled")\|\|(e&&this._element.setAttribute("aria-pressed",!this._element.classList.contains
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 20 2e 62 74 6e 27 29 29 2c 65 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 65 5d 2c 6f 3d 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 79 29 3b 6f 2e 63 68 65 63 6b 65 64 7c 7c 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 63 68 65 63 6b 65 64 22 29 3f 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 5f 29 3a 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 5f 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 2c 73 3d 28 74 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ctorAll('[data-toggle="buttons"] .btn')),e=0,n=t.length;e<n;e++){var i=t[e],o=i.querySelector(y);o.checked\|\|o.hasAttribute("checked")?i.classList.add(_):i.classList.remove(_)}for(var a=0,s=(t=[].slice.call(document.querySelectorAll('[data-toggle="button"]
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 4e 29 7d 2c 65 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 74 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 74 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 65 2e 70 72 65 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e Data Ascii: entListeners()}var e=t.prototype;return e.next=function(){this._isSliding\|\|this._slide(N)},e.nextWhenVisible=function(){var t=o.default(this._element);!document.hidden&&t.is(":visible")&&"hidden"!==t.css("visibility")&&this.next()},e.prev=function(){this.
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 65 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 72 28 7b 7d 2c 6b 2c 74 29 2c 64 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 54 2c 74 2c 4f 29 2c 74 7d 2c 65 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 29 3b 69 66 28 21 28 74 3c 3d 34 30 29 29 7b 76 61 72 20 65 3d 74 2f 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3b 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 30 2c 65 3e 30 26 26 74 68 69 73 2e 70 72 65 76 28 29 2c 65 3c 30 26 26 74 68 69 73 2e 6e 65 78 74 28 29 Data Ascii: ull,this._indicatorsElement=null},e._getConfig=function(t){return t=r({},k,t),d.typeCheckConfig(T,t,O),t},e._handleSwipe=function(){var t=Math.abs(this.touchDeltaX);if(!(t<=40)){var e=t/this.touchDeltaX;this.touchDeltaX=0,e>0&&this.prev(),e<0&&this.next()
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 70 6f 69 6e 74 65 72 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 29 2c 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 70 6f 69 6e 74 65 72 75 70 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 29 7d 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 22 29 29 3a 28 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 74 6f 75 63 68 73 74 61 72 74 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c Data Ascii: lt(this._element).on("pointerdown.bs.carousel",(function(t){return e(t)})),o.default(this._element).on("pointerup.bs.carousel",(function(t){return n(t)})),this._element.classList.add("pointer-event")):(o.default(this._element).on("touchstart.bs.carousel",
2024-11-26 00:01:23 UTC	1378	IN	Data Raw: 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 61 29 2c 61 7d 2c 65 2e 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 61 63 74 69 76 65 22 29 29 3b 6f 2e 64 65 66 61 75 6c 74 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 53 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 Data Ascii: his._element).trigger(a),a},e._setActiveIndicatorElement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(".active"));o.default(e).removeClass(S);var n=this._indicatorsElement.children[this._getItemIndex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:23 UTC	1154	OUT	GET /_content/Blazorise/blazorise.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1 Host: anz.pfm.law Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
2024-11-26 00:01:24 UTC	929	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 70280 Connection: close Date: Tue, 26 Nov 2024 00:01:24 GMT Last-Modified: Wed, 21 Aug 2024 11:50:42 GMT Set-Cookie: AWSALB=aakXAGBfNyFARcvRbXeIMLSr9Rnx+scTY2MP0IE4tZavCwUHNk1jEldMjFUuYvaW+xP6CDSfSe1wp15NpO4rT5hHIqmF5DoLPNGYxghjOefBGxmsKdymB1ksA7cl; Expires=Tue, 03 Dec 2024 00:01:24 GMT; Path=/ Set-Cookie: AWSALBCORS=aakXAGBfNyFARcvRbXeIMLSr9Rnx+scTY2MP0IE4tZavCwUHNk1jEldMjFUuYvaW+xP6CDSfSe1wp15NpO4rT5hHIqmF5DoLPNGYxghjOefBGxmsKdymB1ksA7cl; Expires=Tue, 03 Dec 2024 00:01:24 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1daf3c059674788" X-Cache: Miss from cloudfront Via: 1.1 6ee57430ba13d2dcea3397c03edd349a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: QTOl6mOU_5wQMXIo1S0cSSWxltjONG9HU4AH946cewn80bd1KTmhXw== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:24 UTC	13957	IN	Data Raw: ef bb bf 62 6f 64 79 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 6d 6f 62 69 6c 65 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 20 20 62 6f 64 79 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 74 61 62 6c 65 74 22 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0d 0a 20 20 62 6f 64 79 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 64 65 73 6b 74 6f 70 22 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d Data Ascii: body:before { content: "mobile"; display: none; visibility: hidden;}@media (min-width: 768px) { body:before { content: "tablet"; }}@media (min-width: 992px) { body:before { content: "desktop"; }}@media (min-
2024-11-26 00:01:24 UTC	16384	IN	Data Raw: 2d 73 74 61 72 74 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 2e 62 2d 62 61 72 2d 76 65 72 74 69 63 61 6c 2d 69 6e 6c 69 6e 65 20 2e 62 2d 62 61 72 2d 65 6e 64 2c 0d 0a 2e 62 2d 62 61 72 2d 76 65 72 74 69 63 61 6c 2d 70 6f 70 6f 75 74 20 2e 62 2d 62 61 72 2d 65 6e 64 2c 0d 0a 2e 62 2d 62 61 72 2d 76 65 72 74 69 63 61 6c 2d 73 6d 61 6c 6c 20 2e 62 2d 62 61 72 2d 65 6e 64 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 72 65 6d 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 2e 62 2d 62 61 72 2d 76 65 72 74 69 63 61 Data Ascii: -start { width: 100%; display: block;}.b-bar-vertical-inline .b-bar-end,.b-bar-vertical-popout .b-bar-end,.b-bar-vertical-small .b-bar-end { padding-bottom: 1rem; width: 100%; padding-top: 1rem; display: block;}.b-bar-vertica
2024-11-26 00:01:24 UTC	2231	IN	Data Raw: 6f 75 74 3b 0d 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 0d 0a 20 20 72 69 67 68 74 3a 20 30 2e 38 72 65 6d 3b 0d 0a 7d 0d 0a 2e 62 2d 62 61 72 2d 76 65 72 74 69 63 61 6c 2d 73 6d 61 6c 6c 20 2e 62 2d 62 61 72 2d 64 72 6f 70 64 6f 77 6e 20 2e 62 2d 62 61 72 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 2d 62 61 72 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 3e 20 2e 62 2d 62 61 72 2d 64 72 6f 70 64 6f 77 6e 3a 6e 6f 74 28 5b 64 61 74 61 2d 76 69 Data Ascii: out; float: right; position: relative; -webkit-transform: rotate(135deg); transform: rotate(135deg); right: 0.8rem;}.b-bar-vertical-small .b-bar-dropdown .b-bar-dropdown-menu-container .b-bar-dropdown-menu > .b-bar-dropdown:not([data-vi
2024-11-26 00:01:25 UTC	15990	IN	Data Raw: 6c 2d 69 6e 6c 69 6e 65 3a 6e 6f 74 28 5b 64 61 74 61 2d 63 6f 6c 6c 61 70 73 65 5d 29 20 2e 62 2d 62 61 72 2d 64 72 6f 70 64 6f 77 6e 20 2e 62 2d 62 61 72 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 2e 62 2d 62 61 72 2d 76 65 72 74 69 63 61 6c 2d 69 6e 6c 69 6e 65 3a 6e 6f 74 28 5b 64 61 74 61 2d 63 6f 6c 6c 61 70 73 65 5d 29 20 2e 62 2d 62 61 72 2d 64 72 6f 70 64 6f 77 6e 20 2e 62 2d 62 61 72 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 2d 62 61 72 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a Data Ascii: l-inline:not([data-collapse]) .b-bar-dropdown .b-bar-dropdown-menu-container { position: relative;}.b-bar-vertical-inline:not([data-collapse]) .b-bar-dropdown .b-bar-dropdown-menu-container .b-bar-dropdown-menu { position: relative !important;
2024-11-26 00:01:25 UTC	394	IN	Data Raw: 65 62 6b 69 74 2d 62 6f 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 20 31 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 20 31 3b 0d 0a 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 31 3b 0d 0a 20 20 66 6c 65 78 3a 20 31 3b 0d 0a 7d 0d 0a 0d 0a 73 70 61 6e 2e 66 6c 61 74 70 69 63 6b 72 2d 77 65 65 6b 64 61 79 20 7b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 30 25 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 63 6f Data Ascii: ebkit-box; display: -webkit-flex; display: -ms-flexbox; display: flex; -webkit-box-flex: 1; -webkit-flex: 1; -ms-flex: 1; flex: 1;}span.flatpickr-weekday { cursor: default; font-size: 90%; background: transparent; co
2024-11-26 00:01:25 UTC	16384	IN	Data Raw: 78 3a 20 31 3b 0d 0a 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 31 3b 0d 0a 20 20 66 6c 65 78 3a 20 31 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 61 79 43 6f 6e 74 61 69 6e 65 72 2c 0d 0a 2e 66 6c 61 74 70 69 63 6b 72 2d 77 65 65 6b 73 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 20 30 20 30 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 6c 61 74 70 69 63 6b 72 2d 64 61 79 73 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d Data Ascii: x: 1; -ms-flex: 1; flex: 1; font-weight: bolder;}.dayContainer,.flatpickr-weeks { padding: 1px 0 0 0;}.flatpickr-days { position: relative; overflow: hidden; display: -webkit-box; display: -webkit-flex; display: -m
2024-11-26 00:01:25 UTC	4940	IN	Data Raw: 2d 69 6e 74 65 72 61 63 74 69 6f 6e 20 2e 70 63 72 2d 63 6c 65 61 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 63 72 2d 61 70 70 20 2e 70 63 72 2d 69 6e 74 65 72 61 63 74 69 6f 6e 20 2e 70 63 72 2d 73 61 76 65 2c 20 2e 70 63 72 2d 61 70 70 20 2e 70 63 72 2d 69 6e 74 65 72 61 63 74 69 6f 6e 20 2e 70 63 72 2d 63 61 6e 63 65 6c 2c 20 2e 70 63 72 2d 61 70 70 20 2e 70 63 72 2d 69 6e 74 65 72 61 63 74 69 6f 6e 20 2e 70 63 72 2d 63 6c 65 61 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 63 72 2d 61 70 70 20 2e 70 63 72 2d 69 6e 74 65 72 61 63 74 69 6f 6e 20 2e 70 63 72 2d 73 61 76 65 3a 68 6f 76 65 72 2c 20 2e 70 63 72 2d 61 70 70 20 2e 70 Data Ascii: -interaction .pcr-clear { color: #fff; width: auto;}.pcr-app .pcr-interaction .pcr-save, .pcr-app .pcr-interaction .pcr-cancel, .pcr-app .pcr-interaction .pcr-clear { color: #fff;}.pcr-app .pcr-interaction .pcr-save:hover, .pcr-app .p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:23 UTC	1174	OUT	GET /_content/Blazorise.Bootstrap/blazorise.bootstrap.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1 Host: anz.pfm.law Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
2024-11-26 00:01:25 UTC	930	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 121005 Connection: close Date: Tue, 26 Nov 2024 00:01:24 GMT Last-Modified: Thu, 22 Aug 2024 10:25:10 GMT Set-Cookie: AWSALB=OZPY2ipDoFENNxdmLdX6y3EFEjwIST8rjumcCP83E3nXm6GfnQNaHU3xmS0kx3wMsw3RVre7dvOSCQAnjRCl+1sMnzWpyzrMzvHwcAjjxByZimRVu241LaPpi4oQ; Expires=Tue, 03 Dec 2024 00:01:24 GMT; Path=/ Set-Cookie: AWSALBCORS=OZPY2ipDoFENNxdmLdX6y3EFEjwIST8rjumcCP83E3nXm6GfnQNaHU3xmS0kx3wMsw3RVre7dvOSCQAnjRCl+1sMnzWpyzrMzvHwcAjjxByZimRVu241LaPpi4oQ; Expires=Tue, 03 Dec 2024 00:01:24 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1daf47d90e6dfad" X-Cache: Miss from cloudfront Via: 1.1 58d3c503a480576abdfaa9676970b67c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: RfWl4C4jpa-1PBPkZ5H5OfGScHko3tMG3qm8Hgm145R8vBTqIFig1g== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:25 UTC	7560	IN	Data Raw: ef bb bf 2e 62 61 64 67 65 2d 63 6c 6f 73 65 20 7b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 61 64 67 65 2d 63 6c 6f 73 65 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 68 65 69 67 68 74 3a 20 32 70 78 3b 0d 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0d 0a 7d 0d 0a 2e 62 61 64 67 65 2d 63 6c 6f 73 65 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 68 65 69 67 68 74 3a 20 35 30 25 3b 0d 0a 20 20 77 69 64 74 68 3a 20 32 70 78 3b 0d 0a 7d 0d 0a 2e 62 61 64 67 65 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 2c 20 2e 62 61 64 67 65 2d 63 6c 6f 73 65 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 31 30 2c 20 31 30 2c 20 31 30 2c 20 30 2e 33 29 3b 0d 0a 7d 0d 0a 2e 62 61 64 67 65 2d 63 6c Data Ascii: .badge-close { cursor: pointer;}.badge-close::before { height: 2px; width: 50%;}.badge-close::after { height: 50%; width: 2px;}.badge-close:hover, .badge-close:focus { background-color: rgba(10, 10, 10, 0.3);}.badge-cl
2024-11-26 00:01:25 UTC	16384	IN	Data Raw: 20 7b 0d 0a 20 20 68 65 69 67 68 74 3a 20 35 31 32 70 78 3b 0d 0a 20 20 77 69 64 74 68 3a 20 35 31 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 6f 72 6d 2d 63 68 65 63 6b 20 3e 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2d 70 6f 69 6e 74 65 72 2c 0d 0a 2e 66 6f 72 6d 2d 63 68 65 63 6b 20 3e 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 2d 70 6f 69 6e 74 65 72 2c 0d 0a 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 3e 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2d 70 6f 69 6e 74 65 72 2c 0d 0a 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 3e 20 2e 63 Data Ascii: { height: 512px; width: 512px;}.form-check > .form-check-input.form-check-input-pointer,.form-check > .form-check-label.form-check-label-pointer,.custom-checkbox > .custom-control-input.custom-control-input-pointer,.custom-checkbox > .c
2024-11-26 00:01:25 UTC	7798	IN	Data Raw: 61 6d 65 73 20 6d 6f 64 61 6c 2d 73 6c 69 64 65 69 6e 2d 63 65 6e 74 65 72 65 64 20 7b 0d 0a 20 20 30 25 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 2d 35 30 70 78 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6d 6f 64 61 6c 2d 73 6c 69 64 65 61 77 61 79 20 7b 0d 0a 20 20 66 72 6f 6d 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f Data Ascii: ames modal-slidein-centered { 0% { display: none; opacity: 0; transform: translate(0, -50px); } 100% { display: flex; align-items: center; opacity: 1; }}@keyframes modal-slideaway { from { display: blo
2024-11-26 00:01:25 UTC	829	IN	Data Raw: 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 63 61 6e 76 61 73 2d 78 6c 2e 6f 66 66 63 61 6e 76 61 73 2d 62 6f 74 74 6f 6d 20 7b 0d 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 6f 66 66 63 61 6e 76 61 73 2d 68 65 69 67 68 74 29 3b 0d 0a 20 20 Data Ascii: max-height: 100%; border-bottom: var(--offcanvas-border-width) solid var(--offcanvas-border-color); transform: translateY(-100%); } .offcanvas-xl.offcanvas-bottom { right: 0; left: 0; height: var(--offcanvas-height);
2024-11-26 00:01:25 UTC	16384	IN	Data Raw: 2d 78 6c 20 2e 6f 66 66 63 61 6e 76 61 73 2d 62 6f 64 79 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2e 6f 66 66 63 61 6e 76 61 73 2d 78 78 6c 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 35 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 66 6c 65 Data Ascii: -xl .offcanvas-body { display: flex; flex-grow: 0; padding: 0; overflow-y: visible; background-color: transparent !important; }}.offcanvas-xxl { position: fixed; bottom: 0; z-index: 1045; display: flex; fle
2024-11-26 00:01:25 UTC	16384	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 32 38 61 37 34 35 3b 0d 0a 7d 0d 0a 2e 63 75 73 74 6f 6d 2d 73 77 69 74 63 68 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 20 7e 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 72 65 6d 20 72 67 62 61 28 34 30 2c 20 31 36 37 2c 20 36 39 2c 20 30 2e 32 35 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 32 38 61 37 34 35 3b 0d 0a 7d 0d 0a 2e 63 75 73 74 6f 6d 2d 73 77 69 74 63 68 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 64 69 73 61 Data Ascii: rder-color: #28a745;}.custom-switch .custom-control-input.custom-control-input-success:focus ~ .custom-control-label::before { box-shadow: 0 0 0 0.2rem rgba(40, 167, 69, 0.25); border-color: #28a745;}.custom-switch .custom-control-input:disa
2024-11-26 00:01:25 UTC	16384	IN	Data Raw: 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 6f 72 64 65 72 2d 6c 69 6e 6b 2d 74 6f 70 2d 32 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 33 32 37 33 64 63 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 32 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 6f 72 64 65 72 2d 70 72 69 6d 61 72 79 2d 72 69 67 68 74 2d 32 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 30 30 37 62 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 6f 72 64 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 72 69 67 68 74 2d 32 Data Ascii: ;}.border-link-top-2 { border-top: 2px solid #3273dc !important;}.border-right-2 { border-right: 2px solid #dee2e6 !important;}.border-primary-right-2 { border-right: 2px solid #007bff !important;}.border-secondary-right-2
2024-11-26 00:01:25 UTC	16384	IN	Data Raw: 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 2d 72 65 76 65 72 73 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6c 65 78 2d 78 78 6c 2d 66 69 6c 6c 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6c 65 78 2d 78 78 6c 2d 67 72 6f 77 2d 30 20 7b 0d 0a 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6c 65 78 2d 78 78 6c 2d 67 72 6f 77 2d 31 20 7b 0d 0a 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6c 65 78 2d 78 78 6c 2d 73 68 72 69 6e 6b 2d 30 20 7b 0d 0a 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a Data Ascii: flex-wrap: wrap-reverse !important; } .flex-xxl-fill { flex: 1 1 auto !important; } .flex-xxl-grow-0 { flex-grow: 0 !important; } .flex-xxl-grow-1 { flex-grow: 1 !important; } .flex-xxl-shrink-0 { flex-shrink:
2024-11-26 00:01:25 UTC	16384	IN	Data Raw: 74 68 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 78 6c 2d 32 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 78 6c 2d 33 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 35 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 78 6c 2d 34 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 78 6c Data Ascii: th: 8.33333333%; } .col-xxl-2 { flex: 0 0 16.66666667%; max-width: 16.66666667%; } .col-xxl-3 { flex: 0 0 25%; max-width: 25%; } .col-xxl-4 { flex: 0 0 33.33333333%; max-width: 33.33333333%; } .col-xxl
2024-11-26 00:01:25 UTC	6514	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 61 70 2d 78 2d 34 20 7b 0d 0a 20 20 63 6f 6c 75 6d 6e 2d 67 61 70 3a 20 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 61 70 2d 35 20 7b 0d 0a 20 20 67 61 70 3a 20 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 61 70 2d 79 2d 35 20 7b 0d 0a 20 20 72 6f 77 2d 67 61 70 3a 20 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 61 70 2d 78 2d 35 20 7b 0d 0a 20 20 63 6f 6c 75 6d 6e 2d 67 61 70 3a 20 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 73 2d 78 73 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 37 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 Data Ascii: !important;}.gap-x-4 { column-gap: 1.5rem !important;}.gap-5 { gap: 3rem !important;}.gap-y-5 { row-gap: 3rem !important;}.gap-x-5 { column-gap: 3rem !important;}.fs-xs { font-size: 0.75rem !important;}.f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:23 UTC	1172	OUT	GET /_content/Blazorise.Snackbar/blazorise.snackbar.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1 Host: anz.pfm.law Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
2024-11-26 00:01:25 UTC	929	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 11949 Connection: close Date: Tue, 26 Nov 2024 00:01:24 GMT Last-Modified: Fri, 14 Jun 2024 11:17:26 GMT Set-Cookie: AWSALB=7Imz3gv9J09i351JVaEySdyNPHCVVbP532idbEak1ifStIItuAy36JB9bxeyLxeIAU6jcGwkNrugin4Vjmy7uoWp9VDRGUWDdGYeHogUPKY71LCyrXjfv4RQp+UM; Expires=Tue, 03 Dec 2024 00:01:24 GMT; Path=/ Set-Cookie: AWSALBCORS=7Imz3gv9J09i351JVaEySdyNPHCVVbP532idbEak1ifStIItuAy36JB9bxeyLxeIAU6jcGwkNrugin4Vjmy7uoWp9VDRGUWDdGYeHogUPKY71LCyrXjfv4RQp+UM; Expires=Tue, 03 Dec 2024 00:01:24 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1dabe4c6f99c9ad" X-Cache: Miss from cloudfront Via: 1.1 d13599e93e28769e714d7ed56fe9074a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: DqAu8iaX5G9VW_JSW312S_gHNBUjT1afAUEsHwr3IsalEsgLTE790A== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:25 UTC	10759	IN	Data Raw: ef bb bf 2e 73 6e 61 63 6b 62 61 72 20 7b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 2d 73 6e 61 63 6b 62 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 20 23 33 32 33 32 33 32 29 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 2d 73 6e 61 63 6b 62 61 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 37 35 72 65 6d 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 32 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 38 37 35 72 65 6d 20 31 2e 35 72 65 6d 3b 0d 0a 20 Data Ascii: .snackbar { align-items: center; background-color: var(--b-snackbar-background, #323232); color: var(--b-snackbar-text-color, rgb(255, 255, 255)); font-size: 0.875rem; line-height: 1.428572; opacity: 0; padding: 0.875rem 1.5rem;
2024-11-26 00:01:25 UTC	1190	IN	Data Raw: 62 61 72 2d 68 69 64 65 2c 0d 0a 2e 73 6e 61 63 6b 62 61 72 2d 73 74 61 63 6b 2d 62 6f 74 74 6f 6d 2d 73 74 61 72 74 20 2e 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 2c 0d 0a 2e 73 6e 61 63 6b 62 61 72 2d 73 74 61 63 6b 2d 62 6f 74 74 6f 6d 2d 65 6e 64 20 2e 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 20 7b 0d 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 76 61 72 28 2d 2d 73 74 61 63 6b 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 20 31 30 30 30 29 3b 0d 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 68 69 64 65 42 6f 74 74 6f 6d 20 76 61 72 28 2d 2d 73 74 61 63 6b 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 20 35 30 30 29 20 62 61 63 6b 77 61 72 64 73 3b 0d 0a 7d 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 68 6f 77 54 Data Ascii: bar-hide,.snackbar-stack-bottom-start .snackbar-hide,.snackbar-stack-bottom-end .snackbar-hide { transition: all var(--stack-transition-duration, 1000); animation: hideBottom var(--stack-animation-duration, 500) backwards;}@keyframes showT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:23 UTC	1188	OUT	GET /_content/Blazorise.LoadingIndicator/blazorise.loadingindicator.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1 Host: anz.pfm.law Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
2024-11-26 00:01:24 UTC	927	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 760 Connection: close Date: Tue, 26 Nov 2024 00:01:24 GMT Last-Modified: Fri, 14 Jun 2024 11:17:26 GMT Set-Cookie: AWSALB=o16PUp+451ABCU2iuswTFB9bSXBG4cMxjDyLH1ZLt7l6Jx/GCgCFxWjpTKbBx114zS+MG1K6mnE7Srr+Jomyt6fYnbgHIGXob0URGCZytGdS8zH+GShCt5WY2uND; Expires=Tue, 03 Dec 2024 00:01:24 GMT; Path=/ Set-Cookie: AWSALBCORS=o16PUp+451ABCU2iuswTFB9bSXBG4cMxjDyLH1ZLt7l6Jx/GCgCFxWjpTKbBx114zS+MG1K6mnE7Srr+Jomyt6fYnbgHIGXob0URGCZytGdS8zH+GShCt5WY2uND; Expires=Tue, 03 Dec 2024 00:01:24 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1dabe4c6f99e5f8" X-Cache: Miss from cloudfront Via: 1.1 422342d11ed9c398b7fd9566f8822c9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: N13G8oXQlYgEPuzjunihM1E1Zg119mqWmr0AM1ptTXoOaNJ-uDhxmA== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:24 UTC	760	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 62 2d 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 2d 6f 76 65 72 6c 61 79 2d 66 61 64 65 69 6e 20 7b 0d 0a 20 20 30 25 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 7d 20 0d 0a 7d 0d 0a 0d 0a 2e 62 2d 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 2d 6f 76 65 72 6c 61 79 20 7b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 2d 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 Data Ascii: @keyframes b-loading-indicator-overlay-fadein { 0% { opacity: 0; } 100% { opacity: 1; } }.b-loading-indicator-overlay { top: 0; left: 0; width: 100%; height: 100%; display: flex;}.b-loading-indica

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:24 UTC	1170	OUT	GET /_content/Blazorise.SpinKit/blazorise.spinkit.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1 Host: anz.pfm.law Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
2024-11-26 00:01:25 UTC	929	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 12650 Connection: close Date: Tue, 26 Nov 2024 00:01:24 GMT Last-Modified: Fri, 14 Jun 2024 11:17:26 GMT Set-Cookie: AWSALB=rBQgSHTm1tOOsmTJl1wamSGaiN7daOq1QSyVvkY7b29ipyQh2hRABOpA86LQxhywevfCh+SpfluBnwB+EOpdGoIDoGPrmY99aPFIpIQZQBU+pcqvagebkFM7Mgpc; Expires=Tue, 03 Dec 2024 00:01:24 GMT; Path=/ Set-Cookie: AWSALBCORS=rBQgSHTm1tOOsmTJl1wamSGaiN7daOq1QSyVvkY7b29ipyQh2hRABOpA86LQxhywevfCh+SpfluBnwB+EOpdGoIDoGPrmY99aPFIpIQZQBU+pcqvagebkFM7Mgpc; Expires=Tue, 03 Dec 2024 00:01:24 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1dabe4c6f99d66a" X-Cache: Miss from cloudfront Via: 1.1 e59c3614c775e0e475019dd43ac0810e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: 2K7aUH1yksNV18NNnSwAlDbJwlqe-GaSLblAx0XZhPGCyqIxEjcwxQ== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:25 UTC	7561	IN	Data Raw: ef bb bf 3a 72 6f 6f 74 20 7b 0d 0a 20 20 2d 2d 73 6b 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 62 2d 73 70 69 6e 6b 69 74 2d 73 69 7a 65 2c 20 34 30 70 78 29 3b 0d 0a 20 20 2d 2d 73 6b 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 2d 73 70 69 6e 6b 69 74 2d 63 6f 6c 6f 72 2c 20 23 33 33 33 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 55 74 69 6c 69 74 79 20 63 6c 61 73 73 20 66 6f 72 20 63 65 6e 74 65 72 69 6e 67 20 2a 2f 0d 0a 2e 73 6b 2d 63 65 6e 74 65 72 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 20 50 6c 61 6e 65 20 2a 2f 0d 0a 2e 73 6b 2d 70 6c 61 6e 65 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 73 6b 2d 73 69 7a 65 29 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 73 6b 2d 73 69 7a 65 29 3b 0d Data Ascii: :root { --sk-size: var(--b-spinkit-size, 40px); --sk-color: var(--b-spinkit-color, #333);}/* Utility class for centering /.sk-center { margin: auto;}/ Plane */.sk-plane { width: var(--sk-size); height: var(--sk-size);
2024-11-26 00:01:25 UTC	5089	IN	Data Raw: 2d 6f 75 74 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6b 2d 63 69 72 63 6c 65 2d 66 61 64 65 2d 64 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 7b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 30 64 65 67 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6b 2d 63 69 72 63 6c 65 2d 66 61 64 65 2d 64 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 7b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 36 30 64 65 67 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6b 2d 63 69 72 63 6c 65 2d 66 61 64 65 2d 64 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 20 7b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6b 2d 63 69 72 63 6c 65 2d 66 61 64 65 2d 64 6f 74 3a 6e 74 68 2d 63 68 69 6c Data Ascii: -out both;}.sk-circle-fade-dot:nth-child(1) { transform: rotate(30deg);}.sk-circle-fade-dot:nth-child(2) { transform: rotate(60deg);}.sk-circle-fade-dot:nth-child(3) { transform: rotate(90deg);}.sk-circle-fade-dot:nth-chil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	172.217.19.227	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:24 UTC	550	OUT	GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://anz.pfm.law/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:24 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 26 Nov 2024 00:01:24 GMT Date: Tue, 26 Nov 2024 00:01:24 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-26 00:01:24 UTC	641	IN	Data Raw: 36 64 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 Data Ascii: 6d6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.r
2024-11-26 00:01:24 UTC	1116	IN	Data Raw: 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 Data Ascii: 9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecat
2024-11-26 00:01:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49761	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-26 00:01:24 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=34305 Date: Tue, 26 Nov 2024 00:01:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-26 00:01:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49763	151.101.1.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:25 UTC	393	OUT	GET /npm/signature_pad@4.0.4/dist/signature_pad.umd.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:25 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10818 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 4.0.4 X-JSD-Version-Type: version ETag: W/"2a42-8UH4jvM1NS0lZNtkTtZQqMFqWxM" Accept-Ranges: bytes Age: 1067490 Date: Tue, 26 Nov 2024 00:01:25 GMT X-Served-By: cache-fra-eddf8230039-FRA, cache-nyc-kteb1890087-NYC X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 69 67 6e 61 74 75 72 65 20 50 61 64 20 76 34 2e 30 2e 34 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 7a 69 6d 65 6b 2f 73 69 67 6e 61 74 75 72 65 5f 70 61 64 0a 20 2a 20 28 63 29 20 32 30 32 32 20 53 7a 79 6d 6f 6e 20 4e 6f 77 61 6b 20 7c 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d Data Ascii: /! Signature Pad v4.0.4 \| https://github.com/szimek/signature_pad * (c) 2022 Szymon Nowak \| Released under the MIT license */!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.am
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 65 2c 69 3d 30 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 3d 31 30 3b 6e 2b 3d 31 29 7b 63 6f 6e 73 74 20 73 3d 6e 2f 31 30 2c 6f 3d 74 68 69 73 2e 70 6f 69 6e 74 28 73 2c 74 68 69 73 2e 73 74 61 72 74 50 6f 69 6e 74 2e 78 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 31 2e 78 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 32 2e 78 2c 74 68 69 73 2e 65 6e 64 50 6f 69 6e 74 2e 78 29 2c 68 3d 74 68 69 73 2e 70 6f 69 6e 74 28 73 2c 74 68 69 73 2e 73 74 61 72 74 50 6f 69 6e 74 2e 79 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 31 2e 79 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 32 2e 79 2c 74 68 69 73 2e 65 6e 64 50 6f 69 6e 74 2e 79 29 3b 69 66 28 6e 3e 30 29 7b 63 6f 6e 73 74 20 6e 3d 6f 2d 74 2c 73 3d 68 2d 65 3b 69 2b 3d 4d 61 74 68 2e 73 71 72 74 28 6e 2a 6e 2b 73 2a 73 29 7d Data Ascii: e,i=0;for(let n=0;n<=10;n+=1){const s=n/10,o=this.point(s,this.startPoint.x,this.control1.x,this.control2.x,this.endPoint.x),h=this.point(s,this.startPoint.y,this.control1.y,this.control2.y,this.endPoint.y);if(n>0){const n=o-t,s=h-e;i+=Math.sqrt(nn+ss)}
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 69 73 2e 5f 68 61 6e 64 6c 65 50 6f 69 6e 74 65 72 4d 6f 76 65 3d 74 3d 3e 7b 74 68 69 73 2e 5f 64 72 61 77 6e 69 6e 67 53 74 72 6f 6b 65 26 26 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 5f 73 74 72 6f 6b 65 4d 6f 76 65 55 70 64 61 74 65 28 74 29 29 7d 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 50 6f 69 6e 74 65 72 45 6e 64 3d 74 3d 3e 7b 74 68 69 73 2e 5f 64 72 61 77 6e 69 6e 67 53 74 72 6f 6b 65 26 26 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 5f 64 72 61 77 6e 69 6e 67 53 74 72 6f 6b 65 3d 21 31 2c 74 68 69 73 2e 5f 73 74 72 6f 6b 65 45 6e 64 28 74 29 29 7d 2c 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 46 69 6c 74 65 72 57 65 69 67 68 74 3d 65 2e 76 65 6c 6f 63 69 74 79 46 69 6c 74 65 72 57 65 69 Data Ascii: is._handlePointerMove=t=>{this._drawningStroke&&(t.preventDefault(),this._strokeMoveUpdate(t))},this._handlePointerEnd=t=>{this._drawningStroke&&(t.preventDefault(),this._drawningStroke=!1,this._strokeEnd(t))},this.velocityFilterWeight=e.velocityFilterWei
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 74 68 69 73 2e 5f 63 74 78 2e 64 72 61 77 49 6d 61 67 65 28 73 2c 61 2c 64 2c 68 2c 72 29 2c 69 28 29 7d 2c 73 2e 6f 6e 65 72 72 6f 72 3d 74 3d 3e 7b 6e 28 74 29 7d 2c 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2c 73 2e 73 72 63 3d 74 2c 74 68 69 73 2e 5f 69 73 45 6d 70 74 79 3d 21 31 7d 29 7d 74 6f 44 61 74 61 55 52 4c 28 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 2c 65 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 6f 53 56 47 28 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 6e 76 61 73 2e 74 6f 44 61 74 61 55 52 4c 28 74 2c 65 29 7d 7d 6f 6e 28 29 7b 74 68 69 73 2e 63 61 6e 76 61 73 2e 73 74 79 6c 65 2e 74 6f Data Ascii: this._ctx.drawImage(s,a,d,h,r),i()},s.onerror=t=>{n(t)},s.crossOrigin="anonymous",s.src=t,this._isEmpty=!1})}toDataURL(t="image/png",e){switch(t){case"image/svg+xml":return this._toSVG();default:return this.canvas.toDataURL(t,e)}}on(){this.canvas.style.to
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 65 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 64 72 61 77 44 6f 74 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 3d 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 7d 74 6f 44 61 74 61 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 61 74 61 7d 5f 73 74 72 6f 6b 65 42 65 67 69 6e 28 74 29 7b 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 62 65 67 69 6e 53 74 72 6f 6b 65 22 2c 7b 64 65 74 61 69 6c 3a 74 7d 29 29 3b 63 6f 6e 73 74 20 65 3d 7b 64 6f 74 53 69 7a 65 3a 74 68 69 73 2e 64 6f 74 53 69 7a 65 2c 6d 69 6e 57 69 64 74 68 3a 74 68 69 73 2e 6d 69 6e 57 69 64 74 68 2c 6d 61 78 57 69 64 74 68 3a 74 68 69 73 2e 6d 61 78 57 69 64 74 68 2c 70 65 6e Data Ascii: e.bind(this),this._drawDot.bind(this)),this._data=this._data.concat(t)}toData(){return this._data}_strokeBegin(t){this.dispatchEvent(new CustomEvent("beginStroke",{detail:t}));const e={dotSize:this.dotSize,minWidth:this.minWidth,maxWidth:this.maxWidth,pen
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 73 2e 5f 68 61 6e 64 6c 65 50 6f 69 6e 74 65 72 45 6e 64 29 7d 5f 68 61 6e 64 6c 65 4d 6f 75 73 65 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 5f 64 72 61 77 6e 69 6e 67 53 74 72 6f 6b 65 3d 21 31 2c 74 68 69 73 2e 63 61 6e 76 61 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 4d 6f 75 73 65 44 6f 77 6e 29 2c 74 68 69 73 2e 63 61 6e 76 61 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 4d 6f 75 73 65 4d 6f 76 65 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 75 70 22 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 4d 6f 75 73 65 55 70 29 7d 5f 68 61 6e Data Ascii: s._handlePointerEnd)}_handleMouseEvents(){this._drawningStroke=!1,this.canvas.addEventListener("mousedown",this._handleMouseDown),this.canvas.addEventListener("mousemove",this._handleMouseMove),document.addEventListener("mouseup",this._handleMouseUp)}_han
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 28 74 2e 6c 65 6e 67 74 68 28 29 29 3b 69 2e 62 65 67 69 6e 50 61 74 68 28 29 2c 69 2e 66 69 6c 6c 53 74 79 6c 65 3d 65 2e 70 65 6e 43 6f 6c 6f 72 3b 66 6f 72 28 6c 65 74 20 69 3d 30 3b 69 3c 73 3b 69 2b 3d 31 29 7b 63 6f 6e 73 74 20 6f 3d 69 2f 73 2c 68 3d 6f 2a 6f 2c 72 3d 68 2a 6f 2c 61 3d 31 2d 6f 2c 64 3d 61 2a 61 2c 63 3d 64 2a 61 3b 6c 65 74 20 6c 3d 63 2a 74 2e 73 74 61 72 74 50 6f 69 6e 74 2e 78 3b 6c 2b 3d 33 2a 64 2a 6f 2a 74 2e 63 6f 6e 74 72 6f 6c 31 2e 78 2c 6c 2b 3d 33 2a 61 2a 68 2a 74 2e 63 6f 6e 74 72 6f 6c 32 2e 78 2c 6c 2b 3d 72 2a 74 2e 65 6e 64 50 6f 69 6e 74 2e 78 3b 6c 65 74 20 75 3d 63 2a 74 2e 73 74 61 72 74 50 6f 69 6e 74 2e 79 3b 75 2b 3d 33 2a 64 2a 6f 2a 74 2e 63 6f 6e 74 72 6f 6c 31 2e 79 2c 75 2b 3d 33 2a 61 2a 68 2a 74 2e Data Ascii: (t.length());i.beginPath(),i.fillStyle=e.penColor;for(let i=0;i<s;i+=1){const o=i/s,h=oo,r=ho,a=1-o,d=aa,c=da;let l=ct.startPoint.x;l+=3dot.control1.x,l+=3aht.control2.x,l+=rt.endPoint.x;let u=ct.startPoint.y;u+=3dot.control1.y,u+=3ah*t.
2024-11-26 00:01:25 UTC	1172	IN	Data Raw: 32 2e 79 29 29 29 7b 63 6f 6e 73 74 20 6e 3d 60 4d 20 24 7b 74 2e 73 74 61 72 74 50 6f 69 6e 74 2e 78 2e 74 6f 46 69 78 65 64 28 33 29 7d 2c 24 7b 74 2e 73 74 61 72 74 50 6f 69 6e 74 2e 79 2e 74 6f 46 69 78 65 64 28 33 29 7d 20 43 20 24 7b 74 2e 63 6f 6e 74 72 6f 6c 31 2e 78 2e 74 6f 46 69 78 65 64 28 33 29 7d 2c 24 7b 74 2e 63 6f 6e 74 72 6f 6c 31 2e 79 2e 74 6f 46 69 78 65 64 28 33 29 7d 20 24 7b 74 2e 63 6f 6e 74 72 6f 6c 32 2e 78 2e 74 6f 46 69 78 65 64 28 33 29 7d 2c 24 7b 74 2e 63 6f 6e 74 72 6f 6c 32 2e 79 2e 74 6f 46 69 78 65 64 28 33 29 7d 20 24 7b 74 2e 65 6e 64 50 6f 69 6e 74 2e 78 2e 74 6f 46 69 78 65 64 28 33 29 7d 2c 24 7b 74 2e 65 6e 64 50 6f 69 6e 74 2e 79 2e 74 6f 46 69 78 65 64 28 33 29 7d 60 3b 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: 2.y))){const n=`M ${t.startPoint.x.toFixed(3)},${t.startPoint.y.toFixed(3)} C ${t.control1.x.toFixed(3)},${t.control1.y.toFixed(3)} ${t.control2.x.toFixed(3)},${t.control2.y.toFixed(3)} ${t.endPoint.x.toFixed(3)},${t.endPoint.y.toFixed(3)}`;i.setAttribute

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49764	151.101.1.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:25 UTC	384	OUT	GET /npm/bootstrap@4.6.1/dist/js/bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:25 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 62440 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 4.6.1 X-JSD-Version-Type: version ETag: W/"f3e8-JKkAvfzv1Sy8/zvDZECvm4fNUGc" Accept-Ranges: bytes Age: 1006268 Date: Tue, 26 Nov 2024 00:01:25 GMT X-Served-By: cache-fra-eddf8230043-FRA, cache-ewr-kewr1740055-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.6.1 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 65 3d 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 Data Ascii: bute("data-target");if(!e\|\|"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():""}try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:function(t){if(!t)return 0;var e=o.default(t).css("transition-dur
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 51 75 65 72 79 20 6d 75 73 74 20 62 65 20 69 6e 63 6c 75 64 65 64 20 62 65 66 6f 72 65 20 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 2e 22 29 3b 76 61 72 20 74 3d 6f 2e 64 65 66 61 75 6c 74 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 74 5b 30 5d 3c 32 26 26 74 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 74 5b 30 5d 26 26 39 3d 3d 3d 74 5b 31 5d 26 26 74 5b 32 5d 3c 31 7c 7c 74 5b 30 5d 3e 3d 34 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 61 74 20 6c 65 61 73 74 20 6a 51 75 65 72 79 20 76 31 2e 39 2e 31 20 62 75 74 20 6c 65 73 73 20 74 68 61 6e 20 76 34 2e 30 2e 30 22 Data Ascii: Query must be included before Bootstrap's JavaScript.");var t=o.default.fn.jquery.split(" ")[0].split(".");if(t[0]<2&&t[1]<9\|\|1===t[0]&&9===t[1]&&t[2]<1\|\|t[0]>=4)throw new Error("Bootstrap's JavaScript requires at least jQuery v1.9.1 but less than v4.0.0"
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 3b 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 6f 6e 65 28 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6e 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 64 65 74 61 63 68 28 29 2e 74 72 69 67 67 65 72 28 22 63 6c 6f 73 65 64 2e 62 73 2e 61 6c 65 72 74 22 29 2e 72 65 6d 6f 76 65 28 29 7d 2c 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: ;o.default(t).one(d.TRANSITION_END,(function(n){return e._destroyElement(t,n)})).emulateTransitionEnd(n)}else this._destroyElement(t)},e._destroyElement=function(t){o.default(t).detach().trigger("closed.bs.alert").remove()},t._jQueryInterface=function(e){
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 6e 74 61 69 6e 73 28 5f 29 29 2c 74 68 69 73 2e 73 68 6f 75 6c 64 41 76 6f 69 64 54 72 69 67 67 65 72 43 68 61 6e 67 65 7c 7c 6f 2e 64 65 66 61 75 6c 74 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 29 2c 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 Data Ascii: ntains(_)),this.shouldAvoidTriggerChange\|\|o.default(i).trigger("change")),i.focus(),e=!1}}this._element.hasAttribute("disabled")\|\|this._element.classList.contains("disabled")\|\|(e&&this._element.setAttribute("aria-pressed",!this._element.classList.contains
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 20 2e 62 74 6e 27 29 29 2c 65 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 65 5d 2c 6f 3d 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 79 29 3b 6f 2e 63 68 65 63 6b 65 64 7c 7c 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 63 68 65 63 6b 65 64 22 29 3f 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 5f 29 3a 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 5f 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 2c 73 3d 28 74 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ctorAll('[data-toggle="buttons"] .btn')),e=0,n=t.length;e<n;e++){var i=t[e],o=i.querySelector(y);o.checked\|\|o.hasAttribute("checked")?i.classList.add(_):i.classList.remove(_)}for(var a=0,s=(t=[].slice.call(document.querySelectorAll('[data-toggle="button"]
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 4e 29 7d 2c 65 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 74 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 74 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 65 2e 70 72 65 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e Data Ascii: entListeners()}var e=t.prototype;return e.next=function(){this._isSliding\|\|this._slide(N)},e.nextWhenVisible=function(){var t=o.default(this._element);!document.hidden&&t.is(":visible")&&"hidden"!==t.css("visibility")&&this.next()},e.prev=function(){this.
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 65 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 72 28 7b 7d 2c 6b 2c 74 29 2c 64 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 54 2c 74 2c 4f 29 2c 74 7d 2c 65 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 29 3b 69 66 28 21 28 74 3c 3d 34 30 29 29 7b 76 61 72 20 65 3d 74 2f 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3b 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 30 2c 65 3e 30 26 26 74 68 69 73 2e 70 72 65 76 28 29 2c 65 3c 30 26 26 74 68 69 73 2e 6e 65 78 74 28 29 Data Ascii: ull,this._indicatorsElement=null},e._getConfig=function(t){return t=r({},k,t),d.typeCheckConfig(T,t,O),t},e._handleSwipe=function(){var t=Math.abs(this.touchDeltaX);if(!(t<=40)){var e=t/this.touchDeltaX;this.touchDeltaX=0,e>0&&this.prev(),e<0&&this.next()
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 70 6f 69 6e 74 65 72 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 29 2c 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 70 6f 69 6e 74 65 72 75 70 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 29 7d 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 22 29 29 3a 28 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 74 6f 75 63 68 73 74 61 72 74 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c Data Ascii: lt(this._element).on("pointerdown.bs.carousel",(function(t){return e(t)})),o.default(this._element).on("pointerup.bs.carousel",(function(t){return n(t)})),this._element.classList.add("pointer-event")):(o.default(this._element).on("touchstart.bs.carousel",
2024-11-26 00:01:25 UTC	1378	IN	Data Raw: 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 61 29 2c 61 7d 2c 65 2e 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 61 63 74 69 76 65 22 29 29 3b 6f 2e 64 65 66 61 75 6c 74 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 53 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 Data Ascii: his._element).trigger(a),a},e._setActiveIndicatorElement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(".active"));o.default(e).removeClass(S);var n=this._indicatorsElement.children[this._getItemIndex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49765	151.101.1.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:25 UTC	380	OUT	GET /npm/jquery@3.5.1/dist/jquery.slim.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:25 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72380 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.5.1 X-JSD-Version-Type: version ETag: W/"11abc-z42YIVUtUbtQzlcuaWq6EwkGWAA" Accept-Ranges: bytes Age: 2215042 Date: Tue, 26 Nov 2024 00:01:25 GMT X-Served-By: cache-fra-etou8220123-FRA, cache-nyc-kteb1890095-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:26 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 Data Ascii: /*! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other c
2024-11-26 00:01:26 UTC	16384	IN	Data Raw: 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 62 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 64 29 7b 70 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 41 5d 7c 7c 28 61 5b 41 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b Data Ascii: if(c){if(y){while(l){a=e;while(a=a[l])if(b?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&d){p=(s=(r=(i=(o=(a=c)[A]\|\|(a[A]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[
2024-11-26 00:01:26 UTC	16384	IN	Data Raw: 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 54 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 62 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 45 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 Data Ascii: ength,l=null==n;if("object"===T(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,b(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(E(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t
2024-11-26 00:01:26 UTC	16086	IN	Data Raw: 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 67 65 28 65 29 2c 61 3d 61 7c 7c 67 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 67 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 76 65 28 61 2c 21 66 26 26 67 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: ed=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ge(e),a=a\|\|ge(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ge(c,"script")).length&&ve(a,!f&&ge(e,"script")),c},cleanData:function(e){for(var t
2024-11-26 00:01:26 UTC	7142	IN	Data Raw: 30 29 7d 7d 29 2c 6d 2e 66 6f 63 75 73 69 6e 7c 7c 45 2e 65 61 63 68 28 7b 66 6f 63 75 73 3a 22 66 6f 63 75 73 69 6e 22 2c 62 6c 75 72 3a 22 66 6f 63 75 73 6f 75 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 45 2e 65 76 65 6e 74 2e 73 69 6d 75 6c 61 74 65 28 72 2c 65 2e 74 61 72 67 65 74 2c 45 2e 65 76 65 6e 74 2e 66 69 78 28 65 29 29 7d 3b 45 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 72 5d 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2c 74 3d 59 2e 61 63 63 65 73 73 28 65 2c 72 29 3b 74 7c 7c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: 0)}}),m.focusin\|\|E.each({focus:"focusin",blur:"focusout"},function(n,r){var i=function(e){E.event.simulate(r,e.target,E.event.fix(e))};E.event.special[r]={setup:function(){var e=this.ownerDocument\|\|this.document\|\|this,t=Y.access(e,r);t\|\|e.addEventListener

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:25 UTC	1158	OUT	GET /CaseFunnel.CaseSites.Host.styles.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1 Host: anz.pfm.law Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
2024-11-26 00:01:26 UTC	926	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 96 Connection: close Date: Tue, 26 Nov 2024 00:01:26 GMT Last-Modified: Wed, 20 Nov 2024 14:22:48 GMT Set-Cookie: AWSALB=YL6U9KWO8LlAsZ4EPQVJDDs1p5WBYSieK97i51wPWDwd/OWXI/SbRhjfE+Oz+SnWlxcMUVgG8PCxyoJji18zwsgL6dvWwAwCqSCkfrPjulPsuiNgN61DQ0cS3qbm; Expires=Tue, 03 Dec 2024 00:01:26 GMT; Path=/ Set-Cookie: AWSALBCORS=YL6U9KWO8LlAsZ4EPQVJDDs1p5WBYSieK97i51wPWDwd/OWXI/SbRhjfE+Oz+SnWlxcMUVgG8PCxyoJji18zwsgL6dvWwAwCqSCkfrPjulPsuiNgN61DQ0cS3qbm; Expires=Tue, 03 Dec 2024 00:01:26 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db3b57ac82ac60" X-Cache: Miss from cloudfront Via: 1.1 c1fb60c3ad4cc738424d038649c0fa90.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: a4RlBQW64pr5J3rQ-VXNilPVjmOWfauuSYbGZaKmQnETyUB5TBU6UA== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:26 UTC	96	IN	Data Raw: 40 69 6d 70 6f 72 74 20 27 5f 63 6f 6e 74 65 6e 74 2f 43 61 73 65 46 75 6e 6e 65 6c 2e 43 61 73 65 53 69 74 65 73 2e 43 6f 6e 74 72 6f 6c 73 2f 43 61 73 65 46 75 6e 6e 65 6c 2e 43 61 73 65 53 69 74 65 73 2e 43 6f 6e 74 72 6f 6c 73 2e 62 75 6e 64 6c 65 2e 73 63 70 2e 63 73 73 27 3b 0a 0a Data Ascii: @import '_content/CaseFunnel.CaseSites.Controls/CaseFunnel.CaseSites.Controls.bundle.scp.css';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49767	172.217.19.227	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:26 UTC	379	OUT	GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:27 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 26 Nov 2024 00:01:27 GMT Date: Tue, 26 Nov 2024 00:01:27 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-26 00:01:27 UTC	641	IN	Data Raw: 36 64 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 Data Ascii: 6d6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.r
2024-11-26 00:01:27 UTC	1116	IN	Data Raw: 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 Data Ascii: 9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecat
2024-11-26 00:01:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49766	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:26 UTC	1217	OUT	GET /_content/CaseFunnel.CaseSites.Controls/CaseFunnel.CaseSites.Controls.bundle.scp.css HTTP/1.1 Host: anz.pfm.law Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://anz.pfm.law/CaseFunnel.CaseSites.Host.styles.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=YL6U9KWO8LlAsZ4EPQVJDDs1p5WBYSieK97i51wPWDwd/OWXI/SbRhjfE+Oz+SnWlxcMUVgG8PCxyoJji18zwsgL6dvWwAwCqSCkfrPjulPsuiNgN61DQ0cS3qbm; AWSALBCORS=YL6U9KWO8LlAsZ4EPQVJDDs1p5WBYSieK97i51wPWDwd/OWXI/SbRhjfE+Oz+SnWlxcMUVgG8PCxyoJji18zwsgL6dvWwAwCqSCkfrPjulPsuiNgN61DQ0cS3qbm
2024-11-26 00:01:27 UTC	928	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 5579 Connection: close Date: Tue, 26 Nov 2024 00:01:27 GMT Last-Modified: Wed, 20 Nov 2024 14:22:42 GMT Set-Cookie: AWSALB=yR4+6M/+zBuTerIF5+n5oSwP8nmWhagOMI+ZXF59Jw5QdvRyM9/4hP3RPXhojDzxGDMNmp9YwC5n6QXM9wobpcFi/zrfnqcZ7hnQi+jOKV6V/OLmVQ3hd2YUfqw4; Expires=Tue, 03 Dec 2024 00:01:27 GMT; Path=/ Set-Cookie: AWSALBCORS=yR4+6M/+zBuTerIF5+n5oSwP8nmWhagOMI+ZXF59Jw5QdvRyM9/4hP3RPXhojDzxGDMNmp9YwC5n6QXM9wobpcFi/zrfnqcZ7hnQi+jOKV6V/OLmVQ3hd2YUfqw4; Expires=Tue, 03 Dec 2024 00:01:27 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db3b57a8ef30cb" X-Cache: Miss from cloudfront Via: 1.1 e8dcb4c100f8f24530655f5e6f9a630a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: UwrO7s3Nd9LQXLvh64mSqHdIizZ6AzBm_S5vz9qgsCfS9oA3pEyDCg== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:27 UTC	5579	IN	Data Raw: 2f 2a 20 5f 63 6f 6e 74 65 6e 74 2f 43 61 73 65 46 75 6e 6e 65 6c 2e 43 61 73 65 53 69 74 65 73 2e 43 6f 6e 74 72 6f 6c 73 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 43 61 73 65 4f 75 74 4f 66 44 61 74 65 4d 6f 64 61 6c 2e 72 61 7a 6f 72 2e 72 7a 2e 73 63 70 2e 63 73 73 20 2a 2f 0a 2e 6d 6f 64 65 2d 73 77 69 74 63 68 5b 62 2d 78 73 6a 6d 6b 6a 6f 65 67 31 5d 2c 0a 5b 62 2d 78 73 6a 6d 6b 6a 6f 65 67 31 5d 20 2e 6d 6f 64 65 2d 73 77 69 74 63 68 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 38 38 63 63 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 63 61 70 69 74 61 6c 69 7a 65 3b 0a Data Ascii: /* _content/CaseFunnel.CaseSites.Controls/Components/CaseOutOfDateModal.razor.rz.scp.css */.mode-switch[b-xsjmkjoeg1],[b-xsjmkjoeg1] .mode-switch { border: 0; color: #0088cc; padding: .25rem .5rem; margin-top: 5px; text-transform: capitalize;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49771	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:28 UTC	1065	OUT	GET /_framework/blazor.web.js HTTP/1.1 Host: anz.pfm.law Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
2024-11-26 00:01:29 UTC	962	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 187457 Connection: close Date: Tue, 26 Nov 2024 00:01:29 GMT Last-Modified: Wed, 20 Mar 2024 21:27:13 GMT Set-Cookie: AWSALB=B0q6d+AESPK7Crwk1q38MvNXDhCSnUO06CbtZ/3LDQcWDX+KtdxbIpJGWohBzfucCsfDTOcZ+AookoRzSV+Tk5YNNHwdWlJry6qMt3Ufu33vAOT5jchTfXtU7XXT; Expires=Tue, 03 Dec 2024 00:01:29 GMT; Path=/ Set-Cookie: AWSALBCORS=B0q6d+AESPK7Crwk1q38MvNXDhCSnUO06CbtZ/3LDQcWDX+KtdxbIpJGWohBzfucCsfDTOcZ+AookoRzSV+Tk5YNNHwdWlJry6qMt3Ufu33vAOT5jchTfXtU7XXT; Expires=Tue, 03 Dec 2024 00:01:29 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes Cache-Control: no-cache ETag: "1da7b0d5fa252c1" X-Cache: Miss from cloudfront Via: 1.1 e7575e0a4303776f28631da37e0447e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: gHwknVEVb6KDdqREXz-dHwNgZUZGhIikl275UMwyEU4SV66CYDU15Q== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:29 UTC	13924	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 37 37 38 3a 28 29 3d 3e 7b 7d 2c 37 37 3a 28 29 3d 3e 7b 7d 2c 32 30 33 3a 28 29 3d 3e 7b 7d 2c 32 30 30 3a 28 29 3d 3e 7b 7d 2c 36 32 38 3a 28 29 3d 3e 7b 7d 2c 33 32 31 3a 28 29 3d 3e 7b 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 29 7b 76 61 72 20 72 3d 74 5b 6f 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 6f 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 28 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 Data Ascii: (()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(o){var r=t[o];if(void 0!==r)return r.exports;var i=t[o]={exports:{}};return e[o](i,i.exports,n),i.exports}n.g=function(){if("object"==typeof globalThis)return g
2024-11-26 00:01:29 UTC	16384	IN	Data Raw: 28 29 3d 3e 44 28 65 29 2e 69 6e 76 6f 6b 65 4d 65 74 68 6f 64 41 73 79 6e 63 28 22 44 69 73 70 61 74 63 68 45 76 65 6e 74 41 73 79 6e 63 22 2c 74 2c 6e 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 63 6f 6e 73 74 20 74 3d 43 2e 67 65 74 28 65 29 3b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 4e 6f 20 69 6e 74 65 72 6f 70 20 6d 65 74 68 6f 64 73 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 66 6f 72 20 72 65 6e 64 65 72 65 72 20 24 7b 65 7d 60 29 3b 72 65 74 75 72 6e 20 74 7d 6c 65 74 20 41 3d 28 65 2c 74 2c 6e 29 3d 3e 6e 28 29 3b 63 6f 6e 73 74 20 78 3d 42 28 5b 22 61 62 6f 72 74 22 2c 22 62 6c 75 72 22 2c 22 63 61 6e 63 65 6c 22 2c 22 63 61 6e 70 6c 61 79 22 2c 22 63 61 6e 70 6c 61 79 74 68 72 6f 75 67 68 22 2c 22 63 Data Ascii: ()=>D(e).invokeMethodAsync("DispatchEventAsync",t,n)))}function D(e){const t=C.get(e);if(!t)throw new Error(`No interop methods are registered for renderer ${e}`);return t}let A=(e,t,n)=>n();const x=B(["abort","blur","cancel","canplay","canplaythrough","c
2024-11-26 00:01:29 UTC	2231	IN	Data Raw: 6d 70 6f 6e 65 6e 74 49 64 28 6f 29 2c 73 3d 6c 2e 65 64 69 74 73 28 6f 29 3b 6e 2e 75 70 64 61 74 65 43 6f 6d 70 6f 6e 65 6e 74 28 74 2c 72 2c 73 2c 63 29 7d 63 6f 6e 73 74 20 68 3d 74 2e 64 69 73 70 6f 73 65 64 43 6f 6d 70 6f 6e 65 6e 74 49 64 73 28 29 2c 64 3d 6f 2e 76 61 6c 75 65 73 28 68 29 2c 75 3d 6f 2e 63 6f 75 6e 74 28 68 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 75 3b 65 2b 2b 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 64 69 73 70 6f 73 65 64 43 6f 6d 70 6f 6e 65 6e 74 49 64 73 45 6e 74 72 79 28 64 2c 65 29 3b 6e 2e 64 69 73 70 6f 73 65 43 6f 6d 70 6f 6e 65 6e 74 28 6f 29 7d 63 6f 6e 73 74 20 70 3d 74 2e 64 69 73 70 6f 73 65 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 49 64 73 28 29 2c 66 3d 6f 2e 76 61 6c 75 65 73 28 70 29 2c 67 3d 6f 2e 63 6f 75 6e Data Ascii: mponentId(o),s=l.edits(o);n.updateComponent(t,r,s,c)}const h=t.disposedComponentIds(),d=o.values(h),u=o.count(h);for(let e=0;e<u;e++){const o=t.disposedComponentIdsEntry(d,e);n.disposeComponent(o)}const p=t.disposedEventHandlerIds(),f=o.values(p),g=o.coun
2024-11-26 00:01:29 UTC	16384	IN	Data Raw: 21 3d 3d 45 65 26 26 45 65 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4f 6e 6c 79 20 6f 6e 65 20 69 6e 74 65 72 61 63 74 69 76 65 20 72 75 6e 74 69 6d 65 20 6d 61 79 20 65 6e 61 62 6c 65 20 6e 61 76 69 67 61 74 69 6f 6e 20 69 6e 74 65 72 63 65 70 74 69 6f 6e 20 61 74 20 61 20 74 69 6d 65 2e 22 29 3b 45 65 3d 65 7d 2c 73 65 74 48 61 73 4c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 69 6e 67 4c 69 73 74 65 6e 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 6a 65 2e 67 65 74 28 65 29 3b 69 66 28 21 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 52 65 6e 64 65 72 65 72 20 77 69 74 68 20 49 44 20 27 24 7b 65 7d 27 20 69 73 20 6e 6f 74 20 6c 69 73 74 65 6e 69 6e 67 20 66 6f 72 20 6e 61 76 69 67 61 74 69 6f Data Ascii: !==Ee&&Ee!==e)throw new Error("Only one interactive runtime may enable navigation interception at a time.");Ee=e},setHasLocationChangingListeners:function(e,t){const n=je.get(e);if(!n)throw new Error(`Renderer with ID '${e}' is not listening for navigatio
2024-11-26 00:01:29 UTC	16384	IN	Data Raw: 6e 65 77 2e 74 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 3b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7d 63 6c 61 73 73 20 6f 6e 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 2e 74 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 3b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 3d 74 2c 74 68 69 73 2e 65 72 72 6f 72 54 79 70 65 3d 22 55 6e 73 75 70 70 6f 72 74 65 64 54 72 61 6e 73 70 6f 72 74 45 72 72 6f 72 22 2c 74 68 69 73 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 7d 7d 63 6c 61 73 73 20 72 6e 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 Data Ascii: new.target.prototype;super(e),this.__proto__=t}}class on extends Error{constructor(e,t){const n=new.target.prototype;super(e),this.transport=t,this.errorType="UnsupportedTransportError",this.__proto__=n}}class rn extends Error{constructor(e,t){const n=new
2024-11-26 00:01:29 UTC	16384	IN	Data Raw: 6d 61 74 69 6f 6e 2c 60 43 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 63 6f 6e 6e 65 63 74 69 6e 67 20 62 65 63 61 75 73 65 20 6f 66 20 65 72 72 6f 72 20 27 24 7b 65 7d 27 2e 60 29 3a 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 6c 6f 67 28 4f 74 2e 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 22 43 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 63 6f 6e 6e 65 63 74 69 6e 67 2e 22 29 2c 30 21 3d 3d 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 43 61 6c 6c 62 61 63 6b 73 2e 6c 65 6e 67 74 68 29 7b 74 72 79 7b 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 43 61 6c 6c 62 61 63 6b 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 65 5d 29 29 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 6c 6f 67 28 4f 74 2e 45 72 72 Data Ascii: mation,`Connection reconnecting because of error '${e}'.`):this._logger.log(Ot.Information,"Connection reconnecting."),0!==this._reconnectingCallbacks.length){try{this._reconnectingCallbacks.forEach((t=>t.apply(this,[e])))}catch(t){this._logger.log(Ot.Err
2024-11-26 00:01:29 UTC	1743	IN	Data Raw: 72 79 26 26 28 69 2e 62 69 6e 61 72 79 54 79 70 65 3d 22 61 72 72 61 79 62 75 66 66 65 72 22 29 2c 69 2e 6f 6e 6f 70 65 6e 3d 74 3d 3e 7b 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 6c 6f 67 28 4f 74 2e 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 60 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 24 7b 65 7d 2e 60 29 2c 74 68 69 73 2e 5f 77 65 62 53 6f 63 6b 65 74 3d 69 2c 61 3d 21 30 2c 6f 28 29 7d 2c 69 2e 6f 6e 65 72 72 6f 72 3d 65 3d 3e 7b 6c 65 74 20 74 3d 6e 75 6c 6c 3b 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 45 72 72 6f 72 45 76 65 6e 74 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 45 76 65 6e 74 3f 65 2e 65 72 72 6f 72 3a 22 54 68 65 72 65 20 77 61 73 20 61 6e 20 65 72 72 6f 72 20 77 69 74 68 20 74 Data Ascii: ry&&(i.binaryType="arraybuffer"),i.onopen=t=>{this._logger.log(Ot.Information,`WebSocket connected to ${e}.`),this._webSocket=i,a=!0,o()},i.onerror=e=>{let t=null;t="undefined"!=typeof ErrorEvent&&e instanceof ErrorEvent?e.error:"There was an error with t
2024-11-26 00:01:29 UTC	16384	IN	Data Raw: 2e 63 6f 64 65 7d 20 28 24 7b 65 2e 72 65 61 73 6f 6e 7c 7c 22 6e 6f 20 72 65 61 73 6f 6e 20 67 69 76 65 6e 22 7d 29 2e 60 29 29 29 7d 5f 69 73 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 77 61 73 43 6c 65 61 6e 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6f 64 65 7d 7d 63 6c 61 73 73 20 78 6e 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 3d 7b 7d 29 7b 69 66 28 74 68 69 73 2e 5f 73 74 6f 70 50 72 6f 6d 69 73 65 52 65 73 6f 6c 76 65 72 3d 28 29 3d 3e 7b 7d 2c 74 68 69 73 2e 66 65 61 74 75 72 65 73 3d 7b 7d 2c 74 68 69 73 2e 5f 6e 65 67 6f 74 69 61 74 65 56 65 72 73 69 6f 6e 3d 31 2c 48 74 2e 69 73 52 65 71 75 69 72 65 64 28 65 2c 22 75 72 6c 22 Data Ascii: .code} (${e.reason\|\|"no reason given"}).`)))}_isCloseEvent(e){return e&&"boolean"==typeof e.wasClean&&"number"==typeof e.code}}class xn{constructor(e,t={}){if(this._stopPromiseResolver=()=>{},this.features={},this._negotiateVersion=1,Ht.isRequired(e,"url"
2024-11-26 00:01:29 UTC	15990	IN	Data Raw: 2e 63 72 65 61 74 65 28 74 2c 74 68 69 73 2e 6c 6f 67 67 65 72 7c 7c 46 74 2e 69 6e 73 74 61 6e 63 65 2c 74 68 69 73 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 6e 65 77 20 4d 6e 2c 74 68 69 73 2e 72 65 63 6f 6e 6e 65 63 74 50 6f 6c 69 63 79 2c 74 68 69 73 2e 5f 73 65 72 76 65 72 54 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 74 68 69 73 2e 5f 6b 65 65 70 41 6c 69 76 65 49 6e 74 65 72 76 61 6c 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 74 68 69 73 2e 5f 73 74 61 74 65 66 75 6c 52 65 63 6f 6e 6e 65 63 74 42 75 66 66 65 72 53 69 7a 65 29 7d 7d 76 61 72 20 42 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 44 65 66 61 75 6c 74 3d 30 5d 3d 22 44 65 66 61 75 6c 74 22 2c 65 5b 65 2e 53 65 72 76 65 72 3d 31 5d 3d 22 53 65 72 76 65 72 22 2c 65 Data Ascii: .create(t,this.logger\|\|Ft.instance,this.protocol\|\|new Mn,this.reconnectPolicy,this._serverTimeoutInMilliseconds,this._keepAliveIntervalInMilliseconds,this._statefulReconnectBufferSize)}}var Bn;!function(e){e[e.Default=0]="Default",e[e.Server=1]="Server",e
2024-11-26 00:01:29 UTC	394	IN	Data Raw: 37 3a 72 65 74 75 72 6e 20 70 2e 74 72 79 73 2e 70 75 73 68 28 5b 37 2c 2c 31 30 2c 31 31 5d 29 2c 6e 26 26 21 6e 2e 64 6f 6e 65 26 26 28 72 3d 74 2e 72 65 74 75 72 6e 29 3f 5b 34 2c 72 2e 63 61 6c 6c 28 74 29 5d 3a 5b 33 2c 39 5d 3b 63 61 73 65 20 38 3a 70 2e 73 65 6e 74 28 29 2c 70 2e 6c 61 62 65 6c 3d 39 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 5b 33 2c 31 31 5d 3b 63 61 73 65 20 31 30 3a 69 66 28 6f 29 74 68 72 6f 77 20 6f 2e 65 72 72 6f 72 3b 72 65 74 75 72 6e 5b 37 5d 3b 63 61 73 65 20 31 31 3a 72 65 74 75 72 6e 5b 37 5d 3b 63 61 73 65 20 31 32 3a 69 66 28 69 29 7b 69 66 28 74 68 69 73 2e 68 61 73 52 65 6d 61 69 6e 69 6e 67 28 31 29 29 74 68 72 6f 77 20 74 68 69 73 2e 63 72 65 61 74 65 45 78 74 72 61 42 79 74 65 45 72 72 6f 72 28 74 68 69 73 2e 74 Data Ascii: 7:return p.trys.push([7,,10,11]),n&&!n.done&&(r=t.return)?[4,r.call(t)]:[3,9];case 8:p.sent(),p.label=9;case 9:return[3,11];case 10:if(o)throw o.error;return[7];case 11:return[7];case 12:if(i){if(this.hasRemaining(1))throw this.createExtraByteError(this.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49777	151.101.65.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:31 UTC	576	OUT	GET /npm/mermaid@10/dist/mermaid.esm.min.mjs HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://anz.pfm.law sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://anz.pfm.law/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:31 UTC	754	IN	HTTP/1.1 200 OK Connection: close Content-Length: 76 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 10.9.3 X-JSD-Version-Type: version ETag: W/"4c-zE5FmLu4lKDSzMqLcQBA/UOwIFk" Accept-Ranges: bytes Age: 13995 Date: Tue, 26 Nov 2024 00:01:31 GMT X-Served-By: cache-fra-eddf8230059-FRA, cache-ewr-kewr1740072-EWR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:31 UTC	76	IN	Data Raw: 69 6d 70 6f 72 74 20 7b 20 62 39 20 61 73 20 66 20 7d 20 66 72 6f 6d 20 22 2e 2f 6d 65 72 6d 61 69 64 2d 35 61 35 39 38 30 64 34 2e 6a 73 22 3b 0a 65 78 70 6f 72 74 20 7b 0a 20 20 66 20 61 73 20 64 65 66 61 75 6c 74 0a 7d 3b 0a Data Ascii: import { b9 as f } from "./mermaid-5a5980d4.js";export { f as default};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49776	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:31 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zZag6YwYzsGRBcm&MD=zTKRtyzo HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-26 00:01:32 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 9cbcd97e-9ac9-4dd5-928d-f3662eadc2d9 MS-RequestId: 2d5205ec-6d4f-4860-a43e-1f25022cae8c MS-CV: bktqXlpF+U2HLgAj.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 26 Nov 2024 00:01:31 GMT Connection: close Content-Length: 24490
2024-11-26 00:01:32 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-26 00:01:32 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49778	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:32 UTC	869	OUT	GET /_framework/blazor.web.js HTTP/1.1 Host: anz.pfm.law Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=B0q6d+AESPK7Crwk1q38MvNXDhCSnUO06CbtZ/3LDQcWDX+KtdxbIpJGWohBzfucCsfDTOcZ+AookoRzSV+Tk5YNNHwdWlJry6qMt3Ufu33vAOT5jchTfXtU7XXT; AWSALBCORS=B0q6d+AESPK7Crwk1q38MvNXDhCSnUO06CbtZ/3LDQcWDX+KtdxbIpJGWohBzfucCsfDTOcZ+AookoRzSV+Tk5YNNHwdWlJry6qMt3Ufu33vAOT5jchTfXtU7XXT
2024-11-26 00:01:33 UTC	962	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 187457 Connection: close Date: Tue, 26 Nov 2024 00:01:32 GMT Last-Modified: Wed, 20 Mar 2024 21:27:13 GMT Set-Cookie: AWSALB=E1kwu3MvR7h0hxWUnBOwXAkS6DynlL44fF/rrlmq6bqDxje59xlt5/5rXwzXHer9NbKvaISwbHcG7gJiG4tEXRmGf7+qW4fWSbm4l7aZ8ynPB/iPkvRqxjpdCeEg; Expires=Tue, 03 Dec 2024 00:01:32 GMT; Path=/ Set-Cookie: AWSALBCORS=E1kwu3MvR7h0hxWUnBOwXAkS6DynlL44fF/rrlmq6bqDxje59xlt5/5rXwzXHer9NbKvaISwbHcG7gJiG4tEXRmGf7+qW4fWSbm4l7aZ8ynPB/iPkvRqxjpdCeEg; Expires=Tue, 03 Dec 2024 00:01:32 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes Cache-Control: no-cache ETag: "1da7b0d5fa252c1" X-Cache: Miss from cloudfront Via: 1.1 ab49782025e9dbc8568e1a8e704a42d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: TxEpIp2SwCHlAQ1uEqb7_Bo2NuEngrRl28O9LTwRkHG7CEgFogvcFg== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:33 UTC	7528	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 37 37 38 3a 28 29 3d 3e 7b 7d 2c 37 37 3a 28 29 3d 3e 7b 7d 2c 32 30 33 3a 28 29 3d 3e 7b 7d 2c 32 30 30 3a 28 29 3d 3e 7b 7d 2c 36 32 38 3a 28 29 3d 3e 7b 7d 2c 33 32 31 3a 28 29 3d 3e 7b 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 29 7b 76 61 72 20 72 3d 74 5b 6f 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 6f 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 28 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 Data Ascii: (()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(o){var r=t[o];if(void 0!==r)return r.exports;var i=t[o]={exports:{}};return e[o](i,i.exports,n),i.exports}n.g=function(){if("object"==typeof globalThis)return g
2024-11-26 00:01:33 UTC	16384	IN	Data Raw: 75 70 3d 38 5d 3d 22 75 70 64 61 74 65 4d 61 72 6b 75 70 22 2c 65 5b 65 2e 70 65 72 6d 75 74 61 74 69 6f 6e 4c 69 73 74 45 6e 74 72 79 3d 39 5d 3d 22 70 65 72 6d 75 74 61 74 69 6f 6e 4c 69 73 74 45 6e 74 72 79 22 2c 65 5b 65 2e 70 65 72 6d 75 74 61 74 69 6f 6e 4c 69 73 74 45 6e 64 3d 31 30 5d 3d 22 70 65 72 6d 75 74 61 74 69 6f 6e 4c 69 73 74 45 6e 64 22 7d 28 74 7c 7c 28 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 65 6c 65 6d 65 6e 74 3d 31 5d 3d 22 65 6c 65 6d 65 6e 74 22 2c 65 5b 65 2e 74 65 78 74 3d 32 5d 3d 22 74 65 78 74 22 2c 65 5b 65 2e 61 74 74 72 69 62 75 74 65 3d 33 5d 3d 22 61 74 74 72 69 62 75 74 65 22 2c 65 5b 65 2e 63 6f 6d 70 6f 6e 65 6e 74 3d 34 5d 3d 22 63 6f 6d 70 6f 6e 65 6e 74 22 2c 65 5b 65 2e 72 65 67 69 6f Data Ascii: up=8]="updateMarkup",e[e.permutationListEntry=9]="permutationListEntry",e[e.permutationListEnd=10]="permutationListEnd"}(t\|\|(t={})),function(e){e[e.element=1]="element",e[e.text=2]="text",e[e.attribute=3]="attribute",e[e.component=4]="component",e[e.regio
2024-11-26 00:01:33 UTC	10141	IN	Data Raw: 24 7b 74 7d 60 29 3b 66 65 2e 64 65 6c 65 74 65 28 69 29 26 26 28 6a 28 69 29 2c 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 6f 6d 6d 65 6e 74 26 26 28 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 21 22 29 29 3b 63 6f 6e 73 74 20 73 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 65 28 69 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 2c 61 3d 73 26 26 73 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3b 74 68 69 73 2e 61 70 70 6c 79 45 64 69 74 73 28 65 2c 74 2c 69 2c 30 2c 6e 2c 6f 29 2c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 73 26 26 73 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 21 3d 3d 61 26 26 61 2e 66 6f 63 75 73 28 29 7d 64 69 73 70 6f 73 65 43 6f 6d 70 6f 6e 65 6e Data Ascii: ${t}`);fe.delete(i)&&(j(i),i instanceof Comment&&(i.textContent="!"));const s=null===(r=te(i))\|\|void 0===r?void 0:r.getRootNode(),a=s&&s.activeElement;this.applyEdits(e,t,i,0,n,o),a instanceof HTMLElement&&s&&s.activeElement!==a&&a.focus()}disposeComponen
2024-11-26 00:01:33 UTC	16384	IN	Data Raw: 47 65 28 65 2c 74 2c 6e 3d 76 6f 69 64 20 30 29 7b 74 3f 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 7b 75 73 65 72 53 74 61 74 65 3a 6e 2c 5f 69 6e 64 65 78 3a 48 65 7d 2c 22 22 2c 65 29 3a 28 48 65 2b 2b 2c 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 7b 75 73 65 72 53 74 61 74 65 3a 6e 2c 5f 69 6e 64 65 78 3a 48 65 7d 2c 22 22 2c 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 59 65 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 74 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 7a 65 3b 7a 65 3d 28 29 3d 3e 7b 7a 65 3d 6e 2c 74 28 29 7d 2c 68 69 73 74 6f 72 79 2e 67 6f 28 65 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 51 65 28 29 7b 71 65 26 26 28 71 65 28 21 31 29 2c 71 65 3d 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 5a Data Ascii: Ge(e,t,n=void 0){t?history.replaceState({userState:n,_index:He},"",e):(He++,history.pushState({userState:n,_index:He},"",e))}function Ye(e){return new Promise((t=>{const n=ze;ze=()=>{ze=n,t()},history.go(e)}))}function Qe(){qe&&(qe(!1),qe=null)}function Z
2024-11-26 00:01:33 UTC	16384	IN	Data Raw: 73 74 52 65 63 65 69 76 65 64 53 65 71 75 65 6e 63 65 49 64 3d 30 2c 74 68 69 73 2e 5f 62 75 66 66 65 72 65 64 42 79 74 65 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 49 6e 50 72 6f 67 72 65 73 73 3d 21 31 2c 74 68 69 73 2e 5f 70 72 6f 74 6f 63 6f 6c 3d 65 2c 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 3d 74 2c 74 68 69 73 2e 5f 62 75 66 66 65 72 53 69 7a 65 3d 6e 7d 61 73 79 6e 63 20 5f 73 65 6e 64 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 5f 70 72 6f 74 6f 63 6f 6c 2e 77 72 69 74 65 4d 65 73 73 61 67 65 28 65 29 3b 6c 65 74 20 6e 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 69 66 28 74 68 69 73 2e 5f 69 73 49 6e 76 6f 63 61 74 69 6f 6e 4d 65 73 73 61 67 65 28 65 29 29 7b 74 68 69 73 2e 5f 74 6f 74 61 6c Data Ascii: stReceivedSequenceId=0,this._bufferedByteCount=0,this._reconnectInProgress=!1,this._protocol=e,this._connection=t,this._bufferSize=n}async _send(e){const t=this._protocol.writeMessage(e);let n=Promise.resolve();if(this._isInvocationMessage(e)){this._total
2024-11-26 00:01:33 UTC	16384	IN	Data Raw: 74 61 74 65 7d 27 20 66 72 6f 6d 20 74 68 65 20 72 65 63 6f 6e 6e 65 63 74 69 6e 67 20 73 74 61 74 65 20 64 75 72 69 6e 67 20 72 65 63 6f 6e 6e 65 63 74 20 61 74 74 65 6d 70 74 2e 20 44 6f 6e 65 20 72 65 63 6f 6e 6e 65 63 74 69 6e 67 2e 60 29 2c 76 6f 69 64 28 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 3d 3d 3d 68 6e 2e 44 69 73 63 6f 6e 6e 65 63 74 69 6e 67 26 26 74 68 69 73 2e 5f 63 6f 6d 70 6c 65 74 65 43 6c 6f 73 65 28 29 29 3b 6f 3d 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 65 3a 6e 65 77 20 45 72 72 6f 72 28 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 72 3d 74 68 69 73 2e 5f 67 65 74 4e 65 78 74 52 65 74 72 79 44 65 6c 61 79 28 6e 2b 2b 2c 44 61 74 65 2e 6e 6f 77 28 29 2d 74 2c 6f 29 7d 7d 74 68 69 73 2e 5f 6c 6f 67 Data Ascii: tate}' from the reconnecting state during reconnect attempt. Done reconnecting.`),void(this._connectionState===hn.Disconnecting&&this._completeClose());o=e instanceof Error?e:new Error(e.toString()),r=this._getNextRetryDelay(n++,Date.now()-t,o)}}this._log
2024-11-26 00:01:33 UTC	229	IN	Data Raw: 2e 54 72 61 63 65 2c 22 28 57 65 62 53 6f 63 6b 65 74 73 20 74 72 61 6e 73 70 6f 72 74 29 20 73 6f 63 6b 65 74 20 63 6c 6f 73 65 64 2e 22 29 2c 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 26 26 28 21 74 68 69 73 2e 5f 69 73 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 7c 7c 21 31 21 3d 3d 65 2e 77 61 73 43 6c 65 61 6e 26 26 31 65 33 3d 3d 3d 65 2e 63 6f 64 65 3f 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 28 65 29 3a 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 28 29 3a 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 28 6e 65 77 20 45 72 72 6f 72 28 60 57 65 62 53 6f 63 6b 65 74 20 63 6c 6f 73 65 64 20 77 69 74 68 20 73 74 61 74 75 73 20 63 6f 64 65 3a 20 24 7b 65 Data Ascii: .Trace,"(WebSockets transport) socket closed."),this.onclose&&(!this._isCloseEvent(e)\|\|!1!==e.wasClean&&1e3===e.code?e instanceof Error?this.onclose(e):this.onclose():this.onclose(new Error(`WebSocket closed with status code: ${e
2024-11-26 00:01:33 UTC	16384	IN	Data Raw: 2e 63 6f 64 65 7d 20 28 24 7b 65 2e 72 65 61 73 6f 6e 7c 7c 22 6e 6f 20 72 65 61 73 6f 6e 20 67 69 76 65 6e 22 7d 29 2e 60 29 29 29 7d 5f 69 73 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 77 61 73 43 6c 65 61 6e 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6f 64 65 7d 7d 63 6c 61 73 73 20 78 6e 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 3d 7b 7d 29 7b 69 66 28 74 68 69 73 2e 5f 73 74 6f 70 50 72 6f 6d 69 73 65 52 65 73 6f 6c 76 65 72 3d 28 29 3d 3e 7b 7d 2c 74 68 69 73 2e 66 65 61 74 75 72 65 73 3d 7b 7d 2c 74 68 69 73 2e 5f 6e 65 67 6f 74 69 61 74 65 56 65 72 73 69 6f 6e 3d 31 2c 48 74 2e 69 73 52 65 71 75 69 72 65 64 28 65 2c 22 75 72 6c 22 Data Ascii: .code} (${e.reason\|\|"no reason given"}).`)))}_isCloseEvent(e){return e&&"boolean"==typeof e.wasClean&&"number"==typeof e.code}}class xn{constructor(e,t={}){if(this._stopPromiseResolver=()=>{},this.features={},this._negotiateVersion=1,Ht.isRequired(e,"url"
2024-11-26 00:01:33 UTC	16384	IN	Data Raw: 2e 63 72 65 61 74 65 28 74 2c 74 68 69 73 2e 6c 6f 67 67 65 72 7c 7c 46 74 2e 69 6e 73 74 61 6e 63 65 2c 74 68 69 73 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 6e 65 77 20 4d 6e 2c 74 68 69 73 2e 72 65 63 6f 6e 6e 65 63 74 50 6f 6c 69 63 79 2c 74 68 69 73 2e 5f 73 65 72 76 65 72 54 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 74 68 69 73 2e 5f 6b 65 65 70 41 6c 69 76 65 49 6e 74 65 72 76 61 6c 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 74 68 69 73 2e 5f 73 74 61 74 65 66 75 6c 52 65 63 6f 6e 6e 65 63 74 42 75 66 66 65 72 53 69 7a 65 29 7d 7d 76 61 72 20 42 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 44 65 66 61 75 6c 74 3d 30 5d 3d 22 44 65 66 61 75 6c 74 22 2c 65 5b 65 2e 53 65 72 76 65 72 3d 31 5d 3d 22 53 65 72 76 65 72 22 2c 65 Data Ascii: .create(t,this.logger\|\|Ft.instance,this.protocol\|\|new Mn,this.reconnectPolicy,this._serverTimeoutInMilliseconds,this._keepAliveIntervalInMilliseconds,this._statefulReconnectBufferSize)}}var Bn;!function(e){e[e.Default=0]="Default",e[e.Server=1]="Server",e
2024-11-26 00:01:33 UTC	16384	IN	Data Raw: 63 61 74 28 75 2c 22 20 28 22 29 2e 63 6f 6e 63 61 74 28 64 2c 22 20 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 62 75 66 66 65 72 29 22 29 29 7d 7d 29 29 7d 2c 6e 65 77 28 28 73 3d 76 6f 69 64 20 30 29 7c 7c 28 73 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 74 72 79 7b 72 28 61 2e 6e 65 78 74 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 72 28 61 2e 74 68 72 6f 77 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 76 61 72 20 72 3b 74 2e 64 6f 6e 65 3f 65 28 74 2e 76 61 6c 75 65 29 3a 28 72 3d 74 2e 76 61 6c 75 65 2c 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 3f Data Ascii: cat(u," (").concat(d," in the current buffer)"))}}))},new((s=void 0)\|\|(s=Promise))((function(e,t){function n(e){try{r(a.next(e))}catch(e){t(e)}}function o(e){try{r(a.throw(e))}catch(e){t(e)}}function r(t){var r;t.done?e(t.value):(r=t.value,r instanceof s?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49782	151.101.1.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:33 UTC	379	OUT	GET /npm/mermaid@10/dist/mermaid.esm.min.mjs HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:33 UTC	753	IN	HTTP/1.1 200 OK Connection: close Content-Length: 76 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 10.9.3 X-JSD-Version-Type: version ETag: W/"4c-zE5FmLu4lKDSzMqLcQBA/UOwIFk" Accept-Ranges: bytes Date: Tue, 26 Nov 2024 00:01:33 GMT Age: 13997 X-Served-By: cache-fra-eddf8230059-FRA, cache-ewr-kewr1740027-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:33 UTC	76	IN	Data Raw: 69 6d 70 6f 72 74 20 7b 20 62 39 20 61 73 20 66 20 7d 20 66 72 6f 6d 20 22 2e 2f 6d 65 72 6d 61 69 64 2d 35 61 35 39 38 30 64 34 2e 6a 73 22 3b 0a 65 78 70 6f 72 74 20 7b 0a 20 20 66 20 61 73 20 64 65 66 61 75 6c 74 0a 7d 3b 0a Data Ascii: import { b9 as f } from "./mermaid-5a5980d4.js";export { f as default};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49781	151.101.65.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:33 UTC	620	OUT	GET /npm/mermaid@10/dist/mermaid-5a5980d4.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://anz.pfm.law sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://cdn.jsdelivr.net/npm/mermaid@10/dist/mermaid.esm.min.mjs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:33 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 328729 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 10.9.3 X-JSD-Version-Type: version ETag: W/"50419-9G2imp/Lqnwv23OBOheUtox/tI0" Accept-Ranges: bytes Age: 39311 Date: Tue, 26 Nov 2024 00:01:33 GMT X-Served-By: cache-fra-eddf8230133-FRA, cache-nyc-kteb1890056-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:33 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 62 68 28 74 29 20 7b 0a 20 20 66 6f 72 20 28 76 61 72 20 65 20 3d 20 5b 5d 2c 20 69 20 3d 20 31 3b 20 69 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0a 20 20 20 20 65 5b 69 20 2d 20 31 5d 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 0a 20 20 76 61 72 20 72 20 3d 20 41 72 72 61 79 2e 66 72 6f 6d 28 74 79 70 65 6f 66 20 74 20 3d 3d 20 22 73 74 72 69 6e 67 22 20 3f 20 5b 74 5d 20 3a 20 74 29 3b 0a 20 20 72 5b 72 2e 6c 65 6e 67 74 68 20 2d 20 31 5d 20 3d 20 72 5b 72 2e 6c 65 6e 67 74 68 20 2d 20 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 72 3f 5c 6e 28 5b 5c 74 20 5d 2a 29 24 2f 2c 20 22 22 29 3b 0a 20 20 76 61 72 20 6e 20 3d 20 72 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 61 2c 20 6c 29 20 7b Data Ascii: function bh(t) { for (var e = [], i = 1; i < arguments.length; i++) e[i - 1] = arguments[i]; var r = Array.from(typeof t == "string" ? [t] : t); r[r.length - 1] = r[r.length - 1].replace(/\r?\n([\t ]*)$/, ""); var n = r.reduce(function(a, l) {
2024-11-26 00:01:33 UTC	1378	IN	Data Raw: 31 65 33 2c 20 72 20 3d 20 36 65 34 2c 20 6e 20 3d 20 33 36 65 35 2c 20 6f 20 3d 20 22 6d 69 6c 6c 69 73 65 63 6f 6e 64 22 2c 20 73 20 3d 20 22 73 65 63 6f 6e 64 22 2c 20 61 20 3d 20 22 6d 69 6e 75 74 65 22 2c 20 6c 20 3d 20 22 68 6f 75 72 22 2c 20 68 20 3d 20 22 64 61 79 22 2c 20 75 20 3d 20 22 77 65 65 6b 22 2c 20 66 20 3d 20 22 6d 6f 6e 74 68 22 2c 20 63 20 3d 20 22 71 75 61 72 74 65 72 22 2c 20 70 20 3d 20 22 79 65 61 72 22 2c 20 6d 20 3d 20 22 64 61 74 65 22 2c 20 6b 20 3d 20 22 49 6e 76 61 6c 69 64 20 44 61 74 65 22 2c 20 4f 20 3d 20 2f 5e 28 5c 64 7b 34 7d 29 5b 2d 2f 5d 3f 28 5c 64 7b 31 2c 32 7d 29 3f 5b 2d 2f 5d 3f 28 5c 64 7b 30 2c 32 7d 29 5b 54 74 5c 73 5d 2a 28 5c 64 7b 31 2c 32 7d 29 3f 3a 3f 28 5c 64 7b 31 2c 32 7d 29 3f 3a 3f 28 5c 64 7b Data Ascii: 1e3, r = 6e4, n = 36e5, o = "millisecond", s = "second", a = "minute", l = "hour", h = "day", u = "week", f = "month", c = "quarter", p = "year", m = "date", k = "Invalid Date", O = /^(\d{4})[-/]?(\d{1,2})?[-/]?(\d{0,2})[Tt\s]*(\d{1,2})?:?(\d{1,2})?:?(\d{
2024-11-26 00:01:33 UTC	1378	IN	Data Raw: 20 3f 20 4d 61 74 68 2e 63 65 69 6c 28 4d 29 20 7c 7c 20 30 20 3a 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 29 3b 0a 20 20 20 20 7d 2c 20 70 3a 20 66 75 6e 63 74 69 6f 6e 28 4d 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 20 4d 3a 20 66 2c 20 79 3a 20 70 2c 20 77 3a 20 75 2c 20 64 3a 20 68 2c 20 44 3a 20 6d 2c 20 68 3a 20 6c 2c 20 6d 3a 20 61 2c 20 73 2c 20 6d 73 3a 20 6f 2c 20 51 3a 20 63 20 7d 5b 4d 5d 20 7c 7c 20 53 74 72 69 6e 67 28 4d 20 7c 7c 20 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 73 24 2f 2c 20 22 22 29 3b 0a 20 20 20 20 7d 2c 20 75 3a 20 66 75 6e 63 74 69 6f 6e 28 4d 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 20 3d 3d 3d 20 76 6f 69 64 20 30 3b 0a 20 20 20 20 7d 20 7d 2c 20 47 20 3d 20 Data Ascii: ? Math.ceil(M) \|\| 0 : Math.floor(M); }, p: function(M) { return { M: f, y: p, w: u, d: h, D: m, h: l, m: a, s, ms: o, Q: c }[M] \|\| String(M \|\| "").toLowerCase().replace(/s$/, ""); }, u: function(M) { return M === void 0; } }, G =
2024-11-26 00:01:33 UTC	1378	IN	Data Raw: 2c 20 41 20 3d 20 76 2e 75 74 63 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 78 20 3d 3d 3d 20 6e 75 6c 6c 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 2f 2a 20 40 5f 5f 50 55 52 45 5f 5f 20 2a 2f 20 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4e 2e 75 28 78 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 2f 2a 20 40 5f 5f 50 55 52 45 5f 5f 20 2a 2f 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 78 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 78 20 3d 3d 20 22 73 74 72 69 6e Data Ascii: , A = v.utc; if (x === null) return /* @__PURE__ / new Date(NaN); if (N.u(x)) return / @__PURE__ */ new Date(); if (x instanceof Date) return new Date(x); if (typeof x == "strin
2024-11-26 00:01:33 UTC	1378	IN	Data Raw: 3f 20 74 68 69 73 5b 76 5d 20 3a 20 74 68 69 73 2e 73 65 74 28 78 2c 20 43 29 3b 0a 20 20 20 20 20 20 7d 2c 20 62 2e 75 6e 69 78 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 20 2f 20 31 65 33 29 3b 0a 20 20 20 20 20 20 7d 2c 20 62 2e 76 61 6c 75 65 4f 66 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 24 64 2e 67 65 74 54 69 6d 65 28 29 3b 0a 20 20 20 20 20 20 7d 2c 20 62 2e 73 74 61 72 74 4f 66 20 3d 20 66 75 6e 63 74 69 6f 6e 28 43 2c 20 76 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 78 20 3d 20 74 68 69 73 2c 20 41 20 3d 20 21 21 4e 2e 75 28 76 29 20 7c 7c 20 76 2c 20 Data Ascii: ? this[v] : this.set(x, C); }, b.unix = function() { return Math.floor(this.valueOf() / 1e3); }, b.valueOf = function() { return this.$d.getTime(); }, b.startOf = function(C, v) { var x = this, A = !!N.u(v) \|\| v,
2024-11-26 00:01:33 UTC	1378	IN	Data Raw: 61 72 20 78 2c 20 41 20 3d 20 4e 2e 70 28 43 29 2c 20 44 20 3d 20 22 73 65 74 22 20 2b 20 28 74 68 69 73 2e 24 75 20 3f 20 22 55 54 43 22 20 3a 20 22 22 29 2c 20 49 20 3d 20 28 78 20 3d 20 7b 7d 2c 20 78 5b 68 5d 20 3d 20 44 20 2b 20 22 44 61 74 65 22 2c 20 78 5b 6d 5d 20 3d 20 44 20 2b 20 22 44 61 74 65 22 2c 20 78 5b 66 5d 20 3d 20 44 20 2b 20 22 4d 6f 6e 74 68 22 2c 20 78 5b 70 5d 20 3d 20 44 20 2b 20 22 46 75 6c 6c 59 65 61 72 22 2c 20 78 5b 6c 5d 20 3d 20 44 20 2b 20 22 48 6f 75 72 73 22 2c 20 78 5b 61 5d 20 3d 20 44 20 2b 20 22 4d 69 6e 75 74 65 73 22 2c 20 78 5b 73 5d 20 3d 20 44 20 2b 20 22 53 65 63 6f 6e 64 73 22 2c 20 78 5b 6f 5d 20 3d 20 44 20 2b 20 22 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 2c 20 78 29 5b 41 5d 2c 20 4b 20 3d 20 41 20 3d 3d 3d Data Ascii: ar x, A = N.p(C), D = "set" + (this.$u ? "UTC" : ""), I = (x = {}, x[h] = D + "Date", x[m] = D + "Date", x[f] = D + "Month", x[p] = D + "FullYear", x[l] = D + "Hours", x[a] = D + "Minutes", x[s] = D + "Seconds", x[o] = D + "Milliseconds", x)[A], K = A ===
2024-11-26 00:01:33 UTC	1378	IN	Data Raw: 6f 63 61 6c 65 28 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 29 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 78 2e 69 6e 76 61 6c 69 64 44 61 74 65 20 7c 7c 20 6b 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 41 20 3d 20 43 20 7c 7c 20 22 59 59 59 59 2d 4d 4d 2d 44 44 54 48 48 3a 6d 6d 3a 73 73 5a 22 2c 20 44 20 3d 20 4e 2e 7a 28 74 68 69 73 29 2c 20 49 20 3d 20 74 68 69 73 2e 24 48 2c 20 4b 20 3d 20 74 68 69 73 2e 24 6d 2c 20 52 20 3d 20 74 68 69 73 2e 24 4d 2c 20 51 20 3d 20 78 2e 77 65 65 6b 64 61 79 73 2c 20 7a 20 3d 20 78 2e 6d 6f 6e 74 68 73 2c 20 43 74 20 3d 20 78 2e 6d 65 72 69 64 69 65 6d 2c 20 77 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 74 2c 20 46 74 2c 20 78 74 2c 20 74 65 29 20 7b 0a 20 20 Data Ascii: ocale(); if (!this.isValid()) return x.invalidDate \|\| k; var A = C \|\| "YYYY-MM-DDTHH:mm:ssZ", D = N.z(this), I = this.$H, K = this.$m, R = this.$M, Q = x.weekdays, z = x.months, Ct = x.meridiem, wt = function(et, Ft, xt, te) {
2024-11-26 00:01:33 UTC	1378	IN	Data Raw: 2c 20 76 2e 24 57 2c 20 51 2c 20 33 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 64 64 64 64 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 51 5b 76 2e 24 57 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 48 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 49 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 48 48 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4e 2e 73 28 49 2c 20 32 2c 20 22 30 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 68 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 51 74 28 31 29 3b 0a 20 20 20 20 20 Data Ascii: , v.$W, Q, 3); case "dddd": return Q[v.$W]; case "H": return String(I); case "HH": return N.s(I, 2, "0"); case "h": return Qt(1);
2024-11-26 00:01:33 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 75 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 20 3d 20 28 51 20 2d 20 52 29 20 2f 20 36 30 34 38 65 35 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 68 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 20 3d 20 28 51 20 2d 20 52 29 20 2f 20 38 36 34 65 35 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 6c 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 20 3d 20 51 20 2f 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 61 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 20 3d 20 51 20 2f 20 72 3b Data Ascii: break; case u: A = (Q - R) / 6048e5; break; case h: A = (Q - R) / 864e5; break; case l: A = Q / n; break; case a: A = Q / r;
2024-11-26 00:01:33 UTC	1378	IN	Data Raw: 4d 2c 20 62 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 2e 24 69 20 7c 7c 20 28 4d 28 62 2c 20 5f 74 2c 20 6a 29 2c 20 4d 2e 24 69 20 3d 20 21 30 29 2c 20 6a 3b 0a 20 20 20 20 7d 2c 20 6a 2e 6c 6f 63 61 6c 65 20 3d 20 4a 74 2c 20 6a 2e 69 73 44 61 79 6a 73 20 3d 20 61 65 2c 20 6a 2e 75 6e 69 78 20 3d 20 66 75 6e 63 74 69 6f 6e 28 4d 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6a 28 31 65 33 20 2a 20 4d 29 3b 0a 20 20 20 20 7d 2c 20 6a 2e 65 6e 20 3d 20 56 5b 47 5d 2c 20 6a 2e 4c 73 20 3d 20 56 2c 20 6a 2e 70 20 3d 20 7b 7d 2c 20 6a 3b 0a 20 20 7d 29 3b 0a 7d 29 28 48 73 29 3b 0a 76 61 72 20 53 68 20 3d 20 48 73 2e 65 78 70 6f 72 74 73 3b 0a 63 6f 6e 73 74 20 76 68 20 3d 20 2f 2a 20 40 5f 5f 50 55 52 45 5f 5f 20 2a 2f 20 6b 68 28 53 68 29 Data Ascii: M, b) { return M.$i \|\| (M(b, _t, j), M.$i = !0), j; }, j.locale = Jt, j.isDayjs = ae, j.unix = function(M) { return j(1e3 * M); }, j.en = V[G], j.Ls = V, j.p = {}, j; });})(Hs);var Sh = Hs.exports;const vh = /* @__PURE__ */ kh(Sh)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49785	151.101.1.229	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:35 UTC	379	OUT	GET /npm/mermaid@10/dist/mermaid-5a5980d4.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:36 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 328729 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 10.9.3 X-JSD-Version-Type: version ETag: W/"50419-9G2imp/Lqnwv23OBOheUtox/tI0" Accept-Ranges: bytes Date: Tue, 26 Nov 2024 00:01:36 GMT Age: 39314 X-Served-By: cache-fra-eddf8230133-FRA, cache-nyc-kteb1890046-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 00:01:36 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 62 68 28 74 29 20 7b 0a 20 20 66 6f 72 20 28 76 61 72 20 65 20 3d 20 5b 5d 2c 20 69 20 3d 20 31 3b 20 69 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0a 20 20 20 20 65 5b 69 20 2d 20 31 5d 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 0a 20 20 76 61 72 20 72 20 3d 20 41 72 72 61 79 2e 66 72 6f 6d 28 74 79 70 65 6f 66 20 74 20 3d 3d 20 22 73 74 72 69 6e 67 22 20 3f 20 5b 74 5d 20 3a 20 74 29 3b 0a 20 20 72 5b 72 2e 6c 65 6e 67 74 68 20 2d 20 31 5d 20 3d 20 72 5b 72 2e 6c 65 6e 67 74 68 20 2d 20 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 72 3f 5c 6e 28 5b 5c 74 20 5d 2a 29 24 2f 2c 20 22 22 29 3b 0a 20 20 76 61 72 20 6e 20 3d 20 72 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 61 2c 20 6c 29 20 7b Data Ascii: function bh(t) { for (var e = [], i = 1; i < arguments.length; i++) e[i - 1] = arguments[i]; var r = Array.from(typeof t == "string" ? [t] : t); r[r.length - 1] = r[r.length - 1].replace(/\r?\n([\t ]*)$/, ""); var n = r.reduce(function(a, l) {
2024-11-26 00:01:36 UTC	1378	IN	Data Raw: 31 65 33 2c 20 72 20 3d 20 36 65 34 2c 20 6e 20 3d 20 33 36 65 35 2c 20 6f 20 3d 20 22 6d 69 6c 6c 69 73 65 63 6f 6e 64 22 2c 20 73 20 3d 20 22 73 65 63 6f 6e 64 22 2c 20 61 20 3d 20 22 6d 69 6e 75 74 65 22 2c 20 6c 20 3d 20 22 68 6f 75 72 22 2c 20 68 20 3d 20 22 64 61 79 22 2c 20 75 20 3d 20 22 77 65 65 6b 22 2c 20 66 20 3d 20 22 6d 6f 6e 74 68 22 2c 20 63 20 3d 20 22 71 75 61 72 74 65 72 22 2c 20 70 20 3d 20 22 79 65 61 72 22 2c 20 6d 20 3d 20 22 64 61 74 65 22 2c 20 6b 20 3d 20 22 49 6e 76 61 6c 69 64 20 44 61 74 65 22 2c 20 4f 20 3d 20 2f 5e 28 5c 64 7b 34 7d 29 5b 2d 2f 5d 3f 28 5c 64 7b 31 2c 32 7d 29 3f 5b 2d 2f 5d 3f 28 5c 64 7b 30 2c 32 7d 29 5b 54 74 5c 73 5d 2a 28 5c 64 7b 31 2c 32 7d 29 3f 3a 3f 28 5c 64 7b 31 2c 32 7d 29 3f 3a 3f 28 5c 64 7b Data Ascii: 1e3, r = 6e4, n = 36e5, o = "millisecond", s = "second", a = "minute", l = "hour", h = "day", u = "week", f = "month", c = "quarter", p = "year", m = "date", k = "Invalid Date", O = /^(\d{4})[-/]?(\d{1,2})?[-/]?(\d{0,2})[Tt\s]*(\d{1,2})?:?(\d{1,2})?:?(\d{
2024-11-26 00:01:36 UTC	1378	IN	Data Raw: 20 3f 20 4d 61 74 68 2e 63 65 69 6c 28 4d 29 20 7c 7c 20 30 20 3a 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 29 3b 0a 20 20 20 20 7d 2c 20 70 3a 20 66 75 6e 63 74 69 6f 6e 28 4d 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 20 4d 3a 20 66 2c 20 79 3a 20 70 2c 20 77 3a 20 75 2c 20 64 3a 20 68 2c 20 44 3a 20 6d 2c 20 68 3a 20 6c 2c 20 6d 3a 20 61 2c 20 73 2c 20 6d 73 3a 20 6f 2c 20 51 3a 20 63 20 7d 5b 4d 5d 20 7c 7c 20 53 74 72 69 6e 67 28 4d 20 7c 7c 20 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 73 24 2f 2c 20 22 22 29 3b 0a 20 20 20 20 7d 2c 20 75 3a 20 66 75 6e 63 74 69 6f 6e 28 4d 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 20 3d 3d 3d 20 76 6f 69 64 20 30 3b 0a 20 20 20 20 7d 20 7d 2c 20 47 20 3d 20 Data Ascii: ? Math.ceil(M) \|\| 0 : Math.floor(M); }, p: function(M) { return { M: f, y: p, w: u, d: h, D: m, h: l, m: a, s, ms: o, Q: c }[M] \|\| String(M \|\| "").toLowerCase().replace(/s$/, ""); }, u: function(M) { return M === void 0; } }, G =
2024-11-26 00:01:36 UTC	1378	IN	Data Raw: 2c 20 41 20 3d 20 76 2e 75 74 63 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 78 20 3d 3d 3d 20 6e 75 6c 6c 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 2f 2a 20 40 5f 5f 50 55 52 45 5f 5f 20 2a 2f 20 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4e 2e 75 28 78 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 2f 2a 20 40 5f 5f 50 55 52 45 5f 5f 20 2a 2f 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 78 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 78 20 3d 3d 20 22 73 74 72 69 6e Data Ascii: , A = v.utc; if (x === null) return /* @__PURE__ / new Date(NaN); if (N.u(x)) return / @__PURE__ */ new Date(); if (x instanceof Date) return new Date(x); if (typeof x == "strin
2024-11-26 00:01:36 UTC	1378	IN	Data Raw: 3f 20 74 68 69 73 5b 76 5d 20 3a 20 74 68 69 73 2e 73 65 74 28 78 2c 20 43 29 3b 0a 20 20 20 20 20 20 7d 2c 20 62 2e 75 6e 69 78 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 20 2f 20 31 65 33 29 3b 0a 20 20 20 20 20 20 7d 2c 20 62 2e 76 61 6c 75 65 4f 66 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 24 64 2e 67 65 74 54 69 6d 65 28 29 3b 0a 20 20 20 20 20 20 7d 2c 20 62 2e 73 74 61 72 74 4f 66 20 3d 20 66 75 6e 63 74 69 6f 6e 28 43 2c 20 76 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 78 20 3d 20 74 68 69 73 2c 20 41 20 3d 20 21 21 4e 2e 75 28 76 29 20 7c 7c 20 76 2c 20 Data Ascii: ? this[v] : this.set(x, C); }, b.unix = function() { return Math.floor(this.valueOf() / 1e3); }, b.valueOf = function() { return this.$d.getTime(); }, b.startOf = function(C, v) { var x = this, A = !!N.u(v) \|\| v,
2024-11-26 00:01:36 UTC	1378	IN	Data Raw: 61 72 20 78 2c 20 41 20 3d 20 4e 2e 70 28 43 29 2c 20 44 20 3d 20 22 73 65 74 22 20 2b 20 28 74 68 69 73 2e 24 75 20 3f 20 22 55 54 43 22 20 3a 20 22 22 29 2c 20 49 20 3d 20 28 78 20 3d 20 7b 7d 2c 20 78 5b 68 5d 20 3d 20 44 20 2b 20 22 44 61 74 65 22 2c 20 78 5b 6d 5d 20 3d 20 44 20 2b 20 22 44 61 74 65 22 2c 20 78 5b 66 5d 20 3d 20 44 20 2b 20 22 4d 6f 6e 74 68 22 2c 20 78 5b 70 5d 20 3d 20 44 20 2b 20 22 46 75 6c 6c 59 65 61 72 22 2c 20 78 5b 6c 5d 20 3d 20 44 20 2b 20 22 48 6f 75 72 73 22 2c 20 78 5b 61 5d 20 3d 20 44 20 2b 20 22 4d 69 6e 75 74 65 73 22 2c 20 78 5b 73 5d 20 3d 20 44 20 2b 20 22 53 65 63 6f 6e 64 73 22 2c 20 78 5b 6f 5d 20 3d 20 44 20 2b 20 22 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 2c 20 78 29 5b 41 5d 2c 20 4b 20 3d 20 41 20 3d 3d 3d Data Ascii: ar x, A = N.p(C), D = "set" + (this.$u ? "UTC" : ""), I = (x = {}, x[h] = D + "Date", x[m] = D + "Date", x[f] = D + "Month", x[p] = D + "FullYear", x[l] = D + "Hours", x[a] = D + "Minutes", x[s] = D + "Seconds", x[o] = D + "Milliseconds", x)[A], K = A ===
2024-11-26 00:01:36 UTC	1378	IN	Data Raw: 6f 63 61 6c 65 28 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 29 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 78 2e 69 6e 76 61 6c 69 64 44 61 74 65 20 7c 7c 20 6b 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 41 20 3d 20 43 20 7c 7c 20 22 59 59 59 59 2d 4d 4d 2d 44 44 54 48 48 3a 6d 6d 3a 73 73 5a 22 2c 20 44 20 3d 20 4e 2e 7a 28 74 68 69 73 29 2c 20 49 20 3d 20 74 68 69 73 2e 24 48 2c 20 4b 20 3d 20 74 68 69 73 2e 24 6d 2c 20 52 20 3d 20 74 68 69 73 2e 24 4d 2c 20 51 20 3d 20 78 2e 77 65 65 6b 64 61 79 73 2c 20 7a 20 3d 20 78 2e 6d 6f 6e 74 68 73 2c 20 43 74 20 3d 20 78 2e 6d 65 72 69 64 69 65 6d 2c 20 77 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 74 2c 20 46 74 2c 20 78 74 2c 20 74 65 29 20 7b 0a 20 20 Data Ascii: ocale(); if (!this.isValid()) return x.invalidDate \|\| k; var A = C \|\| "YYYY-MM-DDTHH:mm:ssZ", D = N.z(this), I = this.$H, K = this.$m, R = this.$M, Q = x.weekdays, z = x.months, Ct = x.meridiem, wt = function(et, Ft, xt, te) {
2024-11-26 00:01:36 UTC	1378	IN	Data Raw: 2c 20 76 2e 24 57 2c 20 51 2c 20 33 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 64 64 64 64 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 51 5b 76 2e 24 57 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 48 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 49 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 48 48 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4e 2e 73 28 49 2c 20 32 2c 20 22 30 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 68 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 51 74 28 31 29 3b 0a 20 20 20 20 20 Data Ascii: , v.$W, Q, 3); case "dddd": return Q[v.$W]; case "H": return String(I); case "HH": return N.s(I, 2, "0"); case "h": return Qt(1);
2024-11-26 00:01:36 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 75 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 20 3d 20 28 51 20 2d 20 52 29 20 2f 20 36 30 34 38 65 35 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 68 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 20 3d 20 28 51 20 2d 20 52 29 20 2f 20 38 36 34 65 35 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 6c 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 20 3d 20 51 20 2f 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 61 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 20 3d 20 51 20 2f 20 72 3b Data Ascii: break; case u: A = (Q - R) / 6048e5; break; case h: A = (Q - R) / 864e5; break; case l: A = Q / n; break; case a: A = Q / r;
2024-11-26 00:01:36 UTC	1378	IN	Data Raw: 4d 2c 20 62 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 2e 24 69 20 7c 7c 20 28 4d 28 62 2c 20 5f 74 2c 20 6a 29 2c 20 4d 2e 24 69 20 3d 20 21 30 29 2c 20 6a 3b 0a 20 20 20 20 7d 2c 20 6a 2e 6c 6f 63 61 6c 65 20 3d 20 4a 74 2c 20 6a 2e 69 73 44 61 79 6a 73 20 3d 20 61 65 2c 20 6a 2e 75 6e 69 78 20 3d 20 66 75 6e 63 74 69 6f 6e 28 4d 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6a 28 31 65 33 20 2a 20 4d 29 3b 0a 20 20 20 20 7d 2c 20 6a 2e 65 6e 20 3d 20 56 5b 47 5d 2c 20 6a 2e 4c 73 20 3d 20 56 2c 20 6a 2e 70 20 3d 20 7b 7d 2c 20 6a 3b 0a 20 20 7d 29 3b 0a 7d 29 28 48 73 29 3b 0a 76 61 72 20 53 68 20 3d 20 48 73 2e 65 78 70 6f 72 74 73 3b 0a 63 6f 6e 73 74 20 76 68 20 3d 20 2f 2a 20 40 5f 5f 50 55 52 45 5f 5f 20 2a 2f 20 6b 68 28 53 68 29 Data Ascii: M, b) { return M.$i \|\| (M(b, _t, j), M.$i = !0), j; }, j.locale = Jt, j.isDayjs = ae, j.unix = function(M) { return j(1e3 * M); }, j.en = V[G], j.Ls = V, j.p = {}, j; });})(Hs);var Sh = Hs.exports;const vh = /* @__PURE__ */ kh(Sh)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49786	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:36 UTC	1083	OUT	GET /_blazor/initializers HTTP/1.1 Host: anz.pfm.law Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=E1kwu3MvR7h0hxWUnBOwXAkS6DynlL44fF/rrlmq6bqDxje59xlt5/5rXwzXHer9NbKvaISwbHcG7gJiG4tEXRmGf7+qW4fWSbm4l7aZ8ynPB/iPkvRqxjpdCeEg; AWSALBCORS=E1kwu3MvR7h0hxWUnBOwXAkS6DynlL44fF/rrlmq6bqDxje59xlt5/5rXwzXHer9NbKvaISwbHcG7gJiG4tEXRmGf7+qW4fWSbm4l7aZ8ynPB/iPkvRqxjpdCeEg
2024-11-26 00:01:37 UTC	864	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Tue, 26 Nov 2024 00:01:37 GMT Set-Cookie: AWSALB=6jAXzmd0+D+1UfYOMsSQl5nV4T7a2eyIpgQRitHr0pzK82uxqgNLlVn+Pi5JEOaHj+el06C8pgfRXVNQGPdrV6QZcRjv1MOGVxfLZZYu4J4J9nelKqvkdnuLDApR; Expires=Tue, 03 Dec 2024 00:01:37 GMT; Path=/ Set-Cookie: AWSALBCORS=6jAXzmd0+D+1UfYOMsSQl5nV4T7a2eyIpgQRitHr0pzK82uxqgNLlVn+Pi5JEOaHj+el06C8pgfRXVNQGPdrV6QZcRjv1MOGVxfLZZYu4J4J9nelKqvkdnuLDApR; Expires=Tue, 03 Dec 2024 00:01:37 GMT; Path=/; SameSite=None; Secure X-Cache: Miss from cloudfront Via: 1.1 c0756b6fa47b5825ec117ce8b50151c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: VigLSwU680R7B7WH00eGYHAEyh4lxQaJ9Q1NcEEi4GPB_6UZUoveIQ== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:37 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-11-26 00:01:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49790	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:39 UTC	865	OUT	GET /_blazor/initializers HTTP/1.1 Host: anz.pfm.law Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=6jAXzmd0+D+1UfYOMsSQl5nV4T7a2eyIpgQRitHr0pzK82uxqgNLlVn+Pi5JEOaHj+el06C8pgfRXVNQGPdrV6QZcRjv1MOGVxfLZZYu4J4J9nelKqvkdnuLDApR; AWSALBCORS=6jAXzmd0+D+1UfYOMsSQl5nV4T7a2eyIpgQRitHr0pzK82uxqgNLlVn+Pi5JEOaHj+el06C8pgfRXVNQGPdrV6QZcRjv1MOGVxfLZZYu4J4J9nelKqvkdnuLDApR
2024-11-26 00:01:40 UTC	864	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Tue, 26 Nov 2024 00:01:40 GMT Set-Cookie: AWSALB=b/2JnmGqPg1wZc++izDHPu+jKX3SO0QdYCf71c2/AA+Lv4xuIm0Zk2CaMn+47CyrsfYBE3YPA1jiqQFGrHYZMabAqgXJJiKXexSDtfiTogcmHgY6l/cdzCR1W2Hd; Expires=Tue, 03 Dec 2024 00:01:40 GMT; Path=/ Set-Cookie: AWSALBCORS=b/2JnmGqPg1wZc++izDHPu+jKX3SO0QdYCf71c2/AA+Lv4xuIm0Zk2CaMn+47CyrsfYBE3YPA1jiqQFGrHYZMabAqgXJJiKXexSDtfiTogcmHgY6l/cdzCR1W2Hd; Expires=Tue, 03 Dec 2024 00:01:40 GMT; Path=/; SameSite=None; Secure X-Cache: Miss from cloudfront Via: 1.1 5e8c8047bc2824e975165ec6d4072120.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: swVyMvE-vOrx1-3PJ9SwWyaoSWmdCz2diutjRkmckCjwOT7b4Q1aPQ== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:40 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-11-26 00:01:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49791	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:39 UTC	1291	OUT	POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: anz.pfm.law Connection: keep-alive Content-Length: 0 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Origin: https://anz.pfm.law Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=6jAXzmd0+D+1UfYOMsSQl5nV4T7a2eyIpgQRitHr0pzK82uxqgNLlVn+Pi5JEOaHj+el06C8pgfRXVNQGPdrV6QZcRjv1MOGVxfLZZYu4J4J9nelKqvkdnuLDApR; AWSALBCORS=6jAXzmd0+D+1UfYOMsSQl5nV4T7a2eyIpgQRitHr0pzK82uxqgNLlVn+Pi5JEOaHj+el06C8pgfRXVNQGPdrV6QZcRjv1MOGVxfLZZYu4J4J9nelKqvkdnuLDApR
2024-11-26 00:01:41 UTC	842	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 316 Connection: close Date: Tue, 26 Nov 2024 00:01:40 GMT Set-Cookie: AWSALB=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0; Expires=Tue, 03 Dec 2024 00:01:40 GMT; Path=/ Set-Cookie: AWSALBCORS=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0; Expires=Tue, 03 Dec 2024 00:01:40 GMT; Path=/; SameSite=None; Secure X-Cache: Miss from cloudfront Via: 1.1 5458c60b7ed4b21525f22a590d80f730.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: nYklZQ-34iegfzZCdBg31T-8OkiSlRt-bcIt3H22_7TN1Q1cxf037g== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:41 UTC	316	IN	Data Raw: 7b 22 6e 65 67 6f 74 69 61 74 65 56 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 49 64 22 3a 22 65 56 35 38 7a 53 72 6b 5f 36 57 48 39 38 5a 4a 6e 79 44 6e 49 51 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 6f 6b 65 6e 22 3a 22 58 56 33 31 5a 62 4a 59 4d 79 50 36 53 41 58 49 59 36 55 5a 6e 77 22 2c 22 61 76 61 69 6c 61 62 6c 65 54 72 61 6e 73 70 6f 72 74 73 22 3a 5b 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 57 65 62 53 6f 63 6b 65 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 2c 22 42 69 6e 61 72 79 22 5d 7d 2c 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 53 65 72 76 65 72 53 65 6e 74 45 76 65 6e 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 5d 7d 2c 7b 22 74 72 Data Ascii: {"negotiateVersion":1,"connectionId":"eV58zSrk_6WH98ZJnyDnIQ","connectionToken":"XV31ZbJYMyP6SAXIY6UZnw","availableTransports":[{"transport":"WebSockets","transferFormats":["Text","Binary"]},{"transport":"ServerSentEvents","transferFormats":["Text"]},{"tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49792	13.227.8.109	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:40 UTC	673	OUT	GET /pfm_brisbane/live/favicon.ico?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1 Host: cases.au.casefunnel.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://anz.pfm.law/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:41 UTC	500	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 7406 Connection: close Date: Tue, 26 Nov 2024 00:01:42 GMT Last-Modified: Fri, 11 Oct 2024 11:18:01 GMT ETag: "2eb32b29028d571990abc761c58bb486" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f7557f93c35742dd5eab634e4de62e8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: MORdrjrKS-IyV0FK9WZxyw6dOYL2jKvRezACFHLa0EomMPCmskoMag==
2024-11-26 00:01:41 UTC	7406	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 08 00 a8 0e 00 00 36 00 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 de 0e 00 00 10 10 00 00 01 00 08 00 68 05 00 00 86 17 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 08 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 3e 20 04 00 cf ca bf 00 40 20 04 00 72 62 52 00 3b 23 0d 00 86 79 69 00 3b 27 10 00 74 65 52 00 3c 27 10 00 d5 cd bf 00 b5 ac 9d 00 5a 43 2d 00 c9 c1 b7 00 5b 47 30 00 39 1f 02 00 3a 1f 02 00 36 21 08 00 3b 1f 02 00 3c 1f 02 00 3d 1f 02 00 3e 1f 02 00 3f 1f 02 00 40 1f 02 00 41 1f 02 00 e2 de d7 00 3d 24 08 00 3e 25 0b 00 e4 e2 da 00 66 51 3c 00 d6 d2 c6 00 c3 bc b2 00 35 1c 03 00 4b 32 17 00 39 1e 00 00 3b 1c 03 00 39 1f 03 00 96 86 76 00 3a 1f 03 00 3c 1e 00 00 3b 1f 03 00 3c Data Ascii: 006 h(0`> @ rbR;#yi;'teR<'ZC-[G09:6!;<=>?@A=$>%fQ<5K29;9v:<;<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49793	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:42 UTC	1029	OUT	GET /_blazor?id=XV31ZbJYMyP6SAXIY6UZnw HTTP/1.1 Host: anz.pfm.law Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://anz.pfm.law Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0; AWSALBCORS=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0 Sec-WebSocket-Key: 4QrWZCdRx3zWJnspVx3vkA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-26 00:01:43 UTC	941	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 0 Connection: close Date: Tue, 26 Nov 2024 00:01:43 GMT Pragma: no-cache Set-Cookie: AWSALB=606ym5soQCXFfSCB//T90ogSV4BsG8LueOWgJnzbE8b3uhjnGED0K2Mdsvj3mXDZTr6f13cXfTPSelpt4gXkOPFweD3LVY5Qw+m3931eIJqb979usgEKCARtzuwm; Expires=Tue, 03 Dec 2024 00:01:43 GMT; Path=/ Set-Cookie: AWSALBCORS=606ym5soQCXFfSCB//T90ogSV4BsG8LueOWgJnzbE8b3uhjnGED0K2Mdsvj3mXDZTr6f13cXfTPSelpt4gXkOPFweD3LVY5Qw+m3931eIJqb979usgEKCARtzuwm; Expires=Tue, 03 Dec 2024 00:01:43 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 e8dcb4c100f8f24530655f5e6f9a630a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: C7zqSR9nzs8dRwbTJvgbXiy2h-5DjtOc6F35Lvqxq5Y6qYHcL7wLkA== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49794	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:42 UTC	881	OUT	GET /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: anz.pfm.law Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0; AWSALBCORS=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0
2024-11-26 00:01:44 UTC	851	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/plain Content-Length: 0 Connection: close Date: Tue, 26 Nov 2024 00:01:43 GMT Set-Cookie: AWSALB=GFybZ0QH8Z0vJmqV66E5ax7RWkm0/ioNHBQlSGx0cEYqfyP+PQ1Yb/1lIaQDZE1XsIWmlIBGxOLn2BmgKI7oj2dXlIomqmR7zY+dKZKzuz48nqSwQ75v5EU9vDNA; Expires=Tue, 03 Dec 2024 00:01:43 GMT; Path=/ Set-Cookie: AWSALBCORS=GFybZ0QH8Z0vJmqV66E5ax7RWkm0/ioNHBQlSGx0cEYqfyP+PQ1Yb/1lIaQDZE1XsIWmlIBGxOLn2BmgKI7oj2dXlIomqmR7zY+dKZKzuz48nqSwQ75v5EU9vDNA; Expires=Tue, 03 Dec 2024 00:01:43 GMT; Path=/; SameSite=None; Secure X-Cache: Error from cloudfront Via: 1.1 1aea7e24169d7c704c98c2fee9cab32e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: 5XmQ5-KelXY1gh-10phHtu4_QsToZ_XLGqgVbuD3oKXzA_mRt4LB5A== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49795	13.227.8.67	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:43 UTC	442	OUT	GET /pfm_brisbane/live/favicon.ico?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1 Host: cases.au.casefunnel.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:01:44 UTC	500	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 7406 Connection: close Date: Tue, 26 Nov 2024 00:01:44 GMT Last-Modified: Fri, 11 Oct 2024 11:18:01 GMT ETag: "2eb32b29028d571990abc761c58bb486" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8ae1228303a81d51353490d58d5c6a52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: ZiMXruHiOqBYQoLdI_c5uYbpLPcKq0dTNbK0t4kUQjiWpm5g_HSfQg==
2024-11-26 00:01:44 UTC	6396	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 08 00 a8 0e 00 00 36 00 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 de 0e 00 00 10 10 00 00 01 00 08 00 68 05 00 00 86 17 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 08 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 3e 20 04 00 cf ca bf 00 40 20 04 00 72 62 52 00 3b 23 0d 00 86 79 69 00 3b 27 10 00 74 65 52 00 3c 27 10 00 d5 cd bf 00 b5 ac 9d 00 5a 43 2d 00 c9 c1 b7 00 5b 47 30 00 39 1f 02 00 3a 1f 02 00 36 21 08 00 3b 1f 02 00 3c 1f 02 00 3d 1f 02 00 3e 1f 02 00 3f 1f 02 00 40 1f 02 00 41 1f 02 00 e2 de d7 00 3d 24 08 00 3e 25 0b 00 e4 e2 da 00 66 51 3c 00 d6 d2 c6 00 c3 bc b2 00 35 1c 03 00 4b 32 17 00 39 1e 00 00 3b 1c 03 00 39 1f 03 00 96 86 76 00 3a 1f 03 00 3c 1e 00 00 3b 1f 03 00 3c Data Ascii: 006 h(0`> @ rbR;#yi;'teR<'ZC-[G09:6!;<=>?@A=$>%fQ<5K29;9v:<;<
2024-11-26 00:01:44 UTC	1010	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49796	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:45 UTC	1291	OUT	POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: anz.pfm.law Connection: keep-alive Content-Length: 0 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Origin: https://anz.pfm.law Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0; AWSALBCORS=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0
2024-11-26 00:01:46 UTC	842	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 316 Connection: close Date: Tue, 26 Nov 2024 00:01:46 GMT Set-Cookie: AWSALB=WvQkrxRzC1/uAaMM8HqAj/JEcGcP+a7ExTalyHz6WqcVZ0a3TwMWBfOFUWdrhjcBxw4j5Foz1ETyFpnvJFb4UTx6nJ+NQPV+v5PjJm34pOuyEbOIbd6VxMr93iee; Expires=Tue, 03 Dec 2024 00:01:46 GMT; Path=/ Set-Cookie: AWSALBCORS=WvQkrxRzC1/uAaMM8HqAj/JEcGcP+a7ExTalyHz6WqcVZ0a3TwMWBfOFUWdrhjcBxw4j5Foz1ETyFpnvJFb4UTx6nJ+NQPV+v5PjJm34pOuyEbOIbd6VxMr93iee; Expires=Tue, 03 Dec 2024 00:01:46 GMT; Path=/; SameSite=None; Secure X-Cache: Miss from cloudfront Via: 1.1 fc56b8a676000a5893378ee9d2b55f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: oQUpCqBKgWzlzuO2WnpeDIPoIwEp6Ub_5Wz-gLX1ZPcm5ZXhhiwDfw== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:46 UTC	316	IN	Data Raw: 7b 22 6e 65 67 6f 74 69 61 74 65 56 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 49 64 22 3a 22 4a 55 56 43 39 75 53 65 46 57 32 4a 46 51 73 4b 78 32 78 7a 76 67 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 6f 6b 65 6e 22 3a 22 70 4b 30 66 69 70 56 74 2d 33 34 65 44 64 34 56 67 45 74 4d 67 77 22 2c 22 61 76 61 69 6c 61 62 6c 65 54 72 61 6e 73 70 6f 72 74 73 22 3a 5b 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 57 65 62 53 6f 63 6b 65 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 2c 22 42 69 6e 61 72 79 22 5d 7d 2c 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 53 65 72 76 65 72 53 65 6e 74 45 76 65 6e 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 5d 7d 2c 7b 22 74 72 Data Ascii: {"negotiateVersion":1,"connectionId":"JUVC9uSeFW2JFQsKx2xzvg","connectionToken":"pK0fipVt-34eDd4VgEtMgw","availableTransports":[{"transport":"WebSockets","transferFormats":["Text","Binary"]},{"transport":"ServerSentEvents","transferFormats":["Text"]},{"tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49798	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:48 UTC	881	OUT	GET /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: anz.pfm.law Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=WvQkrxRzC1/uAaMM8HqAj/JEcGcP+a7ExTalyHz6WqcVZ0a3TwMWBfOFUWdrhjcBxw4j5Foz1ETyFpnvJFb4UTx6nJ+NQPV+v5PjJm34pOuyEbOIbd6VxMr93iee; AWSALBCORS=WvQkrxRzC1/uAaMM8HqAj/JEcGcP+a7ExTalyHz6WqcVZ0a3TwMWBfOFUWdrhjcBxw4j5Foz1ETyFpnvJFb4UTx6nJ+NQPV+v5PjJm34pOuyEbOIbd6VxMr93iee
2024-11-26 00:01:49 UTC	851	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/plain Content-Length: 0 Connection: close Date: Tue, 26 Nov 2024 00:01:49 GMT Set-Cookie: AWSALB=N15zecpAt1oZZGMApihBj2gUa5Y1/B4gH20aOBIy5bI5gPlSPohVjYra06OQE/9A0MXkMhIbF0v9W13YuavHx6TdAG8vuE+ldq7HzVUyNpdN98VrICsrtG5Mt6yj; Expires=Tue, 03 Dec 2024 00:01:49 GMT; Path=/ Set-Cookie: AWSALBCORS=N15zecpAt1oZZGMApihBj2gUa5Y1/B4gH20aOBIy5bI5gPlSPohVjYra06OQE/9A0MXkMhIbF0v9W13YuavHx6TdAG8vuE+ldq7HzVUyNpdN98VrICsrtG5Mt6yj; Expires=Tue, 03 Dec 2024 00:01:49 GMT; Path=/; SameSite=None; Secure X-Cache: Error from cloudfront Via: 1.1 7499a2cb4ce8411b56e7edcaead781a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: FTqCLMUJYbDDdRUAuALFAFXnTPDLMvLqoeAtrNqJGgoTCluKeVGeXg== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49797	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:48 UTC	1255	OUT	GET /_blazor?id=pK0fipVt-34eDd4VgEtMgw&_=1732579305386 HTTP/1.1 Host: anz.pfm.law Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=WvQkrxRzC1/uAaMM8HqAj/JEcGcP+a7ExTalyHz6WqcVZ0a3TwMWBfOFUWdrhjcBxw4j5Foz1ETyFpnvJFb4UTx6nJ+NQPV+v5PjJm34pOuyEbOIbd6VxMr93iee; AWSALBCORS=WvQkrxRzC1/uAaMM8HqAj/JEcGcP+a7ExTalyHz6WqcVZ0a3TwMWBfOFUWdrhjcBxw4j5Foz1ETyFpnvJFb4UTx6nJ+NQPV+v5PjJm34pOuyEbOIbd6VxMr93iee
2024-11-26 00:01:49 UTC	941	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 0 Connection: close Date: Tue, 26 Nov 2024 00:01:49 GMT Pragma: no-cache Set-Cookie: AWSALB=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5; Expires=Tue, 03 Dec 2024 00:01:49 GMT; Path=/ Set-Cookie: AWSALBCORS=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5; Expires=Tue, 03 Dec 2024 00:01:49 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 58d3c503a480576abdfaa9676970b67c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: TMIhEYrhR-FWwvMyhw12DS3V56I8xNczDxfrfiOPejoittHrrlgqaA== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49800	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:51 UTC	1255	OUT	GET /_blazor?id=pK0fipVt-34eDd4VgEtMgw&_=1732579308595 HTTP/1.1 Host: anz.pfm.law Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5; AWSALBCORS=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5
2024-11-26 00:01:52 UTC	916	IN	HTTP/1.1 204 No Content Content-Type: text/plain Connection: close Date: Tue, 26 Nov 2024 00:01:52 GMT Pragma: no-cache Set-Cookie: AWSALB=ERAy/JWk+8r/6MtBSzV75+zerkrQqGkkdckFk7bds5anG1O2BQOWcOq6Ds0K1Z6AQcN6th7x5m4FH1kdHn8N4mBEqkDjtcBVikhezxu1lW5KVPC9a7yW2zz0/SmV; Expires=Tue, 03 Dec 2024 00:01:52 GMT; Path=/ Set-Cookie: AWSALBCORS=ERAy/JWk+8r/6MtBSzV75+zerkrQqGkkdckFk7bds5anG1O2BQOWcOq6Ds0K1Z6AQcN6th7x5m4FH1kdHn8N4mBEqkDjtcBVikhezxu1lW5KVPC9a7yW2zz0/SmV; Expires=Tue, 03 Dec 2024 00:01:52 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 422342d11ed9c398b7fd9566f8822c9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: r8_4cSya4QaTYS2L6ybdis-SA0JhiKlk0K0qoOJmHN7NGqJabDSUpg== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49799	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:51 UTC	1329	OUT	POST /_blazor?id=pK0fipVt-34eDd4VgEtMgw HTTP/1.1 Host: anz.pfm.law Connection: keep-alive Content-Length: 38 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Origin: https://anz.pfm.law Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5; AWSALBCORS=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5
2024-11-26 00:01:51 UTC	38	OUT	Data Raw: 7b 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 62 6c 61 7a 6f 72 70 61 63 6b 22 2c 22 76 65 72 73 69 6f 6e 22 3a 31 7d 1e Data Ascii: {"protocol":"blazorpack","version":1}
2024-11-26 00:01:53 UTC	834	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 0 Connection: close Date: Tue, 26 Nov 2024 00:01:52 GMT Set-Cookie: AWSALB=HikrUbhjbiOf6VJdR7xt/8v758EV7oy1hbYtKrKtMA0kthlG7ZYw5SiCo/5eAULbkS0x/YxUYgZHo8u0tLoHTBUDBvOcxj8OhF3quszFvEZZDbKXdNGZaHXcS3ih; Expires=Tue, 03 Dec 2024 00:01:52 GMT; Path=/ Set-Cookie: AWSALBCORS=HikrUbhjbiOf6VJdR7xt/8v758EV7oy1hbYtKrKtMA0kthlG7ZYw5SiCo/5eAULbkS0x/YxUYgZHo8u0tLoHTBUDBvOcxj8OhF3quszFvEZZDbKXdNGZaHXcS3ih; Expires=Tue, 03 Dec 2024 00:01:52 GMT; Path=/; SameSite=None; Secure X-Cache: Miss from cloudfront Via: 1.1 ab49782025e9dbc8568e1a8e704a42d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: Fv8rLeSziCwFXGLDGPLfofDZNOK6eowXtroLXZA-hpkuOkS0LkFV0w== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49801	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:51 UTC	894	OUT	GET /_blazor?id=pK0fipVt-34eDd4VgEtMgw&_=1732579305386 HTTP/1.1 Host: anz.pfm.law Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5; AWSALBCORS=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5
2024-11-26 00:01:53 UTC	941	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 3 Connection: close Date: Tue, 26 Nov 2024 00:01:52 GMT Pragma: no-cache Set-Cookie: AWSALB=Qx+s4fLJFGbpO6UcNXxJe5+DfP9tUscvdqoDdxn3hFtyIXjQgTfXTtkmE5+ecTVl8W+Zzvfz4YW5U8buL17mkqRmfF/bai1kIDICw9LSM9iJFOGCZ84tk1Cjm9yj; Expires=Tue, 03 Dec 2024 00:01:52 GMT; Path=/ Set-Cookie: AWSALBCORS=Qx+s4fLJFGbpO6UcNXxJe5+DfP9tUscvdqoDdxn3hFtyIXjQgTfXTtkmE5+ecTVl8W+Zzvfz4YW5U8buL17mkqRmfF/bai1kIDICw9LSM9iJFOGCZ84tk1Cjm9yj; Expires=Tue, 03 Dec 2024 00:01:52 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 28faeddd0f2a66ea58334f6c438c3c2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: Y6mxYNvzrJ7ys4RWn0BLyGrP6Xvl65I3LzaMttzzWqRF0_kDQ3zPTA== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-11-26 00:01:53 UTC	3	IN	Data Raw: 7b 7d 1e Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49802	108.158.75.57	443	5084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:01:54 UTC	878	OUT	GET /_blazor?id=pK0fipVt-34eDd4VgEtMgw HTTP/1.1 Host: anz.pfm.law Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=HikrUbhjbiOf6VJdR7xt/8v758EV7oy1hbYtKrKtMA0kthlG7ZYw5SiCo/5eAULbkS0x/YxUYgZHo8u0tLoHTBUDBvOcxj8OhF3quszFvEZZDbKXdNGZaHXcS3ih; AWSALBCORS=HikrUbhjbiOf6VJdR7xt/8v758EV7oy1hbYtKrKtMA0kthlG7ZYw5SiCo/5eAULbkS0x/YxUYgZHo8u0tLoHTBUDBvOcxj8OhF3quszFvEZZDbKXdNGZaHXcS3ih

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:06 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:06 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:06 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 25 Nov 2024 13:17:46 GMT ETag: "0x8DD0D538D5EA1E0" x-ms-request-id: f5f75198-101e-00a2-8091-3f9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000206Z-174f7845968v75bwhC1EWRuqen0000000fng00000000262b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:06 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-26 00:02:06 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-26 00:02:06 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-26 00:02:06 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-26 00:02:06 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-26 00:02:06 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-26 00:02:06 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-26 00:02:07 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-26 00:02:07 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-26 00:02:07 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:08 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:09 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:09 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 59158d4f-901e-00a0-5491-3f6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000209Z-174f7845968nxc96hC1EWRspw80000000udg0000000024nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:09 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:08 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:09 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 0b3277ea-501e-00a0-5e91-3f9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000209Z-174f78459688l8rvhC1EWRtzr0000000079g000000002669 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:09 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:09 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:09 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:09 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0a3cdbcf-401e-0016-597f-3f53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000209Z-174f7845968xlwnmhC1EWR0sv80000000ud0000000002gps x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:09 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:09 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:09 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 6eac4bdd-a01e-006f-1c91-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000209Z-174f7845968kvnqxhC1EWRmf3g0000000dhg000000001q3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:09 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:09 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:09 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:09 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: dc0e4179-901e-005b-2991-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000209Z-174f7845968j6t2phC1EWRcfe80000000utg000000002fch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:09 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49810	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:10 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zZag6YwYzsGRBcm&MD=zTKRtyzo HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-26 00:02:11 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 0c15b426-a789-417a-9925-98ffd36a508e MS-RequestId: 258f0c9a-6f49-424b-a92d-b67ac23efce3 MS-CV: QrIPNs9yTU2yy01i.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 26 Nov 2024 00:02:10 GMT Connection: close Content-Length: 30005
2024-11-26 00:02:11 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-26 00:02:11 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:11 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 8ccd6c39-f01e-0085-6e81-3f88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000211Z-174f7845968pf68xhC1EWRr4h80000000uwg000000002a56 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:11 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:11 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5d49257-301e-005d-758c-3fe448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000211Z-174f78459685m244hC1EWRgp2c0000000udg000000002n3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:11 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:11 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6f96f590-e01e-0099-0e7f-3fda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000211Z-174f7845968l4kp6hC1EWRe8840000000uy0000000002gs4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:11 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:11 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:11 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 3360fb1d-601e-0097-3291-3ff33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000211Z-174f7845968v75bwhC1EWRuqen0000000fn0000000002bgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:11 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:11 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 30944020-a01e-0053-5e8b-3f8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000212Z-174f78459685726chC1EWRsnbg0000000un0000000002a2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:13 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 6eac52fb-a01e-006f-2191-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000213Z-174f7845968jrjrxhC1EWRmmrs0000000uv00000000029tk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:13 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:13 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: ed9dfa2a-401e-0015-7891-3f0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000213Z-174f7845968g6hv8hC1EWR1v2n00000002p0000000002g65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:13 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:13 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c665a67d-901e-002a-1b91-3f7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000213Z-174f7845968n2hr8hC1EWR9cag0000000u60000000002bsw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:13 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:14 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: dc0e488f-901e-005b-3891-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000213Z-174f7845968xlwnmhC1EWR0sv80000000ueg000000002a91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:13 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:14 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:14 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ff98645e-b01e-0001-1091-3f46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000214Z-174f7845968xlwnmhC1EWR0sv80000000ue00000000022vg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:14 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:15 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 106d127d-401e-008c-1a91-3f86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000215Z-174f7845968n2hr8hC1EWR9cag0000000u7g000000002gez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:15 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:16 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e9babc56-001e-0049-5291-3f5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000215Z-174f7845968psccphC1EWRuz9s0000000uzg000000002ena x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:16 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:16 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:16 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: a99e6065-701e-006f-4d91-3fafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000216Z-174f78459685726chC1EWRsnbg0000000upg000000002nfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:16 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:16 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:16 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 3fc8b732-401e-0083-1091-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000216Z-174f7845968v75bwhC1EWRuqen0000000fpg0000000028sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:17 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:17 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 417b6c53-401e-0029-0d91-3f9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000217Z-174f78459685726chC1EWRsnbg0000000ung000000002bny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:17 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:18 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 02716611-001e-00ad-7089-3f554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000218Z-174f7845968cpnpfhC1EWR3afc0000000u7g0000000025vb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:18 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:18 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: b18988de-c01e-0079-2891-3fe51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000218Z-174f784596886s2bhC1EWR743w0000000uqg00000000298b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:18 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:18 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f5c4af5a-301e-005d-6385-3fe448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000218Z-174f7845968nxc96hC1EWRspw80000000ugg0000000002d2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:18 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f5817373-b01e-003e-3591-3f8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000218Z-174f7845968v75bwhC1EWRuqen0000000fng0000000026nd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:19 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:19 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: b254496e-901e-0016-2991-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000219Z-174f7845968qj8jrhC1EWRh41s0000000upg0000000021nd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:20 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:20 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:20 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 89e88ad2-001e-0065-4491-3f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000220Z-174f78459688l8rvhC1EWRtzr0000000078g000000002ary x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:20 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:20 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f440c5dc-801e-0047-7891-3f7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000220Z-174f7845968jrjrxhC1EWRmmrs0000000urg000000002dfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:20 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 6c824192-201e-0051-0a91-3f7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000220Z-174f7845968v75bwhC1EWRuqen0000000fqg000000001amc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:20 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c3d74fa2-201e-0003-1d91-3ff85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000220Z-174f78459684bddphC1EWRbht40000000ufg000000001gz5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:21 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:22 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: baa0830a-001e-0082-4291-3f5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000222Z-174f7845968xr5c2hC1EWRd0hn0000000bgg000000002e96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:22 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:22 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:22 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: d3507608-601e-003d-4b91-3f6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000222Z-174f78459684bddphC1EWRbht40000000ud0000000002bxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:22 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:22 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:22 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: dc0e5a4e-901e-005b-0191-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000222Z-174f7845968cdxdrhC1EWRg0en0000000uh0000000002t7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:22 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5810d2d2-301e-0000-6891-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000223Z-174f78459685726chC1EWRsnbg0000000uu00000000013sm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:22 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: fac497c4-501e-008f-4391-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000223Z-174f7845968nxc96hC1EWRspw80000000uf000000000228u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:24 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:24 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: dc0e6055-901e-005b-2d91-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000224Z-174f7845968glpgnhC1EWR7uec0000000usg00000000305r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:24 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:24 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:24 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 1fa1b817-401e-0067-5691-3f09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000224Z-174f7845968g6hv8hC1EWR1v2n00000002k0000000002hcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:24 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:24 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:25 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e52ede4a-001e-0017-0591-3f0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000225Z-174f7845968glpgnhC1EWR7uec0000000uv0000000002rxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:25 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:24 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be7987d0-001e-0034-1e91-3fdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000225Z-174f7845968v75bwhC1EWRuqen0000000fm0000000002e41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:25 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:25 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 6760f0bc-801e-002a-1f91-3f31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000225Z-174f7845968swgbqhC1EWRmnb40000000uxg00000000068w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:25 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:26 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:26 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 8dfbf447-101e-0028-0f8e-3f8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000226Z-174f7845968vqt9xhC1EWRgten0000000us000000000280p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:26 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:26 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:26 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: cb9203b6-501e-0029-2691-3fd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000226Z-174f7845968pf68xhC1EWRr4h80000000uwg000000002awc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:27 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:27 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: fac49ef3-501e-008f-0a91-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000227Z-174f7845968frfdmhC1EWRxxbw0000000upg000000002t80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:27 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:27 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:27 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5cf18591-601e-000d-7e91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000227Z-174f7845968n2hr8hC1EWR9cag0000000ub0000000002k5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:27 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:27 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:27 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: e14f358b-d01e-007a-5d7e-3ff38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000227Z-174f7845968cdxdrhC1EWRg0en0000000uq00000000027n6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:27 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:28 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:28 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 3fc8ca9f-401e-0083-6c91-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000228Z-174f7845968xlwnmhC1EWR0sv80000000ukg000000001ush x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:29 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:28 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:29 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 59a03737-a01e-00ab-1891-3f9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000229Z-174f7845968cpnpfhC1EWR3afc0000000ua00000000026eg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:29 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:29 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b24172ee-901e-0016-3789-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000229Z-174f7845968qj8jrhC1EWRh41s0000000uh0000000002gv0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:29 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: dcf51672-d01e-005a-5c91-3f7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000229Z-174f7845968xlwnmhC1EWR0sv80000000uhg000000002f0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:29 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 5cf18767-601e-000d-7d91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000229Z-174f7845968pf68xhC1EWRr4h80000000uug000000002pe5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:30 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7af319f3-d01e-0017-6a91-3fb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000231Z-174f7845968pf68xhC1EWRr4h80000000uu0000000002gue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:31 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:31 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: dd02da03-701e-001e-0d91-3ff5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000231Z-174f7845968swgbqhC1EWRmnb40000000uwg0000000027qh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:31 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: f73eacfc-701e-0001-0b91-3fb110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000231Z-174f7845968psccphC1EWRuz9s0000000uw0000000002kdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:32 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:31 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: fcd7fe31-301e-0033-0c91-3ffa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000231Z-174f7845968xlwnmhC1EWR0sv80000000ubg000000002b85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:31 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 417b9f3b-401e-0029-4091-3f9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000231Z-174f7845968cdxdrhC1EWRg0en0000000uqg000000001ymu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:33 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:33 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 3ccb05f8-401e-0016-1b69-3f53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000233Z-174f7845968v75bwhC1EWRuqen0000000fp00000000027q6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:33 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:33 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:33 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: dce0685f-701e-001e-3f83-3ff5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000233Z-174f7845968ljs8phC1EWRe6en0000000um0000000001tu4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:33 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:33 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:34 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:34 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 02827f85-001e-00ad-7091-3f554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000234Z-174f7845968cdxdrhC1EWRg0en0000000uh0000000002tzf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:34 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:33 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:34 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 5810e7a8-301e-0000-3f91-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000234Z-174f7845968l4kp6hC1EWRe8840000000uz0000000002anw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:33 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:34 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:34 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6dbf519d-601e-0084-1b91-3f6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000234Z-174f78459684bddphC1EWRbht40000000uc0000000002t4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:34 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:35 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:35 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 63854d8c-901e-007b-2581-3fac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000235Z-174f7845968swgbqhC1EWRmnb40000000uv0000000002dv7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:35 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:35 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 14d8e695-801e-008c-6b91-3f7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000235Z-174f7845968j6t2phC1EWRcfe80000000uv0000000002qzf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:36 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:35 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:36 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a2105f9f-201e-00aa-1591-3f3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000236Z-174f78459688l8rvhC1EWRtzr00000000780000000002p56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:36 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:36 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 97970dc3-901e-008f-6c91-3f67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000236Z-174f7845968qj8jrhC1EWRh41s0000000uh0000000002h8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:02:36 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:02:36 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:02:36 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:02:36 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: d3508ca6-601e-003d-4e91-3f6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T000236Z-174f7845968g6hv8hC1EWR1v2n00000002q0000000000kp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:02:36 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Target ID:	0
Start time:	19:01:11
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	19:01:13
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2200,i,2661925225389726080,10877470526721508930,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:01:15
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /go/xmKDa5CjvX27AwGjR5C3/ HTTP/1.1Host: anz.pfm.lawConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_content/Blazorise.Icons.FontAwesome/v6/css/all.min.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1Host: anz.pfm.lawConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
Source: global traffic	HTTP traffic detected: GET /npm/signature_pad@4.0.4/dist/signature_pad.umd.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://anz.pfm.law/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@4.6.1/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://anz.pfm.lawsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://anz.pfm.law/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/jquery@3.5.1/dist/jquery.slim.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://anz.pfm.lawsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://anz.pfm.law/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@4.6.1/dist/js/bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://anz.pfm.lawsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://anz.pfm.law/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_content/Blazorise/blazorise.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1Host: anz.pfm.lawConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
Source: global traffic	HTTP traffic detected: GET /_content/Blazorise.Bootstrap/blazorise.bootstrap.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1Host: anz.pfm.lawConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
Source: global traffic	HTTP traffic detected: GET /_content/Blazorise.Snackbar/blazorise.snackbar.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1Host: anz.pfm.lawConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
Source: global traffic	HTTP traffic detected: GET /_content/Blazorise.LoadingIndicator/blazorise.loadingindicator.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1Host: anz.pfm.lawConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
Source: global traffic	HTTP traffic detected: GET /_content/Blazorise.SpinKit/blazorise.spinkit.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1Host: anz.pfm.lawConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://anz.pfm.law/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /npm/signature_pad@4.0.4/dist/signature_pad.umd.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@4.6.1/dist/js/bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/jquery@3.5.1/dist/jquery.slim.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CaseFunnel.CaseSites.Host.styles.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1Host: anz.pfm.lawConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1Host: www.recaptcha.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_content/CaseFunnel.CaseSites.Controls/CaseFunnel.CaseSites.Controls.bundle.scp.css HTTP/1.1Host: anz.pfm.lawConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://anz.pfm.law/CaseFunnel.CaseSites.Host.styles.css?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581eeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=YL6U9KWO8LlAsZ4EPQVJDDs1p5WBYSieK97i51wPWDwd/OWXI/SbRhjfE+Oz+SnWlxcMUVgG8PCxyoJji18zwsgL6dvWwAwCqSCkfrPjulPsuiNgN61DQ0cS3qbm; AWSALBCORS=YL6U9KWO8LlAsZ4EPQVJDDs1p5WBYSieK97i51wPWDwd/OWXI/SbRhjfE+Oz+SnWlxcMUVgG8PCxyoJji18zwsgL6dvWwAwCqSCkfrPjulPsuiNgN61DQ0cS3qbm
Source: global traffic	HTTP traffic detected: GET /_framework/blazor.web.js HTTP/1.1Host: anz.pfm.lawConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; AWSALBCORS=PjKpF04jsgnHatx3Fp2gg6li7DVKXlQdaoQrt5JY14sbKXQ/myMUy3AygEzSD2q5bLLTk980Agu0O9/+H1RZXKh1oGLT7mfU06YDLKNcPjR7FW9Lkwy6KqKyTq5m; .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo
Source: global traffic	HTTP traffic detected: GET /npm/mermaid@10/dist/mermaid.esm.min.mjs HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://anz.pfm.lawsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://anz.pfm.law/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zZag6YwYzsGRBcm&MD=zTKRtyzo HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_framework/blazor.web.js HTTP/1.1Host: anz.pfm.lawConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=B0q6d+AESPK7Crwk1q38MvNXDhCSnUO06CbtZ/3LDQcWDX+KtdxbIpJGWohBzfucCsfDTOcZ+AookoRzSV+Tk5YNNHwdWlJry6qMt3Ufu33vAOT5jchTfXtU7XXT; AWSALBCORS=B0q6d+AESPK7Crwk1q38MvNXDhCSnUO06CbtZ/3LDQcWDX+KtdxbIpJGWohBzfucCsfDTOcZ+AookoRzSV+Tk5YNNHwdWlJry6qMt3Ufu33vAOT5jchTfXtU7XXT
Source: global traffic	HTTP traffic detected: GET /npm/mermaid@10/dist/mermaid.esm.min.mjs HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/mermaid@10/dist/mermaid-5a5980d4.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://anz.pfm.lawsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://cdn.jsdelivr.net/npm/mermaid@10/dist/mermaid.esm.min.mjsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/mermaid@10/dist/mermaid-5a5980d4.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_blazor/initializers HTTP/1.1Host: anz.pfm.lawConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=E1kwu3MvR7h0hxWUnBOwXAkS6DynlL44fF/rrlmq6bqDxje59xlt5/5rXwzXHer9NbKvaISwbHcG7gJiG4tEXRmGf7+qW4fWSbm4l7aZ8ynPB/iPkvRqxjpdCeEg; AWSALBCORS=E1kwu3MvR7h0hxWUnBOwXAkS6DynlL44fF/rrlmq6bqDxje59xlt5/5rXwzXHer9NbKvaISwbHcG7gJiG4tEXRmGf7+qW4fWSbm4l7aZ8ynPB/iPkvRqxjpdCeEg
Source: global traffic	HTTP traffic detected: GET /_blazor/initializers HTTP/1.1Host: anz.pfm.lawConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=6jAXzmd0+D+1UfYOMsSQl5nV4T7a2eyIpgQRitHr0pzK82uxqgNLlVn+Pi5JEOaHj+el06C8pgfRXVNQGPdrV6QZcRjv1MOGVxfLZZYu4J4J9nelKqvkdnuLDApR; AWSALBCORS=6jAXzmd0+D+1UfYOMsSQl5nV4T7a2eyIpgQRitHr0pzK82uxqgNLlVn+Pi5JEOaHj+el06C8pgfRXVNQGPdrV6QZcRjv1MOGVxfLZZYu4J4J9nelKqvkdnuLDApR
Source: global traffic	HTTP traffic detected: GET /pfm_brisbane/live/favicon.ico?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1Host: cases.au.casefunnel.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://anz.pfm.law/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_blazor?id=XV31ZbJYMyP6SAXIY6UZnw HTTP/1.1Host: anz.pfm.lawConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://anz.pfm.lawSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0; AWSALBCORS=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0Sec-WebSocket-Key: 4QrWZCdRx3zWJnspVx3vkA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /_blazor/negotiate?negotiateVersion=1 HTTP/1.1Host: anz.pfm.lawConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0; AWSALBCORS=NA86FGidihje2n7mzz04VnK0NK6oltu0P/FilgZxHAfz5JqJAt34X38BCjxpV3f3EfEeLkWCXGl/5IBUwSBDEoyuPH8vLPiQPm59AVBOk5DsXBL/WYpHDeaNReD0
Source: global traffic	HTTP traffic detected: GET /pfm_brisbane/live/favicon.ico?v=e885d280990662f66b61148288096ad1f68da9cf8d3a55b57281cf67a0d581ee HTTP/1.1Host: cases.au.casefunnel.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_blazor/negotiate?negotiateVersion=1 HTTP/1.1Host: anz.pfm.lawConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=WvQkrxRzC1/uAaMM8HqAj/JEcGcP+a7ExTalyHz6WqcVZ0a3TwMWBfOFUWdrhjcBxw4j5Foz1ETyFpnvJFb4UTx6nJ+NQPV+v5PjJm34pOuyEbOIbd6VxMr93iee; AWSALBCORS=WvQkrxRzC1/uAaMM8HqAj/JEcGcP+a7ExTalyHz6WqcVZ0a3TwMWBfOFUWdrhjcBxw4j5Foz1ETyFpnvJFb4UTx6nJ+NQPV+v5PjJm34pOuyEbOIbd6VxMr93iee
Source: global traffic	HTTP traffic detected: GET /_blazor?id=pK0fipVt-34eDd4VgEtMgw&_=1732579305386 HTTP/1.1Host: anz.pfm.lawConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version)sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=WvQkrxRzC1/uAaMM8HqAj/JEcGcP+a7ExTalyHz6WqcVZ0a3TwMWBfOFUWdrhjcBxw4j5Foz1ETyFpnvJFb4UTx6nJ+NQPV+v5PjJm34pOuyEbOIbd6VxMr93iee; AWSALBCORS=WvQkrxRzC1/uAaMM8HqAj/JEcGcP+a7ExTalyHz6WqcVZ0a3TwMWBfOFUWdrhjcBxw4j5Foz1ETyFpnvJFb4UTx6nJ+NQPV+v5PjJm34pOuyEbOIbd6VxMr93iee
Source: global traffic	HTTP traffic detected: GET /_blazor?id=pK0fipVt-34eDd4VgEtMgw&_=1732579308595 HTTP/1.1Host: anz.pfm.lawConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version)sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5; AWSALBCORS=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5
Source: global traffic	HTTP traffic detected: GET /_blazor?id=pK0fipVt-34eDd4VgEtMgw&_=1732579305386 HTTP/1.1Host: anz.pfm.lawConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5; AWSALBCORS=MSgZfWSVWTCoGvqHkLEuTJ43BvQBVUOSC6N4kyWURFjom91STFH9+fALJ/3IpWiw5eE75kL15jml3o39q8m3x3iDZqEF1BpMmIY6d7/Fn08vwbrDhFpdSN0l3jL5
Source: global traffic	HTTP traffic detected: GET /_blazor?id=pK0fipVt-34eDd4VgEtMgw HTTP/1.1Host: anz.pfm.lawConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8FKIj9XLcIRKjxQ2fgMZqnPSWwsxdjjV-9wtclzykFYmYUJwebiodyGXxKcKuMReksEbo6EgD2a51zQfZgvBjRd5vroqVSutyywtFxLoTWVuj-DfYdneWzRwilQK1clO-8O-u5XWOADrNY6YK8nAxEo; AWSALB=HikrUbhjbiOf6VJdR7xt/8v758EV7oy1hbYtKrKtMA0kthlG7ZYw5SiCo/5eAULbkS0x/YxUYgZHo8u0tLoHTBUDBvOcxj8OhF3quszFvEZZDbKXdNGZaHXcS3ih; AWSALBCORS=HikrUbhjbiOf6VJdR7xt/8v758EV7oy1hbYtKrKtMA0kthlG7ZYw5SiCo/5eAULbkS0x/YxUYgZHo8u0tLoHTBUDBvOcxj8OhF3quszFvEZZDbKXdNGZaHXcS3ih
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zZag6YwYzsGRBcm&MD=zTKRtyzo HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: anz.pfm.law
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: cases.au.casefunnel.io

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Windows Analysis Report
https://anz.pfm.law/go/xmKDa5CjvX27AwGjR5C3/